Skip to content
Releases.
GitHub

GitHub Advanced Security Release notes from GitHub

51 releases · 15 this month

Official notes RSS
DateRelease
Sep 22Deprecation notice: All-platform CodeQL bundle
Deprecation
Sep 22Security improvements for SSH
Update
Sep 21GitHub Enterprise adds credential inventory exports
Update
Sep 18Manage the code coverage ruleset condition with the REST API
GA
Sep 18Stage-only npm tokens for safer automation
Update
Sep 16Code scanning AI Scan no longer requires CodeQL default setup
Preview
Sep 15Enforce GitHub Advanced Security configurations
Update
Sep 10AI Scan for pull request APIs in public preview
Preview
Sep 9Block pull requests with exposed secrets from merging
Preview
Sep 9GitHub Advanced Security expands trial availability
Update
Sep 9Remediate Code Quality findings with agentic autofix
Update
Sep 9CodeQL 2.27.0 adds support for Linux ARM64
Update
Sep 9npm extends recovery-code security holds to all accounts
Update
Sep 8Automatic Dependabot access to GitHub-hosted registries
Update
Sep 3Multiple trusted publishing configurations for npm
GA
Aug 25Block users directly from security advisories
Update
Aug 20Code scanning adds a mitigated alert dismissal reason
Update
Aug 20Track GitHub Code Quality enablement changes in the audit log
Update
Aug 19Track organization code quality trends
GA
Aug 18Credential revocation and deauthorization by token type
Update
Aug 13License data quality improvements
Update
Aug 7Secret scanning coverage updates
Update
Aug 4Code coverage automatic enablement in Code Quality settings
Preview
Aug 4CodeQL 2.26.2 adds Swift 6.3.3 and Kotlin 2.4.10 support
Update
Aug 4Customize Dependabot pull request branch names
Update
Aug 4Customize code scanning default setup at scale
Update
Jul 31Restricting npm bypass-2FA granular access tokens
Update
Jul 29CodeQL 2.26.1 improves analysis accuracy and framework coverage
Update
Jul 28Dependabot alerts on malicious packages across more ecosystems
Update
Jul 28npm publish-time malware scanning and dual-use metadata
Update
Jul 20GitHub Code Quality is now generally available
GA
Jul 15Improvements to secret scanning and public monitoring
Update
Jul 14Code scanning shows AI security detections on pull requests
Update
Jul 14Dependabot version updates introduce default package cooldown
Update
Jul 13GitHub Code Quality license estimate in public preview
Preview
Jul 13Manage secret scanning custom patterns via REST API
GA
Jul 10Clearer names for secret scanning detector types
Update
Jul 10CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection
Update
Jul 9Organization-level targeting for GitHub Code Quality
Preview
Jul 8npm install-time security and GAT bypass2fa deprecation
Deprecation
Jul 8Innersource security advisories are generally available
GA
Jul 7Secret scanning extended metadata and multipart validation
GA
Jul 2Secret scanning public monitoring for enterprises
Preview
Jul 1Secret scanning adds validators for Asana, IBM, and MessageBird
Update
Jun 30Dependabot no longer infers .npmrc
Update
Jun 30Open source license compliance is in public preview
Preview
Jun 30Upcoming access restrictions to public API endpoints and UI views
Update
Jun 30Upcoming cloud data retention policy for closed security alerts
Update
Jun 30GitHub code coverage merge protection for pull requests
Preview
Jun 25npm adds preventive account protection for high-impact accounts
Update
Jun 24Self-service credential revocation for incident response
Update

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

About and activity

Code scanning, secret scanning and Dependabot.

GitHub releases

Other GitHub products: GitHub Actions, GitHub Copilot, GitHub platform

Releases per month
7Jun
18Jul
11Aug
15Sep
Official release-notes pages 8
Release-notes pageFeed
Actions changelog
github.blog
 RSS
Changelog
github.blog
 RSS
Copilot changelog
github.blog
 RSS
Copilot CLI releases
github.com
 RSS
Desktop release notes
desktop.github.com
None
Enterprise Server release notes
docs.github.com
None
GitHub CLI releases
github.com
 RSS
Security changelog
github.blog
 RSS

Weekly: the week's data and AI releases, Tuesday mornings.