GitHub Releases
GitHub changelog, platform updates, and Copilot coding-assistant releases. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 199 GitHub releases · Updated
- GitHub Changelog ·
setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes
This release of actions/setup-java adds cryptographic signature verification for downloaded JDKs, support for Tencent Kona JDK, and several quality-of-life improvements for Maven users. Signature verification enhances build security by validating JDK archives before installation. The changes impact developers using the setup-java action, particularly those prioritizing build integrity and streamlined Maven workflows. Version 5.5.0 is now available, with specific fixes and features noted from previous versions as well.
feature patch - GitHub Changelog aiengineer ·
GitHub Mobile: Live notifications for Copilot CLI sessions
GitHub Mobile now supports live notifications for remote Copilot CLI sessions, allowing users to track agent progress and receive updates directly on their phones. This feature enhances connectivity for work initiated outside the mobile app, making it easier to monitor job status, respond to input requests, and resume sessions. It is available on the latest production builds of GitHub Mobile for iOS (17.2+) and Android (16+).
feature - GitHub Changelog securitygadeprecationengineer ·
npm v12 Introduces Install-Time Security Defaults and Deprecates 2FA-Bypass GATs
npm v12 is now generally available, enforcing stricter install-time security defaults that require explicit opt-in for scripts, Git dependencies, and remote URLs. This release also begins deprecating granular access tokens (GATs) configured to bypass 2FA for sensitive account and package management actions. These changes aim to enhance security for all npm users, particularly those managing critical infrastructure. Users should review and approve trusted scripts and plan to migrate automated publishing workflows.
feature deprecation patch - GitHub Changelog aiengineer ·
GitHub Mobile: Fix merge conflicts with Copilot
GitHub Mobile now supports resolving pull request merge conflicts using the Copilot cloud agent. This feature allows developers to initiate Copilot directly from the pull request merge box on mobile, streamlining workflows when away from a desktop. The update is now available on the latest iOS and Android builds of GitHub Mobile.
feature - GitHub Changelog aiengineer ·
GitHub Copilot Usage API adds review velocity metrics
The Copilot usage metrics API now includes two new fields, avg_pull_requests_minutes_to_review and avg_pull_requests_review_cycles, to measure review velocity by AI adoption phase. These metrics help quantify Copilot's impact on engineering throughput and code review efficiency for enterprise and organization reports. They are available in existing reports and apply only to merged pull requests.
feature - GitHub Changelog aiengineer ·
Kimi K2.7 Code available for GitHub Copilot Business and Enterprise
GitHub Copilot now offers the Kimi K2.7 Code open-weight model for its Business and Enterprise plans, providing users with more choice and a potentially lower-cost coding option. This model is hosted on Microsoft Azure and billed at provider list pricing. Administrators must explicitly enable the Kimi K2.7 Code policy for their organizations before users can select it, and are advised to review security and compliance requirements.
feature announcement - GitHub Changelog governanceinfraengineer ·
GitHub Enterprise Cloud: Per-user budgets for cost centers
GitHub Enterprise Cloud now allows enterprise admins to set per-user budgets for cost centers directly in the billing UI, mirroring REST API functionality. This feature enables automatic budget application to all members of a cost center and stays synchronized with team membership changes. It is now available for GitHub Enterprise Cloud users to help manage costs at scale.
feature - GitHub Changelog securitygaengineer ·
GitHub Secret Scanning adds extended metadata and multipart validation
GitHub Secret Scanning now offers enriched metadata for supported secret types, including owner details, creation/expiry dates, and project context. These generally available enhancements allow development and security teams to assess exposure and prioritize remediation faster. Multipart validity checks are also expanded to cover key credential formats across major providers like Alibaba Cloud and Azure, with GitHub continually adding more support.
feature patch - GitHub Changelog aiengineer ·
GitHub Copilot App Now Available on All Plans
The GitHub Copilot app is now universally available across all Copilot plans, including free and educational tiers. This release allows users to sign in with their GitHub account to enable agent-driven development directly from their desktop on macOS, Windows, and Linux. Additionally, users can run sessions with their own model providers using a Bring Your Own Key (BYOK) approach, even without a Copilot subscription.
feature announcement - GitHub Changelog governancegaengineer ·
GitHub Rulesets: Restrict Who Can Dismiss Pull Request Reviews
GitHub now allows restricting who can dismiss pull request reviews within repository rulesets. This enhances control over the merge process by specifying exact users, teams, or apps allowed to clear approvals. This feature is now generally available and configurable via the UI, REST API, and GraphQL.
feature - GitHub Changelog aiengineer ·
GitHub Copilot usage metrics API improvements
GitHub has enhanced its Copilot usage metrics API with three key improvements for greater accuracy and coverage. These updates include reporting suggested lines of code from Copilot CLI, identifying IDEs for users previously seen only via server-side telemetry, and more complete AI credit attribution. These changes provide enterprise administrators and organization owners with more trustworthy data for analyzing Copilot adoption and consumption.
