GitHub Code Quality is now generally available

GAJul 20, 2026VerifiedAdded Sep 22, 2026

GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team. It solves an emerging challenge for software development: AI accelerates code output, and Code Quality helps teams ship code they trust.

Security Pricing BI Observability Developer tools

Read GitHub's release notes

https://github.blog/changelog/2026-07-20-github-code-quality-is-now-generally-available

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityJul 15, 2026

Improvements to secret scanning and public monitoring

This week, we’re rolling out several improvements to secret scanning and public monitoring: Resend is now a GitHub secret scanning partner. Secret scanning now detects new secret types from APIclub and Resend. Secret scanning now blocks VolcEngine secrets with push protection by default.

UpdateSecurityObservabilitySource

GitHub Advanced SecurityJul 14, 2026

Code scanning shows AI security detections on pull requests

GitHub code scanning now surfaces AI-powered security detections directly on pull requests, expanding vulnerability coverage to languages and frameworks not currently supported by CodeQL. These detections help teams identify and address potential issues in parts of the codebase that previously had no native scanning coverage, all before code is merged.

UpdateGovernanceSecuritySource

GitHub Advanced SecurityJul 14, 2026

Dependabot version updates introduce default package cooldown

Dependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request. This cooldown is now the default and requires no configuration.

UpdateSecurityObservabilitySource

GitHub Advanced SecurityJul 13, 2026

Manage secret scanning custom patterns via REST API

Starting today, security teams can create, edit, and manage secret scanning custom patterns with the REST API. What’s new The following endpoints are generally available: GET .../secret-scanning/custom-patterns list patterns POST .../secret-scanning/custom-patterns create patterns PATCH .../secret-scanning/custom-patterns/{id} update patterns DELETE...

GASecurityObservabilityDeveloper toolsSource

GitHub Advanced SecurityJul 13, 2026

GitHub Code Quality license estimate in public preview

You can now see the number of active committers on repositories using GitHub Code Quality across your enterprise, giving you an estimate of your Code Quality license cost before it becomes a paid product on July 20, 2026. Code Quality is free during the public preview, so this usage isn’t billed today.

PreviewPricingDeveloper toolsCoding agentsSource

GitHub Advanced SecurityJul 28, 2026

npm publish-time malware scanning and dual-use metadata

As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time . This changelog covers what publishers can expect and a new metadata requirement for dual-use content.

UpdateGovernanceSecurityObservabilitySource

GitHub Advanced SecurityJul 28, 2026

Dependabot alerts on malicious packages across more ecosystems

The GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, significantly expanding the breadth of malware data available to you through Dependabot alerts.

UpdateSecurityData integrationSource

GitHub Advanced SecurityJul 29, 2026

CodeQL 2.26.1 improves analysis accuracy and framework coverage

CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.1 , which improves framework coverage for Go, Java/Kotlin, and JavaScript/TypeScript, and reduces false positives in Rust analysis.

UpdateSQLSecurityObservabilitySource

Also shipped on Jul 20, 2026

Google Cloud BigQueryJul 20, 2026

Lakehouse : Cross-cloud Lakehouse now supports integration with SAP Business Data Cloud (BDC) in Preview

Lakehouse : Cross-cloud Lakehouse now supports integration with SAP Business Data Cloud (BDC) in Preview. This update includes the following features: Federation from SAP BDC: Create Delta Sharing catalogs in Lakehouse to automatically synchronize shares, schemas, and tables from SAP BDC.

PreviewSQLGovernanceApache IcebergSource

Snowflake SnowflakeJul 20, 2026

OIDC federated authentication (Public Preview)

OpenID Connect (OIDC) security integrations for federated single sign-on (SSO) are available in Public Preview. Multiple OIDC integrations, or OIDC alongside an existing SAML2 integration, require identifier-first login . Without identifier-first login, only one SSO integration (SAML2 or OIDC) can be ENABLED=TRUE at a time.

PreviewSecurityDeveloper toolsSource

Snowflake SnowflakeJul 20, 2026

DML into frozen regions of dynamic tables (General availability)

You can now use DML statements (INSERT, UPDATE, MERGE, DELETE) to modify rows directly in the frozen region of a dynamic table. This enables use cases such as GDPR-required row deletions or correcting specific records without triggering a full refresh of the active region. For more information, see DML into a frozen region .

GARegionsSource

Snowflake SnowflakeJul 20, 2026

Pass-through policies for dynamic tables with incremental refresh (General availability)

Dynamic tables that have base tables with arbitrary masking or row access policies can now maintain incremental refresh when the policy is pass-through for the role used during refresh (that is, when the refresh role has unrestricted access to all rows and columns regardless of the policy condition).

GAGovernanceSource

Microsoft Microsoft FoundryJul 20, 2026

[In preview] Public Preview: Protect sensitive generative AI telemetry in Application Insights and Microsoft Foundry

Azure Monitor Application Insights now stores generative AI content in a dedicated GenAIContent table (AppGenAIContent in Log Analytics), making it possible to apply newly available access controls to sensitive AI telemetry. Because Application Insights p

PreviewObservabilitySource

Vercel AI SDK and AI GatewayJul 20, 2026

Configure where run state lives in Vercel Workflows

Vercel Workflows now keeps each run's state, queue dispatch, and output streams in a single home region: the region where the run starts by default, or any target region you choose.

BetaAI agentsStreamingDeveloper toolsSource