GitHub new features in September 2026

Everything GitHub shipped in September 2026: 67 releases, grouped by product, each linked to GitHub's release notes.

August 2026

GA 21Preview 10Deprecation 6Update 30

GitHub Copilot32

GitHub CopilotSep 23, 2026

Local sandboxing in the GitHub Copilot app

Local sandboxing helps reduce the potential impact of unintended commands by limiting access to files, network resources, and credentials on your machine. In the GitHub Copilot app, you configure it per project for local repository and working tree sessions.

UpdateUnverifiedGovernanceDeveloper toolsCoding agentsSource

GitHub CopilotSep 23, 2026

More ways to request and configure Copilot code reviews

GitHub Copilot code review now offers additional personal configurations to an expanded set of Copilot plans and an enterprise-level default setting. These improvements are now generally available: A dedicated personal settings page for automatic review and your default review effort An enterprise-wide default review effort setting for organization-owned...

GAUnverifiedSecurityPricingDeveloper toolsSource

GitHub CopilotSep 23, 2026

New features and improvements in Copilot for JetBrains

GitHub Copilot for JetBrains 1.18.0 brings AI-assisted tool approvals, more control over agent conversations, and shared skills and instructions for your organization. You can also review plans with the Codex agent and manage MCP tools with persistent controls.

PreviewUnverifiedAI agentsMCPPricingSource

GitHub CopilotSep 23, 2026

OpenTelemetry in the GitHub Copilot app

Understand how Copilot agents perform and interact with models and tools. The GitHub Copilot app now supports OpenTelemetry (OTel) configuration through enterprise-managed settings. OTel is an open source observability framework. Administrators can use it to send agent activity data to their organization’s compatible monitoring tools.

UpdateUnverifiedAI agentsObservabilityCoding agentsSource

GitHub CopilotSep 22, 2026

Claude Opus 5.5 is now available in GitHub Copilot

Claude Opus 5.5, Anthropic’s newest Opus model, is now available in GitHub Copilot. You can use it for agentic coding, long-running agentic tasks, and knowledge work. In early testing, Opus 5.5 resolved tasks comparably to Claude Opus 5 while using significantly fewer steps and tokens. It also quickly recovered from errors in multistep tasks.

UpdateAI agentsLLMsGovernanceSource

GitHub CopilotSep 22, 2026

Faster C++ code intelligence with whole codebase indexing

C++ code intelligence in GitHub Copilot CLI is now faster with support for whole codebase indexing. C++ repositories can contain millions of lines of code across deeply connected source files and headers.

UpdateUnverifiedObservabilityDeveloper toolsCoding agentsSource

GitHub CopilotSep 22, 2026

OpenAI’s GPT-6 Sol and GPT-6 Luna now available

OpenAI’s GPT-6 family is expanding in GitHub Copilot with two additional models: GPT-6 Sol, and GPT-6 Luna. Joining the previously released GPT-6 Astra, these new options let you select the model that best fits your task, whether that’s everyday agentic coding or fast, cost-efficient assistance.

UpdateAI agentsLLMsGovernanceSource

GitHub CopilotSep 21, 2026

Grok 4.7 is now available in GitHub Copilot

Grok 4.7, xAI’s latest reasoning model, is now rolling out in GitHub Copilot. Building on Grok 4.6, it is designed for agentic coding and complex, multistep workflows. This model is billed at provider list pricing under usage-based billing. See Models and pricing for GitHub Copilot for details.

UpdateAI agentsGovernancePricingSource

GitHub CopilotSep 18, 2026

Copilot code review: An improved review experience

Copilot code review now gives you a clearer view of how a review changes over time, more intelligently auto-resolves its own suggestions, and generates useful commit messages when you accept eligible suggestions in a batch. These updates help you focus on findings that still need attention and make the resulting commits easier to understand.

GAObservabilityCoding agentsSource

GitHub CopilotSep 18, 2026

GitHub Copilot weekly releases , September 14

This week, GitHub Copilot adds new model selection options, code review updates, and Sentry integration in the Copilot app. There are also updates for admins, plus new agent features in VS Code. GitHub Copilot Copilot code review now resolves addressed comments during subsequent reviews, leaving outstanding feedback open.

