License data quality improvements

UpdateAug 13, 2026VerifiedAdded Sep 22, 2026

GitHub now uses package registries like npmjs.org and PyPI to determine license information for software components in the dependency graph. This improves the accuracy and completeness of the licenses shown in dependency insights, software bills of materials (SBOMs), the open source license compliance feature in GitHub Advanced Security, and the dependency...

Governance Security

Read GitHub's release notes

https://github.blog/changelog/2026-08-13-license-data-quality-improvements

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityAug 18, 2026

Credential revocation and deauthorization by token type

Building on our self-service credential revocation experiences for incident response, you can now take token-type and user-specific actions to deauthorize and revoke user credentials during a security incident. This gives you finer-grained control when responding to a compromise.

UpdateSecurityDeveloper toolsSource

GitHub Advanced SecurityAug 19, 2026

Track organization code quality trends

The organization-level Code Quality dashboard now includes a Trends tab that shows how code quality has changed across your repositories over time. Instead of a point-in-time snapshot, you can see whether open findings are trending up or down and which repositories are driving the change.

GAPricingBIObservabilitySource

GitHub Advanced SecurityAug 7, 2026

Secret scanning coverage updates

This release expands secret scanning’s coverage with more secrets blocked by push protection, one new secret scanning partner, and richer metadata on alerts. Secret scanning partnership program Lovable Labs is now a GitHub secret scanning partner. Secret scanning now automatically detects the following new secret type in your repositories.

UpdateLLMsSecuritySource

GitHub Advanced SecurityAug 20, 2026

Code scanning adds a mitigated alert dismissal reason

You can now dismiss a code scanning alert with the reason Mitigated when a vulnerability remains in the code but external controls, such as a web application firewall or network policy, mitigate its risk.

UpdateGovernanceSecurityObservabilitySource

GitHub Advanced SecurityAug 20, 2026

Track GitHub Code Quality enablement changes in the audit log

GitHub Code Quality now writes an audit log event whenever someone enables, disables, or changes its settings on a repository. Three new events give you that history: repo.code_quality_enabled records when someone turns on Code Quality for a repository. repo.code_quality_disabled records when someone turns it off.

UpdateSQLPricingObservabilitySource

GitHub Advanced SecurityAug 4, 2026

Customize code scanning default setup at scale

You can now apply your own configuration file to code scanning default setup, using the new github-codeql-config-file repository property. This gives you control over how CodeQL scans your code for security vulnerabilities, whether that’s on one repository or across your whole organization.

UpdateSecurityDeveloper toolsSource

GitHub Advanced SecurityAug 4, 2026

Customize Dependabot pull request branch names

You can now customize the branch names Dependabot creates for pull requests. New pull-request-branch-name options in .github/dependabot.yml let you set a prefix and maximum length, choose segment and word separators, set letter case, or define a custom template using placeholders.

UpdateObservabilitySource

GitHub Advanced SecurityAug 4, 2026

Code coverage automatic enablement in Code Quality settings

We’re making code coverage setup faster and simpler. You’ll now see a new option in your repository’s Code Quality settings that lets GitHub generate your coverage workflow automatically with AI. We’ll open a pull request so you can review the changes before you merge them. Setting up code coverage has traditionally felt disconnected and manual.

PreviewAI agentsSecurityData integrationSource

Also shipped on Aug 13, 2026

Google Cloud BigQueryAug 13, 2026

BigQuery pipelines add automated metadata enrichment in preview

Semantic metadata defined in SQLX configurations now syncs with Knowledge Catalog, and the Data Engineering Agent can generate this metadata from your intent or context.

PreviewAI agentsSQLGovernanceSource

Databricks Unity CatalogAug 13, 2026

Sharing tables backed by default storage will be enabled by default for all accounts

OpenSharing support for tables backed by default storage is generally available and on by default for most accounts. For most Enterprise or Premium tier accounts, Databricks will enable it automatically in mid-September 2026, and by early 2027 for the rest.

GASource

Databricks Databricks Data Intelligence PlatformAug 13, 2026

Expanded networking billing for OpenSharing SecureConnect

Databricks will be expanding networking billing for OpenSharing SecureConnect. Today, data providers are billed for data transfer (egress) when recipients access shared data through SecureConnect. Additional charge types and access scenarios, including charges billed to recipients, are planned.

PricingPricingRegionsSource

Databricks Databricks Data Intelligence PlatformAug 13, 2026

OpenSharing SecureConnect will be available by default for all accounts

OpenSharing SecureConnect is generally available and available by default for accounts on the Premium plan. For accounts on the Enterprise plan, Databricks will enable it automatically in mid-September 2026, and by early 2027 for the rest.

GAPricingDeveloper toolsSource

Databricks Agent Bricks and Mosaic AIAug 13, 2026

Block or redact sensitive data in requests and responses

The Sensitive Data Detection guardrail (Beta) detects structured sensitive data (such as Social Security numbers, credit card numbers, IBANs, and phone numbers) and either blocks the interaction or redacts the matched values in place.

PreviewAI agentsLLMsGovernanceSource

Databricks Agent Bricks and Mosaic AIAug 13, 2026

Smart Routing: Cut AI costs by routing each task to the right model

Smart Routing (Beta) automatically picks the right model and agent harness for each task, based on complexity, permissions, and budget. It shifts routine work to lower-cost models and reserves frontier models for hard problems, and every routing decision is visible and auditable.

BetaAI agentsLLMsSecuritySource