GitHub Changelog

10 stories

GitHub ChangelogGitHubBulk migrate branch protections to rulesets for a repository You can now convert all branch protection rules of a repository to rulesets in a single action. This is an extension of the ability to convert a single branch protection rule to a ruleset that we…

10.20

GitHub ChangelogGitHubUpdates to GitHub secret scanning This update covers improvements and bug fixes for GitHub secret scanning. Update to audit log events On November 12, 2026 , the business field in affected secret_scanning_alert.* and…

10.20

GitHub ChangelogGitHubDependabot alerts REST API now includes dependency versions You can now get the version of a vulnerable dependency directly from Dependabot alert responses in the REST API.

10.20

GitHub ChangelogGitHubGitHub package firewall in public preview An increasing number of malware attacks exploit systems at package installation time, harvesting credentials on CI/CD hosts or developer workstations without even running the package’s code.

10.20

GitHub ChangelogGitHubDependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4 You can now upgrade your projects to npm 12, pnpm 11 or 12, or Bun 1.4 and keep receiving Dependabot updates.

10.20

GitHub ChangelogGitHubCopilot model policy API for enterprise, orgs, and teams You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, agent apps, and organizations.

10.19

GitHub ChangelogGitHubGitHub Copilot models deprecated on October 19, 2026 As of today, October 19, 2026, we have deprecated the following models across most GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions).

10.19

GitHub ChangelogGitHubSome Git over HTTPS may temporarily require authentication During periods of unusual traffic, GitHub may temporarily require authentication for some clones and fetches of public repositories over HTTPS to help protect github.com’s availability.

10.19

GitHub ChangelogGitHubCodeQL changes for macOS 27, Xcode 27, and Swift 6.4 Starting with macOS 27 and Xcode 27, Apple no longer includes Intel (x86_64) code in some of the system binaries and libraries that CodeQL relies on to trace builds.

10.19

GitHub ChangelogGitHubOpen source license compliance generally available Enterprises can now manage their dependencies’ licenses at scale with sophisticated, ruleset-based checks that enforce a centralized policy.

10.16

The name is the button.

An agent writes the code now, and a human thumb hovers over Accept all a hundred times a day. The honest question of this decade is what, exactly, you just accepted. So I read the diff.

Eight years as a backend engineer in Stockholm, back in Tokyo since 2023, and I still ship something small most nights, usually badly. My one rule: the only real review of a model is the thing you built with it. That is why there is no leaderboard on this site.

Around a hundred and forty sources come through — the labs' own posts, the papers, the tools, the runtimes and languages nobody is watching yet, the chip under the demo, and the newsletters people actually forward. What is moving gets counted so the week reads at a glance, and every few days I explain one mechanism in plain words.

A story here is a headline, a short excerpt, one image and the link to whoever wrote it. We never reproduce the post; the images belong to their authors. A post written in Japanese appears in Japanese, exactly as it was published, and the link goes to the original.

— Yuki Halvorsen, Tokyo