GitHub - 4

2026 (12)

October (12)

github: AI Scan for pull requests generally available

GitHub

2026-10-15

AI Scan for pull requests is now generally available in code scanning. It complements CodeQL by detecting vulnerabilities in pull request changes for languages and frameworks not currently covered by CodeQL.

github: Agentic autofix for code scanning alerts general availability

GitHub

2026-10-15

Agentic autofix for code scanning alerts is now generally available. It can investigate relevant files across a codebase and propose fixes for alerts in a developer-like workflow.

github: Email notifications for repository push events have been retired

GitHub

2026-10-15

As of October 15, 2026, GitHub no longer sends email notifications for repository push events. The feature was retired to help prevent spam and abuse.

github: Audit GitHub Code Quality finding dismissals and reopenings

GitHub

2026-10-13

GitHub audit logs now include manual dismissals and reopenings of GitHub Code Quality findings at the organization or enterprise level. This lets admins review actions on findings that appear in a repository’s default-branch backlog or other Code Quality views.

github: Secret scanning blocks Anthropic keys by default, adds Salesforce

GitHub

2026-10-13

GitHub secret scanning now detects new secret types for Salesforce, Anthropic, and Cloudsmith. Anthropic keys are blocked with push protection by default.

github: Improved detection for withdrawn Dependabot alerts

GitHub

2026-10-13

GitHub improved how withdrawn Dependabot alerts are identified. When an advisory or vulnerability is no longer valid, Dependabot now withdraws and removes the alert, and these changes make that state easier to detect.

github: Search and filter for budgets now available

GitHub

2026-10-13

GitHub Billing’s “Budgets and alerts” page now lists all budgets in one place and adds search and filter capabilities. This makes it easier to find specific budgets in accounts with multiple entries.

github: Code scanning AI Scan metrics in security overview

GitHub

2026-10-13

Organization and enterprise administrators can now view AI Scan for pull request metrics in the security overview. The new metrics track how many AI Scan findings were generated and resolved, along with related status data.

github: Push attribution for commits in limited public preview

GitHub

2026-10-12

GitHub now records the authenticated user who pushed each commit and exposes that pusher identity in the UI and API. This is in limited public preview and is available alongside the existing author and committer fields.

github: Anonymous organization-level registries for Dependabot

GitHub

2026-10-12

GitHub Dependabot now supports an Anonymous authentication method for organization-level private registries. This is intended for registries reachable without credentials, such as an internal package mirror.

github: Copilot code review: New organization billing options and controls

GitHub

2026-10-08

GitHub added billing and license controls for Copilot code review at the organization level. Organization owners can now bill code review usage to the org for members with Copilot licenses and manage related controls.

github: Triage role users or higher can now archive pull requests

GitHub

2026-10-08

GitHub now allows users with the triage role or higher to archive and unarchive pull requests. Before this change, only repository administrators could perform this action.