GitHub new features in July 2026

Everything GitHub shipped in July 2026: 92 releases, grouped by product, each linked to GitHub's release notes.

June 2026 August 2026

GA 21Preview 15Beta 1Deprecation 7Pricing 5Update 43

GitHub Copilot59

GitHub CopilotJul 31, 2026

Enterprise teams model policy targeting in public preview

You can now take advantage of user-based model policy targeting for GitHub Enterprise customers with Copilot Business or Copilot Enterprise licenses. This feature empowers AI administrators to set a baseline of models for the entire enterprise and then grant additional models to specific enterprise teams.

PreviewGovernanceCoding agentsSource

GitHub CopilotJul 31, 2026

Gemini 2.5 Pro and Gemini 3 Flash deprecated

As of today, July 31, 2026, we have deprecated the following models across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions).

DeprecationAI agentsLLMsGovernanceSource

GitHub CopilotJul 31, 2026

Upcoming August 2026 model deprecations in GitHub Copilot

We will deprecate the following models across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions), on September 1st, 2026: Model Deprecation date Suggested alternative Gemini 3.1 Pro 9-1-2026 Gemini 3.6 Flash Claude Opus 4.5 9-1-2026 Claude Opus 4.7, Claude Opus 4.8, or Claude Opus 5 Claude Opus...

DeprecationAI agentsLLMsGovernanceSource

GitHub CopilotJul 30, 2026

GitHub Copilot in Visual Studio , July update

July 2026 brought a new agent based on the Copilot SDK, built-in expertise from the .NET and Azure teams, and more ways to tailor GitHub Copilot to how you and your team work. Highlights Here’s what’s new with GitHub Copilot in Visual Studio 2026.

PreviewAI agentsDeveloper toolsCoding agentsSource

GitHub CopilotJul 30, 2026

GitHub Copilot in Visual Studio Code, July 2026 releases

This changelog covers VS Code v1.127 through v1.131 , shipped throughout July 2026. These releases improve how you work with agents, review changes, use chat, and navigate VS Code. They also add new browser, accessibility, and dictation features.

PreviewAI agentsLLMsObservabilitySource

GitHub CopilotJul 30, 2026

GitHub Models is now retired

As of July 30, 2026, GitHub Models is now retired. The playground, model catalog, inference API, and bring your own key (BYOK) are no longer available to any customer, including existing customers with active usage. This completes the retirement we announced on July 1 .

DeprecationGovernanceObservabilityDeveloper toolsSource

GitHub CopilotJul 30, 2026

Limit remote control to managed devices

Enterprises and organizations can now restrict which devices are eligible to host remotely controlled Copilot sessions , giving administrators fine-grained control over where remote control access is permitted.

UpdateGovernanceSecurityObservabilitySource

GitHub CopilotJul 29, 2026

Copilot code review: Agent skills and MCP now generally available

Copilot code review support for agent skills and MCP servers is now generally available for all Copilot Pro, Pro+, Business, and Enterprise users. Previously announced in public preview , these capabilities let you bring your team’s tools, standards, and external context directly into every code review.

GAAI agentsMCPGovernanceSource

GitHub CopilotJul 29, 2026

Default model enablement for Copilot Business and Enterprise

We’re introducing a global default enablement policy for generally available Copilot models on Copilot Business and Copilot Enterprise plans. Instead of requiring admins to manually turn on each new model as it ships, models that become generally available will now be on by default.

GAGovernancePricingCoding agentsSource

GitHub CopilotJul 28, 2026

GitHub Copilot app usage metrics now expand across report rollups

Copilot app usage is now reported across much more of the Copilot usage metrics API. Individual Copilot app activity is now attributed to users in the enterprise-user and organization-user reports. In addition, Copilot app coding activity is now broken out in the feature, model, and language rollups alongside every other Copilot surface.

UpdateObservabilityDeveloper toolsCoding agentsSource

GitHub CopilotJul 28, 2026

GitHub Copilot for JetBrains adds improved OpenTelemetry configuration and model management

This update brings more control and clarity to your GitHub Copilot for JetBrains workflows. You can now connect MCP servers and custom agents in Claude agent flows, tune telemetry and token settings for advanced scenarios, and work with a cleaner chat and model-selection experience.

