Self-service credential revocation for incident response

UpdateJun 24, 2026VerifiedAdded Sep 22, 2026

For a timely response to security incidents involving compromised accounts or stolen credentials, GitHub Enterprise owners can now use new “break-glass” capabilities to instantly revoke all credentials for a given user. This builds on the enterprise-wide credential management tools for incident response released earlier.

Security Developer tools

Read GitHub's release notes

https://github.blog/changelog/2026-06-24-self-service-credential-revocation-for-incident-response

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityJun 25, 2026

npm adds preventive account protection for high-impact accounts

npm now adds a temporary, preventive safeguard for high-impact accounts , those responsible for the registry’s most widely used packages, whenever it detects a sensitive account change, strengthening protection against account-takeover attacks.

UpdateVector searchSecurityObservabilitySource

GitHub Advanced SecurityJun 30, 2026

GitHub code coverage merge protection for pull requests

You can now use branch rulesets to block pull requests from merging when test coverage drops below thresholds you set. You can set a minimum coverage percentage, a maximum allowed drop from the default branch, or both. You can start in evaluate mode to understand impact first, then switch to active mode when you’re ready to enforce merge protection.

PreviewObservabilitySource

GitHub Advanced SecurityJun 30, 2026

Open source license compliance is in public preview

Enterprises can now manage their dependencies’ licenses at scale with sophisticated, ruleset-based checks that enforce a centralized policy. Open source license compliance is in public preview, letting you block noncompliant dependencies before they reach production.

PreviewGovernanceDeveloper toolsSource

GitHub Advanced SecurityJun 30, 2026

Dependabot no longer infers .npmrc

Dependabot will no longer attempt to infer .npmrc configuration for npm private registries. Previously, Dependabot tried to reconstruct .npmrc contents from lockfile resolved URLs, but incorrect lockfile URLs, lockfile format differences across npm, Yarn v1, Yarn Berry, and pnpm, and other edge cases regularly caused registry authentication failures.

UpdateObservabilitySource

GitHub Advanced SecurityJun 30, 2026

Upcoming cloud data retention policy for closed security alerts

Starting September 25, 2026, GitHub will introduce a data retention policy for closed Dependabot security alerts. This policy gives you a clear commitment for how long your alert data stays accessible and where you can find it. It applies to Dependabot security alerts on github.com, including GitHub Enterprise Cloud (GHEC).

UpdateGovernanceSecurityDeveloper toolsSource

GitHub Advanced SecurityJun 30, 2026

Upcoming access restrictions to public API endpoints and UI views

As part of our ongoing commitment to protect our users and ensure responsible use of our platform, the Notifications team will soon introduce access restrictions to several public API endpoints and related UI views.

UpdateSecurityDeveloper toolsSource

GitHub Advanced SecurityJul 1, 2026

Secret scanning adds validators for Asana, IBM, and MessageBird

Secret scanning now runs validity checks on Asana, IBM, and MessageBird secrets so you can tell whether a leaked credential is still active. Validity checks added These patterns now support validity checks.

UpdateSecurityObservabilitySource

GitHub Advanced SecurityJul 2, 2026

Secret scanning public monitoring for enterprises

GitHub is committed to empowering the developer community by helping organizations recognize and address the risks of secret leaks wherever they happen. We believe every enterprise should know the moment its secrets leak in public, no matter where it happens on GitHub.

PreviewSecurityPricingObservabilitySource

Also shipped on Jun 24, 2026

Google Cloud Gemini APIJun 24, 2026

Computer Use

Launched public preview support for the Computer Use tool in Gemini 3.5 Flash. This release includes simplified actions with intents, built-in support for browser, mobile, and desktop environments, configurable safety policies, and advanced prompt injection detection.

PreviewLLMsGovernanceSource

OpenAI OpenAI APIJun 24, 2026

OpenAI updates chat-latest to the latest ChatGPT Instant model

The chat-latest snapshot now points to the latest Instant model used in ChatGPT and will be updated regularly. OpenAI recommends GPT-5.5 for production API usage.

UpdateLLMsDeveloper toolsSource

Mistral AI Mistral AI Studio and APIJun 24, 2026

Bringing more control over your connectors

UpdateData integrationSource

Vercel Vercel platformJun 24, 2026

Vercel Flags no longer requires SDK Keys for Vercel deployments

New projects using Vercel Flags no longer need to configure SDK Keys or the FLAGS environment variable when evaluating flags inside a Vercel deployment. At runtime, the Vercel adapter automatically receives a short-lived OIDC token, so authentication is handled for you with zero configuration.

UpdateDeveloper toolsSource

Vercel Vercel platformJun 24, 2026

Pro teams can now run up to 500 concurrent builds

Pro teams can run up to 500 concurrent builds, up from 12. Teams with large repos can ship faster without waiting on queued builds. On-demand concurrent builds are enabled by default for Pro and Enterprise, and you're billed only for the build minutes you use. Learn more about on-demand concurrent builds . Read more

UpdatePerformanceSource

Vercel AI SDK and AI GatewayJun 24, 2026

GLM 5.2 Fast via Wafer now available on AI Gateway

GLM 5.2 Fast via Wafer is now available on AI Gateway . Based on our own benchmarking across small-context, large-context, and tool-call scenarios, Wafer delivers a 2x higher throughput than other providers serving GLM-5.2 on serverless, leading on decode and end-to-end speed for sustained generation in the small- and large-context cases.

UpdatePricingDeveloper toolsPerformanceSource