Content by Allison (793)
Allison announces general availability of GitHub Code Quality for GitHub Enterprise Cloud and GitHub Team, combining deterministic CodeQL analysis with AI-assisted detection and Copilot Autofix to flag maintainability and reliability issues in pull requests, plus new org-level dashboards, coverage reporting, ruleset-based quality gates, and APIs.
Allison announces general availability of repository-level GitHub Copilot usage metrics via the Copilot usage metrics REST API, enabling daily per-repository reporting for Copilot coding agent and Copilot code review pull request activity across enterprises and organizations.
Allison announces an update to the Copilot usage metrics API that adds dedicated reporting for GitHub Copilot app activity in enterprise and organization reports, including active user counts and token usage breakdowns.
Allison announces new controls for GitHub Copilot code review, including reading custom instructions from the PR head branch, expanded instruction file support, repository-level setup steps via a workflow YAML, and a default-on firewall with separate configuration from Copilot cloud agent.
Allison announces a GitHub Mobile improvement that lets you start “Fix with Copilot” directly from Copilot code review pull request comments, making it quicker to address review feedback from a phone while keeping PRs moving.
Allison announces that GitHub Projects views now support advanced search in the filter bar, enabling boolean AND/OR expressions to build more precise views. The update also adds a reviews: filter for PR items and introduces a 90-day retention policy for deployment statuses in the REST and GraphQL APIs.
Allison announces a GitHub update that lets repository admins archive pull requests so they’re removed from public view without being deleted. The post explains what happens when a PR is archived (closed and locked), how visibility changes for non-admins, and how to find archived PRs during triage.
Allison announces new GitHub Enterprise Cloud REST API endpoints that let enterprise admins manage Visual Studio Subscription (VSS) assignments in bulk, including listing assignments, mapping UPNs to GitHub handles, and removing incorrect matches—useful when SCIM identities don’t align with VSS UPN formats.
Allison announces a public preview GitHub Actions runner image for Xcode 27 on GitHub-hosted macOS runners, including the new Xcode-version-based support model, the workflow labels to target the image, and current limitations around arm64-only availability.
Allison summarizes new GitHub secret scanning and public monitoring improvements, including new partner detectors, expanded push protection defaults, a new webhook field to distinguish secret categories, and additional insight cards to help enterprises understand leak attribution and exposure scope.
Allison summarizes the June 2026 GitHub Copilot update for Visual Studio 2026, focusing on new usage tracking and alerts, a trust validation layer for MCP servers, and Copilot features that tie into pull request workflows and C++ modernization.
Allison announces updates to GitHub Copilot for JetBrains, including BYOK custom endpoint support, expanded plugin-based customizations, Claude provider support for custom agents, and local sandboxing in public preview, plus UX and reliability improvements across chat, model selection, and CLI sessions.
Allison announces a public preview feature where GitHub code scanning surfaces AI-powered security detections directly on pull requests, helping teams catch issues in languages and frameworks that don’t have native CodeQL coverage. The update explains what’s included, how it runs, enablement requirements, and how billing works via AI credits.
Allison announces a new default safety behavior in Dependabot: version update pull requests will wait three days after a release appears in its registry, reducing the risk of immediately adopting compromised or broken dependency releases while keeping security updates immediate.
Allison announces a public preview feature in the GitHub Copilot app: the /security-review slash command, which runs an on-demand security review of your in-flight code changes and returns prioritized findings with suggested fixes you can apply and re-check without leaving Copilot.
Allison announces generally available GitHub REST API endpoints for creating, updating, listing, and deleting secret scanning custom patterns across repository, organization, and enterprise scopes, with dry runs and publishing still handled in the UI.
Allison announces a new billing estimate view for GitHub Code Quality in public preview, showing active committers and an estimated monthly license cost so enterprises can understand expected charges before general availability.
Allison announces a GitHub settings UI change that splits the previously combined “SSO & Organizations” page into two separate pages, making it easier to manage SSO configuration and organization membership independently.
Allison announces CodeQL 2.26.0 updates for GitHub code scanning, including Kotlin 2.4.0 support, improved C# Razor Pages dataflow for SQL injection detection, new JavaScript/TypeScript system prompt injection coverage, and multiple query accuracy improvements across Go, Python, Swift, and GitHub Actions.
Allison announces a terminology update in GitHub Secret Scanning that renames detector types to better reflect how secrets are found, while keeping detection behavior unchanged. The post clarifies the difference between provider vs generic secrets and pattern-based vs AI-based detection, and confirms no API or webhook changes.
