Releasesby GlyphDependabot version updates introduce default package cooldown
Dependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request. This cooldown is now the default and requires no configuration.
Also shipped Jul 14, 2026GitHub in July 2026 →
Conversational analytics now supports the AI.AGG function
Conversational analytics now supports the AI.AGG function . This function is in Preview .
CREATE OR ALTER is generally available for 24 object types
CREATE OR ALTER is now generally available for 24 object types. CREATE OR ALTER creates an object if it doesn’t exist, or modifies an existing object to match the statement definition. It’s especially useful in declarative deployment workflows and CI/CD pipelines where the same script must be safe to re-run.
Catalog integration for Snowflake Postgres (General availability)
Catalog integrations for Snowflake Postgres are now generally available. A Snowflake Postgres catalog integration lets Snowflake automatically discover tables managed by a Snowflake Postgres instance and access them as read-only Apache Iceberg™ tables, using vended credentials so you don’t need to configure an external volume or manage storage credentials...
Allowlist partner platform IPs in context-based ingress control (Beta)
Context-based ingress control now supports Partner Platforms as a network source. Select a partner platform to allowlist the IPs that third-party apps use to connect to Databricks, including Power BI, Tableau Cloud, and dbt platform. Databricks manages and updates these IP lists automatically. See Network sources .
Trigger.AvailableNow support for OpenSharing streaming (GA)
Streaming reads from OpenSharing tables now support the Trigger.AvailableNow trigger. This trigger captures the shared table's current version when it starts, processes all available data across one or more micro-batches (honoring maxFilesPerTrigger and maxVersionsPerRpc ), and then stops, which is well suited to scheduled, batch-like incremental...
Admin API adds Claude Enterprise user management in beta
Claude Enterprise organizations can list and look up members, change roles, remove members, manage invites and groups, and read custom roles through the Admin API. Group and custom-role requests need the ce-user-management-2026-07-13 beta header.
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Code scanning shows AI security detections on pull requests
GitHub code scanning now surfaces AI-powered security detections directly on pull requests, expanding vulnerability coverage to languages and frameworks not currently supported by CodeQL. These detections help teams identify and address potential issues in parts of the codebase that previously had no native scanning coverage, all before code is merged.
Improvements to secret scanning and public monitoring
This week, we’re rolling out several improvements to secret scanning and public monitoring: Resend is now a GitHub secret scanning partner. Secret scanning now detects new secret types from APIclub and Resend. Secret scanning now blocks VolcEngine secrets with push protection by default.
Manage secret scanning custom patterns via REST API
Starting today, security teams can create, edit, and manage secret scanning custom patterns with the REST API. What’s new The following endpoints are generally available: GET .../secret-scanning/custom-patterns list patterns POST .../secret-scanning/custom-patterns create patterns PATCH .../secret-scanning/custom-patterns/{id} update patterns DELETE...
GitHub Code Quality license estimate in public preview
You can now see the number of active committers on repositories using GitHub Code Quality across your enterprise, giving you an estimate of your Code Quality license cost before it becomes a paid product on July 20, 2026. Code Quality is free during the public preview, so this usage isn’t billed today.
CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection
CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.0 , which adds support for Kotlin 2.4.0, introduces a JavaScript and TypeScript query for system prompt injection, and improves analysis accuracy across multiple languages.
Clearer names for secret scanning detector types
To make secret scanning easier to understand, we’re updating the names we use for our detector types to better reflect how each one finds secrets. This is a naming change only; detection behavior is exactly the same.
Organization-level targeting for GitHub Code Quality
Organization owners can now target a subset of repositories when enabling or disabling GitHub Code Quality, rather than applying it to every repository at once. This gives you more granular control on where you enable or disable Code Quality across your organization.
GitHub Code Quality is now generally available
GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team. It solves an emerging challenge for software development: AI accelerates code output, and Code Quality helps teams ship code they trust.