66 result(s)
GitHub says Copilot cloud agent, formerly Copilot coding agent, is no longer limited to pull-request workflows. This expands how it can be used for research, planning, and coding tasks.
Dependabot now supports Swift package dependencies in Xcode projects that use .xcodeproj bundles to manage packages, even when there is no Package.swift file. It can detect and update those dependencies directly from the Xcode project manifest.
GitHub secret scanning added nine new secret detectors from seven providers as part of a coverage update. The update includes detectors for providers such as Langchain, Salesforce, and Figma, along with additional secret types from Figma, Google, and OpenVSX.
CodeQL 2.25.0 has been released and updates Swift analysis support to version 6.2.4. This release affects GitHub code scanning users who analyze Swift code with CodeQL.
CodeQL pull request insights in GitHub Security Overview now include Copilot Autofix and alert statistics from all protected branches, instead of only the default branch.
Starting May 1, 2026, GitHub Enterprise Cloud on ghe.com will expand the EU data residency region to include Azure infrastructure in EFTA countries, specifically Norway and Switzerland. This affects the EU data residency region for customers using GitHub Enterprise Cloud on ghe.com.
GitHub now lets you create Issues from Slack using the GitHub app and natural-language prompts. Mention @GitHub in a Slack channel, describe the work, and it will create the issue in GitHub.
GitHub has deprecated Gemini 3 Pro across all GitHub Copilot experiences as of March 26, 2026. This includes Copilot Chat, inline edits, ask and agent modes, and code completions.
GitHub extended the Credential revocation API to support GitHub OAuth and GitHub App credentials. The API can now be used to programmatically revoke exposed credentials found in repositories or elsewhere.
GitHub Copilot coding agent can now resolve merge conflicts on pull requests. Users can trigger it by mentioning @copilot in a PR comment and asking it to handle the conflicts.
GitHub has released a public preview of a refreshed pull requests dashboard at github.com/pulls. It adds a new pull request inbox and saved views for organizing and prioritizing pull requests.
GitHub Actions run summaries now show Agentic Workflow markdown configs for agentic workflows. This makes it easier to review runs without leaving the summary page.
GitHub added support for surfacing coding agent sessions in Issues and Projects, so agent activity can be tracked directly in planning workflows. The update includes agent sessions shown under assignees in GitHub Issues and agent activity integration in GitHub Projects.
Custom images for GitHub-hosted runners are now generally available. The feature, first released in public preview in October 2025, lets users build on GitHub-curated base images for hosted runners.
GitHub announced enhancements to the public preview of GitHub Copilot coding agent for Jira based on early customer feedback. The provided excerpt does not include the specific feature changes.
GitHub updated its Privacy Statement and Terms of Service to clarify how it handles user data. The changes take effect on April 24.
GitHub Copilot usage metrics now show which users have Copilot coding agent (CCA) activity. Enterprise and organization admins can use this to identify active CCA users by day and other usage views.
Repository admins can now disable comments on individual commits. GitHub added a new “Commits” section in repository settings to manage this behavior.
GitHub now lets you mention @copilot in any pull request to request changes directly in the PR. One announced use case is fixing failing GitHub Actions workflows and tests.
GitHub introduced public preview REST APIs for managing Copilot coding agent repository access programmatically at the organization level. This lets organization owners control access at scale through the API instead of only manual settings.
CodeQL pull request scans for C#, Java, JavaScript/TypeScript, Python, and Ruby are now incremental, which improves scan speed. GitHub had already sped up pull request scans earlier this year.
Gemini 3.1 Pro is now in public preview for Copilot Enterprise, Business, Pro, and Pro+ users. It can be accessed in GitHub Copilot Chat and in JetBrains IDEs, Xcode, and Eclipse.
GitHub now lets repository admins manage secret scanning push protection exemptions from a repository’s settings. Before this change, exemptions were only configurable through organization- and enterprise-level security configurations.
Copilot usage metrics now map activity that was previously shown as “Auto” to the actual model used when auto model selection is enabled. This gives clearer model-level reporting in Copilot usage data.
GitHub says commits made by Copilot coding agent are authored by Copilot with the assigning human listed as co-author, and that these commits can now be traced back to the agent session logs. This is meant to make it easier to inspect how a given commit was produced.
GitHub says the Copilot extension for Raycast can now be used to monitor Copilot coding agent logs live. The post links Raycast’s launcher and extension support with GitHub Copilot agent log viewing.
GitHub Mobile for Android has updated its navigation to be more consistent and intuitive across the app. The change focuses on smoother movement between key areas like Home and other main sections.
GitHub added session log visibility for Copilot coding agent tasks. You can now review what the agent did while it worked in the background before approving its changes.
GitHub Actions added support for time zones in scheduled workflows and the ability to use environments without automatic deployments. This release focuses on removing a couple of workflow configuration limitations.
Actions Runner Controller (ARC) 0.14.0 is generally available. The release adds multilabel support for runner scale sets, switches to the actions/scaleset library client, and introduces resource customization options.