GAAI agentsGovernancePricingSource

GitHub CopilotSep 18, 2026

Upcoming deprecation of selected GitHub Copilot models in mid-October

We will deprecate the following models across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions) on October 19th, 2026: Model Deprecation date Suggested alternative Gemini 3.7 Flash 2026-10-19 Gemini 3.8 Flash GPT-5.5 2026-10-19 GPT-5.6 Sol GPT-5.4 2026-10-19 GPT-5.6 Sol GPT-5.4 mini 2026-10-19...

DeprecationAI agentsLLMsGovernanceSource

GitHub CopilotSep 17, 2026

Agentic CLI customizations now in the usage metrics API

GitHub Copilot expands existing CLI report coverage with agentic activity metrics for skills, custom agents, Model Context Protocol (MCP) servers, slash commands, and plugins. What’s new The fields appear in enterprise and organization per-user and aggregate 1-day reports, per-user 28-day reports, and the day_totals entries in aggregate 28-day reports.

UpdateAI agentsMCPObservabilitySource

GitHub CopilotSep 17, 2026

Copilot impact dashboard now shows feature engagement

The Copilot impact dashboard now shows how many active users regularly use key Copilot features. Enterprise administrators can quickly see which experiences are widely adopted and which may need more enablement.

UpdateAI agentsBIDeveloper toolsSource

GitHub CopilotSep 16, 2026

Copilot budget increase requests are generally available

Previously, when a member used all the Copilot AI credits available to them, they were blocked from Copilot features that consume credits. This release adds a flow for them to request more budget the moment they hit the limit. You can approve, adjust, or deny that request without leaving your settings.

GAPricingObservabilityCoding agentsSource

GitHub CopilotSep 15, 2026

GitHub Copilot suggests custom properties definitions

GitHub Copilot can now suggest allowed values when you create a custom property for repositories in your organization. This feature is in public preview for GitHub Copilot Business and Copilot Enterprise plans.

PreviewGovernancePricingCoding agentsSource

GitHub CopilotSep 14, 2026

Configure cost and quality in Copilot auto model selection

GitHub Copilot auto model selection now offers three tiers: efficiency, balance, and intelligence. Choose the tier that reflects how you want auto to weigh cost, quality, and response time for each prompt. Copilot will then optimize accordingly. Efficiency prioritizes keeping costs low and suits fast, straightforward tasks.

UpdatePricingObservabilityDeveloper toolsSource

GitHub CopilotSep 11, 2026

Add VS Code Agents to Copilot usage metrics

GitHub Copilot usage metrics reports now include generally available metrics for activity in the dedicated VS Code Agents window, helping you measure adoption and engagement across enterprises and organizations.

GAAI agentsPricingObservabilitySource

GitHub CopilotSep 11, 2026

Auto-resolution and analysis updates in Copilot code review

Copilot code review now resolves its own comments once you address them and writes smart commit messages for you when you apply its code suggestions. Behind the scenes, Copilot now uses a broader set of shell tools to validate the code it reviews, and an ensemble of agents produce a more thorough review within the Lite effort level.

UpdateAI agentsCoding agentsSource

GitHub CopilotSep 10, 2026

GitHub Copilot weekly releases , September 7

This week, GitHub Copilot introduces Jira integration in Copilot app and adaptive model orchestration with Project HydraFusion in Copilot CLI. We also introduced new agent automation in Visual Studio Code and expanded enterprise controls for Copilot in JetBrains. GitHub Copilot app Turn Jira issues into action.

PreviewAI agentsPricingObservabilitySource

GitHub CopilotSep 10, 2026

MAI-Code-1-Flash deprecated

We have deprecated MAI-Code-1-Flash across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions) today, September 10, 2026. Model Deprecation date Suggested alternative MAI-Code-1-Flash 2026-09-10 MAI-Code-1.1-Flash Please update your workflows and integrations to use a supported model.

DeprecationAI agentsGovernanceObservabilitySource

GitHub CopilotSep 9, 2026

Enterprise managed permissions for GitHub Copilot agent operations

If you administer GitHub Copilot Business or GitHub Copilot Enterprise, you can now centrally control which agent operations are blocked, require human approval, or can proceed without a prompt. Managed permissions cover shell commands, file reads and edits, and network domains.

GAAI agentsGovernanceSecuritySource

GitHub CopilotSep 9, 2026

Enterprise-managed sandbox in Copilot for JetBrains

This update brings support for enterprise-managed sandbox policies, cross-file cursor jumps for next edit suggestions, global project context in chat, enterprise policy diagnostics, and a new connection between terminal Copilot CLI sessions and JetBrains IDEs.

