GitHub Releases
GitHub changelog, platform updates, and Copilot coding-assistant releases. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 199 GitHub releases · Updated
- GitHub Changelog aiawspreviewengineer ·
GitHub Copilot Enterprise Teams Model Policy Targeting in Public Preview
GitHub Copilot Enterprise customers with Copilot Business or Enterprise licenses can now use user-based model policy targeting in public preview. This feature allows AI administrators to set baseline models for the enterprise and grant additional models to specific teams, enabling finer-grained control mapped to job roles or experimentation. Access begins rolling out on August 3rd, with opt-in available through an Enterprise teams mode toggle.
feature announcement - GitHub Changelog securitygovernanceengineer ·
npm restricts granular access token ability to bypass 2FA for sensitive actions
npm granular access tokens (GATs) configured to bypass two-factor authentication (2FA) can no longer perform sensitive account, organization, and package management actions. This change closes a significant attack vector where leaked tokens could be used for account takeovers. The restriction impacts only npm granular access tokens and requires users to perform these actions interactively with a 2FA challenge.
security patch - GitHub Changelog aiengineer ·
GitHub Copilot VS Code Updates: Agents, Chat, UI, and Accessibility
GitHub Copilot for VS Code received significant updates in July 2026, enhancing agent interactions, code review, and chat capabilities. These improvements aim to streamline developer workflows, offering features like multi-chat sessions, faster review tools, and better session management. The releases also introduce a modernized UI preview, improved editor and terminal navigation, and new accessibility features including built-in dictation. These changes affect developers and architects using Copilot within Visual Studio Code.
feature patch - GitHub Changelog infraengineer ·
GitHub Actions: Reference same-repo workflows with self-repository syntax
GitHub Actions now supports a new self-repository syntax (`$/`) to reference actions and reusable workflows within the same repository. This eliminates the need for checking out code or hardcoding versions, ensuring internal references remain consistent with the running commit SHA. This feature is available on github.com for runners version 2.336.0 and newer, simplifying maintenance and enabling adherence to enterprise policies requiring pinned action SHAs.
feature - GitHub Changelog infrapreviewengineer ·
GitHub Stacked Pull Requests Enter Public Preview
GitHub has launched Stacked Pull Requests in public preview, allowing engineers to break large changes into smaller, ordered, and reviewable pull requests. This feature aims to improve the review process for substantial code modifications, making it easier to maintain quality and speed up delivery. The preview is rolling out to all repositories, with merge queue support coming soon.
feature announcement - GitHub Changelog securityinfraengineer ·
GitHub Copilot restricts remote control to managed devices
GitHub Copilot now allows enterprises to limit remote control sessions to specific managed devices, enhancing administrative control. This new `remoteControl` enterprise setting allows administrators to mandate SSO authorization or tailor access per device, complementing existing policies. The feature is available via server-managed, MDM-managed, or file-based deployment mechanisms for users in enterprises.
feature - GitHub Changelog aiazurepreviewengineer ·
GitHub Copilot Visual Studio Update Adds New Agent, Skills, Code Review
GitHub Copilot for Visual Studio has released an update introducing a new agent in public preview, built-in expertise from .NET and Azure teams, and enhanced code review capabilities. This update aims to improve developer productivity by offering more tailored assistance and streamlined workflows. The new agent and skills are available to all plans, while organization-level custom instructions require a Business or Enterprise subscription.
feature announcement - GitHub Changelog aigapreviewengineer ·
GitHub Copilot Code Review: Agent Skills and MCP Now Generally Available
GitHub Copilot code review now offers generally available support for agent skills and MCP servers, enhancing reviews with team tools and external context. This feature, previously in public preview, integrates custom tools and data from third-party platforms directly into the review process. It is available to Copilot Pro, Pro+, Business, and Enterprise users, with existing preview configurations carrying over.
feature patch - GitHub Changelog aigaengineer ·
GitHub Copilot: Default Model Enablement for Business and Enterprise Plans
GitHub is rolling out a global default enablement policy for generally available Copilot models on Business and Enterprise plans. This change aims to simplify management by automatically enabling new models, requiring only an opt-out for organizations needing stricter governance. Admins have 28 days to configure this new policy before it takes effect on August 26, after which models not explicitly configured will follow the default setting unless manually overridden.
feature announcement - GitHub Changelog securityinfraengineer ·
CodeQL 2.26.1 enhances analysis accuracy and framework coverage
CodeQL version 2.26.1 improves static analysis accuracy and expands framework coverage for Go, Java/Kotlin, and JavaScript/TypeScript, while reducing false positives in Rust analysis. These enhancements aim to improve security issue detection for users of GitHub code scanning. The update is automatically deployed to GitHub.com users and will be included in a future GHES release.
patch - GitHub Changelog aiengineer ·
GitHub Copilot App Usage Metrics Expanded in API
GitHub has enhanced its Copilot usage metrics API to provide detailed insights into Copilot app activity, now attributing usage to individual users and breaking it down by feature, model, and language. This expansion allows organizations to better understand adoption and the impact of the Copilot app, comparing it against other Copilot surfaces. The new metrics are available in enterprise and organization reports, are backward compatible, and require specific permissions to access.
