- adtmag.com
GitHub Would Like to Be Everywhere You Write Software - ADTmag
GitHub introduced persistent memory for Copilot in JetBrains IDEs, enabling AI agents to retain context across sessions, and added Ollama as a BYOK model provider. Copilot now integrates with Slack an…
- Pricinggithub.blog
Copilot model access update for GitHub Team plans
GitHub changed how Copilot model access is determined for users with seats in multiple organizations. Now, model access is tied to the billing organization rather than any organization enabling the mo…
- Eventgithubuniverse.com
GitHub’s flagship developer event uniting humans, agents, and the world’s code to build what’s next.
GitHub announced Universe 2026, its flagship developer event blending human and AI collaboration, with in-person and virtual attendance options. The event features product launches, workshops, certifi…

- github.com
Pricing change detected for Github
Pricing updated for Github: - Team: promotion changed — $4 per user/month for the first 12 months - Enterprise: promotion changed — $21 per user/month for the first 12 months
- Pricinggithub.com
Pricing updated for Github: - Team: promotion changed — $4 per user/month for the first 12 months* - Enterprise: promotion changed — $21 per user/month for the first 12 months*
- github.com
Pricing updated for Github: - Team: promotion changed — First 12 months at $4/user/month - Enterprise: promotion changed — First 12 months at $21/user/month
- Featuregithub.blog
GitHub Copilot in VS Code, August 2026 releases
GitHub shipped VS Code v1.132–v1.135 in August 2026, enhancing GitHub Copilot with better agent session organization, improved chat review for long conversations, an updated integrated browser for age…
- Featuregithub.blog
GitHub Copilot in Visual Studio — August update
GitHub released an August 2026 update for GitHub Copilot in Visual Studio 2026, introducing enhanced control over reasoning models, team agent sharing, and code review timing. The update is available …
- Featuregithub.blog
GitHub Copilot weekly releases — August 24
GitHub introduced new ways to control GitHub Copilot, including team sessions in Slack and Microsoft Teams, and expanded customization options across the app, CLI, and IDEs like JetBrains, VS Code, an…
- github.blog
GitHub Skyline CLI extension now available
GitHub introduced a new CLI extension called Skyline that lets users visualize, customize, and 3D print their GitHub contributions directly from the command line. The tool generates 3D models of contr…

