326
submitted 2 months ago* (last edited 2 months ago) by chaospatterns@lemmy.world to c/programming@programming.dev

An update from GitHub: https://github.com/orgs/community/discussions/159123#discussioncomment-13148279

The rates are here: https://docs.github.com/en/rest/using-the-rest-api/rate-limits-for-the-rest-api?apiVersion=2022-11-28

  • 60 req/hour for unauthenticated users
  • 5000 req/hour for authenticated - personal
  • 15000 req/hour for authenticated - enterprise org
top 50 comments
sorted by: hot top controversial new old
[-] traches@sh.itjust.works 138 points 2 months ago

Probably getting hammered by ai scrapers

[-] db0@lemmy.dbzer0.com 13 points 2 months ago

The funny thing is that rate limits won't help them with genai scrapers

[-] potatopotato@sh.itjust.works 11 points 2 months ago

Everything seems to be. There was a period where you could kinda have a sane experience browsing over a VPN or otherwise using a cloud service IP range endpoint but especially the past 6 months or so things have gotten worse exponentially by the week. Everything is moving behind cloudflare or other systems

[-] hackeryarn@lemmy.world 89 points 2 months ago

If Microsoft knows how to do one thing well, it’s killing a successful product.

[-] Semi_Hemi_Demigod@lemmy.world 13 points 2 months ago
[-] adarza@lemmy.ca 14 points 2 months ago

we could have had bob or clippy instead of 'cortana' or 'copilot'

[-] Gork@lemm.ee 14 points 2 months ago

Microsoft really should have just leaned into it and named it Clippy again.

load more comments (1 replies)
[-] midori_matcha@lemmy.world 69 points 2 months ago

Github is owned by Microsoft, so don't worry, it's going to get worse

[-] tal@lemmy.today 50 points 2 months ago

60 req/hour for unauthenticated users

That's low enough that it may cause problems for a lot of infrastructure. Like, I'm pretty sure that the MELPA emacs package repository builds out of git, and a lot of that is on github.

[-] Xanza@lemm.ee 30 points 2 months ago* (last edited 2 months ago)

That’s low enough that it may cause problems for a lot of infrastructure.

Likely the point. If you need more, get an API key.

load more comments (2 replies)
[-] NotSteve_@lemmy.ca 14 points 2 months ago

Do you think any infrastructure is pulling that often while unauthenticated? It seems like an easy fix either way (in my admittedly non devops opinion)

[-] Ephera@lemmy.ml 12 points 2 months ago

It's gonna be problematic in particular for organisations with larger offices. If you've got hundreds of devs/sysadmins under the same public IP address, those 60 requests/hour are shared between them.

Basically, I expect unauthenticated pulls to not anymore be possible at my day job, which means repos hosted on GitHub become a pain.

load more comments (4 replies)
load more comments (1 replies)
load more comments (1 replies)
[-] onlinepersona@programming.dev 48 points 2 months ago

I see the "just create an account" and "just login" crowd have joined the discussion. Some people will defend a monopolist no matter what. If github introduced ID checks à la Google or required a Microsoft account to login, they'd just shrug and go "create a Microsoft account then, stop bitching". They don't realise they are being boiled and don't care. Consoomer behaviour.

Anti Commercial-AI license

load more comments (5 replies)
[-] Lv_InSaNe_vL@lemmy.world 44 points 2 months ago* (last edited 2 months ago)

I honestly don't really see the problem here. This seems to mostly be targeting scrapers.

For unauthenticated users you are limited to public data only and 60 requests per hour, or 30k if you're using Git LFS. And for authenticated users it's 60k/hr.

What could you possibly be doing besides scraping that would hit those limits?

[-] chaospatterns@lemmy.world 32 points 2 months ago* (last edited 2 months ago)

You might behind a shared IP with NAT or CG-NAT that shares that limit with others, or might be fetching files from raw.githubusercontent.com as part of an update system that doesn't have access to browser credentials, or Git cloning over https:// to avoid having to unlock your SSH key every time, or cloning a Git repo with submodules that separately issue requests. An hour is a long time. Imagine if you let uBlock Origin update filter lists, then you git clone something with a few modules, and so does your coworker and now you're blocked for an entire hour.

[-] MangoPenguin 14 points 2 months ago

60 requests per hour per IP could easily be hit from say, uBlock origin updating filter lists in a household with 5-10 devices.

[-] Disregard3145@lemmy.world 8 points 2 months ago

I hit those many times when signed out just scrolling through the code. The front end must be sending off tonnes of background requests

load more comments (1 replies)
[-] sturlabragason@lemmy.world 41 points 2 months ago* (last edited 2 months ago)

No no, no no no no, no no no no, no no there's no limit

https://forgejo.org/

[-] Xanza@lemm.ee 25 points 2 months ago

Until there will be.

I think people are grossly underestimating the sheer size and significance of the issue at hand. Forgejo will very likely eventually get to the same point Github is at right now, and will have to employ some of the same safeguards.

[-] FlexibleToast@lemmy.world 31 points 2 months ago

Except Forgejo is open source and you can run your own instance of it. I do, and it's great.