GitHub says Copilot coding agent now starts work 50% faster. The update applies when handing work to the agent through supported entry points such as assigning an issue to Copilot.
GitHub Codespaces with data residency now supports Japan as a region. This adds Japan to the existing EU and Australia data residency regions.
GitHub is rolling out docked panels on pull request “Files changed” pages so reviewers can keep pull request context open side-by-side while reviewing code. The panels include overview, comments, and merge status.
Hierarchy view in GitHub Projects is now generally available. It is enabled by default for all new project views, and existing views can be updated to use it.
GitHub says Copilot coding agent now automatically runs project tests and linting, plus GitHub validation tools such as CodeQL, advisory database checks, and secret scanning. The new update lets you configure which validation tools the agent uses.
GitHub introduced GPT-5.3-Codex as a long-term support (LTS) model for GitHub Copilot, aimed at giving enterprises a stable option for internal security and safety reviews. The LTS commitment is available for Copilot Business and Copilot plans.
Copilot coding agent now supports a semantic code search tool, so it can find relevant code by meaning instead of exact text matches. GitHub says this should make the agent faster when working in codebases.
Dependabot can now alert on npm dependencies that match known malware advisories. When malware alerting is enabled, it checks repository npm dependencies against malicious package versions.
GitHub MCP Server can now scan code changes for exposed secrets before commit or pull request creation. The feature is intended to catch credential leaks early in AI coding agent workflows.
GitHub Enterprise Server 3.20 is generally available. The release focuses on deployment efficiency, monitoring, code security, and policy management, with an improved merge experience among the highlighted changes.
GPT-5.4 mini is now generally available in GitHub Copilot and is rolling out to users. GitHub says early tests show it as OpenAI’s highest-performing mini agentic coding model.
GitHub Copilot usage metrics now includes organization-level GitHub Copilot CLI activity. Organization admins can view CLI-specific activity and usage totals in 1-day usage metrics, completing telemetry coverage across enterprise, user, and organization levels.
GitHub added push protection exemptions for secret scanning at the organization level. Specific roles, teams, and GitHub Apps can now be exempted, with exemption status checked on each push.
GitHub Advanced Security now has a guided setup experience for organizations. It lets admins set up and configure Advanced Security more easily, including editing configurations and repository settings.
GitHub changed repository permissions for Code Quality: security managers can no longer enable or disable GitHub Code Quality unless they are also repository administrators. The ability to toggle Code Quality is now limited to repository admins.
GitHub Copilot in VS Code can now connect to the Figma MCP server to use Figma design context while coding and to export rendered UI back to Figma as editable frames.
Changelog entry for GitHub Copilot in VS Code v1.110 (February 2026) indicates improvements that make Copilot agents more practical for longer-running, more complex tasks, with more control over agent execution and new extensibility options.
GitHub Copilot is rolling out general availability of the GPT-5.4 model.
GitHub Enterprise AI Controls and the agent control plane add new session filters to help enterprises find and manage agent activity.
GitHub Copilot’s coding agent can be invoked in pull request comments via @copilot, and the feature adds the ability to choose which model @copilot uses for that request.
GitHub Projects hierarchy view gained new improvements, including the ability to filter sub-issues using syntax. GitHub issue forms also added support for file uploads.
GitHub Copilot coding agent can now be assigned Jira issues to asynchronously generate draft pull requests in a linked GitHub repository. This integration is available in public preview.
GitHub Copilot code review has moved to an agentic, tool-calling architecture and is now generally available.
GitHub is rolling out a merge-status indicator at the top of pull request pages, now in public preview. This lets reviewers and authors check merge readiness from anywhere in the PR view.
GitHub agent sessions now support starting from an image by adding it directly in the agent UI on github.com.
GitHub Copilot usage metrics now include user-level activity for GitHub Copilot CLI, expanding beyond prior enterprise-level CLI telemetry.
GitHub added the ability for repository administrators to lock draft repository security advisories and private vulnerability reports to stop collaborators from editing them.
GitHub Copilot Free’s auto model selection now includes Grok Code Fast 1, which is generally available.
Copilot Memory is now enabled by default for GitHub Copilot Pro and Pro+ users in public preview, instead of being opt-in.
GitHub Dependabot now supports assigning vulnerability alerts to specific users (generally available). This adds per-alert ownership to help teams track and remediate dependency vulnerabilities.
GitHub Advanced Security enterprise policies now allow configuring GitHub Code Quality availability independently from Code Security.
GitHub now sends email alerts as an account’s included monthly usage approaches its thresholds.
GitHub Copilot will deprecate the Gemini 3 Pro and GPT-5.1 models across all Copilot experiences on a specified deprecation date, with replacement models recommended.
GitHub has put into effect (as of Feb 27, 2026) previously announced required network configuration changes for teams running Copilot coding agent.
GitHub Copilot usage metrics now include telemetry for plan mode. Enterprises can track plan mode adoption and engagement alongside existing Copilot metrics.
Copilot usage metrics reports now return a consistent user_login value for Enterprise Managed Users. This addresses cases where reports previously included a suffixed user_login, complicating analysis.