PreviewAI agentsMCPGovernanceSource

GitHub CopilotSep 4, 2026

GPT-6 Astra is generally available in GitHub Copilot

GPT-6 Astra from OpenAI is now available in GitHub Copilot. OpenAI’s latest general-purpose model, GPT-6 Astra, is designed for long-horizon, autonomous coding and agentic tasks.

GAAI agentsLLMsGovernanceSource

GitHub CopilotSep 4, 2026

GitHub Copilot weekly releases , August 31

This week, GitHub Copilot expands model choice and content protections, while VS Code adds new ways to manage agent sessions and get pull requests merge-ready. GitHub Copilot, general Claude Fable 5.1 is available to Copilot Pro+, Max, Business, and Enterprise users. Gemini 3.8 Flash is rolling out to Copilot Pro, Pro+, Max, Business, and Enterprise users.

GAAI agentsLLMsObservabilitySource

GitHub CopilotSep 3, 2026

Gemini 3.8 Flash is now available in GitHub Copilot

Gemini 3.8 Flash, Google’s latest Flash model, is now available in GitHub Copilot. In our early testing, Gemini 3.8 Flash performed strongly on complex terminal-based coding tasks and demonstrated rigorous validation and persistent recovery from actionable failures.

UpdateAI agentsLLMsGovernanceSource

GitHub CopilotSep 3, 2026

Reopening Copilot Business and Enterprise signups

We’re gradually reopening sign-ups for Copilot Business and Copilot Enterprise customers paying by credit card or PayPal over the next couple of weeks. If you’ve been waiting to get started with Copilot, select the plan that fits your needs. If your preferred option isn’t available yet, check back soon.

UpdatePricingCoding agentsSource

GitHub CopilotSep 3, 2026

Upcoming deprecation of selected GitHub Copilot models

We will deprecate the following models across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions) on October 2nd, 2026: Model Deprecation date Suggested alternative Gemini 3.5 Flash 2026-10-02 Gemini 3.8 Flash Gemini 3.6 Flash 2026-10-02 Gemini 3.8 Flash Kimi K2.7 Code 2026-10-02 Kimi K3 Claude...

DeprecationAI agentsLLMsGovernanceSource

GitHub CopilotSep 2, 2026

Content exclusions generally available in Copilot app and CLI

The GitHub Copilot app and Copilot CLI now respect content exclusion policies configured by enterprise, organization, and repository administrators. Copilot won’t use excluded files as context, helping you protect sensitive code across agentic workflows. This is available for Copilot Business and Copilot Enterprise customers.

GAAI agentsGovernanceObservabilitySource

GitHub CopilotSep 2, 2026

Enterprise-managed settings support any default model

You can now set your preferred GitHub Copilot model as the default for new conversations through enterprise-managed settings. This lets you choose the default model that best fits your workflows. You can also customize the default by enterprise team, assigning a different default model based on team membership.

GAObservabilityDeveloper toolsCoding agentsSource

GitHub CopilotSep 1, 2026

Claude Fable 5.1 is generally available in GitHub Copilot

Claude Fable 5.1 from Anthropic is now available in GitHub Copilot. The latest model in Anthropic’s Mythos class, Claude Fable 5.1 is designed for long-horizon, autonomous coding and knowledge-work tasks.

GAAI agentsLLMsGovernanceSource

GitHub CopilotSep 1, 2026

Copilot code review can now approve pull requests

Copilot now tells you when a pull request is ready to approve, and admins can authorize it to sign off on approval. The ability for Copilot to approve is off by default and configurable at the enterprise, organization, and repository level. The approval assessments will now appear as a part of the overview comment in every Copilot review.

PreviewPricingDeveloper toolsCoding agentsSource

GitHub CopilotSep 1, 2026

Set an expiration date for individual user budgets

You can now set an optional expiration date on an individual user budget, and GitHub removes the budget on that date. This capability is generally available. The user then falls back to the next budget that applies to them (i.e., their cost center per-user budget or otherwise your universal budget).

