Back to updates

GitHub - 18

2025 (12)

October (8)

github: CodeQL 2.23.2 adds additional detections for Rust, and improves accuracy across languages

GitHub

2025-10-09

CodeQL 2.23.2 is a maintenance release for the static analysis engine used by GitHub code scanning. The release adds additional Rust security detections and improves analysis accuracy across multiple languages.

github: Improved blocked users view in organization and personal settings

GitHub

2025-10-09

GitHub updated the blocked users view in organization and personal settings to provide improved transparency and easier record keeping, giving organization admins clearer visibility into moderation history and context.

github: GitHub now supports social login with Apple

GitHub

2025-10-07

GitHub has added social login with Apple (Sign in with Apple), making it easier for iOS developers to sign up and sign in. This builds on GitHub's earlier social login support for Google.

github: Secret Protection expands default pattern support – September 2025

GitHub

2025-10-07

GitHub updated the Secret Protection default pattern set in September 2025, adding new secret detection patterns and upgrading existing ones to improve coverage across different secret types. The changes expand built-in secret scanning so repositories using the default patterns benefit from broader, more accurate detection without manual configuration.

github: Upcoming changes to GitHub Dependabot pull request comment commands

GitHub

2025-10-07

On November 11, 2025, GitHub will deprecate several Dependabot-specific pull request comment commands and rely on GitHub’s native pull request features instead; users should update any workflows or automations that depend on those comment commands.

github: Enterprise access restrictions now supports multiple enterprises

GitHub

2025-10-06

GitHub Enterprise Cloud customers with multiple Enterprise Managed Users (EMU) accounts can now use a single proxy header to block traffic to github.com that originates outside any of their enterprises. This update lifts the prior limitation that tied enterprise access restrictions to a single enterprise, simplifying network configuration for organizations with multiple EMU accounts.

github: One-click merge conflict resolution now in the web interface

GitHub

2025-10-02

GitHub added a one‑click merge conflict resolution feature to the github.com web interface, letting maintainers resolve pull request conflicts directly on the site when those conflicts are resolvable in the web editor.

github: Spark: 🚀 Expanded access, enhanced reliability, and faster iteration history

GitHub

2025-10-01

GitHub announced Spark is available in Public Preview for Copilot Enterprise customers, including Enterprise Managed Users (EMU) CE. Organization admins can enable Spark to provide access; the release emphasizes expanded access, improved reliability, and faster iteration history.

September (4)

github: Start your new repository with Copilot coding agent

GitHub

2025-09-30

GitHub added a new Prompt field on the New repository page that lets you use the Copilot coding agent to kickstart work when creating a repository, announced on the GitHub Blog changelog.

github: Anthropic Claude Sonnet 4.5 is in public preview for Copilot coding agent

GitHub

2025-09-30

GitHub Copilot’s asynchronous coding agent now supports Anthropic’s Claude Sonnet 4.5. The integration is available in public preview and connects Copilot coding agent with Anthropic’s most advanced model for coding and real‑world agent tasks.

github: Premium requests analytics page is now generally available

GitHub

2025-09-30

GitHub launched a new Premium Requests analytics dashboard (generally available Sept 29, 2025) that offers comprehensive insights into premium request activity with data back to August 1, 2025.

github: Secret scanning adds validators for MongoDB, Meta, and Microsoft Azure

GitHub

2025-09-30

GitHub Secret Scanning has added validity-check validators for secrets related to MongoDB, Meta, and Microsoft Azure. These new checks augment existing validators to improve detection of provider-specific credentials and prevent accidental commits of valid secrets.