Secret scanning adds validators for Asana, IBM, and MessageBird

UpdateJul 1, 2026VerifiedAdded Sep 22, 2026

Secret scanning now runs validity checks on Asana, IBM, and MessageBird secrets so you can tell whether a leaked credential is still active. Validity checks added These patterns now support validity checks.

Security Observability

Read GitHub's release notes

https://github.blog/changelog/2026-07-01-secret-scanning-adds-validators-for-asana-ibm-and-messagebird

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityJul 2, 2026

Secret scanning public monitoring for enterprises

GitHub is committed to empowering the developer community by helping organizations recognize and address the risks of secret leaks wherever they happen. We believe every enterprise should know the moment its secrets leak in public, no matter where it happens on GitHub.

PreviewSecurityPricingObservabilitySource

GitHub Advanced SecurityJun 30, 2026

GitHub code coverage merge protection for pull requests

You can now use branch rulesets to block pull requests from merging when test coverage drops below thresholds you set. You can set a minimum coverage percentage, a maximum allowed drop from the default branch, or both. You can start in evaluate mode to understand impact first, then switch to active mode when you’re ready to enforce merge protection.

PreviewObservabilitySource

GitHub Advanced SecurityJun 30, 2026

Open source license compliance is in public preview

Enterprises can now manage their dependencies’ licenses at scale with sophisticated, ruleset-based checks that enforce a centralized policy. Open source license compliance is in public preview, letting you block noncompliant dependencies before they reach production.

PreviewGovernanceDeveloper toolsSource

GitHub Advanced SecurityJun 30, 2026

Dependabot no longer infers .npmrc

Dependabot will no longer attempt to infer .npmrc configuration for npm private registries. Previously, Dependabot tried to reconstruct .npmrc contents from lockfile resolved URLs, but incorrect lockfile URLs, lockfile format differences across npm, Yarn v1, Yarn Berry, and pnpm, and other edge cases regularly caused registry authentication failures.

UpdateObservabilitySource

GitHub Advanced SecurityJun 30, 2026

Upcoming cloud data retention policy for closed security alerts

Starting September 25, 2026, GitHub will introduce a data retention policy for closed Dependabot security alerts. This policy gives you a clear commitment for how long your alert data stays accessible and where you can find it. It applies to Dependabot security alerts on github.com, including GitHub Enterprise Cloud (GHEC).

UpdateGovernanceSecurityDeveloper toolsSource

GitHub Advanced SecurityJun 30, 2026

Upcoming access restrictions to public API endpoints and UI views

As part of our ongoing commitment to protect our users and ensure responsible use of our platform, the Notifications team will soon introduce access restrictions to several public API endpoints and related UI views.

UpdateSecurityDeveloper toolsSource

GitHub Advanced SecurityJul 7, 2026

Secret scanning extended metadata and multipart validation

To help you understand ownership and impact of a leaked secret, GitHub secret scanning surfaces enriched metadata for supported secret types. Extended metadata checks are now generally available, including support for multipart validators with supplementary metadata. What’s new?

GASecurityDeveloper toolsPerformanceSource

GitHub Advanced SecurityJun 25, 2026

npm adds preventive account protection for high-impact accounts

npm now adds a temporary, preventive safeguard for high-impact accounts , those responsible for the registry’s most widely used packages, whenever it detects a sensitive account change, strengthening protection against account-takeover attacks.

UpdateVector searchSecurityObservabilitySource

Also shipped on Jul 1, 2026

Fivetran FivetranJuly 2026

Fivetran Context Layer is in public preview

Context Layer builds a context layer from documentation sources, systems of record and analytical sources, then connects it to an organization's AI coding and chat tools.

PreviewDeveloper toolsSource

Fivetran Fivetran connectors and Connector SDKJuly 2026

Fivetran sunsets the AVEVA PI and Delighted connectors

New AVEVA PI and Delighted connections are blocked from July 1, 2026. Existing AVEVA PI connections stop syncing July 23, 2026, and Delighted connections are paused after the Delighted API deprecation.

DeprecationData integrationDeveloper toolsSource

Fivetran FivetranJuly 2026

Fivetran Move a Connection REST API endpoint enters beta

A new beta endpoint moves connections from one destination group to another.

BetaDeveloper toolsSource

Snowflake SnowflakeJul 1, 2026

Workload identity federation for Snowflake workloads that access external services (General availability)

Snowflake can now act as the OpenID Connect (OIDC) provider when Snowflake workloads authenticate to external services. To use this capability, create a secret of type WORKLOAD_IDENTITY_FEDERATION and share its issuer URL and subject identifier with the external service to establish trust.

GASecuritySource

Databricks LakeflowJul 1, 2026

Veeva Vault connector (Beta)

The Veeva Vault connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector uses Veeva's Direct Data API to ingest all standard objects, custom objects, system tables, and audit trail tables from your Vault instance into Databricks.

BetaSecurityData integrationDeveloper toolsSource

Databricks LakeflowJul 1, 2026

MySQL integrated CDC pipeline is now in Beta

The integrated CDC pipeline for MySQL is now in Beta . An integrated CDC pipeline ingests change data from MySQL into Databricks using a single pipeline, combining extraction and application into one pipeline update. Unlike the standard gateway-based architecture, an integrated CDC pipeline requires no separate ingestion gateway.

BetaStreamingData integrationSource