GAPricingObservabilityDeveloper toolsSource

GitHub Advanced Security15

GitHub Advanced SecuritySep 22, 2026

Deprecation notice: All-platform CodeQL bundle

Starting with CodeQL CLI 2.27.0 , the all-platform CodeQL bundle (i.e., codeql-bundle.tar.gz and codeql-bundle.tar.zst ), which includes the binaries for all supported platforms up to this release, is marked as deprecated. In mid-March 2027, we will remove the all-platform CodeQL bundle.

DeprecationObservabilityDeveloper toolsSource

GitHub Advanced SecuritySep 22, 2026

Security improvements for SSH

We’re removing several SSH algorithms, adding a new algorithm, and requiring larger RSA SSH keys to improve security. The changes are as follows: We’re removing the ability to use RSA keys using SHA-1 in SSH (i.e., the ssh-rsa signature type, including ssh-rsa-cert-v01@openssh.com certificates using SHA-1).

UpdateSecurityRegionsSource

GitHub Advanced SecuritySep 21, 2026

GitHub Enterprise adds credential inventory exports

Enterprise owners can now export a complete inventory of every credential that can access their enterprise (e.g., SSH keys, classic and fine-grained personal access tokens, OAuth App access tokens, and GitHub App user-to-server and installation tokens).

UpdateSecurityPricingObservabilitySource

GitHub Advanced SecuritySep 18, 2026

Manage the code coverage ruleset condition with the REST API

You can now use the generally available REST API to manage the Restrict code coverage repository ruleset option, in addition to the existing UI support. This ruleset lets you enforce a minimum code coverage percentage based on line coverage or set a maximum tolerable coverage drop for a pull request.

GAObservabilityDeveloper toolsSource

GitHub Advanced SecuritySep 18, 2026

Stage-only npm tokens for safer automation

You can now select Read and write (stage only) when creating an npm granular access token. This lets your automated workflows stage package versions for review without giving the token permission to publish new versions directly to the npm registry. Your workflow uses npm stage publish to submit a version.

UpdateGovernanceSecurityDeveloper toolsSource

GitHub Advanced SecuritySep 16, 2026

Code scanning AI Scan no longer requires CodeQL default setup

You can now use AI Scan for pull requests to find security vulnerabilities, even when CodeQL default setup isn’t enabled on a repository. Previously, AI Scan for pull requests only ran on repositories where CodeQL default setup was configured.

PreviewSecurityObservabilitySource

GitHub Advanced SecuritySep 15, 2026

Enforce GitHub Advanced Security configurations

Enterprise administrators can now enforce GitHub Advanced Security configurations across their organizations. This prevents both organization and repository administrators from overriding settings defined at the enterprise level, helping security and compliance teams apply consistent policies across their enterprise.

UpdateGovernanceSecurityObservabilitySource

GitHub Advanced SecuritySep 10, 2026

AI Scan for pull request APIs in public preview

You can now manage GitHub code scanning’s AI Scan for pull request enablement with REST API endpoints at the organization and repository levels. This public preview gives teams a programmatic way to roll out AI-powered security detections for pull requests across select repositories without manually configuring each setting in the GitHub UI.

PreviewSecurityObservabilityDeveloper toolsSource

GitHub Advanced SecuritySep 9, 2026

Block pull requests with exposed secrets from merging

Repository rulesets allow you to easily add scalable protections across your repositories. Starting today, you can use repository rulesets to block pull requests from merging when the pull request introduces secret scanning alerts. What’s new You can enable the new rule require secret scanning alerts are resolved on pull requests for selected repositories.

PreviewSecuritySource

GitHub Advanced SecuritySep 9, 2026

CodeQL 2.27.0 adds support for Linux ARM64

CodeQL 2.27.0 is now available on Linux ARM64, adds a new Rust security query, expanded framework coverage for Java/Kotlin and C#, and analysis accuracy improvements across multiple languages. CodeQL is the static analysis engine behind GitHub code scanning, which helps you find and remediate security issues in your code.

UpdateSQLSecurityDeveloper toolsSource

GitHub Advanced SecuritySep 9, 2026

GitHub Advanced Security expands trial availability

More GitHub Enterprise Cloud customers can now start a self-serve GitHub Advanced Security trial to evaluate GitHub Code Security and GitHub Secret Protection. Eligibility has expanded from enterprises with up to 100 licenses to enterprises with up to 300 licenses.

