GitHub - 5

2026 (12)

April (12)

github: Copilot-reviewed pull request merge metrics now in the usage metrics API

GitHub

2026-04-08

The Copilot usage metrics API now includes two new merge metrics for Copilot-reviewed pull requests, extending the pull request throughput and cycle-time metrics added in February. These metrics track PRs reviewed by Copilot from the coding agent.

github: Secret scanning improvements to alert APIs, webhooks, and delegated workflows

GitHub

2026-04-08

GitHub is rolling out updates to secret scanning alert APIs, webhooks, and delegated workflows. The changes are aimed at improving the developer experience for secret scanning features.

github: Code Security risk assessment available for organizations

GitHub

2026-04-08

Organization admins and security managers can now run a free Code Security risk assessment for their organization. It summarizes vulnerabilities by severity, rule type, and related categories.

github: Dependabot alerts are now assignable to AI agents for remediation

GitHub

2026-04-07

Dependabot alerts can now be assigned to AI coding agents for remediation, including Copilot, Claude, and Codex. This is intended for vulnerabilities that require code changes beyond a simple dependency version update.

github: Dependabot version updates now support the Nix ecosystem

GitHub

2026-04-07

Dependabot version updates now support the Nix ecosystem via Nix flakes. You can add `nix` as a package ecosystem in `dependabot.yml` and Dependabot will monitor `flake.lock` inputs and open pull requests when updates are available.

github: Code scanning: Batch apply security alert suggestions on pull requests

GitHub

2026-04-07

GitHub code scanning alerts on pull requests can now be fixed in bulk from the Files changed tab. The update lets users apply multiple security alert suggestions at once instead of handling them individually.

github: Copilot usage metrics now identify active and passive Copilot code review users

GitHub

2026-04-06

GitHub Copilot usage metrics now show which users have Copilot code review activity and whether that activity was active or passive. Enterprise and organization admins can use these metrics to see how users engage with Copilot code review.

github: Organization firewall settings for Copilot cloud agent

GitHub

2026-04-03

GitHub added organization-level firewall settings for Copilot cloud agent. The built-in agent firewall can now be configured centrally to control internet access and help reduce prompt injection and data exfiltration risk.

github: Copilot cloud agent signs its commits

GitHub

2026-04-03

Copilot cloud agent now signs every commit it creates. These commits show up as Verified on GitHub, indicating they were made by the agent and not altered after signing.

github: Copilot SDK in public preview

GitHub

2026-04-02

GitHub Copilot SDK is now in public preview. It provides building blocks to embed Copilot’s agentic capabilities into applications, workflows, and platform services.

github: The Security tab is now Security & quality

GitHub

2026-04-02

GitHub has renamed the top-level Security tab to Security & quality across repositories, organizations, and enterprises on github.com. The navigation now groups code quality findings together with security-related information.

github: Improved search for GitHub Issues is now generally available

GitHub

2026-04-02

GitHub says improved search for Issues is now generally available. It was previously in public preview and later added to the Issues dashboard.