UpdateAI agentsLLMsMCPSource

GitHub CopilotJul 28, 2026

Grok 4.5 is now available in GitHub Copilot

Grok 4.5, xAI’s latest reasoning model, is now rolling out in GitHub Copilot. It is designed for fast, agentic coding and complex multi-step workflows, with a context window of up to 500,000 tokens, support for text and image inputs, as well as low, medium, and high reasoning effort.

UpdateAI agentsGovernancePricingSource

GitHub CopilotJul 27, 2026

Enterprise managed settings in the GitHub Copilot app and Copilot cloud agent

You can now govern the GitHub Copilot app and Copilot cloud agent with enterprise managed settings, the same centrally managed policies you use to control Copilot across your enterprise.

UpdateAI agentsGovernancePricingSource

GitHub CopilotJul 27, 2026

Manage GitHub Copilot app access with a dedicated policy

The GitHub Copilot app now has its own policy, so you can control who has access to it at the enterprise and organization levels. Until now, access to the Copilot app depended on your GitHub Copilot CLI policy being enabled. From several conversations with customers, we understand that many of you want to manage each client independently.

UpdateAI agentsGovernanceDeveloper toolsSource

GitHub CopilotJul 24, 2026

Claude Opus 5 is now available in GitHub Copilot

Claude Opus 5, Anthropic’s newest Opus model, is now available in GitHub Copilot. It is designed for complex, long-running coding tasks that require careful reasoning, effective tool use, and reliable execution across multiple steps.

UpdateAI agentsLLMsSecuritySource

GitHub CopilotJul 23, 2026

Agent automation controls in GitHub Issues in public preview

Agent automations increasingly label, type, assign, and close issues for you. GitHub Issues now shows the reason behind each change and lets you review them before they’re applied, so you decide how much to automate and when to stay in the loop.

PreviewAI agentsDeveloper toolsSource

GitHub CopilotJul 23, 2026

Copilot cloud agent for Linear is now generally available

You can now assign issues in Linear to Copilot cloud agent , our asynchronous, autonomous background agent. When you assign a Linear issue to Copilot, it will: Analyze the issue contents and open a draft pull request. Work independently in its own ephemeral development environment, powered by GitHub Actions.

GAAI agentsStreamingSecuritySource

GitHub CopilotJul 23, 2026

GitHub MCP Server supports the next MCP specification

The MCP protocol is going stateless on 28th July 2026, and the GitHub MCP Server supports the latest spec ahead of the official release. What’s changing The new stateless core means MCP deployments are now easy to scale. Extensions unlock innovation (e.g., MCP apps and Enterprise Managed Auth, both of which are already supported by VS Code).

BetaMCPSecurityDeveloper toolsSource

GitHub CopilotJul 23, 2026

GitHub Mobile: Fix failing Actions checks with Copilot cloud agent

Now when a GitHub Actions check fails on your pull request, you can ask Copilot coding agent to investigate and directly fix the problem from GitHub Mobile. From the failed check, select Fix with Copilot to start the process. Copilot opens a new pull request on top of your existing pull request, analyzes the failing check, and attempts to implement a fix.

UpdateAI agentsGovernanceObservabilitySource

GitHub CopilotJul 22, 2026

New Copilot usage metrics impact dashboard

We’ve released a new Copilot metrics impact dashboard for enterprise administrators and organization owners. This dashboard helps you tell a deeper Copilot impact story by sharing not just who is active, but how they’re using Copilot.

UpdateAI agentsBIObservabilitySource

GitHub CopilotJul 21, 2026

Gemini 3.6 Flash is now available in GitHub Copilot

Gemini 3.6 Flash, Google’s latest Flash model, is now rolling out in GitHub Copilot. It is designed for web and app development, coding, and longer-horizon agentic tasks. It has configurable reasoning effort and support for parallel tool use across complex workflows.

PreviewAI agentsLLMsGovernanceSource

GitHub CopilotJul 20, 2026

AI credit pools for cost centers in the billing UI

You can now manage a cost center’s AI credit pool directly in the billing UI where you create and edit cost centers. Previously, you could only manage this through the GitHub REST API. This feature is available for Copilot Business and Copilot Enterprise on GitHub Enterprise Cloud. Toggle the AI credit pool on when you create or edit a cost center.