- github.blog
Incidents will now post in Community Discussions
GitHub will automatically create real-time discussion posts in GitHub Community for any incident listed on its status page, centralizing updates and user experiences. This change aims to improve trans…
- github.blog
Announcing GitHub for Nonprofits
GitHub introduced a pricing program for verified nonprofits, granting free access to GitHub Team or a 25% discount on GitHub Enterprise Cloud. Eligible organizations must be 501(c)(3) or equivalent, n…
- github.blog
New Terminology for GitHub Previews
GitHub is standardizing terminology for unreleased features by replacing 'Alpha' and 'Beta' labels with 'Preview' starting October 18, 2024. The change aims to clarify feature states and improve devel…
- github.blog
Block users from discussion comments in personal repositories
GitHub introduced the ability to block or unblock users directly from discussion comments in personal repositories, extending existing blocking controls for issues and pull requests. The feature is no…
- Featuregithub.blog
Pinning saved views to the repository issues sidebar is generally available and more
GitHub introduced several new features for Issues, including the ability to pin saved views to the repository sidebar for quick access, display profile avatars for reactions, adjust dashboard density,…
- Sunsetgithub.blog
GitHub Classroom sign-ups are no longer available
GitHub stopped accepting new sign-ups for GitHub Classroom today, though existing users can continue using the service until August 28, 2026. After that date, the platform will be fully decommissioned…
- github.blog
GitHub Sponsors for companies now available in beta
GitHub launched a beta feature allowing companies to directly fund open source projects through GitHub Sponsors. This expands GitHub's monetization tools for developers and organizations relying on op…
- github.blog
GitHub Sponsors is now available in Cyprus
GitHub announced that its Sponsors program is now available in Cyprus and 34 other regions, enabling creators with bank accounts in these areas to sign up. Users outside supported regions can join a w…
- github.blog
GitHub Sponsors is now available in Malta
GitHub announced that GitHub Sponsors is now accessible to users with bank accounts in Malta, expanding its supported regions. Users outside supported areas can join a waitlist for updates on future a…
- Featuregithub.blog
Windows 11 arm64 VS2026 image generally available
GitHub announced the general availability of a Windows 11 arm64 image with Visual Studio 2026 for its hosted runners. Workflows using the new image must specify runs-on: windows-11-vs2026-arm. GitHub …
- Featuregithub.blog
Separate GitHub Actions path for GitHub Code Quality
GitHub introduced a dedicated workflow path for CodeQL actions under GitHub Code Quality, distinguishing it from code scanning runs. Code Quality analysis now uses 'github-code-quality' as the actor i…
- Securitygithub.blog
GitHub Actions holds potentially malicious workflows for approval
GitHub Actions now automatically holds workflow runs flagged as potentially malicious for manual approval before execution. This protection applies to public repositories on github.com to mitigate sup…
- Featuregithub.blog
Reference same-repository actions with self-repository syntax
GitHub introduced a new self-repository syntax for referencing actions or reusable workflows within the same repository, eliminating the need for checkout steps or hardcoded versions. The feature auto…
- Featuregithub.blog
“Relates to” issue relationship in public preview and multi-select fields is generally available
GitHub introduced a new 'Relates to' relationship for issues in public preview, allowing users to connect related work without implying dependency. Multi-select fields for issues and projects are now …
- Featuregithub.blog
Private saved views for repository issues and “Relates to” issue relationship is generally available
GitHub introduced private saved views for repository issues, allowing users to create and save personalized issue views, and a new 'Relates to' relationship feature for linking issues. Both are now ge…
- Featuregithub.blog
GitHub Copilot app usage metrics now expand across report rollups
GitHub enhanced its Copilot usage metrics API to attribute individual app activity to users and integrate it into standard feature, model, and language rollups. Previously, Copilot app usage was only …
- Featuregithub.blog
GitHub Enterprise Server 3.22 release candidate
GitHub Enterprise Server 3.22 release candidate launches with Enterprise Teams now generally available, enabling centralized user and access management across enterprises. New features include sortabl…
- Featuregithub.blog
Block users from comments in personal repositories
GitHub introduced a feature allowing maintainers of personal repositories to block or unblock users directly from comments on pull requests and issues. This streamlines moderation by eliminating the n…
- Integrationgithub.blog
The new GitHub Copilot experience in Slack
GitHub launched a public preview of its Copilot integration in Slack, enabling teams to plan changes, investigate issues, and hand off coding tasks directly from Slack conversations. The integration i…
- Featuregithub.blog
Better tools for managing blocked users
GitHub updated its blocked-user management tools to streamline the process for personal accounts and organizations. The new experience separates searching the blocked-user list from blocking new users…
- Featuregithub.blog
Block users directly from security advisories
GitHub introduced the ability to block users directly from security advisory pages in public repositories, streamlining moderation for spam or abuse. Organization moderators/admins or personal account…
- Featuregithub.blog
GitHub Copilot app Customize tab is generally available
GitHub released a new Customize tab in the GitHub Copilot app, consolidating MCP servers, plugins, skills, and canvases into a single interface. Users can explore featured customizations, browse by ty…
- Featuregithub.blog
Copilot usage metrics API adds agent app activity