feature - GitHub Changelog securityengineermedia ·
npm Adds Publish-Time Malware Scanning and Dual-Use Metadata
npm now automatically scans packages for malware at publish time, introducing a brief delay before packages are available. This enhances supply-chain security for all users but may require automation updates to tolerate the delay. A new metadata requirement, `contentPolicy` in `package.json` and a `DISCLOSURE` file, is introduced for dual-use content to aid automated scanning and manual review. Publishers of dual-use packages must also enforce two-factor authentication during publishing.
feature security - GitHub Changelog aiengineer ·
Grok 4.5 reasoning model available in GitHub Copilot
Grok 4.5, xAI's latest reasoning model, is now rolling out in GitHub Copilot for various SKUs, offering fast, agentic coding with a 500,000 token context window. It supports text and image inputs and is designed for complex, time-sensitive workflows, showing strong performance in internal testing. Administrators must enable the Grok 4.5 policy, which is off by default, to access this model.
feature announcement - GitHub Changelog securitygaengineer ·
Dependabot alerts expand to cover malicious packages from OpenSSF
GitHub's Dependabot alerts now incorporate malware advisories from the OpenSSF malicious-packages repository, broadening detection across ecosystems like npm and PyPI. This enhancement means users with malware alerting enabled will automatically benefit from expanded coverage, identifying risks from newly published malicious packages. To leverage this, users can enable malware alerting in repository settings or browse advisories directly on GitHub.
feature announcement - GitHub Changelog aiinfraengineer ·
GitHub Copilot for JetBrains: Enhanced Config & Model Management
GitHub Copilot for JetBrains has been updated with improved OpenTelemetry configuration and model management, offering greater control over agent workflows and cost. This release introduces new options for token limits, disabling/enabling models, and integrating MCP servers and custom agents in Claude flows. The enhancements benefit engineers and architects managing observability, cost control, and custom IDE workflows.
feature patch - GitHub Changelog securitygovernanceengineer ·
GitHub Copilot enterprise managed settings expand to app and cloud agent
GitHub Copilot enterprise managed settings now extend to the Copilot app and cloud agent, allowing unified policy enforcement across multiple clients. This enables enterprise owners to control plugin usage, marketplace access, and prompt bypasses via a `managed-settings.json` file. This enhancement ensures consistent governance for developers using Copilot in various environments, including the app and cloud agent, mitigating security and compliance risks. The feature is available immediately for existing users of enterprise managed settings for CLI and VS Code.
feature - GitHub Changelog aiengineer ·
GitHub Copilot app access managed by new policy
GitHub now offers a dedicated policy to manage access to the Copilot application independently of the Copilot CLI. This feature provides enterprises and organizations granular control over who can use the Copilot app, enhancing security and compliance by aligning app usage with existing review and audit processes. The new policy is enabled by default, allowing immediate use by developers, and can be configured through enterprise or organization AI Controls.
feature - GitHub Changelog aiengineer ·
Claude Opus 5 model now available in GitHub Copilot
GitHub Copilot now supports Anthropic's Claude Opus 5, designed for complex coding tasks requiring multi-step reasoning and tool use. This new model enhances performance on agentic workflows and includes improved safeguards for cyber content, though these may occasionally block security-related requests. It's available to specific Copilot plan users, with gradual rollout and administrator policy enablement required.
feature announcement - GitHub Changelog aigaengineer ·
GitHub Copilot cloud agent for Linear now generally available
GitHub Copilot cloud agent for Linear is now generally available, allowing users to assign issues directly to Copilot for automated pull request creation and progress tracking within Linear. This feature enhances developer workflows by automating coding tasks and integrating directly with issue tracking. It is available for Copilot Pro, Pro+, Business, and Enterprise users, requiring specific GitHub and Linear administrative permissions to set up.
feature announcement - GitHub Changelog infragaengineer ·
GitHub MCP Server adopts stateless protocol specification
GitHub MCP Server now supports the upcoming stateless MCP specification, set to go live on July 28th, 2026. This update simplifies scaling, introduces new innovation paths via extensions, and streamlines connections by removing sessions and initialize. Existing tier 1 SDKs and bespoke clients remain compatible due to preserved backwards compatibility, with GitHub's implementation removing Redis sessions, avoiding deep packet inspection, and upgrading elicitation support.
feature
About GitHub release tracking on ReleaseBytes
The GitHub changelog covers Actions, Copilot, code security, the API and the platform itself — dozens of entries a week. ReleaseBytes summarises each changelog entry and tags breaking changes and deprecations (like Actions runner image retirements and API sunsets) so platform teams catch them before workflows break.
Frequently asked questions
How often are GitHub release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official GitHub release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of GitHub changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new GitHub releases? ›
Set up a free email or Slack alert filtered to GitHub, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the GitHub release data come from? ›
From the official sources: GitHub changelog, platform updates, and Copilot coding-assistant releases. Every item links back to the original vendor announcement.