UpdateSecurityPricingObservabilitySource

GitHub Advanced SecuritySep 9, 2026

Remediate Code Quality findings with agentic autofix

Agentic autofix is now available to help you burn down findings in your code quality backlog. You can select up to 25 standard findings on a page and assign the whole set to Copilot in one action. Copilot starts fixing them agentically on a branch, validates its own changes, then opens a pull request for you to review and merge.

UpdateAI agentsGovernancePricingSource

GitHub Advanced SecuritySep 9, 2026

npm extends recovery-code security holds to all accounts

npm now places a temporary 72-hour security hold on any account after a successful recovery-code sign-in, extending a protection that previously applied only to high-impact accounts. This change applies to all npm accounts. During the hold, publishing and other security-sensitive writes, including creating access tokens, are paused.

UpdateSecurityObservabilitySource

GitHub Advanced SecuritySep 8, 2026

Automatic Dependabot access to GitHub-hosted registries

Dependabot can now read from private GitHub Packages registries without a personal access token. If a package has granted your repository access through “Manage Actions access” in the package settings, Dependabot reuses that grant.

UpdateDeveloper toolsSource

GitHub Advanced SecuritySep 3, 2026

Multiple trusted publishing configurations for npm

We’re continuing to make trusted publishing smoother for npm publishers, guided by maintainers feedback. Three updates to npm publishing are now generally available: Multiple trusted publishing configurations per package Staged packages can only be approved after malware scanning is complete Maintainers can see their staged history in the package versions...

GASource

GitHub platform13

GitHub platformSep 22, 2026

Refreshed repository pull requests page generally available

The new repository pull requests page is now generally available to all GitHub users. Highlights The new page makes it easier to find and act on pull requests in a repository, with new filtering and search options to help you find exactly what you’re looking for: Content assist helps you easily find and apply the correct filters.

GAObservabilitySource

GitHub platformSep 16, 2026

Automate SSO authorization for classic PATs and SSH keys

Enterprise admins can now automate SSO authorization for existing classic personal access tokens (PATs) and SSH keys for organizations in GitHub Enterprise Cloud, replacing manual per-organization authorization by your developers.

UpdateSecurityDeveloper toolsSource

GitHub platformSep 16, 2026

SCIM user responses now include a profileUrl attribute

SCIM user responses from GitHub now include the standard profileUrl attribute defined by RFC 7643, containing the absolute URL of the GitHub account linked to the external identity. Previously, matching a SCIM record to the corresponding GitHub account required extra lookups or inference.

UpdateSecurityObservabilityDeveloper toolsSource

GitHub platformSep 15, 2026

SHA-1 in HTTPS on GitHub sunset

Previously we announced we would be disabling SHA-1 in HTTPS for GitHub on September 15th, 2026. Following the planned schedule, GitHub has disabled SHA-1 in HTTPS for github.com and partner CDNs, including GitHub Enterprise Cloud and GitHub Enterprise Cloud with Data Residency. GitHub Enterprise Server is unaffected.

DeprecationObservabilitySource

GitHub platformSep 11, 2026

Profiles now show your highest achievement badge tier

Your GitHub profile now displays the highest tier you’ve earned for achievements with multiple levels. Previously, profiles could display the first tier earned, even after you had progressed to a higher level. Now, your profile better reflects your latest achievement and the progress you’ve made on GitHub.

UpdateObservabilitySource

GitHub platformSep 10, 2026

Refreshed repository pull requests page in public preview

A refreshed repository-level pull request listing page is now in public preview for all GitHub users. It brings powerful filtering, compact presentation mode, and more.

PreviewSource

GitHub platformSep 8, 2026

GitHub Enterprise Server 3.22 is now generally available

GitHub Enterprise Server (GHES) 3.22 is now available and introduces new capabilities across the platform. Here are a few highlights in the 3.22 release: Administrators can configure Copilot CLI to work with GHES for enterprises that operate in disconnected or air-gapped environments without connectivity to GitHub Cloud.

GASecurityDeveloper toolsCoding agentsSource

GitHub platformSep 8, 2026

New customer portal help.github.com

The support portal has been redesigned and moved to a new home at help.github.com . It brings support, docs, learning, community, and account resources together in one place with Copilot-powered search across all of them.