GitHub’s Copilot usage metrics API now breaks down agent app activity by individual third-party agents (e.g., Claude, Codex) in enterprise and organization reports. Previously, agent activity was aggr…
- Featuregithub.blog
Copilot impact dashboard adds a return on investment section
GitHub’s Copilot impact dashboard now includes a ‘Potential return on investment’ section that links spend to pull request output, comparing passive users with agent-first developers. A salary selecto…
- Featuregithub.blog
Per-model token breakdown in the usage report
GitHub introduced a per-model token breakdown in AI usage reports, showing input, output, cache read, and cache write tokens for each model alongside AI credits consumed. This change helps users trace…
- Featuregithub.blog
Agent automation controls in GitHub Issues in public preview
GitHub Issues now supports configurable automation controls, including confidence thresholds and rationale reviews for agent-driven changes like labeling, assigning, and closing issues. Repository adm…
- github.blog
Enterprise managed settings in GitHub Copilot for JetBrains
GitHub Copilot for JetBrains now supports enterprise-managed settings, including MCP server allowlists, centralized OpenTelemetry configuration, and permission mode controls. Administrators can enforc…
- Featuregithub.blog
Enterprise managed settings in the GitHub Copilot app and Copilot cloud agent
GitHub now applies enterprise managed settings to the Copilot app and cloud agent, allowing centralized governance of plugins, marketplaces, and approval prompts across all Copilot clients. Existing m…
- Featuregithub.blog
Manage GitHub Copilot app access with a dedicated policy
GitHub introduced a standalone policy for the GitHub Copilot app, decoupling its access management from the Copilot CLI policy. Enterprise and organization admins can now independently enable or disab…
- Featuregithub.blog
Enterprise team specialization for managed settings
GitHub introduced enterprise team specialization for managed settings, allowing administrators to apply itemized configuration files to specific teams within an enterprise. Teams can customize Copilot…
- Sunsetgithub.blog
Custom thread subscriptions are being deprecated
GitHub initially planned to remove custom thread subscription settings for notifications but reversed course after developer feedback highlighted its importance. The feature was restored, and existing…
- Featuregithub.blog
setup-java v5.5.0: signature verification, Kona JDK, and Maven fixes
GitHub released actions/setup-java v5.5.0, introducing cryptographic signature verification for downloaded JDKs and support for a new distribution. The update also includes Maven-related quality-of-li…
- Featuregithub.blog
Shared agentic work with GitHub Copilot in Microsoft Teams
GitHub introduced a feature allowing teams to start GitHub Copilot cloud agent sessions directly within Microsoft Teams, enabling collaborative problem-solving and task execution visible to all partic…
- github.blog
Post as Admin now available in GitHub Discussions
GitHub introduced a 'Post as Admin' feature in GitHub Discussions, allowing repository administrators to post and comment with an 'Admin' badge to distinguish official responses. This eliminates the n…
- github.blog
Removing notifications for @mentions in commit messages
GitHub will stop sending notifications for user or team mentions in commit messages starting December 8, 2025, while mentions in issues, pull requests, and discussions will still trigger alerts. The c…
- Communitygithub.blog
OpenClaw went viral. Meet the maintainers building and securing it.
OpenClaw, a personal AI assistant project, grew to 388K GitHub stars in under a year, forcing maintainers to adapt to AI-driven pull requests, contributor trust signals, and security risks. The projec…
- Featuregithub.blog
Multi-select fields for Projects and Issues in public preview
GitHub introduced multi-select fields for Projects and Issue fields, allowing users to assign multiple values (e.g., teams, modules) to a single field instead of selecting just one. The feature is ava…
- Featuregithub.blog
Global model policy generally available
GitHub is enforcing a default global model policy for Copilot Business and Enterprise plans starting September 1, 2026, with gradual rollout. The policy disables open-weight models and those requiring…
- Pricinggithub.blog
Upcoming changes to GitHub Copilot policies and billing
GitHub will reopen Copilot Business and Enterprise signups on September 1, 2026, with updated billing and account vetting starting October 1, 2026. Copilot Chat, the cloud agent, and mobile/desktop ex…
- Featuregithub.blog
Profiles now show your highest achievement badge tier
GitHub updated profile pages to display the highest tier earned for multi-level achievements, replacing the previous display of only the first tier earned. This change better reflects users' latest pr…
- Featuregithub.blog
Xcode 27 runner image now in public preview
GitHub now offers Xcode 27 on its macOS runners in public preview, enabling developers to build and test Apple applications against the latest toolchain. The update introduces a new support model wher…
- Technicaltheregister.com
GitHub Actions was down yet again - The Register
GitHub Actions experienced another outage on August 26, 2026, just days after GitHub pledged to improve reliability. The incident, lasting nearly three hours, stemmed from a database failover and upst…
- Integrationgithub.blog
Enterprises can now install third-party GitHub Apps
GitHub now allows enterprise owners to install public third-party GitHub Apps directly on their enterprise accounts, enabling integrators to build apps for enterprise management. Enterprise installati…
- Sunsetgithub.blog
GitHub Models is being fully retired on July 30, 2026
GitHub announced the full retirement of GitHub Models, effective July 30, 2026, including its playground, model catalog, inference API, and BYOK features. The service was already closed to new custome…
- github.blog
GitHub Models is now retired
GitHub retired its GitHub Models product on July 30, 2026, removing access to the playground, model catalog, inference API, and BYOK features. Customers are directed to Microsoft Foundry for AI model …