PricingPricingObservabilityDeveloper toolsSource

GitHub CopilotJul 20, 2026

Copilot users can now see AI credits used per billing cycle

Copilot Business and Copilot Enterprise users can now see how many AI credits they’ve used this billing cycle, even without an individual budget. Find this on your GitHub Copilot usage page in your GitHub settings. Previously, the page showed usage only as a percentage of a budget.

PricingPricingObservabilityCoding agentsSource

GitHub CopilotJul 17, 2026

Copilot code review: Customization and configurability improvements

Copilot code review now utilizes a firewall, custom setup steps, and independent runner configurations. It now reads custom instructions from the head branch to allow for easy testing and validation of custom instructions. These changes give administrators and developers more control over how Copilot code review runs in their environment.

UpdateAI agentsLLMsCoding agentsSource

GitHub CopilotJul 17, 2026

GitHub Copilot app now available in the usage metrics API

The Copilot usage metrics API now reports the GitHub Copilot app usage in the enterprise and organization 1-day and 28-day reports. This gives enterprise and organization admins visibility into the app’s activity alongside the IDE, chat, code review, and coding agent metrics they already retrieve.

UpdateAI agentsObservabilityDeveloper toolsSource

GitHub CopilotJul 17, 2026

GitHub Mobile: Fix pull request comments with Copilot cloud agent

You can now select Fix with Copilot directly from Copilot code review pull request comments in GitHub Mobile. The button is available both on the pull request’s main view and on individual review comments, giving you multilpe ways to start a Copilot-assisted fix.

UpdateAI agentsObservabilityCoding agentsSource

GitHub CopilotJul 17, 2026

Repository-level GitHub Copilot usage metrics generally available

The Copilot usage metrics REST API now reports repository-level activity. Two new endpoints return a daily, per-repository breakdown of pull request activity for Copilot coding agent and Copilot code review. They do this for both enterprise and organization reports.

GAAI agentsGovernanceSecuritySource

GitHub CopilotJul 15, 2026

GitHub Copilot in Visual Studio , June update

June 2026 is about visibility and trust with a clearer view of your GitHub Copilot usage, a new trust layer for MCP servers, and the first C++ scenarios for the modernization agent reaching general availability. Highlights Here’s what’s new with GitHub Copilot in Visual Studio 2026.

GAAI agentsMCPStreamingSource

GitHub CopilotJul 14, 2026

GitHub Copilot for JetBrains expands BYOK capabilities

This update brings major advances in customization and model provider flexibility to all tiers of GitHub Copilot for JetBrains IDEs. With richer plugin and provider experiences, improved conversational interactions, and stronger reliability, teams can more confidently tailor Copilot to how they build software.

PreviewAI agentsLLMsPricingSource

GitHub CopilotJul 14, 2026

Security reviews now available in the GitHub Copilot app

You can now run a security review on your in-flight code changes directly from the GitHub Copilot app. The /security-review slash command is shipping in public preview, bringing the same AI-driven vulnerability scanning already available in Copilot CLI into your everyday coding workflow.

PreviewStreamingSecurityObservabilitySource

GitHub CopilotJul 10, 2026

Agentic autofix for code scanning alerts in public preview

Agentic autofix is now in public preview for all code scanning alerts. It remediates alerts generated by CodeQL and third-party scanning tools by working across your codebase the way a developer would, it explores relevant files, proposes a fix, and reruns the original analysis to confirm the fix closes the alert before opening a pull request for your...

PreviewAI agentsSecurityCoding agentsSource

GitHub CopilotJul 10, 2026

GitHub Mobile: Improved filters and sorting for Copilot sessions

GitHub Mobile now includes improved filters and sorting for Copilot sessions, making it easier to find the right session as your session list grows. You can now narrow your session list using lightweight filters designed for mobile, including: Active (non-archived) Status Repository Type Agent Sort These controls help you quickly find sessions that are...

UpdateAI agentsObservabilityCoding agentsSource

GitHub CopilotJul 9, 2026

Ask Copilot for a repository overview

You can now ask GitHub Copilot for a high-level overview of any repository you’re exploring for the first time. When you visit the home page of a repository you haven’t contributed to before on github.com, Copilot offers to generate an overview for you.

