Credential revocation and deauthorization by token type

UpdateAug 18, 2026VerifiedAdded Sep 22, 2026

Building on our self-service credential revocation experiences for incident response, you can now take token-type and user-specific actions to deauthorize and revoke user credentials during a security incident. This gives you finer-grained control when responding to a compromise.

Security Developer tools

Read GitHub's release notes

https://github.blog/changelog/2026-08-18-credential-revocation-and-deauthorization-by-token-type

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityAug 19, 2026

Track organization code quality trends

The organization-level Code Quality dashboard now includes a Trends tab that shows how code quality has changed across your repositories over time. Instead of a point-in-time snapshot, you can see whether open findings are trending up or down and which repositories are driving the change.

GAPricingBIObservabilitySource

GitHub Advanced SecurityAug 20, 2026

Code scanning adds a mitigated alert dismissal reason

You can now dismiss a code scanning alert with the reason Mitigated when a vulnerability remains in the code but external controls, such as a web application firewall or network policy, mitigate its risk.

UpdateGovernanceSecurityObservabilitySource

GitHub Advanced SecurityAug 20, 2026

Track GitHub Code Quality enablement changes in the audit log

GitHub Code Quality now writes an audit log event whenever someone enables, disables, or changes its settings on a repository. Three new events give you that history: repo.code_quality_enabled records when someone turns on Code Quality for a repository. repo.code_quality_disabled records when someone turns it off.

UpdateSQLPricingObservabilitySource

GitHub Advanced SecurityAug 13, 2026

License data quality improvements

GitHub now uses package registries like npmjs.org and PyPI to determine license information for software components in the dependency graph. This improves the accuracy and completeness of the licenses shown in dependency insights, software bills of materials (SBOMs), the open source license compliance feature in GitHub Advanced Security, and the dependency...

UpdateGovernanceSecuritySource

GitHub Advanced SecurityAug 25, 2026

Block users directly from security advisories

You can now block a user directly from a security advisory page in public repositories owned by either an organization or a personal account. This brings the streamlined moderation experience available for issues and pull requests to security advisories.

UpdateStreamingSecurityObservabilitySource

GitHub Advanced SecurityAug 7, 2026

Secret scanning coverage updates

This release expands secret scanning’s coverage with more secrets blocked by push protection, one new secret scanning partner, and richer metadata on alerts. Secret scanning partnership program Lovable Labs is now a GitHub secret scanning partner. Secret scanning now automatically detects the following new secret type in your repositories.

UpdateLLMsSecuritySource

GitHub Advanced SecurityAug 4, 2026

Customize code scanning default setup at scale

You can now apply your own configuration file to code scanning default setup, using the new github-codeql-config-file repository property. This gives you control over how CodeQL scans your code for security vulnerabilities, whether that’s on one repository or across your whole organization.

UpdateSecurityDeveloper toolsSource

GitHub Advanced SecurityAug 4, 2026

Customize Dependabot pull request branch names

You can now customize the branch names Dependabot creates for pull requests. New pull-request-branch-name options in .github/dependabot.yml let you set a prefix and maximum length, choose segment and word separators, set letter case, or define a custom template using placeholders.

UpdateObservabilitySource

Also shipped on Aug 18, 2026

Snowflake Snowflake Horizon CatalogAug 18, 2026

Access externally managed Apache Iceberg™ tables through Snowflake Horizon Catalog (Preview)

You can now use the Horizon Iceberg REST Catalog (IRC) API to access externally managed Apache Iceberg™ tables in a catalog-linked database from external engines such as Apache Spark™, Trino, DuckDB, or PyIceberg.

PreviewGovernanceApache IcebergObservabilitySource

Snowflake Snowflake Cortex AIAug 18, 2026

Power BI ingestion for Semantic View Autopilot (General availability)

Power BI ingestion for Semantic View Autopilot is now generally available. You can upload a .pbit or .pbix file to Semantic View Autopilot and have a semantic view created automatically from your existing data model, preserving the DAX measures, table relationships, and column descriptions you’ve already built in Power BI and making them available to Cortex...

GAData integrationBISource

Snowflake SnowflakeAug 18, 2026

User skills in Snowflake CoWork (Preview)

User skills are now available in public preview in Snowflake CoWork. Business users can create reusable workflows conversationally, from the UI ( + menu > Skills > Create new ), or by uploading a skill folder on Capabilities > Skills , then run them explicitly with / or from the Skills menus, or implicitly when a conversation matches the skill.

PreviewAI agentsSource

Google Cloud Gemini Enterprise Agent PlatformAug 18, 2026

CodeMender updates (v0.4.0): Model support

This release introduces updates to CodeMender: Gemini 3 Flash removal : Gemini 3 Flash ( gemini-3-flash-preview ) is no longer supported as a model backend for CodeMender. CodeMender supports Gemini 3.5 Flash (default) and Gemini 3.1 Pro Preview. For more information, see Specifying the model .

PreviewLLMsSource

Google Cloud Gemini EnterpriseAug 18, 2026

Gemini Enterprise: Google Sites federated connector (GA)

The Google Sites federated connector is generally available (GA) on Gemini Enterprise. You can use the Gemini Enterprise app assistant to search across internal company websites, team sites, intranets, project hubs, and informational pages hosted on Google Sites, and get answers grounded in that content without needing to ingest the data.

GALLMsData integrationSource

Google Cloud Gemini EnterpriseAug 18, 2026

Gemini Enterprise: Gemini 3.6 Flash available in US and EU multi-regions

Gemini 3.6 Flash is generally available in the us and eu multi-regions, and an allowlist is no longer required to use Gemini 3.6 Flash in the us multi-region. To make Gemini 3.6 Flash available to users in the Gemini Enterprise app, administrators must turn on the Gemini 3.6 Flash feature toggle in the Google Cloud console.

GALLMsNotebooksRegionsSource