UpdateObservabilityCoding agentsSource

GitHub platformSep 4, 2026

New API endpoint provides privacy-safe star history data

Track repository star growth over time with the new star history REST API endpoint without exposing stargazer identities. Earlier this year, stargazer listing endpoints were restricted to admins and collaborators to protect user privacy. Now you can get the insights you need with a privacy-safe alternative.

UpdateObservabilityDeveloper toolsSource

GitHub platformSep 3, 2026

GitHub CLI Linux package signing key expires September 5

The current PGP key for the GitHub CLI Linux package repositories expires on Saturday, September 5, 2026. Beginning with the first release after that date, APT and RPM repository metadata and newly published RPM packages will be signed with just the replacement key. In April, we published a keyring containing both the current and replacement keys.

UpdateObservabilityDeveloper toolsSource

GitHub platformSep 1, 2026

Block users from discussion comments in personal repositories

You can now block or unblock users directly from discussion comments in repositories owned by personal GitHub accounts, extending the in-context blocking controls already available for issue and pull request comments. To block or unblock a user from a discussion comment: Open the More menu on their comment. Select Block user or Unblock user .

UpdateObservabilitySource

GitHub platformSep 1, 2026

Enterprise Live Migrations from GHES to ghe.com generally available

Enterprise Live Migrations (ELM) is now generally available, enabling near-zero-downtime repository migrations from GitHub Enterprise Server (GHES) to GitHub Enterprise Cloud with Data Residency (GHEC DR), so you can move even your largest, most active repositories while the contributions keep flowing.

GADeveloper toolsSource

GitHub platformSep 1, 2026

GitHub CLI: Media in issues, pull requests, and comments

GitHub CLI now has a repeatable --attach flag that uploads a local image or video and references it inline in an issue, pull request, or comment body. This is now generally available to all users on GitHub across all plans. You just need to update gh to v2.99.0. Why this matters?

GAAI agentsPricingDeveloper toolsSource

GitHub Actions7

GitHub ActionsSep 23, 2026

Node 20 is no longer available in GitHub Actions

This is the final notification that Node 20 is no longer available on GitHub Actions runners. Runners now use Node 24 for JavaScript actions. The temporary ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION opt-out is no longer available. If you maintain a JavaScript action, update its runs.using value to node24 and publish a new release as soon as possible.

DeprecationUnverifiedObservabilityDeveloper toolsSource

GitHub ActionsSep 17, 2026

Ubuntu 26 generally available and latest migration

The Ubuntu 26.04 runner image for GitHub Actions is now out of public preview and fully supported for production workflows on both x64 and arm64. As part of this release, the ubuntu-latest label will migrate to Ubuntu 26.04, giving you the latest supported Ubuntu release by default.

GADeveloper toolsSource

GitHub ActionsSep 17, 2026

Workflow execution protections in GitHub Actions generally available

Workflow execution protections for GitHub Actions, previously in public preview, are now generally available for GitHub Enterprise, organizations, and repositories. Execution protections let you define an allowlist that controls who can trigger an Actions workflow and what events can start it.

GAGovernanceDeveloper toolsSource

GitHub ActionsSep 10, 2026

Control GitHub Actions cache access with cache-mode

You can now use cache-mode to apply least-privilege access to the GitHub Actions cache at the workflow or job level. By granting each workflow or job only the cache access it needs, you can prevent unnecessary restores or saves and help protect trusted workflows from cache poisoning. This capability is now generally available on all plans.

GAPricingDeveloper toolsSource

GitHub ActionsSep 10, 2026

Xcode 27 runner image now runs on macOS 27

You can now validate your Apple apps against macOS 27 using the Xcode 27 runner image for GitHub-hosted macOS runners, available in public preview. The image previously ran on macOS 26. How you target the image stays the same.

PreviewObservabilitySource

GitHub ActionsSep 3, 2026

CodeQL 2.26.4 improves GitHub actions security detections

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.4 , which adds support for Go 1.27, improves alert locations for Rust data flow queries, and includes accuracy improvements across C#, Java/Kotlin, and GitHub Actions.

UpdateSQLSecurityDeveloper toolsSource

GitHub ActionsSep 3, 2026

GitHub Actions: Early September 2026 updates

GitHub Actions now includes three updates that give you clearer visibility and finer-grained control over your workflows. New REST API for runner version deprecations A new REST API returns when registration and runtime support end for a given runner version, so you can plan runner upgrades before a version is deprecated.

UpdateSecurityPricingDeveloper toolsSource