patch - GitHub Changelog infraengineer ·
GitHub Copilot CLI GitHub Actions integration now uses GITHUB_TOKEN
GitHub Copilot CLI can now authenticate with GitHub Actions using the built-in GITHUB_TOKEN, eliminating the need for Personal Access Tokens (PATs). This change reduces operational overhead and security risks associated with managing PATs for large-scale automations. AI credits are billed directly to the organization when used in organization-owned repositories, requiring a specific Copilot policy to be enabled and the `copilot-requests: write` permission. Users must update to a recent version of Copilot CLI to utilize this feature.
feature - GitHub Changelog aipreviewengineermedia ·
GitHub Copilot agent session streaming enters public preview
GitHub Copilot agent session streaming is now available in public preview for GitHub Enterprise Cloud customers with enterprise managed users. This feature provides direct visibility into AI usage across an enterprise by enabling access to prompts, responses, and tool calls via a streaming endpoint or REST API. This allows for better management of AI usage and auditability, with Microsoft Purview also supported as a streaming endpoint.
feature announcement - GitHub Changelog aiinfraengineer ·
GitHub Cost Centers Now Support AI Credit Pools
GitHub has introduced AI credit pools for cost centers, enabling organizations to cap monthly included AI credit usage per cost center. This feature prevents one cost center from exhausting shared credits, ensuring usage aligns with assigned licenses and maintains chargeback boundaries. It is available via the REST API for Copilot Business and Enterprise on GitHub Enterprise Cloud, with UI management coming soon.
feature - GitHub Changelog governancegaengineer ·
GitHub Issue Fields Generally Available, Edit History Limited
GitHub Issue Fields are now generally available across all plans, offering structured, typed metadata for better issue tracking. Key enhancements since preview include issue list integration, public project support, and MCP integration for AI tools. Additionally, GitHub is now limiting stored edit history for issues and pull requests to 100 entries to align with usage patterns. These changes impact all GitHub users, with some features shipping in Enterprise Server 3.23.
feature patch - GitHub Changelog aiinfragaengineer ·
Enterprise managed-settings.json for AI configuration is GA
GitHub Enterprise Cloud now offers general availability for configuring AI standards via a managed-settings.json file. This feature enables enterprises to enforce governance and extensibility for Copilot clients, such as VS Code and Copilot CLI, by defining policies in a .github-private repository. The configuration takes precedence over user-level client settings and is fetched hourly upon user authentication.
feature announcement - GitHub Changelog aigaengineer ·
GitHub Copilot Enterprise: Auto model selection default for enterprises
Enterprise administrators can now configure GitHub Copilot Enterprise to default to auto model selection for new conversations by updating the managed-settings.json file. This change provides enterprise governance over AI model defaults, ensuring new conversations start with automatic model selection while allowing users to switch models per conversation. This feature is available for users with Copilot Business or Copilot Enterprise licenses and requires VS Code 1.126+.
feature - GitHub Changelog securitypreviewengineer ·
GitHub Secret Scanning Public Monitoring for Enterprises Now in Preview
GitHub Secret Scanning now offers public monitoring in public preview for enterprises, at no additional cost, to detect secret leaks across the entire public surface of GitHub.com. This feature attributes leaks back to your enterprise based on committer identity and verified domains, helping organizations respond to vulnerabilities exposed beyond their own repositories. Public monitoring is enabled by default for enterprise owners and security managers, providing real-time insights without requiring setup.
feature announcement - GitHub Changelog securityengineer ·
GitHub Secret Scanning Adds Validity Checks for Asana, IBM, MessageBird Secrets
GitHub's secret scanning now includes validity checks for Asana, IBM, and MessageBird secrets, allowing users to determine if leaked credentials are still active. This enhancement improves the security posture by reducing the risk of using compromised tokens. The feature is available for specific secret types across these providers. Further details and a full list of supported secrets can be found in the documentation.
feature - GitHub Changelog aiengineer ·
Copilot CLI adds C++ language server config skill
GitHub Copilot CLI now integrates a C++ language server plugin, simplifying code understanding for developers. This new feature automates the generation of the compile_commands.json file, crucial for semantic intelligence, previously a manual and complex process. Available via the Copilot Plugins marketplace, it supports CMake and MSBuild projects and offers guidance for custom build systems, requiring an active GitHub Copilot subscription.
feature
About GitHub release tracking on ReleaseBytes
The GitHub changelog covers Actions, Copilot, code security, the API and the platform itself — dozens of entries a week. ReleaseBytes summarises each changelog entry and tags breaking changes and deprecations (like Actions runner image retirements and API sunsets) so platform teams catch them before workflows break.
Frequently asked questions
How often are GitHub release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official GitHub release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of GitHub changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new GitHub releases? ›
Set up a free email or Slack alert filtered to GitHub, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the GitHub release data come from? ›
From the official sources: GitHub changelog, platform updates, and Copilot coding-assistant releases. Every item links back to the original vendor announcement.