UpdatePricingObservabilityCoding agentsSource

GitHub CopilotJul 9, 2026

OpenAI’s GPT-5.6 Sol, Terra, and Luna are now available in GitHub Copilot

OpenAI’s GPT-5.6 family is now rolling out in GitHub Copilot. GPT-5.6 comes in three variants, Sol, Terra, and Luna, so you can match the model to the job, whether that’s reasoning over a large codebase, everyday agentic coding, or fast, cost-efficient assistance. GPT-5.6 Sol: The highest reasoning ceiling in the family.

UpdateAI agentsLLMsGovernanceSource

GitHub CopilotJul 8, 2026

Add review cycles and time to adoption phases in the usage API

The Copilot usage metrics API now reports two additional code-review velocity metrics for each AI adoption phase, extending the adoption phase cohorts fields available in the enterprise and organization reports.

UpdateStreamingObservabilityDeveloper toolsSource

GitHub CopilotJul 8, 2026

Codex as agent provider and agentic enhancements in JetBrains IDEs

This update brings Codex as a new agent provider in public preview, expands the Customizations editor with Hooks support and richer MCP server management, and introduces custom model support configured by GitHub Copilot Business and Enterprise administrators.

GAAI agentsLLMsMCPSource

GitHub CopilotJul 8, 2026

Deploy managed Copilot settings via MDM in VS Code and CLI

Enterprise administrators can now deliver managed GitHub Copilot settings directly to devices through native mobile device management (MDM) and file-based configuration, in addition to the existing server-managed channel. This is generally available for GitHub Copilot CLI and VS Code.

GAGovernanceDeveloper toolsCoding agentsSource

GitHub CopilotJul 8, 2026

Enterprise-managed OpenTelemetry export for VS Code and CLI

Organizations can now mandate where GitHub Copilot sends OpenTelemetry (OTel) data, so telemetry flows to an approved collector without each developer setting OTEL_* environment variables.

UpdateAI agentsGovernanceSecuritySource

GitHub CopilotJul 8, 2026

GitHub Copilot in Visual Studio Code, June 2026 releases

This changelog covers VS Code v1.123 through v1.127 , shipped throughout June and early July 2026. The latest VS Code releases build on the Copilot experience developers use every day, making it easier to manage agent work, understand usage, choose the right models, and stay in the flow.

GAAI agentsSecurityPricingSource

GitHub CopilotJul 8, 2026

GitHub Mobile: Fix merge conflicts with Copilot cloud agent

GitHub Mobile now supports fixing pull request merge conflicts with Copilot cloud agent, making it easier to unblock pull requests while you’re on the go. When a pull request has merge conflicts, you can now start the Copilot workflow directly from the pull request merge box on mobile.

UpdateAI agentsStreamingObservabilitySource

GitHub CopilotJul 8, 2026

GitHub Mobile: Live notifications for Copilot CLI sessions

Live coding agent notifications on GitHub Mobile now support remote Copilot CLI sessions, making it easier to stay connected to agent work that starts outside of GitHub Mobile.

UpdateAI agentsStreamingObservabilitySource

GitHub CopilotJul 8, 2026

Kimi K2.7 now available for Copilot Business and Enterprise

On July 1, 2026, we announced Kimi K2.7 would be available to Copilot Pro, Pro+, and Max plans . The model is now additionally available on Copilot Business and Copilot Enterprise plans. Kimi K2.7 Code, an open-weight model, is now generally available in GitHub Copilot.

GAGovernanceSecurityPricingSource

GitHub CopilotJul 7, 2026

Copilot Billing Preview app will be retired on August 3

The Copilot Billing Preview app will be retired on August 3, 2026. If you use it to review your GitHub Copilot spend, you can get even greater visibility directly in your GitHub billing settings. The app was built to help you understand your bill as Copilot moved to usage-based billing.

DeprecationPricingObservabilityDeveloper toolsSource

GitHub CopilotJul 7, 2026

GitHub Copilot app available to all

The GitHub Copilot app is now available on every Copilot plan. Sign in with your GitHub account to start agent-driven development from your desktop. Available on macOS, Windows, and Linux platforms. With this release: Every Copilot plan is supported: This includes users on Copilot Free and GitHub Education.

