GitHub

Recently shipped Copilot agent sessions in Slack, enterprise app installs, GitLab migrations, and a wave of Copilot model additions and deprecations. Copilot code review effort levels hit GA. Lite targets straightforward changes, Balanced engages a higher-reasoning model for deeper analysis. Low and Medium were renamed to Lite and Balanced, with an organization-wide default. Agent Plugins 1.0 went GA as an open standard, packaging agent skills and MCP servers into one plugin usable across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app. Grok 4.6, Kimi K3, and MAI-Code-1.1-Flash joined the model lineup. MAI-Code-1.1-Flash adds native image understanding at a 73% lower list price. Gemini 2.5 Pro, Gemini 3 Flash, Claude Opus 4.5/4.6, Sonnet 4.5/4.6, Raptor Mini, and MAI-Code-1-Flash are deprecated by early September, with alternatives suggested. GitHub Spark stops accepting new users and retires August 31; GitHub Models is already retired. Enterprises can now install third-party GitHub Apps. Public apps built outside the enterprise manage enterprise-scoped functions; cross-enterprise installation stays locked for the permission sets that manage org installations. GitLab migrations are self-serve via GEI and gh gl2gh. Repositories migrate from gitlab.com or Self-Managed, staging archives in GitHub blob storage or your own AWS S3 or Azure Blob. Relates to issues and multi-select fields landed, and stacked PRs hit public preview with walkthrough videos. OAuth apps gained rotating tokens — opt-in short-lived access tokens with six-month refresh tokens, multiple redirect URIs, and wildcard matching. GitHub CLI got security fixes plus worktree checkout and semantic issue search. v2.98.0 patches the codespace ports forward binding-to-all-interfaces flaw, and v2.97.0 fixed escape-sequence injection and token leaks. Windows 11 arm64 runners GA'd VS 2026. npm blocks 2FA-bypass granular access tokens from sensitive operations like token and maintainer management.