#github-actions - July 2026

setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes
The actions/setup-java v5.5.0 release adds cryptographic signature verification for downloaded JDKs, support for a new distribution, and several quality-of-life improvements for Maven users. Here’s what changed since v5.4.0. Verify JDK…
The post setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes appeared first on <a href="https://github.blog/">The GitHub...

Xcode 27 runner image now in public preview
You can now build and test your Apple applications against Xcode 27 on GitHub-hosted macOS runners. This is now available in public preview. With early access to the latest Xcode…
The post Xcode 27 runner image now in public preview appeared first on The GitHub Blog.

I'm trying to build a tool that gives better reporting on your github actions consumption, based on just 4 CSVs easily downloadable from GitHub. Would love some feedback if you can try it!
soa.runs-on.com

GitHub Actions holds potentially malicious workflows for approval
Recent supply chain attacks use compromised GitHub credentials to push malicious GitHub Actions workflows that steal CI/CD credentials and carry out additional attacks. To help protect public repositories from these…
The post GitHub Actions holds potentially malicious workflows for approval appeared first on The GitHub Blog.