UpdateAI agentsGovernancePricingSource

GitHub CopilotJul 7, 2026

Per-user budgets for cost centers in the billing UI

Enterprise admins can now create cost center user-level budgets directly in the billing UI where you manage cost centers and budgets. This feature is available for GitHub Enterprise Cloud. This gives you the same per-user AI credit budget controls that were previously only available through the REST API.

PricingPricingObservabilityDeveloper toolsSource

GitHub CopilotJul 2, 2026

Copilot CLI no longer needs a personal access token in GitHub Actions

You can now run GitHub Copilot CLI in GitHub Actions using the built-in GITHUB_TOKEN . This means that you no longer need to create and store a personal access token (PAT), eliminating the operational and security risks of managing long-lived PATs for automations at scale.

UpdateGovernanceSecurityPricingSource

GitHub CopilotJul 2, 2026

Copilot agent session streaming is now in public preview

GitHub Enterprise Cloud customers with enterprise managed users can now access GitHub Copilot agent session data across all Copilot clients, including: Cloud agents operating on github.com and data resident deployments on ghe.com GitHub Copilot CLI Visual Studio Code Visual Studio Partner IDEs, such as those provided by JetBrains and Eclipse This gives you...

PreviewAI agentsStreamingObservabilitySource

GitHub CopilotJul 2, 2026

Cost centers now support AI credit pools

You can now cap how much of your enterprise’s monthly included AI credits a cost center can use. This is available through the REST API today. Management in the cost center settings UI is coming soon. Editor’s note (July 1, 2026): Clarified that this currently only applies to the REST API.

PricingPricingDeveloper toolsCoding agentsSource

GitHub CopilotJul 2, 2026

Improved accuracy and coverage in Copilot usage metrics reports

We’ve made three improvements to the Copilot usage metrics API that make its reports more complete and accurate: GitHub Copilot CLI now reports suggested lines of code, users seen only through server-side telemetry now have their IDE identified, and AI credit consumption is now attributed more completely.

UpdatePricingObservabilityDeveloper toolsSource

GitHub CopilotJul 2, 2026

Upcoming deprecation of Gemini 2.5 Pro and Gemini 3 Flash

We will deprecate Gemini 2.5 Pro and Gemini 3 Flash across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions) on July 31st, 2026: Model Deprecation date Suggested alternative Gemini 2.5 Pro 7-31-2026 Gemini 3.1 Pro Gemini 3 Flash 7-31-2026 Gemini 3.5 Flash Please update your workflows and...

DeprecationAI agentsLLMsGovernanceSource

GitHub CopilotJul 1, 2026

Browser tools for GitHub Copilot in VS Code are generally available

Editor’s note (July 1, 2026): Added more detail about which permissions stay under your control and the existing network domain controls. Browser tools for GitHub Copilot in VS Code are now generally available. Agents can now drive a real browser, navigate live web apps, and feed what they find back into the chat.

GAAI agentsSecurityObservabilitySource

GitHub CopilotJul 1, 2026

Copilot CLI auto model selection routes based on task

Editor’s note (July 1, 2026): Updated the premium request costs to reference AI credits. GitHub Copilot auto model selection now routes to the best model for your task in Copilot CLI, using utilization and model health metrics for a high quality, reliable, and token-efficient experience.

UpdateLLMsStreamingGovernanceSource

GitHub CopilotJul 1, 2026

Copilot vision is generally available

Copilot vision is now generally available. You can attach images and PDFs directly to your chat prompts so Copilot can reason about what it sees alongside your code.

GAAI agentsGovernancePricingSource

GitHub CopilotJul 1, 2026

Enterprise managed-settings.json is generally available

GitHub Enterprise Cloud customers can configure AI standards through a managed-settings.json file maintained in a .github-private repository in a selected organization. This allows the enterprise to define new governance and extensibility flows that apply to Copilot clients such as VS Code or Copilot CLI.

GAGovernanceSecurityDeveloper toolsSource

GitHub CopilotJul 1, 2026

Enterprises can default to auto model selection

Enterprise administrators can now set model to auto in the enterprise managed-settings.json to make Copilot auto model selection the default for new conversations. Add auto to .github-private/.github/copilot/managed-settings.json in your source organization for enterprise governance so new conversations start with Copilot auto model selection by default.

