Code hosting and collaboration platform. Product changelog covering Actions, Copilot, repos, and more.
GitHub Copilot now includes an in-product validator for enterprise managed settings that detects malformed JSON, unsupported configurations, invalid team mappings, and other errors to prevent configuration failures.
The Copilot usage metrics API now provides breakdown of how long pull requests spend in each review stage at the enterprise and organization repository level, with a new pull_request_review_times array for detailed analytics.
Repository issues now support private saved views for personalized filtering, and the "Relates to" issue relationship type is now generally available.
Workflow run queries in the GitHub Actions API and UI now return a less precise but more accurate count of records when searching by workflow, event, status, or branch.
Agentic autofix now integrates with Copilot Memory for enabled customers, using stored context to better resolve security alerts and improve fix quality.
This week's release adds new AI models to Copilot, introduces local sandboxing in the Copilot app, and delivers updates across Slack, Microsoft Teams, JetBrains, and VS Code integrations.
GitHub Copilot integration with Slack and Microsoft Teams has been enhanced with improved context, better user control, and simplified workflows for connecting conversations to GitHub work items and repositories.
CodeQL 2.27.1 introduces new queries for C/C++ and C#, adds support for Kotlin 2.4.20, and improves query accuracy. These enhancements expand static analysis capabilities for GitHub code scanning.
GitHub is introducing a new global default policy for generally available Copilot features and supported client capabilities in enterprise and organization settings, with a 28-day transition period.
GitHub Enterprise Cloud now supports proof of presence, requiring interactive re-authentication or multi-factor challenges before members perform high-impact actions on accounts, expanding existing sudo capabilities.
Expired artifacts are no longer displayed in the GitHub Actions run summary or returned by the REST API. Previously, expired artifacts remained visible with an "Expired" pill indicator.
GitHub Copilot code review now offers additional personal configurations across an expanded set of plans and enterprise-level default settings, enabling teams to customize code review workflows to their needs.
Node 20 has reached end of availability on GitHub Actions runners, which now use Node 24 for JavaScript actions. The temporary ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION opt-out is no longer available.
Local sandboxing feature now available in the GitHub Copilot app to limit access to files, network resources, and credentials on your machine, reducing the potential impact of unintended commands.
GitHub Copilot app now supports OpenTelemetry configuration through enterprise-managed settings, enabling visibility into how Copilot agents perform and interact with models and tools.
Copilot for JetBrains 1.18.0 adds AI-assisted tool approvals, enhanced control over agent conversations, and organizational shared skills and instructions, improving team collaboration and code generation capabilities.
GitHub Copilot CLI now supports whole codebase indexing for C++, enabling faster code intelligence analysis across large repositories with millions of lines of code and deeply connected source files.
Claude Opus 5.5, Anthropic's latest model, is now available in GitHub Copilot for agentic coding, long-running tasks, and knowledge work applications.
GitHub Copilot now supports two new OpenAI GPT-6 models: Sol and Luna, expanding the model selection options available to users alongside the previously released Astra model.
GitHub is removing legacy SSH algorithms, adding a new algorithm, and requiring larger RSA SSH keys to strengthen SSH security and reduce vulnerability to attacks.
The all-platform CodeQL bundle (codeql-bundle.tar.gz and codeql-bundle.tar.zst) is deprecated starting with CodeQL CLI 2.27.0. Users should migrate to platform-specific bundles.
GitHub's redesigned pull requests page is now generally available to all users, making it easier to find and act on pull requests.
Enterprise owners can now export a complete inventory of all credentials that can access their enterprise, including SSH keys, personal access tokens, and OAuth App access tokens.
xAI's Grok 4.7 reasoning model is now rolling out in GitHub Copilot, with improvements over Grok 4.6 designed for agentic coding and complex multistep workflows.
Copilot code review now provides a clearer timeline of review changes, intelligently auto-resolves its own suggestions, and automatically generates useful commit messages when accepting changes.
The REST API now supports managing the Restrict code coverage repository ruleset option, providing programmatic control over code coverage enforcement in addition to UI support.
GitHub Copilot adds new model selection options, code review updates, and Sentry integration in the Copilot app, plus updates for admins and new agent features.
Selected GitHub Copilot models will be deprecated across all Copilot experiences including Chat, inline edits, and code completions on October 19th, 2026. Users should plan to migrate to newer models before the deprecation date.
GitHub now supports creating npm granular access tokens with Read and write (stage only) permissions, allowing automated workflows to stage package versions for review without requiring full publish access.
The Copilot impact dashboard now displays metrics on how many active users regularly use key Copilot features, enabling enterprise administrators to quickly identify which experiences are widely adopted and which may need additional attention.
GitHub Copilot's usage metrics API now includes agentic activity metrics for skills, custom agents, Model Context Protocol servers, slash commands, and plugins, expanding CLI report coverage.
Ubuntu 26.04 runner image for GitHub Actions is now fully supported for production workflows on x64 and arm64 architectures, graduating from public preview.
Workflow execution protections, previously in public preview, are now generally available for GitHub Enterprise, organizations, and repositories. This feature lets you define an allowlist that controls who can execute workflows.
