Degraded performance for various services

Update timeline

1. investigating Mar 13, 2026, 03:12 PM UTC

   We are investigating reports of degraded performance for Actions and Issues

2. investigating Mar 13, 2026, 03:14 PM UTC

   We are investigating reports of issues with service(s): Actions, Feeds, Issues, Profiles, Registry Metadata, Star, User Dashboard. We will continue to keep users updated on progress towards mitigation.

3. investigating Mar 13, 2026, 03:20 PM UTC

   Packages is experiencing degraded performance. We are continuing to investigate.

4. investigating Mar 13, 2026, 03:47 PM UTC

   We are investigating intermittent performance degradation affecting Actions, Feeds, Issues, Package Registry, Profiles, Registry Metadata, Star, and User Dashboard. Users may experience elevated error rates and slower response times when accessing these services. We have identified a potential cause and are implementing mitigations to restore normal service. We'll post another update by 16:15 UTC.

5. investigating Mar 13, 2026, 04:02 PM UTC

   We have deployed mitigations and are actively monitoring for recovery. We'll post another update by 17:00 UTC.

6. resolved Mar 13, 2026, 04:15 PM UTC

   On March 13, 2026, between 13:35 UTC and 16:02 UTC, a configuration change to an internal authorization service reduced its processing capacity below what was needed during peak traffic. This caused intermittent timeouts when other GitHub services checked user permissions, resulting in four to five waves of errors over roughly two hours and forty minutes. In total, 0.4% of users were denied access to actions they were authorized to perform. The root cause was a resource right-sizing change deployed to the authorization service the previous day. It reduced CPU allocation below what was required at peak, causing the service's network gateway to throttle under load. Because the change was deployed after peak traffic on March 12, the reduced capacity wasn't surfaced until the next day's peak. The incident was mitigated by manually scaling up the authorization service and reverting the configuration change. To prevent recurrence, we are adding further resource utilization monitors across our entire stack to detect throttling and improving error handling so transient infrastructure timeouts are distinguished from authorization failures, enabling quicker detection of the root issue.