GitHub Actions - 2

2026 (9)

August (2)

github: CodeQL 2.26.3 improves GitHub Actions queries and JavaScript modeling

GitHub

2026-08-19

CodeQL 2.26.3 adds source modeling for JavaScript, TypeScript, and Vue, and updates several GitHub Actions queries for better accuracy. It is a CodeQL release used by GitHub code scanning.

dotnet: Test reporting in Microsoft.Testing.Platform: from red build to root cause

.NET

2026-08-06

Microsoft.Testing.Platform adds test reporting that surfaces failures in GitHub Actions and Azure DevOps, uses pipeline history to distinguish regressions from flaky tests, and keeps reports usable even if the test host crashes.

July (6)

github: Reference same-repository actions with self-repository syntax

GitHub

2026-07-30

GitHub added a new self-repository syntax for `uses:` so actions and reusable workflows in the same repository can be referenced with a `$/`-prefixed value. This changes how same-repo workflows/actions are addressed, but the provided text does not include further details.

github: GitHub Actions holds potentially malicious workflows for approval

GitHub

2026-07-28

GitHub Actions now detects potentially malicious workflow changes in public repositories and requires approval before they run. The change is intended to reduce supply-chain abuse from compromised credentials used to add workflows that steal CI/CD secrets or perform follow-on attacks.

github: GitHub Mobile: Fix failing Actions checks with Copilot cloud agent

GitHub

2026-07-23

GitHub Mobile now lets you ask Copilot coding agent to investigate and fix failing GitHub Actions checks on a pull request directly from the mobile app. The feature starts from a failed check and uses Copilot cloud agent to work on the issue.

github: Xcode 27 runner image now in public preview

GitHub

2026-07-16

GitHub-hosted macOS runners now support Xcode 27 in public preview, letting you build and test Apple apps against the latest Xcode version. This is an early-access runner image release.

github: setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes

GitHub

2026-07-08

setup-java v5.5.0 adds cryptographic signature verification for downloaded JDKs, support for Kona JDK, and several Maven-related fixes. It is the release over v5.4.0.

github: Copilot CLI no longer needs a personal access token in GitHub Actions

GitHub

2026-07-02

GitHub Copilot CLI can now run in GitHub Actions with the built-in GITHUB_TOKEN. A personal access token is no longer required for this workflow.

June (1)

dotnet: MCP Beyond the Chat Window: Build Diagnostics in CI

.NET

2026-06-30

Microsoft’s .NET blog describes using Model Context Protocol (MCP) tools for build diagnostics in CI, including the full Binlog MCP toolset and how it runs in a GitHub Actions workflow. It also reports evaluation data on efficiency gains from this approach.