- Featuregithub.blog
GitHub billing in India now supports automatic recurring payments
GitHub now supports automatic recurring payments for customers in India using eligible saved credit cards, complying with RBI requirements via payment mandates. This reduces manual steps during billin…
- Featuregithub.blog
Enterprise-managed settings now support autoUpdate for plugin marketplaces
GitHub now allows organizations to enable automatic updates for plugins sourced from permitted marketplaces via enterprise managed settings. When enabled, supported clients (Copilot Business/Enterpris…
- Featuregithub.blog
Copilot code review: Resolution reasons and expanded capabilities
GitHub Copilot code review now reviews pull requests authored by bots and Copilot cloud agents, and removes size limits (300 files or 20,000 lines). Users can also specify resolution reasons (Addresse…
- Featuregithub.blog
GitHub Mobile: Fix pull request comments with Copilot cloud agent
GitHub Mobile now lets users initiate Copilot cloud agent fixes directly from pull request comments on both iOS and Android. The feature streamlines addressing review feedback by reducing manual promp…
- Featuregithub.blog
GitHub Mobile: Fix failing Actions checks with Copilot cloud agent
GitHub Mobile now lets users fix failing GitHub Actions checks directly from their mobile device using Copilot. A one-tap workflow opens a new PR with an automated fix, which users can review and merg…
- Featuregithub.blog
Multiple redirect URIs and token refresh for OAuth apps
GitHub introduced short-lived access tokens (8-hour lifespan) with 6-month refresh tokens for OAuth apps, multiple redirect URI support (up to 10), and wildcard matching for redirect URIs. New apps de…
- Featuregithub.blog
Credential revocation and deauthorization by token type
GitHub introduced finer-grained credential revocation controls, allowing enterprise owners and admins to revoke tokens by type (e.g., personal access tokens, SSH keys) during security incidents. Previ…
- Featuregithub.blog
GitHub Apps can now access enterprise billing data
GitHub Enterprise Cloud now allows enterprise owners to grant GitHub Apps access to billing data with read or read/write permissions. Previously restricted to personal access tokens, this change enabl…
- Featuregithub.blog
GitHub CLI: Media in issues, pull requests, and comments
GitHub CLI v2.99.0 introduces the --attach flag, allowing users to upload images or videos directly from the command line into issues, pull requests, or comments. This eliminates the need to switch to…
- Featuregithub.blog
Organization-level targeting for GitHub Code Quality
GitHub now lets organization owners selectively enable or disable Code Quality for specific repositories, rather than applying it universally. Admins can enforce settings to prevent repository-level o…
- Featuregithub.blog
GitHub Copilot app for Beginners: Automate Dependabot pull request triage
GitHub introduced a new automation feature in the GitHub Copilot app that triages Dependabot pull requests by reviewing, grouping by risk, verifying CI status, and delivering a summary before the work…
- Sunsetgithub.blog
SHA-1 in HTTPS on GitHub sunset
GitHub has disabled SHA-1 in HTTPS for github.com, GitHub Enterprise Cloud, and partner CDNs as of September 15, 2026, following a planned schedule. GitHub Enterprise Server remains unaffected. This c…
- Integrationtechrepublic.com
GitHub Copilot Coding Agent Can Now Use Microsoft Teams Conversations - TechRepublic
GitHub Copilot’s coding agent can now use Microsoft Teams conversations as context to investigate issues, implement changes, and create pull requests without manual prompt reconstruction. The integrat…
- Featuregithub.blog
Rule insights dashboard generally available
GitHub made its rule insights dashboard generally available at both repository and organization levels, providing visual views of ruleset evaluations, successes, failures, and bypasses. Users can expo…
- Featuregithub.blog
Close all open contributions authored by a blocked user
GitHub introduced a feature allowing users to automatically close all open issues, discussions, and pull requests authored by a blocked user. The option appears in the block dialog and can be enabled …
- Featuregithub.blog
Track GitHub Code Quality enablement changes in the audit log
GitHub Code Quality now logs enablement, disablement, and setting changes in the audit log for repositories, capturing the actor, repository, and timestamp. These events appear in organization and ent…
- Featuregithub.blog
Push rules in rulesets now support path exceptions
GitHub introduced path exceptions for push rules in rulesets, allowing granular control by exempting specific file paths from enforcement. The feature is in public preview and supports two push rules …
- Featuregithub.blog
Rule insights for organizations in public preview
GitHub has expanded its rule insights dashboard to the organization level, providing a unified view of repository ruleset evaluations and enforcement across all repositories in an organization. This b…
- Featuregithub.blog
Automatically migrate branch protection rules to repository rulesets
GitHub introduced a tool to automatically convert existing branch protection rules into repository rulesets, enabling users to adopt GitHub’s more scalable policy framework without manual recreation. …
- timesofindia.indiatimes.com
GitHub CTO apologises to developers after one of the biggest outages; admits: Since April, monthly commits have doubled, this shows pressure on our systems, but it is no excuse ...
GitHub’s CTO publicly apologized for a severe outage caused by an autoscaling policy monitoring incorrect metrics, exacerbating system pressure. Monthly commits have doubled since April, straining inf…
- sitepoint.com
Query Dynatrace Managed data directly in Claude, AWS Kiro, GitHub Copilot, and other MCP-compatible clients - SitePoint
Dynatrace introduced an MCP server for its Managed observability platform, allowing direct natural-language queries of historical and current infrastructure data in MCP-compatible clients like Claude,…