Enterprise admins can now automate SSO authorization for existing classic personal access tokens and SSH keys across organizations in GitHub Enterprise Cloud, eliminating the need for manual per-organization authorization by developers.
SCIM user responses from GitHub now include the standard profileUrl attribute defined by RFC 7643, containing the absolute URL of the GitHub account linked to the external identity.
Members who exhaust their Copilot AI credits can now request budget increases instead of being blocked from Copilot features. This provides a smoother workflow for users who need additional credit allocation.
AI Scan for pull requests can now find security vulnerabilities without requiring CodeQL default setup to be enabled on a repository, expanding its accessibility for security scanning workflows.
Enterprise administrators can now enforce GitHub Advanced Security configurations across organizations, preventing organization and repository administrators from overriding enterprise-level security settings.
GitHub Copilot can now suggest allowed values when creating custom properties for repositories in your organization. This feature is in public preview for GitHub Copilot Business.
GitHub has disabled SHA-1 in HTTPS for github.com and partner services as previously announced. Users must update their systems to use modern TLS cipher suites to maintain connectivity.
GitHub Copilot auto model selection now offers three tiers—efficiency, balance, and intelligence—allowing users to configure how auto weighs cost, quality, and response time based on their preferences.
GitHub profiles now display the highest tier earned for multi-level achievements instead of showing only the first tier, improving how your progress is reflected on your profile.
GitHub Copilot usage metrics reports now include metrics for activity in the VS Code Agents window, enabling enterprises and organizations to measure adoption and engagement with agents.
Copilot code review now automatically resolves its own comments once issues are addressed and generates smart commit messages when code suggestions are applied, improving the code review workflow.
GitHub Copilot introduces Jira integration in the Copilot app, adaptive model orchestration with Project HydraFusion in Copilot CLI, and new agent automation in Visual Studio Code.
GitHub has released a refreshed repository pull request listing page in public preview with improved filtering, compact presentation mode, and enhanced usability for managing pull requests.
GitHub code scanning's AI Scan for pull requests is now available via REST API endpoints at organization and repository levels, enabling teams to manage AI scanning programmatically.
GitHub Actions now supports cache-mode to implement least-privilege access control at the workflow or job level, allowing you to grant each workflow or job only the specific cache access it needs.
GitHub has deprecated the MAI-Code-1-Flash model across all Copilot experiences including Chat, inline edits, and code completions as of September 10, 2026. Users should migrate to the suggested alternative model.
The Xcode 27 runner image for GitHub-hosted macOS runners is now available in public preview, allowing you to validate Apple apps against macOS 27.
npm now places a temporary 72-hour security hold on any account after successful recovery-code sign-in. This protection, which previously applied only to high-impact accounts, is now extended to all accounts.
CodeQL 2.27.0 is now available on Linux ARM64 with a new Rust security query, expanded framework coverage for Java/Kotlin and C#, and improved analysis accuracy across multiple languages.
GitHub Copilot Business and Enterprise administrators can now centrally control which agent operations are blocked, require human approval, or proceed without a prompt through managed permissions policies.
More GitHub Enterprise Cloud customers can now access self-serve trials for GitHub Advanced Security, including Code Security and Secret Protection features. Trial eligibility has been expanded to reach a broader customer base.
Repository rulesets now allow blocking pull requests from merging when they contain exposed secrets, adding a scalable security protection across repositories.
Agentic autofix is now available to help resolve code quality findings. You can select up to 25 standard findings on a page and assign them for automated remediation.
Added support for enterprise-managed sandbox policies, cross-file cursor jumps for next edit suggestions, global project context in chat, and enterprise policy diagnostics in Copilot for JetBrains.
GitHub Enterprise Server 3.22 introduces new capabilities across the platform, including administrator configuration options for Copilot CLI and other enhancements.
Dependabot can now access private GitHub Packages registries without requiring a personal access token, simplifying authentication when repositories have granted access through package settings.
GitHub Copilot expands model choice and content protections, while VS Code adds new ways to manage agent sessions and get pull requests merge-ready. Claude Fable model support included.
OpenAI's GPT-6 Astra model is now available in GitHub Copilot, bringing a latest general-purpose model designed for long-horizon, autonomous coding and agentic tasks.
GitHub has redesigned and moved the support portal to help.github.com, consolidating support, documentation, learning, community, and account resources in one unified location with Copilot-powered search capabilities.
GitHub introduced a new star history REST API endpoint that allows you to track repository star growth over time while protecting stargazer privacy. This new endpoint provides aggregate data without exposing individual user identities, complementing earlier restrictions on direct stargazer listing endpoints.
GitHub is expanding trusted publishing for npm packages by allowing multiple trusted publishing configurations per package, making it easier for maintainers to manage automated publishing workflows.
GitHub Actions introduces three updates providing clearer visibility and finer-grained control over workflows, including a new REST API for runner version deprecations.
GitHub will deprecate selected Copilot models across all experiences including Chat, inline edits, and code completions on October 2nd, 2026. Users should plan to migrate to supported models ahead of the deprecation date.
