GitHub Changelog

10 stories

GitHub ChangelogGitHubDependabot version updates support Agent Package Manager You can now keep your AI agent skills, prompts, and instructions up to date with Dependabot version updates for Agent Package Manager (APM) .

11.03

GitHub ChangelogGitHubLook up a resource’s cost center with the GitHub REST API You can now use the GitHub REST API to find which cost center a user, organization, repository, or enterprise team belongs to. Previously, you had to list every cost center and scan its resources.

11.03

GitHub ChangelogGitHubGitHub Copilot is now available in JetBrains Air You can now delegate coding tasks, guide execution, and review results with GitHub Copilot in JetBrains Air .

11.03

GitHub ChangelogGitHubCodeQL 2.27.3 adds Python 3.15 features and JSON data extensions CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.27.3 .

11.03

GitHub ChangelogGitHubDependabot now supports Python 3.15 You can now upgrade your projects to Python 3.15 and keep receiving Dependabot updates. Support for Python 3.15 is available to all github.com users and will be included in GitHub Enterprise Server…

11.03

GitHub ChangelogGitHubGitHub Desktop adds short-lived authentication tokens When you sign in to GitHub Desktop 3.6.10 or later, eligible accounts can now use short-lived, automatically refreshing authentication tokens.

11.03

GitHub ChangelogGitHubSecurity risk assessments include repository protection status The GitHub code security risk assessment and secret risk assessment now show whether findings are in protected or unprotected repositories, helping you identify where to extend your security…

11.02

GitHub ChangelogGitHubpull_request_target blocked by default December 2 Starting December 2, 2026, GitHub Actions will block pull_request_target events by default in all public repositories, unless an applicable Actions event policy explicitly allows them.

11.02

GitHub ChangelogGitHubWebhook IP ranges added to the Meta API We’re adding IP ranges for GitHub webhook deliveries on github.com. The Meta API now includes these additional ranges in the hooks field.

10.29

GitHub ChangelogGitHubRoute and orchestrate models with GitHub Copilot Fusion GitHub Copilot Fusion is generally available. Instead of picking a model for each task, choose Copilot Fusion and let Copilot intelligently route and orchestrate which models it uses for you.

10.28

The name is the button.

An agent writes the code now, and a human thumb hovers over Accept all a hundred times a day. The honest question of this decade is what, exactly, you just accepted. So I read the diff.

Eight years as a backend engineer in Stockholm, back in Tokyo since 2023, and I still ship something small most nights, usually badly. My one rule: the only real review of a model is the thing you built with it. That is why there is no leaderboard on this site.

Around a hundred and forty sources come through — the labs' own posts, the papers, the tools, the runtimes and languages nobody is watching yet, the chip under the demo, and the newsletters people actually forward. What is moving gets counted so the week reads at a glance, and every few days I explain one mechanism in plain words.

A story here is a headline, a short excerpt, one image and the link to whoever wrote it. We never reproduce the post; the images belong to their authors. A post written in Japanese appears in Japanese, exactly as it was published, and the link goes to the original.

— Yuki Halvorsen, Tokyo