Secret scanning now detects new secret types from Lovable Labs, Pydantic Services Inc., and Supabase. New secret scanning partner The following provider joined the secret scanning partnership program.

The staged rollout of the stateless GitHub App installation token format, which began on April 27, 2026, is complete. By default, all newly minted GitHub App installation tokens will be in the ...

🔌 Request Copilot code review with the API ⚖️ Balanced is now the default review effort level Menu. Currently selected: 🔌 Request Copilot code review with the API 🔌 Request Copilot code review with ...

You can now read more of the GitHub Advisory Database directly from the GraphQL API without falling back to the REST API. This means fewer round trips, one authentication path, and one rate limit ...

You can now post confidential comments on repository security advisories. Confidential comments are visible only to people with write access to the repository, so you can discuss a report with your ...

Please update your workflows and integrations to use supported models. Copilot Enterprise administrators may need to enable access to alternative models through their ...

Open source maintainers are receiving more low-quality and automated vulnerability reports, which can bury the reports that matter. Rate limits cap how many new reports a single account can submit in ...

Computer use is now available in public preview in GitHub Copilot CLI and the GitHub Copilot app on macOS and Windows. Copilot can interact with desktop applications on your behalf (e.g., reading ...