Allison announces a public preview of agentic autofix for GitHub code scanning alerts, where Copilot explores the repo, proposes and validates a fix by rerunning CodeQL, then opens a draft pull request. The post also covers how to trigger it, required licenses, and how AI Credits and Actions minutes are consumed.
Allison announces a GitHub Enterprise Cloud REST API update that lets enterprise owners and billing managers retrieve per-user consumption for a multi-user budget from a single endpoint, making it easier to review spend and identify users nearing their limits at scale.
Allison announces an update to GitHub Mobile that adds improved filtering and sorting for GitHub Copilot sessions, helping developers find active, completed, and needs-attention sessions more quickly as their session list grows.
Allison announces the general availability of GitHub’s refreshed pull requests dashboard at github.com/pulls, highlighting the new Inbox experience, saved views, and improved filtering/search to help developers and teams track reviews, CI failures, and ready-to-merge work more efficiently.
Allison announces the rollout of OpenAI’s GPT-5.6 model family (Sol, Terra, and Luna) in GitHub Copilot, including what each variant is best suited for, where you can select them, and what admins need to enable for Business and Enterprise plans.
Allison announces a public preview update to GitHub Code Quality that lets organization owners enable or disable Code Quality for a targeted subset of repositories, with optional enforcement to prevent repo admins from changing the setting.
Allison announces a GitHub Copilot Chat feature on github.com that generates a high-level overview of a repository you’re visiting for the first time, summarizing the repo’s purpose, technologies used, and contribution guidelines, with an option to generate a README when one doesn’t exist.
Allison announces general availability of GitHub Advanced Security innersource advisories, letting enterprises publish internal security advisories with visibility limited to enterprise-owned repositories. The update includes a new REST API for creating, updating, and withdrawing vulnerabilities, and uses Dependabot to notify affected repos and open upgrade pull requests.
Allison announces enterprise-managed OpenTelemetry export controls for GitHub Copilot in VS Code and Copilot CLI, letting organizations centrally mandate OTLP endpoints, protocols, resource attributes, and capture settings without relying on per-developer OTEL_* environment variables.
Allison announces general availability of device-level deployment for managed GitHub Copilot settings in VS Code and GitHub Copilot CLI, enabling enterprise admins to enforce consistent Copilot governance via MDM, configuration files, or server-managed settings.
Allison summarizes the June/early July 2026 Visual Studio Code releases (v1.123–v1.127) focused on GitHub Copilot: integrated browser upgrades for agent-driven web validation, better organization for parallel agent sessions, clearer cost and token visibility, easier model-provider discovery via Marketplace, and more hands-off Autopilot behavior.
Allison summarizes what’s new in actions/setup-java v5.5.0 for GitHub Actions workflows, including optional GPG signature verification for JDK downloads, a new Kona JDK distribution, and several Maven-focused improvements around toolchains, caching, and quieter CI logs.
Allison announces npm v12 GA, focusing on new install-time security defaults for npm install and a phased deprecation of 2FA-bypass granular access tokens, with timelines and migration guidance for safer publishing workflows.
Allison announces a GitHub Mobile update that lets developers kick off Copilot cloud agent from a pull request to resolve merge conflicts, helping unblock PRs while away from a desktop workflow.
Allison announces an update to GitHub Mobile that adds live notifications for remote GitHub Copilot CLI sessions, so developers can monitor coding agent progress, see when input is needed, and jump back into session logs from their phone.
Allison announces new GitHub Copilot usage metrics API fields that let enterprises and organizations compare pull request review speed and review-cycle counts across AI adoption phases, helping teams measure how Copilot adoption correlates with code review throughput.
Allison announces updates to GitHub Copilot for JetBrains IDEs, including Codex as a new agent provider (public preview), expanded agent customization features (Hooks and MCP server management), and new controls for approvals, permissions, and debugging across agentic sessions.
Allison announces that Kimi K2.7 Code is now available to GitHub Copilot Business and Copilot Enterprise customers, including how admins can enable it and what to consider before turning on an open-weight model.
Allison announces that GitHub Enterprise Cloud admins can now set per-user AI credit budgets for cost centers directly in the billing UI, matching controls that previously required the REST API.
Allison announces generally available extended metadata checks for GitHub secret scanning, adding richer context (like owner, creation/expiry dates, and org/project details) plus multipart validity checks for secret types that require supplementary metadata to validate.