GitHub Release notes and new features

GitHub Copilot for JetBrains adds improved OpenTelemetry configuration and model management

This update brings more control and clarity to your GitHub Copilot for JetBrains workflows. You can now connect MCP servers and custom agents in Claude agent flows, tune telemetry and token settings for advanced scenarios, and work with a cleaner chat and model-selection experience.

• GitHub Copilot for JetBrains adds improved OpenTelemetry configuration and model management
• GitHub Copilot app usage metrics now expand across report rollups
• Grok 4.5 is now available in GitHub Copilot

Dependabot alerts on malicious packages across more ecosystems

The GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, significantly expanding the breadth of malware data available to you through Dependabot alerts.

• Dependabot alerts on malicious packages across more ecosystems
• npm publish-time malware scanning and dual-use metadata

GitHub Actions holds potentially malicious workflows for approval

Recent supply chain attacks use compromised GitHub credentials to push malicious GitHub Actions workflows that steal CI/CD credentials and carry out additional attacks. To help protect public repositories from these attacks, GitHub Actions now holds certain workflow runs for approval before they start.