Just had a conversation with peers that was like:

"my friend says github's changed their SSH key fingerprint again and it's generating scary warnings you have to ignore"

"oh? it hasn't changed for me"

"or me"

"can't find any documentation on them having changed it since 2023"

"... uh-oh."

If you get a scary warning about Github's ssh fingerprint changing: STOP! it's scary for a reason! You might be a victim-in-progress! Don't proceed unless and until you know exactly what's wrong!

Alas, I suspect the fact that Github really did have to force a key rotation a few years ago has planted the recollection in everyone's minds that this is a normal Github failure mode.

(Yes, messages have hastily been sent to warn people about the possible account compromise. Edit: well the good news is that it's already been diagnosed that they somehow still had the old key from pre-2023 saved, so it's *probably* not an active compromise. )