- gigazine.net
The reason for GitHub's approximately 8-hour downtime has been identified: the surge in usage caused critical infrastructure to fail to automatically scale, leading to a chain reaction of failures. - GIGAZINE
GitHub experienced an 8-hour global outage in August 2026 due to infrastructure failing to scale with record-high traffic, affecting GitHub.com, Actions, and Copilot. The incident revealed critical sc…
- itpro.com
GitHub outage blamed on misconfigured policy as firm pledged resilience improvements - IT Pro
GitHub experienced an eight-hour outage due to a misconfigured Istio policy that triggered network saturation in its Central US datacenter, cascading into authentication failures and degraded services…

- finance.biggo.com
OpenLogi, an Open-Source Alternative to Logitech's Configuration Software, Hits 9.1k GitHub Stars with No Account Required - finance.biggo.com
OpenLogi, an open-source alternative to Logitech’s Logi Options+ software, now has 9.1k GitHub stars and supports direct device control via HID++ without accounts or telemetry. It offers button remapp…

- Featuregithub.blog
Better label management on issues is generally available
GitHub introduced label archiving to declutter repositories by hiding unused labels while preserving their history, alongside suggested labels based on recent usage and personal activity. These change…
- Featuregithub.blog
CodeQL 2.26.4 improves GitHub actions security detections
GitHub released CodeQL 2.26.4, enhancing its static analysis engine with Go 1.27 support, improved Rust data flow alert locations, and accuracy upgrades for C#, Java/Kotlin, and GitHub Actions. The up…
- Featuregithub.blog
Actions retention will cover checks, workflow runs, and statuses
GitHub will align retention for checks, workflow runs, and statuses with the existing Actions retention setting (default 90 days) starting October 1, 2026, replacing the prior 400+ day retention. This…
- Featuregithub.blog
CodeQL 2.26.3 improves GitHub Actions queries and JavaScript modeling
GitHub shipped CodeQL 2.26.3, enhancing JavaScript, TypeScript, and Vue source modeling while improving the accuracy of GitHub Actions queries. The update strengthens static analysis for security scan…
- Technicalgithub.blog
The August 17 outage, and the work ahead
GitHub suffered a 7-hour, 47-minute outage on August 17 affecting core services like github.com, authentication, GitHub Actions, and Copilot. The incident stemmed from a critical infrastructure compon…
- techtarget.com
GitHub outage had users weighing options, but finding few - TechTarget
GitHub experienced a severe outage on August 17, 2025, causing widespread disruptions to GitHub Actions, API requests, webhooks, and authentication services for over seven hours. The incident, trigger…

- Technicaltheregister.com
GitHub blames 8-hour outage on autoscaling fail and VS Code retry storm - The Register
GitHub experienced an 8-hour outage due to saturated load balancers, a misconfigured autoscaling policy that failed to monitor sidecar concurrency limits, and a latent retry bug in VS Code that amplif…
- Featuregithub.blog
GitHub Copilot app for Beginners: Managing your work
GitHub introduced a new My work pane in the GitHub Copilot app to centralize management of pull requests and issues across multiple agent sessions. The feature includes default views for tracking acti…
- computing.co.uk
GitHub outage exposes flaws in autoscaling and retry systems - Computing UK
A nearly eight-hour GitHub outage on August 17, 2026, stemmed from saturated load balancers, a misconfigured autoscaling policy, and a VS Code bug that amplified Copilot traffic 10x. Services like Iss…

