Anyone else get a vague GitHub shakedown notice?

#1

Post by jjgreen » Fri, Jul 10, 2026, 4:57 PM UTC

Anyone else get a vague GitHub shakedown notice?
lists.osgeo.org

Re: Anyone else get a vague GitHub shakedown notice?

#2

Post by jjgreen » Fri, Jul 10, 2026, 4:59 PM UTC

A QGIS-Developer post, original title anyone else get a vague github shakedown notice? is this about qgis?

Re: Anyone else get a vague GitHub shakedown notice?

#3

Post by tomalaci » Fri, Jul 10, 2026, 5:30 PM UTC

jjgreen wrote: post #2

A QGIS-Developer post, original title anyone else get a vague github shakedown notice? is this about qgis?

[flagged]

Re: Anyone else get a vague GitHub shakedown notice?

#4

Post by OptionOfT » Fri, Jul 10, 2026, 5:42 PM UTC

I got the same email, and I don't have a credit card on file with them. I wonder what they're going to do?

Re: Anyone else get a vague GitHub shakedown notice?

#5

Post by dewey » Fri, Jul 10, 2026, 5:51 PM UTC

What about this email is a "shakedown"?

Re: Anyone else get a vague GitHub shakedown notice?

#6

Post by drcongo » Fri, Jul 10, 2026, 5:53 PM UTC

dewey wrote: post #5

What about this email is a "shakedown"?

I was thinking the same thing, but I think it's down to this person not actually using the thing that GitHub are saying is moving to a paid service. It's hard to stop using something you don't use.

Re: Anyone else get a vague GitHub shakedown notice?

#7

Post by pocksuppet » Fri, Jul 10, 2026, 5:53 PM UTC

dewey wrote: post #5

What about this email is a "shakedown"?

The part where it says they are about to start taking your money?

Re: Anyone else get a vague GitHub shakedown notice?

#8

Post by pocksuppet » Fri, Jul 10, 2026, 5:54 PM UTC

No, I didn't, because I quit GitHub when they started demanding mandatory SMS 2FA

Re: Anyone else get a vague GitHub shakedown notice?

#9

Post by andai » Fri, Jul 10, 2026, 5:56 PM UTC

This links to this, which says

https://docs.github.com/en/code-security/concepts/about-code...

> GitHub Code Quality is currently in public preview and will become generally available on July 20, 2026. During public preview, Code Quality scans will consume GitHub Actions minutes but you will not be billed for other usage. From July 20, 2026, usage will incur additional charges. See GitHub Code Quality billing.

>If you want to avoid charges, disable Code Quality before July 20, 2026. See Disabling GitHub Code Quality.

https://docs.github.com/en/code-security/how-tos/maintain-qu...

>( Repo > Settings > Code Quality)

I don't see that tab, so either the docs are out of date, and it's called something else now, or it's not on all accounts/all repos. (Due to being in preview?) I don't know.

Re: Anyone else get a vague GitHub shakedown notice?

#10

Post by thenewnewguy » Fri, Jul 10, 2026, 5:57 PM UTC

pocksuppet wrote: post #8

No, I didn't, because I quit GitHub when they started demanding mandatory SMS 2FA

Huh? Just to make sure I wasn't missing something, I checked and my GitHub account has only a TOTP app and hardware security key configured, no SMS/phone number.

As a matter of fact GH even has a red "Less secure" badge on the SMS 2FA in the settings discouraging its use, as well as the following text in the description: "We strongly advise against using SMS because it is susceptible to interception, does not provide resistance against phishing attacks, and deliverability can be unreliable."