GitHub Releases
GitHub changelog, platform updates, and Copilot coding-assistant releases. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 199 GitHub releases · Updated
- GitHub Changelog aigaengineer ·
GitHub Copilot repository-level usage metrics now generally available
GitHub Copilot usage metrics are now available at the repository level via new REST API endpoints for enterprise and organization reports. This allows teams to track Copilot's impact on pull request activity directly within specific codebases. The feature is for enterprise owners, organization owners, and users with specific permissions, provided Copilot usage metrics are enabled.
feature announcement - GitHub Changelog aiengineer ·
GitHub Mobile: Fix PR comments using Copilot
GitHub Mobile now allows users to initiate Copilot-assisted fixes for pull request comments directly from the app. This feature leverages the Copilot cloud agent to automatically generate responses to review feedback, simplifying the process of addressing comments. Available on the latest iOS and Android builds, this enhancement aims to help users resolve issues faster while on the go.
feature patch - GitHub Changelog infrapreviewengineer ·
Xcode 27 runner image now in public preview on GitHub
GitHub Actions now offers Xcode 27 on hosted macOS runners in public preview, allowing developers to test applications with the latest Apple toolchains. This change introduces a new support model where images are versioned by Xcode major releases, simplifying toolchain targeting. The preview is currently limited to arm64 macOS runners.
announcement feature - GitHub Changelog aiengineer ·
GitHub Copilot for Visual Studio: June Update Includes Usage Tracking and C++ Modernization
GitHub Copilot in Visual Studio receives a June update focused on visibility and trust, introducing real-time usage tracking with proactive alerts and a trust validation layer for MCP servers. The modernization agent for C++ is now generally available, and extended range suggestions enhance code editing. This update benefits all GitHub Copilot plan users, including free and student tiers, and requires Visual Studio 2026.
feature patch - GitHub Changelog securitygaengineer ·
GitHub REST API now supports managing secret scanning custom patterns
GitHub has introduced REST API endpoints for managing secret scanning custom patterns, allowing security teams to create, edit, and delete these rules programmatically. This feature is now generally available at the repository, organization, and enterprise levels for secret scanning customers. While core CRUD operations are available via API, dry runs and publishing still require the UI.
feature patch - GitHub Changelog securitypreviewengineer ·
GitHub Code Scanning adds AI security detections to PRs
GitHub Code Scanning now surfaces AI-powered security detections directly on pull requests, expanding vulnerability coverage to new languages and frameworks. This helps teams identify potential issues earlier in the development workflow before merging code. The feature is available in public preview for customers with GitHub Code Security, requires a GitHub Copilot license, and uses AI credits.
feature announcement - GitHub Changelog securitypreviewengineer ·
GitHub Agentic Autofix for Code Scanning Alerts in Public Preview
GitHub is launching agentic autofix for code scanning alerts in public preview, allowing Copilot to automatically suggest and validate fixes for security vulnerabilities. This feature aims to streamline the remediation process by replicating developer workflows, enhancing security response times for affected engineers and architects. Access requires GitHub Code Security or Advanced Security and a Copilot license with the cloud agent enabled, with fixes taking 2-4 minutes and consuming AI credits and GitHub Actions minutes.
feature announcement - GitHub Changelog securitypreviewengineer ·
GitHub Copilot app adds security reviews in public preview
GitHub Copilot app now offers AI-driven security reviews for code changes using the `/security-review` command, currently in public preview. This feature aims to catch high-impact vulnerabilities and provide actionable suggestions before code is committed, complementing existing GitHub security tools. It is available to all Copilot users during the preview period.
feature announcement - GitHub Changelog governancepreviewengineer ·
GitHub Code Quality license estimate in public preview
GitHub Code Quality is now in public preview, offering an estimate of per-committer license costs based on active users. This feature helps organizations understand potential billing before the product's general availability and paid launch on July 20, 2026. The estimate is available on the Billing and licensing page for GitHub Enterprise Cloud and GitHub Team customers.
announcement feature - GitHub Changelog aiengineer ·
CodeQL 2.26.0 adds Kotlin support, AI prompt injection detection
CodeQL 2.26.0 enhances static analysis by adding support for Kotlin 2.4.0 and introducing new queries for AI prompt injection detection across JavaScript and TypeScript. This release aims to improve security by identifying vulnerabilities in how user-provided data interacts with AI models and system prompts. The update is automatically available for GitHub code scanning users on github.com, with a future inclusion planned for GitHub Enterprise Server releases.
feature patch security - GitHub Changelog securityengineer ·
GitHub Secret Scanning Detector Types Renamed
GitHub has renamed several secret scanning detector types to improve clarity and better reflect their detection methods. This is a non-breaking naming update, affecting only the terminology used in the UI and documentation, not the detection behavior itself. The changes aim to make it easier for users to understand how specific secrets are identified, particularly distinguishing between pattern-based and AI-driven detection. All existing documentation links will continue to work due to added redirects.