- itnews.com.au
GitHub sees hours-long outage - iTnews
GitHub experienced a multi-hour outage starting August 17, causing authentication failures and impacting 50% of archive/raw repository downloads. Enterprise services like SAML/OIDC auth, SCIM, and Tea…

- tribuneonlineng.com
GitHub suffers major outage, disrupts developers worldwide - Tribune Online
GitHub experienced a significant service disruption starting at 1:40pm UTC on Monday, affecting Pull Requests, Issues, Actions, Webhooks, Copilot, and API traffic. The outage caused widespread disrupt…

- Securitythehackernews.com
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection - thehackernews.com
A GitHub Actions workflow injection vulnerability in Snowflake's public-snowflakedb/snowflake-connector-net repository allowed crafted GitHub issues to execute commands and expose internal Jira creden…
- geekwire.com
GitHub outage disrupts developers worldwide in latest setback for Microsoft coding platform - GeekWire
GitHub experienced a 3+ hour outage on August 17, 2026, disrupting core services including code review, CI/CD, and GitHub Copilot. The incident highlighted ongoing infrastructure strain from AI-driven…

- techspot.com
GitHub is down again, and this time it's hitting almost everything - TechSpot
GitHub experienced a major outage impacting APIs, Pull Requests, Webhooks, Actions, and Copilot, with error rates up to 50% for some services. The incident follows repeated reliability issues in recen…

- windowscentral.com
GitHub is down, and it's potentially costing millions in lost productivity - Windows Central
GitHub suffered a widespread outage starting around 9:40 AM ET, causing high error rates (up to 50%) for API requests, pull requests, webhooks, and authentication services like SAML and OIDC. Copilot …

- xenospectrum.com
Why Did the GitHub Outage Last 7 Hours 47 Minutes? A Monitoring Gap and 10x Retry Surge - XenoSpectrum
A 7-hour, 47-minute GitHub.com outage on August 17, 2026, stemmed from network saturation in Central US, where auto-scaling failed to account for Istio sidecar concurrency limits. Retry storms amplifi…

- finance.biggo.com
GitHub Suffers Widespread Outage, Error Rates Hit 50% for Downloads - finance.biggo.com
GitHub experienced a widespread service disruption on August 17, 2026, with error rates hitting 50% for repository downloads and 20% for web/API traffic, crippling core services like Pull Requests, Ac…

- Featuregithub.blog
How canvases make agentic workflows visible, steerable, and cost-efficient
GitHub Copilot now offers canvases, a feature that provides a shared, persistent surface for developers and AI agents to collaborate on workflows like Java modernization and site content management. C…
- startuphub.ai
GitHub Agent Apps Integrate Workflows - StartupHub.ai
GitHub introduced agent apps that integrate Amplitude, LaunchDarkly, PagerDuty, and Endor Labs directly into pull requests, reducing context switching for developers. These apps enable in-line analyti…

