241
submitted 19 hours ago* (last edited 19 hours ago) by chaospatterns@lemmy.world to c/programming@programming.dev

An update from GitHub: https://github.com/orgs/community/discussions/159123#discussioncomment-13148279

The rates are here: https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api?apiVersion=2022-11-28

  • 60 req/hour for unauthenticated users
  • 5000 req/hour for authenticated - personal
  • 15000 req/hour for authenticated - enterprise org
(page 2) 50 comments
sorted by: hot top controversial new old
[-] tal@lemmy.today 46 points 18 hours ago

60 req/hour for unauthenticated users

That's low enough that it may cause problems for a lot of infrastructure. Like, I'm pretty sure that the MELPA emacs package repository builds out of git, and a lot of that is on github.

[-] Xanza@lemm.ee 26 points 17 hours ago* (last edited 17 hours ago)

That’s low enough that it may cause problems for a lot of infrastructure.

Likely the point. If you need more, get an API key.

load more comments (1 replies)
[-] hinterlufer@lemmy.world 5 points 13 hours ago

I didn't think of that - also for nvim you typically pull plugins from git repositories

[-] NotSteve_@lemmy.ca 12 points 18 hours ago

Do you think any infrastructure is pulling that often while unauthenticated? It seems like an easy fix either way (in my admittedly non devops opinion)

[-] Ephera@lemmy.ml 10 points 14 hours ago

It's gonna be problematic in particular for organisations with larger offices. If you've got hundreds of devs/sysadmins under the same public IP address, those 60 requests/hour are shared between them.

Basically, I expect unauthenticated pulls to not anymore be possible at my day job, which means repos hosted on GitHub become a pain.

[-] lazynooblet@lazysoci.al 4 points 12 hours ago

Same problem for CGNAT users

load more comments (2 replies)
[-] Semi_Hemi_Demigod@lemmy.world 5 points 17 hours ago

If I’m using Ansible or something to pull images it might get that high.

Of course the fix is to pull it once and copy the files over, but I could see this breaking prod for folks who didn’t write it that way in the first place

[-] timewarp@lemmy.world 22 points 16 hours ago

Crazy how many people think this is okay, yet left Reddit cause of their API shenanigans. GitHub is already halfway to requiring signing in to view anything like Twitter (X).

[-] plz1@lemmy.world 12 points 15 hours ago

They make you sign in to use search, on code anyways.

load more comments (1 replies)
[-] Sunshine@lemmy.ca 24 points 17 hours ago
load more comments (2 replies)
[-] mr_satan@lemm.ee 5 points 12 hours ago

That' just how the cookie crumbles.

[-] sturlabragason@lemmy.world 33 points 18 hours ago* (last edited 18 hours ago)

No no, no no no no, no no no no, no no there's no limit

https://forgejo.org/

[-] Xanza@lemm.ee 15 points 17 hours ago

Until there will be.

I think people are grossly underestimating the sheer size and significance of the issue at hand. Forgejo will very likely eventually get to the same point Github is at right now, and will have to employ some of the same safeguards.

[-] FlexibleToast@lemmy.world 21 points 16 hours ago

Except Forgejo is open source and you can run your own instance of it. I do, and it's great.

[-] Xanza@lemm.ee 5 points 14 hours ago

That's a very accurate statement which has absolutely nothing to do with what I've said. Fact of the matter stands, is that those who generally seek to use a Github alternative do so because they dislike Microsoft or closed source platforms. Which is great, but those platforms with hosted instances see an overwhelmingly significant portion of users who visit because they choose not to selfhost. It's a lifecycle.

  1. Create cool software for free
  2. Cool software gets popular
  3. Release new features and improve free software
  4. Lots of users use your cool software
  5. Running software becomes expensive, monetize
  6. Software becomes even more popular, single stream monetization no longer possible
  7. Monetize more
  8. Get more popular
  9. Monetize more

By step 30 you're selling everyone's data and pushing resource restrictions because it's expensive to run a popular service that's generally free. That doesn't change simply because people can selfhost if they want.

load more comments (2 replies)
[-] ABetterTomorrow@lemm.ee 5 points 16 hours ago
[-] mesamunefire@piefed.social 6 points 16 hours ago

It works really well too. I have an instance.