UpdateAI agentsGovernanceSecuritySource

GitHub CopilotJul 1, 2026

GitHub Models is being fully retired on July 30, 2026

In June, we announced that we are retiring GitHub Models and closed it to new customers. We’re now sharing the timeline for the next step: GitHub Models will be fully retired on July 30, 2026. After that date, GitHub Models, including the playground, model catalog, inference API, and bring your own key (BYOK), will no longer be available to any customer.

DeprecationGovernanceObservabilityDeveloper toolsSource

GitHub CopilotJul 1, 2026

Kimi K2.7 Code is generally available in GitHub Copilot

Kimi K2.7 Code, an open-weight model, is now generally available in GitHub Copilot. This is the first open-weight model offered as a selectable option in the Copilot model picker, giving you more choice and a lower-cost option for your coding workflows. Kimi K2.7 Code is hosted by GitHub on Microsoft Azure.

GAAI agentsGovernancePricingSource

GitHub CopilotJul 1, 2026

New C++ language server config skill for Copilot CLI

The Microsoft C++ Language Server is now available as a plugin on the Copilot Plugins marketplace. It includes a new built-in setup skill that helps automate project setup, making it easier to generate and maintain the compile_commands.json file the language server needs to understand your code.

UpdateDeveloper toolsCoding agentsSource

GitHub CopilotJul 1, 2026

Set AI credit session limits in Copilot CLI and SDK

You can now set AI credit session limits in Copilot CLI and the GitHub Copilot SDK to cap the amount an agent spends in a session. This is especially useful for automation, where no one is actively monitoring the agent’s work.

PricingAI agentsPricingObservabilitySource

GitHub Advanced Security18

GitHub Advanced SecurityJul 31, 2026

Restricting npm bypass-2FA granular access tokens

npm granular access tokens (GATs) configured to bypass 2FA can no longer perform sensitive account, org, and package management actions. These now require an interactive 2FA challenge, closing one of the largest credential-based attack surfaces on the registry. This only impacts npm granular access tokens.

UpdateDeveloper toolsSource

GitHub Advanced SecurityJul 29, 2026

CodeQL 2.26.1 improves analysis accuracy and framework coverage

CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.1 , which improves framework coverage for Go, Java/Kotlin, and JavaScript/TypeScript, and reduces false positives in Rust analysis.

UpdateSQLSecurityObservabilitySource

GitHub Advanced SecurityJul 28, 2026

Dependabot alerts on malicious packages across more ecosystems

The GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, significantly expanding the breadth of malware data available to you through Dependabot alerts.

UpdateSecurityData integrationSource

GitHub Advanced SecurityJul 28, 2026

npm publish-time malware scanning and dual-use metadata

As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time . This changelog covers what publishers can expect and a new metadata requirement for dual-use content.

UpdateGovernanceSecurityObservabilitySource

GitHub Advanced SecurityJul 20, 2026

GitHub Code Quality is now generally available

GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team. It solves an emerging challenge for software development: AI accelerates code output, and Code Quality helps teams ship code they trust.

GASecurityPricingBISource

GitHub Advanced SecurityJul 15, 2026

Improvements to secret scanning and public monitoring

This week, we’re rolling out several improvements to secret scanning and public monitoring: Resend is now a GitHub secret scanning partner. Secret scanning now detects new secret types from APIclub and Resend. Secret scanning now blocks VolcEngine secrets with push protection by default.

UpdateSecurityObservabilitySource

GitHub Advanced SecurityJul 14, 2026

Code scanning shows AI security detections on pull requests

GitHub code scanning now surfaces AI-powered security detections directly on pull requests, expanding vulnerability coverage to languages and frameworks not currently supported by CodeQL. These detections help teams identify and address potential issues in parts of the codebase that previously had no native scanning coverage, all before code is merged.

UpdateGovernanceSecuritySource

GitHub Advanced SecurityJul 14, 2026

Dependabot version updates introduce default package cooldown

Dependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request. This cooldown is now the default and requires no configuration.

UpdateSecurityObservabilitySource

GitHub Advanced SecurityJul 13, 2026

GitHub Code Quality license estimate in public preview

You can now see the number of active committers on repositories using GitHub Code Quality across your enterprise, giving you an estimate of your Code Quality license cost before it becomes a paid product on July 20, 2026. Code Quality is free during the public preview, so this usage isn’t billed today.

