Github - 10

2026 (12)

August (12)

github: Code scanning adds a mitigated alert dismissal reason

GitHub

2026-08-20

Code scanning now supports dismissing alerts with the reason "Mitigated" when the vulnerability still exists in code but is offset by external controls, such as a web application firewall or network protections.

github: Separate GitHub Actions path for GitHub Code Quality

GitHub

2026-08-20

GitHub Code Quality CodeQL Actions workflows now have a dedicated workflow path and are generally available. Run history and Actions usage reports can now distinguish GitHub Code Quality runs from other Actions workflows.

github: Track GitHub Code Quality enablement changes in the audit log

GitHub

2026-08-20

GitHub Code Quality now emits audit log events when it is enabled, disabled, or its repository settings are changed. This adds a history trail for Code Quality configuration changes.

github: CodeQL 2.26.3 improves GitHub Actions queries and JavaScript modeling

GitHub

2026-08-19

CodeQL 2.26.3 adds source modeling for JavaScript, TypeScript, and Vue, and updates several GitHub Actions queries for better accuracy. It is a CodeQL release used by GitHub code scanning.

github: Track organization code quality trends

GitHub

2026-08-19

GitHub’s organization-level Code Quality dashboard now has a Trends tab. It shows code quality changes across repositories over time instead of only a point-in-time view.

github: Enterprise managed settings in GitHub Copilot for JetBrains

GitHub

2026-08-18

GitHub Copilot for JetBrains now supports enterprise managed settings. Administrators can centrally control plugin governance, MCP server access, OpenTelemetry, and permission modes across the enterprise.

github: Credential revocation and deauthorization by token type

GitHub

2026-08-18

GitHub added self-service incident response actions to deauthorize and revoke user credentials by token type and by specific user. The update extends existing credential revocation workflows for security incidents.

github: Multiple redirect URIs and token refresh for OAuth apps

GitHub

2026-08-14

GitHub updated OAuth app and GitHub App platform support to improve app security. The changes include optional expiring access tokens with refresh tokens for OAuth apps, and support for multiple redirect URIs.

github: Grok 4.6 is now available in GitHub Copilot

GitHub

2026-08-14

Grok 4.6 is now rolling out in GitHub Copilot as a new reasoning model from xAI. GitHub says it is intended for agentic coding and complex multi-step workflows.

github: GitHub Copilot weekly releases — August 10

GitHub

2026-08-14

GitHub Copilot’s August 10 weekly release adds new models, portable plugins, and workflow improvements for agents. The updates are aimed at making Copilot more flexible across editors, the command line, and the Copilot app.

github: License data quality improvements

GitHub

2026-08-13

GitHub now sources license information for dependency graph software components from package registries such as npmjs.org and PyPI. This is intended to improve the accuracy and completeness of displayed license data.

github: Block users from comments in personal repositories

GitHub

2026-08-13

GitHub now lets you block or unblock users directly from comments on pull requests and issues in repositories owned by personal accounts. The action can be performed from the comment interface.