#runners

GitHub bumped the operating system underneath its public-preview Xcode 27 runner image from macOS 26 to macOS 27, per the September 10 changelog. The runner labels stay the same, so the OS shift lands on the next job that requests them, with no workflow edit.

GitHub's static analysis engine now ships a native linux-arm64 CLI and bundle in 2.27.0, alongside a new Rust security query and expanded Java, Kotlin and C# framework coverage. Teams that already moved their runners to ARM stop paying an emulation tax on code scans.

Running your own GitLab runners on AWS, why the compute is split by what the job builds, and the maintenance nobody puts in the estimate.

GitHub Actions promoted its Windows 11 arm64 image with Visual Studio 2026 to general availability on both standard and larger GitHub-hosted runners. For teams shipping native ARM Windows binaries out of CI, the self-hosted detour stops being the only option.

Docker Desktop v4.86 ships a rewritten first-party virtualizer as a public beta on Mac and Windows, with Linux deferred to a GA targeted for the end of October.

GitHub is migrating windows-11-arm runners to Visual Studio 2026 from September 21, 2026. Here is how to test early and avoid a broken ARM64 CI pipeline.

GitHub's Copilot code review can now run with a firewall, custom setup steps and independent runner configurations, and custom instructions are read from the pull request's head branch rather than the base branch.

GitHub Actions added an Xcode 27 image in public preview on its arm64 macOS runners. The bigger shift is buried in the changelog: images are now keyed to the Xcode major version instead of the OS, one Xcode per image.

Novee Security disclosed a CI/CD flaw pattern, Cordyceps, that an unauthenticated actor can use to plant self-propagating triggers across pipelines. The specifics matter less than the shape: pipelines keep landing on the attack surface, and organizations keep treating them like build tools.

GitHub's larger hosted runners now offer Red Hat Enterprise Linux 9 and 10 images in public preview, a partnership with Red Hat aimed at shops that have been self-hosting Actions just to keep production-like CI on Red Hat.

Organizations on Actions can now disable standard hosted runner labels such as `ubuntu-latest` at the org level, per the June 25 changelog. The toggle turns the default runner pool from an implicit allowlist into a catalogue platform teams have to maintain.

DRA reached general availability in Kubernetes v1.35, and the NVIDIA DRA driver has dropped its Beta label. For teams running GPU workloads through Kubernetes-backed pipelines, it replaces a decade of nodeSelector gymnastics with a first-class request primitive.