patch - GitHub Changelog infragaengineer ·
GitHub Pull Requests Dashboard Generally Available
GitHub's refreshed pull requests dashboard is now generally available, offering a centralized view for tracking and managing pull requests. The dashboard includes an 'Inbox' for prioritizing tasks, customizable 'Saved Views' based on search queries, and enhanced filtering and search capabilities. These improvements, refined from public preview feedback, aim to streamline workflows for individual contributors and managers.
feature announcement - GitHub Changelog aiengineer ·
GitHub Copilot integrates OpenAI's GPT-5.6 family
GitHub Copilot is rolling out OpenAI's GPT-5.6 family, featuring Sol, Terra, and Luna variants tailored for different coding tasks, from complex codebase reasoning to cost-efficient assistance. These models are available under Usage Based Billing and will be accessible through various Copilot SKUs and IDE integrations, though gradual rollout means availability may vary. Administrators must manually enable the new models in Copilot settings.
feature announcement - GitHub Changelog governancepreviewengineer ·
GitHub Code Quality: Organization-level repository targeting in public preview
GitHub Code Quality now allows organization owners to target specific repositories for enabling or disabling the feature, rather than applying it organization-wide. This provides more granular control through custom properties, manual selection, visibility, and fork status, with options to enforce settings. This feature is available in public preview for GitHub Enterprise Cloud and GitHub Team plans.
feature announcement - GitHub Changelog securitygaengineer ·
GitHub Advanced Security: Innersource security advisories GA
GitHub Advanced Security is launching Innersource security advisories, allowing enterprises to publish internal security advisories restricted to their own repositories. This feature, now generally available, aims to enhance internal vulnerability management and leverage Dependabot for automated remediation. Enterprise customers can manage these advisories via a new REST API endpoint, which triggers Dependabot to notify and create pull requests for vulnerable component usage within the enterprise.
feature announcement - GitHub Changelog aipreviewengineer ·
JetBrains IDEs: Codex preview, agent customization, and Inline Chat GA
JetBrains IDEs now offer Codex as a new agent provider in public preview, enhancing flexibility for developers. This update also expands agent customization with Hooks and MCP server management, and introduces custom model support for Business and Enterprise users. Inline Chat has reached general availability, alongside performance improvements and bug fixes, affecting developers using GitHub Copilot.
feature patch announcement - GitHub Changelog ·
setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes
This release of actions/setup-java adds cryptographic signature verification for downloaded JDKs, support for Tencent Kona JDK, and several quality-of-life improvements for Maven users. Signature verification enhances build security by validating JDK archives before installation. The changes impact developers using the setup-java action, particularly those prioritizing build integrity and streamlined Maven workflows. Version 5.5.0 is now available, with specific fixes and features noted from previous versions as well.
feature patch - GitHub Changelog securitygadeprecationengineer ·
npm v12 Introduces Install-Time Security Defaults and Deprecates 2FA-Bypass GATs
npm v12 is now generally available, enforcing stricter install-time security defaults that require explicit opt-in for scripts, Git dependencies, and remote URLs. This release also begins deprecating granular access tokens (GATs) configured to bypass 2FA for sensitive account and package management actions. These changes aim to enhance security for all npm users, particularly those managing critical infrastructure. Users should review and approve trusted scripts and plan to migrate automated publishing workflows.
feature deprecation patch - GitHub Changelog aiengineer ·
Kimi K2.7 Code available for GitHub Copilot Business and Enterprise
GitHub Copilot now offers the Kimi K2.7 Code open-weight model for its Business and Enterprise plans, providing users with more choice and a potentially lower-cost coding option. This model is hosted on Microsoft Azure and billed at provider list pricing. Administrators must explicitly enable the Kimi K2.7 Code policy for their organizations before users can select it, and are advised to review security and compliance requirements.
feature announcement - GitHub Changelog securitygaengineer ·
GitHub Secret Scanning adds extended metadata and multipart validation
GitHub Secret Scanning now offers enriched metadata for supported secret types, including owner details, creation/expiry dates, and project context. These generally available enhancements allow development and security teams to assess exposure and prioritize remediation faster. Multipart validity checks are also expanded to cover key credential formats across major providers like Alibaba Cloud and Azure, with GitHub continually adding more support.
feature patch
About GitHub release tracking on ReleaseBytes
The GitHub changelog covers Actions, Copilot, code security, the API and the platform itself — dozens of entries a week. ReleaseBytes summarises each changelog entry and tags breaking changes and deprecations (like Actions runner image retirements and API sunsets) so platform teams catch them before workflows break.
Frequently asked questions
How often are GitHub release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official GitHub release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of GitHub changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new GitHub releases? ›
Set up a free email or Slack alert filtered to GitHub, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the GitHub release data come from? ›
From the official sources: GitHub changelog, platform updates, and Copilot coding-assistant releases. Every item links back to the original vendor announcement.