GitHub
2026-08-04
GitHub has retired the Copilot Billing Preview app and it is no longer available. Copilot spend can now be reviewed and managed directly in GitHub billing settings.
GitHub Spark will stop accepting new users and new app creation starting August 4, 2026. Existing users can keep using Spark until August 31, 2026.
Dependabot now supports custom pull request branch names through new `pull-request-branch-name` settings in `.github/dependabot.yml`. You can configure a prefix, maximum length, and separators for segments and words.
2026-08-03
GitHub Copilot cloud agent now lets you set the reasoning level for supported models when delegating a task. This gives you control over how much reasoning the agent uses for a request.
GitHub changed issue creation restrictions so users with the triage role can now create issues in repositories where issue creation is limited to collaborators only. Previously, only users with write access could create issues under that setting.
2026-07-31
npm granular access tokens configured to bypass 2FA can no longer be used for sensitive account, organization, and package management actions. Those operations now require an interactive 2FA challenge.
2026-07-30
GitHub added a new self-repository syntax for `uses:` so actions and reusable workflows in the same repository can be referenced with a `$/`-prefixed value. This changes how same-repo workflows/actions are addressed, but the provided text does not include further details.
GitHub’s July 2026 Copilot-in-VS Code changelog covers VS Code v1.127 through v1.131. The releases focus on agent workflows, reviewing changes, chat, and navigation improvements.
2026-07-23
GitHub says Copilot cloud agent is now generally available for Linear. Users can assign Linear issues to the agent, which then analyzes the issue contents and works asynchronously in the background.
GitHub MCP Server will support the upcoming MCP spec ahead of its official release. The key protocol change is a move to a stateless core on 28 July 2026.
2026-07-15
GitHub rolled out updates to secret scanning and public monitoring. Resend is now a secret scanning partner, and secret scanning can detect new secret types from APIclub.
2026-07-14
Dependabot version updates now use a default package cooldown: it will wait at least three days after a new release appears in the registry before opening a version update pull request. This applies to version updates and delays PR creation for recently published releases.