Releasesby GlyphImprovements to secret scanning and public monitoring
This week, we’re rolling out several improvements to secret scanning and public monitoring: Resend is now a GitHub secret scanning partner. Secret scanning now detects new secret types from APIclub and Resend. Secret scanning now blocks VolcEngine secrets with push protection by default.
Also shipped Jul 15, 2026GitHub in July 2026 →
BigQuery supports data governance tags , which let you enforce column-level security and data masking
BigQuery supports data governance tags , which let you enforce column-level security and data masking. Data governance tags are a type of Resource Manager tag that you can attach to sensitive columns and use in BigQuery data policies to grant conditional access to your users. This feature is in Preview .
Integrated SaaS listings on Snowflake Marketplace (General availability)
Select Integrated SaaS listings now let you start a free trial of a provider’s application directly from a Marketplace listing. This experience replaces the trials previously offered through Snowflake Partner Connect and brings these trials into the Marketplace, where discovery, trial, and purchase all happen in one place.
Consumer-controlled maintenance policies , General Availability
Consumer-controlled maintenance policies for Snowflake Native Apps are now generally available. Consumers can define when Snowflake Native App upgrades happen in their accounts by creating a maintenance policy and applying it to an account or an individual app. For more information, see Consumer-controlled maintenance policies .
Thinking Machine Labs Inkling now available as a Databricks-hosted model in Public Preview
Model Serving now supports Thinking Machine Labs Inkling as a Databricks-hosted model. This mixture of experts (MoE) model supports text and image inputs, a 1 million token context window, and is optimized for coding, reasoning, and agentic tool-use tasks. You can access this model using Foundation Model APIs . Inkling is available in Public Preview .
Custom URLs for your Databricks account (Public Preview)
You can now claim and enable a Custom URL that gives your Databricks account a single, branded entry point (for example, acme.databricks.com ) for all users and workspaces. See Give your Databricks account a custom URL .
AI Search High QPS is now generally available
AI Search High QPS is now generally available for standard endpoints. Set a target QPS on standard AI Search endpoints to power high-throughput, real-time workloads like search bars, recommendation systems, and entity matching. High QPS is enabled by default, but existing endpoints are not affected.
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Code scanning shows AI security detections on pull requests
GitHub code scanning now surfaces AI-powered security detections directly on pull requests, expanding vulnerability coverage to languages and frameworks not currently supported by CodeQL. These detections help teams identify and address potential issues in parts of the codebase that previously had no native scanning coverage, all before code is merged.
Dependabot version updates introduce default package cooldown
Dependabot now waits until a new release has been available on its registry for at least three days before opening a version update pull request. This cooldown is now the default and requires no configuration.
Manage secret scanning custom patterns via REST API
Starting today, security teams can create, edit, and manage secret scanning custom patterns with the REST API. What’s new The following endpoints are generally available: GET .../secret-scanning/custom-patterns list patterns POST .../secret-scanning/custom-patterns create patterns PATCH .../secret-scanning/custom-patterns/{id} update patterns DELETE...
GitHub Code Quality license estimate in public preview
You can now see the number of active committers on repositories using GitHub Code Quality across your enterprise, giving you an estimate of your Code Quality license cost before it becomes a paid product on July 20, 2026. Code Quality is free during the public preview, so this usage isn’t billed today.
GitHub Code Quality is now generally available
GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team. It solves an emerging challenge for software development: AI accelerates code output, and Code Quality helps teams ship code they trust.
CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection
CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.0 , which adds support for Kotlin 2.4.0, introduces a JavaScript and TypeScript query for system prompt injection, and improves analysis accuracy across multiple languages.
Clearer names for secret scanning detector types
To make secret scanning easier to understand, we’re updating the names we use for our detector types to better reflect how each one finds secrets. This is a naming change only; detection behavior is exactly the same.
Organization-level targeting for GitHub Code Quality
Organization owners can now target a subset of repositories when enabling or disabling GitHub Code Quality, rather than applying it to every repository at once. This gives you more granular control on where you enable or disable Code Quality across your organization.