npx @buildinternet/releases get githubClaude Fable 5.1 and Gemini 3.8 Flash roll out to Copilot tiers, and Copilot app and CLI now honor content exclusions. Agent Merge enters public preview in VS Code.
OpenAI's GPT-6 Astra, designed for long-horizon, autonomous coding and agentic tasks, is now available to Copilot Pro+, Max, Business, and Enterprise users across all major IDEs and platforms, billed at provider list pricing under usage-based billing.
A new REST API endpoint returns historical star counts with timestamps without exposing stargazer identities, restoring star-growth tracking after stargazer listing was restricted to admins and collaborators. Tools and integrations that relied on the old endpoint can update to the new one.
Fixes issues including the concern from the new Windows installer registering uninstall entries, a false green image diff mode pixels, repository menu re-enabling after canceling a rebase, and preserving the branch protection information when API requests fail to fail. Hooks works on Windows for a new issue.
npm packages can now have multiple trusted publishing (OIDC) configurations, each with independent repository, workflow, and environment criteria. Staged packages can only be approved after malware scanning completes, and maintainers can view staged history in the package versions tab.
GitHub Actions introduces a REST API to query runner version deprecation timelines, a read-only vulnerability-alerts permission for GITHUB_TOKEN, and four new job context properties that expose reusable workflow source identity.
GitHub Copilot will deprecate Gemini 3.5 Flash, Gemini 3.6 Flash, Kimi K2.7 Code, and Claude Opus 4.7 across all experiences on October 2nd, 2026, with suggested alternatives like Gemini 3.8 Flash, Kimi K3, and Claude Opus 5. Administrators may need to enable the alternative models through Copilot model policies before the deprecation date.
The PGP key for GitHub CLI APT and RPM repositories expires September 5, 2026. After that date, metadata and new RPMs will be signed with only the replacement key; users who installed before April 8, 2026, must update their keyring setup before then.
Gemini 3.8 Flash is now available in GitHub Copilot across IDEs and CLI, billed at introductory provider pricing under usage-based billing through December 31, 2026. Available to Pro, Pro+, Max, Business, and Enterprise users with gradual rollout.
Organizations can now route a GitHub host's API traffic through a gateway using the new per-host api_host config, settable via gh config set api_host. The original host remains in use for authentication, Git remotes, and browser URLs; the feature is experimental and not a security boundary. Also added the webhook extension and telemetry fixes for unauthenticated GHES requests.
Copilot Business and Enterprise sign-ups for credit-card and PayPal customers are reopening gradually over the next two weeks. Starting October 1, 2026, all assigned seats incur an upfront charge at the start of each billing cycle, and exceeding included usage may require additional payment to continue.
CodeQL 2.26.4 adds support for Go 1.27, improves Rust data flow alert locations to point at the actual source and sink nodes (some alerts will shift and appear as new), and adds SQL injection sinks for Spring R2DBC in Java/Kotlin. GitHub Actions checks now validate actor fields from event payloads more strictly, which may surface additional alerts for queries using the ControlCheck class.
GitHub Copilot now supports setting any model as the default for new conversations through enterprise-managed settings. You can customize the default by enterprise team by setting the model key as overridable in team-mappings.json. Managed model defaults are generally available with Copilot Business and Enterprise.
Content exclusion policies configured by enterprise, organization, and repository administrators are now enforced in the GitHub Copilot app and Copilot CLI, preventing Copilot from using excluded files as context in agentic workflows. Available for Copilot Business and Copilot Enterprise customers.
Fixed RStudio detection for the new Windows installer's per-user or 64-bit machine-wide uninstall entries, and removed false green artifacts in image diff "Difference" mode caused by sub-pixel misalignment. Also re-enabled repository menu items after canceling a rebase, preserved branch protection info on API failures, and blocked upgrades from macOS 12 and older ahead of an Electron update that drops support.
Enterprise Live Migrations (ELM) is now generally available, enabling near-zero-downtime repository migrations from GitHub Enterprise Server to GitHub Enterprise Cloud with Data Residency. ELM syncs data continuously for cutover in minutes, handles massive monorepos, works alongside GitHub Enterprise Importer, and is managed via the gh elm CLI extension. Supports GHES 3.17.18+ and later patch releases.
The repeatable --attach flag uploads local images and videos and adds them to issue, pull request, or comment bodies, replacing local file paths with uploaded URLs. gh issue develop can now create a linked branch and check it out in a new Git worktree with --checkout --worktree, leaving your current working copy unchanged. Plus fixes for repo sync, PR merge, and worktree handling.
GitHub Copilot Business and Enterprise admins can now set an optional expiration date on an individual user budget — at the start of the next billing cycle or on a specific date — after which GitHub removes the budget and the user falls back to the next applicable one. Expiration dates can be set in billing settings or via the expires_at field in the Budgets REST API.
Copilot's code review now includes an approval assessment in the overview comment for every pull request, and admins can enable it to submit approvals that count toward required-approvals rules. Approvals are off by default and configurable at enterprise, organization, and repository levels, including file-path restrictions.
You can now block or unblock users directly from discussion comments in repositories owned by personal GitHub accounts, matching the blocking controls already available for issue and pull request comments. Use the More menu on a comment to block or unblock with an optional private note.