#runners
Tagged “runners”
15 articlesXcode 27 runner image on GitHub-hosted macOS moves to macOS 27
GitHub bumped the operating system underneath its public-preview Xcode 27 runner image from macOS 26 to macOS 27, per the September 10 changelog. The runner labels stay the same, so the OS shift lands on the next job that requests them, with no workflow edit.
Sep 11, 2026 · Maya OkonkwoCI observabilityCodeQL 2.27.0 ships a native Linux ARM64 build
GitHub's static analysis engine now ships a native linux-arm64 CLI and bundle in 2.27.0, alongside a new Rust security query and expanded Java, Kotlin and C# framework coverage. Teams that already moved their runners to ARM stop paying an emulation tax on code scans.
Sep 10, 2026 · Maya OkonkwoSecurity & supply chainRootless Kubernetes finally reaches beta, eight years after the first experiment
Kubernetes v1.37 promotes the KubeletInUserNamespace feature gate to beta. Kubelet, the container runtime, CNI plugins and kube-proxy can now all run as an unprivileged user on the host.
Sep 8, 2026 · Tomás VegaRunners & infrastructureWindows 11 arm64 with VS2026 goes GA on GitHub-hosted runners
GitHub Actions promoted its Windows 11 arm64 image with Visual Studio 2026 to general availability on both standard and larger GitHub-hosted runners. For teams shipping native ARM Windows binaries out of CI, the self-hosted detour stops being the only option.
Aug 24, 2026 · Maya OkonkwoRunners & infrastructureAzure Pipelines opens an arm64 macOS preview with Xcode 27 in the pay-as-you-go pool
Microsoft added Apple Silicon macOS agents carrying Xcode 27 to Azure DevOps as a public preview, delivered through the pay-as-you-go GitHub-hosted Agents pool. For iOS and macOS pipelines that have been running Xcode on Rosetta-under-Intel agents, the native arm64 path is finally in reach on a Microsoft-hosted fleet.
Aug 19, 2026 · Maya OkonkwoRunners & infrastructureDocker VMM goes public beta with Docker Desktop's virtualizer rewritten in-house
Docker Desktop v4.86 ships a rewritten first-party virtualizer as a public beta on Mac and Windows, with Linux deferred to a GA targeted for the end of October.
Aug 19, 2026 · Maya OkonkwoDeveloper experienceCopilot code review picks up a firewall, custom runners, and head-branch instructions
GitHub's Copilot code review can now run with a firewall, custom setup steps and independent runner configurations, and custom instructions are read from the pull request's head branch rather than the base branch.
Jul 25, 2026 · Priya NairRunners & infrastructureXcode 27 lands on GitHub-hosted runners, and the naming rule quietly changed
GitHub Actions added an Xcode 27 image in public preview on its arm64 macOS runners. The bigger shift is buried in the changelog: images are now keyed to the Xcode major version instead of the OS, one Xcode per image.
Jul 19, 2026 · Priya NairSupply-chain securityCordyceps and the pipeline attack surface we keep ignoring
Novee Security disclosed a CI/CD flaw pattern, Cordyceps, that an unauthenticated actor can use to plant self-propagating triggers across pipelines. The specifics matter less than the shape: pipelines keep landing on the attack surface, and organizations keep treating them like build tools.
Jul 2, 2026 · Tomás VegaRunners & infrastructureDynamic Resource Allocation hits GA in Kubernetes 1.35, and GPU CI jobs finally get a real API
DRA reached general availability in Kubernetes v1.35, and the NVIDIA DRA driver has dropped its Beta label. For teams running GPU workloads through Kubernetes-backed pipelines, it replaces a decade of nodeSelector gymnastics with a first-class request primitive.
Jul 2, 2026 · Priya NairRunners & infrastructureGitHub-hosted larger runners pick up RHEL 9 and RHEL 10 in public preview
GitHub's larger hosted runners now offer Red Hat Enterprise Linux 9 and 10 images in public preview, a partnership with Red Hat aimed at shops that have been self-hosting Actions just to keep production-like CI on Red Hat.
Jun 29, 2026 · Maya OkonkwoRunners & infrastructureGitHub lets org admins switch off the default hosted runner labels
Organizations on Actions can now disable standard hosted runner labels such as `ubuntu-latest` at the org level, per the June 25 changelog. The toggle turns the default runner pool from an implicit allowlist into a catalogue platform teams have to maintain.
Jun 28, 2026 · Maya OkonkwoRunners & infrastructureGitHub Actions lets custom runner images stack on other custom images
Custom images for GitHub-hosted runners can now be built on top of other custom images, per the June 18 changelog. The shift turns runner provisioning into a layered chain that platform teams can govern the same way they manage container base images.
Jun 19, 2026 · Maya OkonkwoComplianceDigital sovereignty pulls CI/CD architecture inside the compliance perimeter
A new CNCF write-up reframes the regulatory shift from data residency to digital sovereignty as a set of architectural patterns for cloud-native platforms, and once sovereignty is a platform property, runner location, pipeline placement and artifact storage move with it.
Jun 18, 2026 · Maya OkonkwoRunners & infrastructureARM-based CI runners go mainstream, what it means for build costs
Hosted ARM64 runners are now generally available across the major CI clouds. For many builds they cut minutes-billing meaningfully, but only if your toolchain is already multi-arch.
Jun 14, 2026 · Maya Okonkwo