[-] yo_scottie_oh@lemmy.ml 2 points 15 hours ago

No, no limits, we'll reach for the skyyyy

[-] theunknownmuncher@lemmy.world 25 points 18 hours ago* (last edited 17 hours ago)

LOL!!!! RIP GitHub

EDIT: trying to compile any projects from source that use git submodules will be interesting. eg ROCm has more than 60 submodules to pull in 💀

[-] sxan@midwest.social 19 points 17 hours ago

The Go module system pulls dependencies from their sources. This should be interesting.

Even if you host your project on a different provider, many libraries are on github. All those unauthenticated Arch users trying to install Go-based software that pulls dependencies from github.

How does the Rust module system work? How does pip?

[-] Ephera@lemmy.ml 6 points 14 hours ago

For Rust, as I understand, crates.io hosts a copy of the source code. It is possible to specify a Git repository directly as a dependency, but apparently, you cannot do that if you publish to crates.io.

So, it will cause pain for some devs, but the ecosystem at large shouldn't implode.

load more comments (1 replies)
[-] adarza@lemmy.ca 12 points 17 hours ago

already not looking forward to the next updates on a few systems.

[-] mesamunefire@piefed.social 6 points 16 hours ago

Yeah this could very well kill some package managers. Without some real hard heavy lifting.

[-] irelephant@programming.dev 3 points 12 hours ago

scoop relies on git repos to work (scoop.sh - windows package manager)

load more comments (1 replies)
load more comments (1 replies)
[-] atzanteol@sh.itjust.works 16 points 17 hours ago

The enshittification begins (continues?)...

[-] kixik@lemmy.ml 3 points 15 hours ago

just now? :)

[-] kevin____@lemm.ee 10 points 15 hours ago

Good thing git is “federated” by default.

[-] MITM0@lemmy.world 2 points 9 hours ago

& then you have fossil which is github in a box

[-] bigkahuna1986@lemmy.ml 18 points 18 hours ago

Just browsing GitHub I've got this limit

[-] adarza@lemmy.ca 9 points 17 hours ago

i've hit it many times so far.. even as quick as the second page view (first internal link clicked) after more than a day or two since the last visit (yes, even with cleaned browser data or private window).

it's fucking stupid how quick they are to throw up a roadblock.

load more comments (3 replies)
[-] ArsonButCute@lemmy.dbzer0.com 9 points 16 hours ago

THIS is why I clone all my commonly used Repos to my personal gitea instance.

[-] douglasg14b@lemmy.world 2 points 10 hours ago

That's actually kind of an interesting idea.

Is there a reasonable way that I could host my own ui that will keep various repos. I care about cloned and always up to date automatically?

load more comments (1 replies)
[-] SmoothLiquidation@lemmy.world 6 points 15 hours ago

I recently switched my instance from gitea to forgejo because everyone said to do it and it was easy to do.

[-] lazynooblet@lazysoci.al 3 points 12 hours ago
load more comments (1 replies)
[-] cupcakezealot@lemmy.blahaj.zone 4 points 14 hours ago

is authenticated like when you use a private key with git clone? stupid question i know

also this might be terrible if you subscribe to filter lists on raw github in ublock or adguard

load more comments (1 replies)
[-] plz1@lemmy.world -2 points 14 hours ago

This is specific to the GH REST API I think, not operations like doing a git clone to copy a repo to local machine, etc.

[-] Kissaki@programming.dev 8 points 12 hours ago

These changes will apply to operations like cloning repositories over HTTPS, anonymously interacting with our REST APIs, and downloading files from raw.githubusercontent.com.

load more comments (2 replies)
load more comments
view more: ‹ prev next ›
this post was submitted on 14 May 2025
241 points (99.2% liked)

Programming

20154 readers
659 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



founded 2 years ago
MODERATORS