CodeQL 2.26.3 improves GitHub Actions queries and JavaScript modeling

UpdateAug 19, 2026VerifiedAdded Sep 22, 2026

CodeQL 2.26.3 adds JavaScript, TypeScript, and Vue source modeling and improves the accuracy of several GitHub Actions queries. CodeQL is the static analysis engine behind GitHub code scanning , which helps you find and remediate security issues in your code.

SQL Security Developer tools

Read GitHub's release notes

https://github.blog/changelog/2026-08-19-codeql-2-26-3-improves-github-actions-queries-and-javascript-modeling

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Actions releases

GitHub ActionsAug 20, 2026

Windows 11 arm64 VS2026 image generally available

The Windows 11 arm64 image with Visual Studio 2026 is now generally available on standard and larger GitHub-hosted runners. To use it in GitHub Actions, update your workflow file to runs-on: windows-11-vs2026-arm .

GAObservabilityDeveloper toolsSource

GitHub ActionsAug 20, 2026

Separate GitHub Actions path for GitHub Code Quality

A dedicated workflow path for code quality CodeQL actions workflows is now generally available. Your workflow run history and your Actions usage reports now tell GitHub Code Quality runs apart from GitHub code scanning runs.

GASecurityPricingBISource

GitHub ActionsAug 27, 2026

Actions retention will cover checks, workflow runs, and statuses

Starting October 1, 2026, checks, workflow runs, and statuses will be governed by the same Actions retention setting that already controls how long artifacts and logs are kept, with a default of 90 days. Until now, checks, workflow runs, and statuses were retained for 400+ days regardless of your retention configuration.

UpdateObservabilityDeveloper toolsSource

GitHub ActionsSep 3, 2026

GitHub Actions: Early September 2026 updates

GitHub Actions now includes three updates that give you clearer visibility and finer-grained control over your workflows. New REST API for runner version deprecations A new REST API returns when registration and runtime support end for a given runner version, so you can plan runner upgrades before a version is deprecated.

UpdateSecurityPricingDeveloper toolsSource

GitHub ActionsSep 3, 2026

CodeQL 2.26.4 improves GitHub actions security detections

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.4 , which adds support for Go 1.27, improves alert locations for Rust data flow queries, and includes accuracy improvements across C#, Java/Kotlin, and GitHub Actions.

UpdateSQLSecurityDeveloper toolsSource

GitHub ActionsJul 30, 2026

Reference same-repository actions with self-repository syntax

You can now reference an action or reusable workflow that lives in the same repository using the new self-repository syntax. A uses: value that starts with $/ resolves to your workflow’s own repository at the exact commit that is running, with no checkout required.

UpdateGovernanceObservabilityDeveloper toolsSource

GitHub ActionsSep 10, 2026

Control GitHub Actions cache access with cache-mode

You can now use cache-mode to apply least-privilege access to the GitHub Actions cache at the workflow or job level. By granting each workflow or job only the cache access it needs, you can prevent unnecessary restores or saves and help protect trusted workflows from cache poisoning. This capability is now generally available on all plans.

GAPricingDeveloper toolsSource

GitHub ActionsSep 10, 2026

Xcode 27 runner image now runs on macOS 27

You can now validate your Apple apps against macOS 27 using the Xcode 27 runner image for GitHub-hosted macOS runners, available in public preview. The image previously ran on macOS 26. How you target the image stays the same.

PreviewObservabilitySource

Also shipped on Aug 19, 2026

Snowflake SnowflakeAug 19, 2026

Data movement policies (General availability)

With this release, data movement policies are now generally available for Enterprise Edition (or higher). Data movement policies are part of Snowflake’s data exfiltration protection controls. These SQL-style conditional policies can help you limit, alert on, or block data movement operations based on specific movement types.

GASQLGovernanceSource

Snowflake SnowflakeAug 19, 2026

Organization Features in Organization Command Center (Preview)

Organization Features is now in preview in Organization Command Center. From the organization account, a user with the GLOBALORGADMIN role can open Organization Hub » Command center , then the Organization Features tile, to see which organization-level capabilities are enabled. In preview, the main control is premium views for cross-account telemetry.

PreviewObservabilitySource

Snowflake SnowflakeAug 19, 2026

Organization Command Center 3rd party access configuration (Preview)

3rd party access configuration is now in preview in Organization Command Center. From the organization account, a user with the GLOBALORGADMIN role can open Organization Hub » Command center , then the 3rd party access configuration tile, to classify member accounts as internal or external, set the default tenant type for new accounts, and maintain allowed...

PreviewSecuritySource

Databricks Unity CatalogAug 19, 2026

Role-based access control (RBAC) is generally available

Role-based access control (RBAC) is now generally available. RBAC lets users assume a role in Databricks. When a user assumes a role, only that role's permissions apply, rather than the user's accumulated permissions. This enables exclusive access.

GASecuritySource

Databricks Databricks Data Intelligence PlatformAug 19, 2026

ai_extract precision mode is now generally available

You can now use ai_extract precision mode for advanced extraction workloads, including multi-page documents, schemas with 50 or more fields, many extracted items per document, and complex conditional field logic. See ai_extract function .

GASource

Microsoft Azure databases and analyticsAug 19, 2026

[Launched] Generally Available: Azure Databricks Lakebase in four additional regions

Lakebase is now generally available in four additional Azure regions: North Central US, France Central, Germany West Central, and East Asia. This expansion provides customers with additional deployment options and broader regional availability for Lakebas

GARegionsSource