Stateless GitHub App installation token format is now the default for all newly minted tokens.
GitHub changelog digest
Sep 28 - Oct 4, 2026. Useful releases, risky migrations, and noisy updates from the GitHub channel.
No matching updates in this bucket.
GitHub updates in 2026-w40
Added REST and GraphQL API endpoints for requesting GitHub Copilot code reviews
Deprecated specific GitHub Copilot models across all experiences (Chat, inline edits, ask, agent modes, and code completions).
Added five new fields (e.g., cveId) to the SecurityAdvisory GraphQL type
Add ability to post confidential comments on repository security advisories
Introduce public preview of a REST API to read, add, and edit comments on repository security advisories
Introduce rate limits on private vulnerability report submissions per account
Introduce a structured form for private vulnerability reports
Adds public preview of computer use in GitHub Copilot CLI and desktop app for macOS and Windows
The macOS 14 GitHub Actions runner image will be retired on November 2 2026.
Introduced agent-driven development workflow across VS Code v1.136‑v1.140.
Added automatic detection and highlighting of ACCESSIBILITY.md files in the repository overview when placed in the root, .github/, or docs/ directories.
Retention settings now apply to checks, workflow runs, and statuses, aligning them with artifact and log retention
Weekly scheduled code scanning now only triggers after a push or pull request, skipping inactive repositories
Fixed CI failures when uploading code coverage on new branches without an open pull request.
Introduces dynamic workflows to Copilot CLI, the GitHub Copilot app, and the SDK
Add opt‑in support for managing npm dist‑tags via short‑lived OIDC credentials
Updates bundled TypeScript to version 7.0.2
GitHub Team customers can now self‑serve trials of GitHub Advanced Security, including Code Security and Secret Protection
HydraFusion research preview is now available in Visual Studio Code and the GitHub Copilot app.
TLS connections offering only X25519 key agreement will be rejected after Oct 7 2026 for GitHub Enterprise Cloud with data residency
Repo admins can now configure a custom runner type, optional label, and optional runner group for Dependabot version and security updates.
Add support for external custom properties to attach business context to repositories
GPT-6.1 Sol model is now generally available and integrated into GitHub Copilot
Agent can now manage additional Sentry project settings automatically.
Added tracing for TypeSafe Jev calls in the Python SDK.
Added tracing of TypeSafe Jev calls in the JavaScript SDKs.
Enforcement date for minimum self‑hosted runner versions on GitHub Enterprise Cloud moved to September 28 2026
Claude Sonnet 5.5 is now generally available in GitHub Copilot