PreviewPricingDeveloper toolsCoding agentsSource

GitHub Advanced SecurityJul 13, 2026

Manage secret scanning custom patterns via REST API

Starting today, security teams can create, edit, and manage secret scanning custom patterns with the REST API. What’s new The following endpoints are generally available: GET .../secret-scanning/custom-patterns list patterns POST .../secret-scanning/custom-patterns create patterns PATCH .../secret-scanning/custom-patterns/{id} update patterns DELETE...

GASecurityObservabilityDeveloper toolsSource

GitHub Advanced SecurityJul 10, 2026

Clearer names for secret scanning detector types

To make secret scanning easier to understand, we’re updating the names we use for our detector types to better reflect how each one finds secrets. This is a naming change only; detection behavior is exactly the same.

UpdateSecurityObservabilityDeveloper toolsSource

GitHub Advanced SecurityJul 10, 2026

CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection

CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.0 , which adds support for Kotlin 2.4.0, introduces a JavaScript and TypeScript query for system prompt injection, and improves analysis accuracy across multiple languages.

UpdateSQLStreamingSecuritySource

GitHub Advanced SecurityJul 9, 2026

Organization-level targeting for GitHub Code Quality

Organization owners can now target a subset of repositories when enabling or disabling GitHub Code Quality, rather than applying it to every repository at once. This gives you more granular control on where you enable or disable Code Quality across your organization.

PreviewPricingObservabilitySource

GitHub Advanced SecurityJul 8, 2026

Innersource security advisories are generally available

GitHub Advanced Security enterprise customers can now publish internal security advisories. Innersource advisories work similarly to GitHub’s open source advisories, but their visibility is restricted to repositories owned by the enterprise.

GASecurityObservabilityDeveloper toolsSource

GitHub Advanced SecurityJul 8, 2026

npm install-time security and GAT bypass2fa deprecation

npm v12 is now generally available and tagged latest . This major release turns on the install-time security defaults we announced in June , and it’s also where we begin a deprecation of the most sensitive uses of 2FA-bypass granular access tokens (GATs).

DeprecationSecuritySource

GitHub Advanced SecurityJul 7, 2026

Secret scanning extended metadata and multipart validation

To help you understand ownership and impact of a leaked secret, GitHub secret scanning surfaces enriched metadata for supported secret types. Extended metadata checks are now generally available, including support for multipart validators with supplementary metadata. What’s new?

GASecurityDeveloper toolsPerformanceSource

GitHub Advanced SecurityJul 2, 2026

Secret scanning public monitoring for enterprises

GitHub is committed to empowering the developer community by helping organizations recognize and address the risks of secret leaks wherever they happen. We believe every enterprise should know the moment its secrets leak in public, no matter where it happens on GitHub.

PreviewSecurityPricingObservabilitySource

GitHub Advanced SecurityJul 1, 2026

Secret scanning adds validators for Asana, IBM, and MessageBird

Secret scanning now runs validity checks on Asana, IBM, and MessageBird secrets so you can tell whether a leaked credential is still active. Validity checks added These patterns now support validity checks.

UpdateSecurityObservabilitySource

GitHub platform11

GitHub platformJul 30, 2026

Stacked pull requests are now in public preview

Stacked pull requests break large changes into small, reviewable pull requests. They’re an ordered series of pull requests that each represent focused layers of your change. With stacks, you can independently review and check each pull request, then merge everything together in one click.

PreviewAI agentsSQLDeveloper toolsSource

GitHub platformJul 23, 2026

Multi-select fields for Projects and Issues in public preview

You can now create multi-select fields in Projects and Issue fields so a single field can hold more than one value. Tag an item with everything it relates to (e.g., multiple teams, modules, or categories) instead of picking just one. Issue Fields Projects Fields To try it, create or edit a field and choose the multi-select type.

PreviewGovernanceObservabilitySource

GitHub platformJul 22, 2026

Upcoming GHES change impacting uploading support bundles

We want to give you advance notice of an upcoming security change that may affect GitHub Enterprise Server (GHES) support bundle uploads. Beginning August 18, 2026, GitHub will start rejecting command-line support bundle uploads from older GHES appliances that have not been updated with the required security patches.

