Releasesby GlyphSecret scanning detects secrets in GitHub Actions workflow logs
GitHub secret scanning now detects secrets in GitHub Actions workflow logs, in addition to issues, wikis, discussions, and pull requests . Actions workflow log scanning is available in public preview. How does Actions workflow log scanning work? When a workflow run completes, GitHub scans its logs for provider patterns.
Also shipped Nov 9, 2026GitHub in November 2026 →
The following AlloyDB AI features and improvements are generally available ( GA ): - Smart batching for AI...
The following AlloyDB AI features and improvements are generally available ( GA ): Smart batching for AI functions: AI function acceleration is generally available for ai.if , ai.rank , ai.analyze_sentiment , ai.summarize , ai.extract , ai.classify , and ai.generate on AlloyDB clusters running PostgreSQL 17 and later.
To support your FinOps practices, you can now opt in to compute cost attribution in BigQuery editions
To support your FinOps practices, you can now opt in to compute cost attribution in BigQuery editions. This feature attributes billed compute charges directly to the query projects that use your administration project's reservation capacity.
Query performance troubleshooting and job and system performance comparison in the BigQuery jobs explorer are...
Query performance troubleshooting and job and system performance comparison in the BigQuery jobs explorer are generally available (GA). For more information, see Troubleshoot job performance and Diagnose performance regressions by comparing jobs and systems .
When you create or schedule a pipeline, you can specify the maximum number of concurrently executed pipeline...
When you create or schedule a pipeline, you can specify the maximum number of concurrently executed pipeline tasks. This feature is generally available (GA).
You can use compression functions in GoogleSQL to compress or decompress bytes or string values by using the...
You can use compression functions in GoogleSQL to compress or decompress bytes or string values by using the Zstandard (Zstd) lossless data compression algorithm. The following functions are supported: ZSTD_COMPRESS ZSTD_DECOMPRESS_TO_BYTES ZSTD_DECOMPRESS_TO_STRING These functions are in Preview .
Fast mode for Anthropic Claude models is generally available
Fast mode for supported Anthropic Claude models, starting with Claude Fable 5.2 ( claude-fable-5-2 ), is available in General Availability (GA) . You can set "speed": "fast" in online pay-as-you-go prediction requests to accelerate output token generation for latency-sensitive agentic workflows.
More from GitHub ActionsEvery GitHub Actions release →
pull_request_target blocked by default December 2
Starting December 2, 2026, GitHub Actions will block pull_request_target events by default in all public repositories, unless an applicable Actions event policy explicitly allows them. Enforcement was previously scheduled for November 2, 2026. GitHub introduced this default rule through workflow execution protections.
Meta API endpoints updated for Actions blob storage
GitHub has added new blob storage endpoints for GitHub Actions. Organizations using network allowlists must update their settings to include these new hosts to ensure continued access to job summaries and logs.
Xcode 27 runner image generally available
You can now use the generally available Xcode 27 runner image to build and test your Apple applications in GitHub Actions. Previously in public preview, this GitHub-hosted image runs on macOS 27 and includes the Xcode 27 toolchain and Apple SDKs.
GitHub Actions workflow lockfiles in public preview
GitHub Actions workflow dependency lockfiles are now in public preview for GitHub Enterprise Cloud, GitHub Enterprise Cloud with data residency, Team, and Free plans. Tags and branches can move after you review a workflow, so a later run might execute different code.
Stateless GitHub App installation tokens rolled out
The staged rollout of the stateless GitHub App installation token format, which began on April 27, 2026, is complete. By default, all newly minted GitHub App installation tokens will be in the stateless ghs_APPID_JWT format, which makes token issuance and validation faster and improves the reliability of the GitHub API.
GitHub Actions: macOS 14 runner image retirement
The macOS 14 runner image will be retired on November 2, 2026. To raise awareness of the upcoming removal, jobs using macOS 14 will temporarily fail during the following scheduled brownout periods: October 5, 14:00 UTC to October 6, 00:00 UTC October 12, 14:00 UTC to October 13, 00:00 UTC October 16, 14:00 UTC to October 17, 00:00 UTC October 19, 14:00 UTC...
Actions retention now covers checks, runs, and statuses
As previously announced , checks, workflow runs, and statuses are now governed by the same GitHub Actions retention setting that controls how long artifacts and logs are kept. These records are automatically cleaned up when they exceed the retention period configured for your enterprise, organization, or repository.
Changes to query results in the GitHub Actions API and UI
Queries for workflow runs in the GitHub Actions API and UI now return a less precise but more accurate count of records when you search by workflow, event, status, branch, or actor. We will continue to return paginated results of up to 1,000 items.