The PGP signing key for GitHub CLI Linux package repositories will expire on September 5, 2026. After this date, APT and RPM repository metadata will require updates.
Google's Gemini 3.8 Flash model is now available as an option in GitHub Copilot, offering strong performance on complex terminal-based coding tasks.
GitHub is gradually reopening sign-ups for Copilot Business and Enterprise plans for customers paying by credit card or PayPal. This allows teams and enterprises that were previously unable to sign up to now access these AI-powered coding assistance tiers.
CodeQL 2.26.4 adds support for Go 1.27 and improves security detections for GitHub Actions, enhancing the static analysis capabilities of GitHub's code scanning engine to help developers find and remediate security issues.
Organizations can now configure a preferred GitHub Copilot model as the default for new conversations through enterprise-managed settings, allowing teams to choose the model that best suits their workflows.
Copilot app and CLI now respect content exclusion policies configured by administrators at enterprise, organization, and repository levels. Excluded files will not be used as context by Copilot.
Enterprise Live Migrations (ELM) is now generally available, enabling near-zero-downtime repository migrations from GitHub Enterprise Server to GitHub Enterprise Cloud with Data Residency.
Users can now set an optional expiration date on individual user budgets, and GitHub automatically removes the budget on that date. This capability is now generally available.
Copilot can now evaluate pull requests and indicate when they are ready to approve, with admins able to authorize it to sign off on approvals. This streamlines code review workflows by enabling automated approval decisions.
Users can now block or unblock other users directly from discussion comments in personally-owned repositories, extending blocking controls that were previously available only for issues and pull requests.
Claude Fable 5.1 from Anthropic is now available in GitHub Copilot. This latest model in the Mythos class is optimized for long-horizon, autonomous coding and knowledge-work tasks.
GitHub CLI now supports a repeatable --attach flag that uploads local images or videos and references them inline in issues, pull requests, and comments.
GitHub updated how model access is determined for Copilot users who hold seats across multiple organizations, aligning billing and governance policies.
GitHub has deprecated certain models across GitHub Copilot experiences including Chat, inline edits, and code completions as of September 1, 2026. Users should migrate to supported models to maintain functionality.
VS Code v1.132-v1.135 shipped improvements to organize agent sessions, review changes, and navigate long conversations. Agent Host and related Copilot capabilities received enhancements.
August 2026 update adds more control over how Copilot reasons, model selection, team-shared specialized agents, and code review workflows for Visual Studio users.
GitHub Copilot releases provide users with more control over how Copilot runs, including new team collaboration features in Slack and Teams, along with customization options across the app, CLI, and IDE.
GitHub is making three separate upcoming changes to Copilot policies and billing to provide a consistent experience. Users should review the updates to understand potential impacts.
GitHub has improved label management on issues to make it easier to organize and discover labels, especially helpful for repositories with extensive label lists. The feature includes suggested labels to help users find the right label more quickly.
Copilot code review now supports additional pull request types, including automatic reviews on bot-authored PRs and very large PRs, with improved resolution explanations for review decisions.
GitHub Classroom has been deprecated as of August 28, 2026, and its website, APIs, and services have been decommissioned in favor of selected partner solutions.
Starting October 1, 2026, checks, workflow runs, and statuses will be governed by the same Actions retention setting that controls artifacts and logs, unifying retention policy management across all workflow data.
When you block a user from your personal account or organization, you can now automatically close all their open issues, discussions, and pull requests in one action.
Plugin marketplaces in enterprise-managed settings can now be configured for automatic updates by setting autoUpdate: true on extraKnownMarketplaces entries. Supported clients automatically check and update these marketplaces.
GitHub is rolling out enforcement of a default model policy for generally available Copilot models across Copilot Business and Enterprise plans. This policy was previously announced in July and is now being gradually enforced.
Enterprise owners can now grant GitHub Apps access to enterprise billing data by selecting the enterprise billing permission when creating or configuring an app.
The rule insights dashboard is now generally available at both repository and organization levels, providing a visual overview of how GitHub evaluates and enforces repository rules.
The Customize tab in the GitHub Copilot app is now generally available, allowing teams to integrate Copilot with their existing tools and workflows through MCP support.
Users can now block other users directly from security advisory pages in public repositories, streamlining the moderation experience for repository owners.
Push rules in rulesets now allow you to configure path exceptions, enabling rules to apply everywhere in scope except for specific file paths you choose to exempt.
GitHub has improved the blocked users management interface for personal accounts and organizations, adding search by username, full name, or email along with sorting and pagination capabilities for easier list navigation.
GitHub Copilot agentic capabilities are now available in Slack through the GitHub integration, bringing CLI and app functionality directly into Slack for easier workflow integration.
GitHub Copilot now supports shared agentic work sessions in Microsoft Teams, allowing teams to collaborate on agent tasks together by mentioning @GitHub in channels, threads, or direct messages.
Saved views can now be pinned to the repository issues sidebar for quick access to frequently used views. This feature is now generally available.
97 more changes from GitHub. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.