UpdateSecurityObservabilitySource

GitHub platformJul 16, 2026

Advanced search for Projects is generally available

The filter bar in GitHub Projects views now supports advanced search, so you can build the exact view you need with logical AND and OR instead of maintaining a separate view for every question. Just type an expression using OR , AND in the filter bar of any project view.

GAGovernanceObservabilityDeveloper toolsSource

GitHub platformJul 16, 2026

REST API endpoints for Visual Studio Subscription management

GitHub Enterprise Cloud admins can now use the following REST API endpoints to programmatically manage Visual Studio Subscription (VSS) assignments: GET /enterprises/{enterprise}/visual-studio-subscriptions : Returns all VSS assignments for an enterprise, including whether each assignment has been matched to a GitHub user.

UpdateSecurityObservabilityDeveloper toolsSource

GitHub platformJul 16, 2026

Repository admins can archive pull requests

Repository admins can now archive pull requests to remove them from public view without permanently deleting them. When a pull request is archived, it is closed and locked. Pull requests can be archived in bulk or on an individual basis. Archived pull requests are only visible to repository admins, and non-admin visitors to the URL receive a 404 response.

UpdateGovernanceObservabilitySource

GitHub platformJul 13, 2026

Separate SSO and Organizations pages in Settings

We’ve separated the combined SSO & Organizations page in your user settings into two distinct pages: SSO and Organizations . This update makes it easier to find and manage these settings independently, with a clearer experience in your account settings.

UpdateSecurityObservabilitySource

GitHub platformJul 10, 2026

Per-user states for multi-user budgets in the REST API

You can now retrieve every user’s progress against a multi-user budget from a single REST API endpoint. This makes it much faster to find who is close to their limit across a large enterprise. Previously, you had to make one API call per user to check per-user consumption, and you couldn’t filter by how much of the budget someone had used.

UpdatePricingDeveloper toolsPerformanceSource

GitHub platformJul 9, 2026

New pull requests dashboard is now generally available

The refreshed pull requests dashboard is now generally available at github.com/pulls . It gives you a single home to track, prioritize, and act on the pull requests that need your attention, whether you’re an individual contributor or a manager working across many teams and projects. This experience was previously in public preview.

GABIDeveloper toolsSource

GitHub platformJul 7, 2026

Restrict who can dismiss reviews in rulesets

You can now restrict who can dismiss pull request reviews directly in GitHub repository rulesets. This capability is generally available and gives you precise control over who can clear an approval before changes merge. The setting lives alongside the other review options in the Require a pull request before merging rule.

GAObservabilityDeveloper toolsSource

GitHub platformJul 2, 2026

Issue fields are now generally available

Issue fields are now generally available for all GitHub organizations on Free, Team, Enterprise, and GitHub Enterprise Cloud with data residency plans and will ship in GitHub Enterprise Server 3.23.

GAMCPPricingDeveloper toolsSource

GitHub Actions4

GitHub ActionsJul 30, 2026

Reference same-repository actions with self-repository syntax

You can now reference an action or reusable workflow that lives in the same repository using the new self-repository syntax. A uses: value that starts with $/ resolves to your workflow’s own repository at the exact commit that is running, with no checkout required.

UpdateGovernanceObservabilityDeveloper toolsSource

GitHub ActionsJul 28, 2026

GitHub Actions holds potentially malicious workflows for approval

Recent supply chain attacks use compromised GitHub credentials to push malicious GitHub Actions workflows that steal CI/CD credentials and carry out additional attacks. To help protect public repositories from these attacks, GitHub Actions now holds certain workflow runs for approval before they start.

UpdateObservabilityDeveloper toolsSource

GitHub ActionsJul 16, 2026

Xcode 27 runner image now in public preview

You can now build and test your Apple applications against Xcode 27 on GitHub-hosted macOS runners. This is now available in public preview. With early access to the latest Xcode toolchain and Apple SDKs, you can validate your apps against the newest tools, catch compatibility issues sooner, and keep your CI/CD pipelines current.

PreviewData integrationObservabilityDeveloper toolsSource

GitHub ActionsJul 8, 2026

setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes

The actions/setup-java v5.5.0 release adds cryptographic signature verification for downloaded JDKs, support for a new distribution, and several quality-of-life improvements for Maven users. Here’s what changed since v5.4.0.

UpdateObservabilitySource