Since yesterday a lot of users in Europe found their workflows failing due to Github seemingly randomly throwing HTTP/401 on git clone/git pull when interacting with public repos without authentication.

It was now confirmed by staff member that this indeed is intentional and no further steps are planned at this point.

  • onlinepersona@programming.dev
    15·
    9 hours ago

    This might be a problem for many projects. Rust, comes to mind, that pulls everything from Github and is 100% dependent on it. Same as Go. They pull everything from Github.

    It might make sense for them to use something like radicle, a distributed git. Many people can easily pick what they want to distribute. Scripts can be written that make the local node only host the projects you depend on. That would naturally make popular projects more available.

    • Kissaki@programming.devEnglish
      1·
      1 hour ago

      Does all of that access really need to be anonymous access? I get that it’s convenient. But let’s be practical; they have to manage anonymous bot spam somehow.

      • magic_smoke@lemmy.blahaj.zoneEnglish
        2·
        24 minutes ago

        Yeah I’m not managing several different accounts for each vm in qubes os.

        The only real way to maintain any semblance of digital privacy is to build information silos.

        That will always be more important than Microsoft’s hosting costs. (Though probably not to them.)

    • expr@programming.dev
      4·
      2 hours ago

      I’m worried about nix, honestly. An absolute truckload of nix packages pull their source from GitHub. It’s the primary way to distribute flakes, too.

        • teolan@lemmy.world
          8·
          7 hours ago

          No true at all.

          The index used to be from github but now it pulls from a CDN by default and doesn’t do a full clone of the index. Crate downloads have always been pulled from a CDN.

          The index was quite small in the beginning this is why it worked.

            • teolan@lemmy.world
              7·
              5 hours ago

              Who pulls from Github to create the crates? The crates are pushed by cargo publish to crates.io’s API, not to github.

              crates.io does have an index in GitHub, but that’s legacy and pretty much unused for reads now. GitHub doesn’t store the crates themselves.

        • chunes@lemmy.world
          1·
          8 hours ago

          yikes, what a terrible design lol. And here I thought cargo was actually pretty solid.

          • onlinepersona@programming.dev
            1·
            6 hours ago

            You can only publish packages via github, so it’s not a surprise, IMO. I don’t know why they did that in the first place instead of using email like every normal service.