[-] Xanza@lemm.ee 12 points 2 months ago

That's a very accurate statement which has absolutely nothing to do with what I've said. Fact of the matter stands, is that those who generally seek to use a Github alternative do so because they dislike Microsoft or closed source platforms. Which is great, but those platforms with hosted instances see an overwhelmingly significant portion of users who visit because they choose not to selfhost. It's a lifecycle.

  1. Create cool software for free
  2. Cool software gets popular
  3. Release new features and improve free software
  4. Lots of users use your cool software
  5. Running software becomes expensive, monetize
  6. Software becomes even more popular, single stream monetization no longer possible
  7. Monetize more
  8. Get more popular
  9. Monetize more

By step 30 you're selling everyone's data and pushing resource restrictions because it's expensive to run a popular service that's generally free. That doesn't change simply because people can selfhost if they want.

load more comments (6 replies)
load more comments (4 replies)
[-] theunknownmuncher@lemmy.world 33 points 2 months ago* (last edited 2 months ago)

LOL!!!! RIP GitHub

EDIT: trying to compile any projects from source that use git submodules will be interesting. eg ROCm has more than 60 submodules to pull in 💀

[-] sxan@midwest.social 23 points 2 months ago

The Go module system pulls dependencies from their sources. This should be interesting.

Even if you host your project on a different provider, many libraries are on github. All those unauthenticated Arch users trying to install Go-based software that pulls dependencies from github.

How does the Rust module system work? How does pip?

[-] adarza@lemmy.ca 14 points 2 months ago

already not looking forward to the next updates on a few systems.

[-] mesamunefire@piefed.social 9 points 2 months ago

Yeah this could very well kill some package managers. Without some real hard heavy lifting.

load more comments (2 replies)
[-] Ephera@lemmy.ml 9 points 2 months ago

For Rust, as I understand, crates.io hosts a copy of the source code. It is possible to specify a Git repository directly as a dependency, but apparently, you cannot do that if you publish to crates.io.

So, it will cause pain for some devs, but the ecosystem at large shouldn't implode.

load more comments (2 replies)
load more comments (4 replies)
[-] Sunshine@lemmy.ca 26 points 2 months ago
[-] XM34@feddit.org 9 points 2 months ago

Codeberg has used way stricter rate limiting since pretty much forever. Nice thought, but Codeberg will not solve this problem, like at all.

load more comments (1 replies)
[-] bigkahuna1986@lemmy.ml 25 points 2 months ago

Just browsing GitHub I've got this limit

[-] adarza@lemmy.ca 13 points 2 months ago

i've hit it many times so far.. even as quick as the second page view (first internal link clicked) after more than a day or two since the last visit (yes, even with cleaned browser data or private window).

it's fucking stupid how quick they are to throw up a roadblock.

load more comments (3 replies)
[-] ozoned@piefed.social 23 points 2 months ago

Wow so surprising, never saw this coming, this is my surprised face. :-l

[-] atzanteol@sh.itjust.works 20 points 2 months ago

The enshittification begins (continues?)...

load more comments (1 replies)
[-] daniskarma@lemmy.dbzer0.com 20 points 2 months ago

Open source repositories should rely on p2p. Torrenting repos is the way I think.

Not only for this. At any point m$ could take down your repo if they or their investors don't like it.

I wonder if it would already exist and if it could work with git?

[-] thenextguy@lemmy.world 16 points 2 months ago

Git is p2p and distributed from day 1. Github is just a convenient website. If Microsoft takes down your repo, just upload to another system. Nothing but convenience will be lost.

[-] witten@lemmy.world 9 points 2 months ago

Not entirely true. You lose tickets and PRs in that scenario.

load more comments (2 replies)
load more comments (1 replies)
load more comments (17 replies)
[-] DoucheBagMcSwag@lemmy.dbzer0.com 14 points 2 months ago

This going to fuck over obtanium?

[-] irelephant@programming.dev 13 points 2 months ago

Its always blocked me from searching in firefox when I'm logged out for some reason.

[-] ArsonButCute@lemmy.dbzer0.com 12 points 2 months ago

THIS is why I clone all my commonly used Repos to my personal gitea instance.

[-] SmoothLiquidation@lemmy.world 8 points 2 months ago

I recently switched my instance from gitea to forgejo because everyone said to do it and it was easy to do.

load more comments (2 replies)
[-] varnia@lemm.ee 11 points 2 months ago

Good thing I moved all my repos from git[lab|hub] to Codeberg recently.

[-] kevin____@lemm.ee 10 points 2 months ago

Good thing git is “federated” by default.

[-] brachiosaurus@mander.xyz 9 points 2 months ago

I have a question: why do lemmy dev keep using microsoft github?

load more comments (1 replies)
[-] bitwolf@sh.itjust.works 9 points 2 months ago* (last edited 2 months ago)

Maybe charge OpenAI for scrapes instead of screwing over your actual customers.

load more comments
view more: next ›
this post was submitted on 14 May 2025
326 points (100.0% liked)

Programming

22006 readers
128 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities !webdev@programming.dev



founded 2 years ago
MODERATORS