The Download: GitHub OAuth refresh tokens, Cloudflare MCP detection, terminal animations & more

GitHub shares a weekly developer-news roundup covering GitHub Universe 2026 updates, changes to GitHub OAuth apps (refresh tokens and multiple callback URLs), and security-related notes like Cloudflare detecting MCP traffic, plus a couple of project picks for local AI and terminal animations.

Overview

GitHub Universe 2026 session catalogue

• Points viewers to the GitHub Universe 2026 session catalogue and event site:
  • https://reg.githubuniverse.com/flow/github/universe26/attendee-portal/page/sessioncatalog
  • https://githubuniverse.com

GitHub OAuth apps: refresh tokens and more callback URLs

• Highlights updates to GitHub OAuth Apps, including:
  • Refresh tokens
  • Multiple redirect URIs / callback URLs
• Resource link:
  • https://github.blog/changelog/2026-08-14-multiple-redirect-uris-and-token-refresh-for-oauth-apps/

Cloudflare detects MCP traffic

• Calls out Cloudflare updates related to detecting MCP traffic.
• Resource link:
  • https://blog.cloudflare.com/mcp-security-updates/

A2A governance update

• Mentions A2A joining the Agentic AI Foundation (AAIF) and links to governance/protocol resources:
  • https://aaif.io/blog/a2a-joins-aaif
  • https://a2a-protocol.org/latest/

Project picks

• local.ai
  • https://local.ai/about
  • https://local.ai/andrea?addMachine=1#my-hardware
• ttfx (terminal animations)
  • https://github.com/omacom-io/ttfx
  • https://github.com/omacom-io/ttfx/releases/tag/v0.3.1

Chapters

• 00:00 Welcome to The Download
• 00:33 GitHub Universe 2026 session catalog
• 01:21 GitHub OAuth refresh tokens and callback URLs
• 01:57 Cloudflare detects MCP traffic
• 02:32 A2A joins the Agentic AI Foundation
• 03:18 Project pick: local.ai
• 03:50 Project pick: ttfx