You can now convert all branch protection rules of a repository to rulesets in a single action. This is an extension of the ability to convert a single branch ...

An increasing number of malware attacks exploit systems at package installation time, harvesting credentials on CI/CD hosts or developer workstations without even running the package’s code. To stem ...

Please update your workflows and integrations to use supported models. Copilot Enterprise administrators may need to enable access to alternative models through their ...

Code scanning AI Scan for pull requests is now generally available. It complements CodeQL by finding vulnerabilities in pull request changes for languages and frameworks that CodeQL does not currently ...

You can now download a CSV report of your GitHub Code Quality license usage to reconcile your license count with your own records. The report includes: Each active ...

Agentic autofix for code scanning alerts is now generally available. It remediates alerts by working across your codebase the way a developer would: it explores relevant files, proposes a fix, and ...

HydraFusion has an updated model pool, improved orchestration workflows, and introduces HydraFusion Max. Both HydraFusion and HydraFusion Max are available across VS Code, the GitHub Copilot app, and ...

@GitHub in Slack and Teams now supports working across multiple repositories in a single conversation. Whether you’re creating issues, opening pull requests, or investigating bugs, you can work across ...

Menu. Currently selected: Keep locked dependencies up to date with Dependabot Keep locked dependencies up to date with Dependabot Get started GitHub Actions workflow dependency lockfiles are now in ...

As of October 15, 2026, email notifications for repository push events have been retired and are no longer sent. We shut down this feature to help prevent spam and abuse. Because recipients didn’t ...