Timeline
The dates that articles in Security give: what moves to preview or general availability, and what is deprecated or retired. The same date, stated by several articles, is shown once. Open a card to see where it comes from.
2027
Microsoft Build of OpenJDK
Sep 2027Microsoft support ends for JDKs 11 and 17.
2026
GitHub Dependabot: Dependabot alerts
8 Dec 2026GitHub will disable Dependabot alerts on most repositories inactive for one year, archiving existing alerts until reactivation.
GitHub Actions
2 Dec 2026Public repositories block pull_request_target events by default unless an applicable Actions event policy explicitly allows them.
GitHub CodeQL: Intel-based Mac support
Dec 2026CodeQL support for Intel-based Macs will be deprecated in mid-December 2026.
GitHub Secret Protection: Audit log events
12 Nov 2026The business field changes from enterprise display name to enterprise slug in affected secret scanning audit events.
Windows PowerShell: Signature verification
11 Nov 2026Stricter encoding validation can reject signed scripts containing invalid UTF-8 that previous Windows versions accepted.
Git
10 Nov 2026Git releases version 2.56.1 and maintenance backports addressing six security vulnerabilities.
Microsoft Defender: Local AI agent discovery
5 Nov 2026Local AI agent discovery becomes generally available, identifying more than 50 supported agents and their configured MCPs.
Microsoft Execution Container
5 Nov 2026Microsoft Execution Containers becomes generally available for operating system-enforced AI agent containment.
Microsoft Fabric: OneLake security support for Eventhouse external tables
4 Nov 2026OneLake security support for Eventhouse external tables becomes generally available.
GitHub CodeQL: GitHub Actions analysis
3 Nov 2026GitHub Actions analysis switches to the shared CFG library and removes legacy Completion classes, requiring some custom queries to change.
Microsoft Defender for Office 365: Move to Quarantine
Nov 2026Worldwide general availability rollout begins for Move to Quarantine in Plan 2, with completion expected by mid-December 2026.
Azure Cloud HSM: Hardware Audit Logging
29 Oct 2026Hardware Audit Logging begins rolling out across public regions, with automatic enablement for newly provisioned resources where available.
Microsoft Fabric: Workspace-level private connectivity for Eventstream custom endpoint sources
29 Oct 2026Eventstream custom endpoint sources gain workspace-level private connectivity in preview.
GitHub Dependabot: Reachability analysis
28 Oct 2026Reachability analysis enters public preview for JavaScript and TypeScript.
Oracle AI Database@Azure: EU Data Boundary support
27 Oct 2026The Oracle Azure Resource Provider adds EU Data Boundary support.
.NET
25 Oct 2026Out-of-band security releases deliver .NET 8.0.33, 9.0.22, 10.0.14, and .NET 11 RC3 with new and completed vulnerability fixes.
Microsoft Fabric: Database Hub
24 Oct 2026Database Hub enters public preview with unified database discovery and estate-wide security posture visibility.
GitHub Secret Protection: REST API
23 Oct 2026Public monitoring adds programmatic access to attributed findings and enterprise webhook notifications for newly attributed leaks.
GitHub Enterprise Cloud: Public monitoring
22 Oct 2026Public monitoring becomes available in public preview for enterprises with data residency.
GitHub CLI: Expiring, automatically refreshing OAuth credentials
21 Oct 2026Public preview adds opt-in expiring OAuth access tokens with automatic refresh.
GitHub Enterprise Cloud: GitHub package firewall
20 Oct 2026GitHub package firewall enters public preview for GitHub Enterprise Cloud customers with npm package support.
Microsoft Fabric: Fabric Policies
15 Oct 2026Fabric Policies enter preview with granular tenant- and capacity-scoped governance controls.
Microsoft Entra External ID: Refresh token transfer
29 Apr 2026Refresh token transfer in native authentication is generally available for companion-device scenarios including Apple Watch.
Microsoft Entra External ID: Single sign-on
23 Apr 2026Single sign-on from native apps to embedded web views becomes generally available for Native Authentication within a single application.
Microsoft Entra External ID: Social identity providers
1 Apr 2026Social identity provider support for native authentication becomes generally available through browser-delegated flows.
Microsoft Entra External ID: Multifactor authentication
9 Mar 2026Email and SMS OTP become generally available as second-factor MFA for native authentication.