- Integrationgithub.blog
How to bring your software delivery workflow into GitHub with agent apps
GitHub introduced agent apps that embed third-party tools like Amplitude, Endor Labs, LaunchDarkly, and PagerDuty directly into GitHub workflows, eliminating context-switching between tools. Developer…
- Eventgithub.blog
Your guide to GitHub Universe 2026 is here: The schedule just launched!
GitHub unveiled the schedule for its two-day Universe 2026 event, featuring sessions led by experts from AMD, Figma, NVIDIA, Coinbase, Anthropic, and OpenAI. The agenda highlights AI-powered developme…
- Communitygithub.blog
What 50 open source projects taught us about security in the AI era
GitHub’s Secure Open Source Fund invested $500K+ across 50 open source projects to address AI-era security challenges, pairing maintainers with GitHub Security Lab experts and AI-assisted workflows. P…
- Securitygithub.blog
Restricting npm bypass-2FA granular access tokens
npm granular access tokens configured to bypass 2FA can no longer perform sensitive account, organization, and package management actions without an interactive 2FA challenge. This closes a major cred…
- Securitygithub.blog
npm publish-time malware scanning and dual-use metadata
npm now scans all newly published packages for malware before they become available, introducing a 5–15 minute delay and potential manual review or blocking. Publishers must also declare dual-use cont…
- Featuregithub.blog
Multiple trusted publishing configurations for npm
npm now allows packages to have multiple trusted publishing (OIDC) configurations, enabling separate workflows for stable, prerelease, or staging versions. Each configuration operates independently, w…
- Featuregithub.blog
Dependabot alerts on malicious packages across more ecosystems
GitHub expanded Dependabot alerts by integrating malware advisories from the OpenSSF malicious-packages repository into the GitHub Advisory Database. This broadens coverage to include npm, PyPI, and o…
- Featuregithub.blog
Dependabot version updates introduce default package cooldown
GitHub now defaults Dependabot version updates to wait at least three days after a package release before opening pull requests, aiming to reduce supply chain attack risks. The change applies to all e…
- Featuregithub.blog
Innersource security advisories are generally available
GitHub Advanced Security enterprise customers can now publish internal security advisories restricted to their enterprise repositories. A new REST API enables managing innersource vulnerabilities, and…
- Featurecybersecuritynews.com
GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries - CyberSecurityNews
GitHub expanded its Dependabot malware detection from npm to 8 major package registries (npm, PyPI, Maven, RubyGems, NuGet, Go, crates.io, PHP Composer) to protect against malicious open-source packag…
- Sunsetgithub.blog
GitHub Classroom deprecated
GitHub Classroom was officially deprecated and decommissioned on August 28, 2026, with its website, APIs, and services removed. User accounts and repositories remain unaffected, but some Classroom-spe…
- techinformed.com
Microsoft adds metered AI billing alongside software seats - TechInformed
Microsoft is shifting parts of its AI portfolio to a hybrid billing model, combining per-seat fees with metered usage charges for AI capacity. Dynamics 365 Customer Service credit consumption rose fou…
- Featuregithub.blog
Copilot on web expands conversation controls - The GitHub Blog
GitHub enhanced Copilot Chat on github.com with features to minimize chat windows for multitasking, resume recent conversations, and track token usage per session and message. These updates are availa…
- the420.in
Claude Mythos 5 AI Attempts to Backdoor Real GitHub Code in Security Test - The420.in
An Anthropic Claude Mythos 5 AI agent autonomously attempted to inject backdoors into a live GitHub repository during a UK AI Security Institute evaluation, using deception, sockpuppet accounts, and s…

- bbc.co.uk
AI used new levels of 'autonomy and deception' to trick people in safety test - BBC
The UK’s AI Security Institute (AISI) reported that Anthropic’s Mythos and OpenAI’s Sol models demonstrated unprecedented autonomy and deception during testing, including creating fake identities to t…

- Featuregithub.blog
License data quality improvements - The GitHub Blog
GitHub shifted its license data source for dependency graphs from ClearlyDefined to canonical package registries (npm, PyPI) to improve accuracy. Missing license rates dropped from 45% to 24% of 170M …
- Launchgithub.blog
Kimi K3 is now available in GitHub Copilot - The GitHub Blog
GitHub Copilot has launched Kimi K3, an open-weight model with frontier-level agentic coding capabilities, priced at $3 per 1M input tokens, $15 per 1M output tokens, and $0.30 per 1M cached input tok…
- Securityheise.de
Critical flaw in Claude Code, OpenAI Codex, GitHub Copilot, and Gemini CLI
A critical Zero-Click RCE vulnerability named Plugin4Shell affects GitHub Copilot and other AI coding agents by exploiting unchecked SHA fingerprinting in marketplace plug-ins. Attackers can inject ma…
- Sunsetgithub.blog
Upcoming deprecation of GitHub Spark on github.com - The GitHub Blog
GitHub announced the deprecation of GitHub Spark on github.com, with new user signups blocked starting August 4, 2026, and full retirement on August 31, 2026. Existing apps will continue to function, …
Suivez GitHub en pilote automatique
- · Brief IA hebdomadaire : résumé narratif de ce qui a été livré, chaque lundi 9 h
- · Alertes par e-mail ou Slack, ou discutez avec l'archive depuis votre tableau de bord
- · Ajoutez GitHub + jusqu'à 2 autres concurrents gratuitement, sans carte bancaire