Git news and engineering summaries

A guide to using five essential git commands for performing a rapid codebase audit. By analyzing commit history, churn, bug clusters, and contributor activity, developers can identify high-risk files, bus factors, and team health issues before diving into the actual code.

A recent VS Code Git extension update enabled 'git.addAICoAuthor' by default, automatically adding 'Co-authored-by: Copilot' trailers to commits. This change faced severe community backlash due to privacy concerns, lack of transparency, and reports of the trailer being injected even when Copilot features were disabled or not used, leading to widespread dissatisfaction among developers.

GitHub introduces Stacked PRs, enabling developers to break large code changes into chains of focused, independently reviewable pull requests. Managed via the gh stack CLI and native GitHub UI integration, this system allows for cascading rebases, improved review workflows, and efficient single-click merges, ultimately reducing conflicts and improving code quality through structured, incremental delivery.

Lore is a centralized, content-addressed version control system utilizing Merkle trees and immutable revision chains. Designed for binary-first storage, it excels in deduplication and efficient, large-scale data management through on-demand hydration. The platform's repositories are publicly available on the Epic Games GitHub for further exploration.

A researcher identified 10,000 GitHub repositories distributing Trojan malware by analyzing commit patterns. These malicious repositories clone legitimate projects and use cyclic commit updates to bypass detection. Despite alerting support, the issue persists at scale, highlighting vulnerabilities in GitHub's automated security filtering and the platform’s role in malware distribution through search indexing.

A bug in Claude Code v2.1.119 causes API requests to be incorrectly billed to 'extra usage' instead of the Max plan quota when the string 'HERMES.md' appears in recent git commit messages. This content-based routing leads to unexpected charges and service blockages despite available plan capacity, as the system incorrectly flags these requests.

Vincent Driessen, creator of the 'Git Flow' branching model, criticized Microsoft for using a distorted AI-generated version of his iconic diagram on its Learn portal. Driessen highlighted the lack of attribution and the poor quality of the 'AI slop,' emphasizing the importance of human-led design process over careless automated content generation.

Legalize-es is an open-source project that archives Spanish legislation as a Git repository. With over 8,600 laws sourced from the official BOE API, each document is a Markdown file where every amendment is recorded as a Git commit, allowing developers to track legal changes via standard command-line tools.

Conventional Commits is criticized for prioritizing commit types over scopes, which misaligns with developer needs. The author argues that scopes are more critical for debugging and navigation. Furthermore, the format fails to improve changelog generation or versioning, while successful projects like Linux favor simpler, scope-prefixed commit messages.

Manyana is a project proposing a new version control system based on CRDTs to eliminate traditional merge conflicts. By leveraging CRDT properties, it ensures eventual consistency and provides detailed, structural conflict presentation. The approach replaces complex DAG-based merging with a persistent weave structure, enabling more reliable history management and non-destructive rebasing while solving common UX frustrations.

The development team actively reviews all user feedback to improve their documentation and software quality. Recent repository activity shows two files changed in a commit, signaling ongoing updates and maintenance within the project.

Developers are abandoning popular API tools like Postman and Insomnia due to corporate bloat, forced cloud-sync, and paywalled collaboration features. Users are shifting toward local-first, Git-native alternatives like Bruno that prioritize performance, offline capabilities, and developer privacy over enterprise-focused business models.

GitHub transformed Open Source by lowering friction for collaboration, yet its recent decline highlights risks of over-centralization. While it served as a vital archive, reliance on a single entity threatens the longevity of project history. The community must prioritize preserving software heritage through independent, well-funded archives to avoid the fragility of disappearing personal domains and changing corporate platforms.

A workflow tip discovered within the WikiLeaks Vault7 CIA document release reveals an efficient method for git repository maintenance. The command identifies and deletes local branches already merged into the main branch, helping developers manage workspace clutter. This automation streamlines branch cleanup using standard CLI tools like grep and xargs.

Tangled is a decentralized code collaboration platform that aims to reduce reliance on GitHub. By combining the Git protocol with the AT protocol, it allows developers to federate repositories across different servers, known as knots. This enables cross-server collaboration, pull requests, and social features while maintaining the decentralization of systems like email or IRC.

Migrating repositories from GitHub to Codeberg is simplified by built-in import tools and the familiarity of Forgejo Actions. Users can replicate GitHub workflows, use codeberg.page for hosting, and handle CI transitions by self-hosting runners. The process involves archiving old repositories and managing mirrors to maintain a smooth transition for existing contributors.

At FOSDEM 2026, Patrick Steinhardt outlined Git's evolution to meet modern demands. Key initiatives include transitioning to SHA-256 for security, implementing reftables for scalability, and introducing pluggable object databases for large binary files. Additionally, Git is adopting user-interface improvements inspired by Jujutsu to simplify complex history-editing workflows for the next decade.

GitHub updated the git.addAICoAuthor setting for Copilot commit attribution after a bug incorrectly labeled non-AI code. The default is now switched back to off, and future updates will require user consent before adding AI trailers to commits, while exploring 'Assisted-by' attribution to improve transparency regarding AI-generated code and model usage.

The Dutch government has launched code.overheid.nl, a self-hosted, sovereign, open-source platform built on Forgejo. Designed as a European alternative to GitHub and GitLab, this pilot project facilitates government software development, promotes digital sovereignty, and aims to eventually unite government bodies on a single shared Git platform.

Gentoo has expanded its presence to Codeberg, offering a Forgejo-based alternative to GitHub for repository mirrors and contributions. While maintaining its own infrastructure, Gentoo encourages users to use the AGit approach for efficient pull requests. This move aligns with Gentoo's gradual migration toward non-profit, European-hosted platforms for community collaboration.