Releasesby GlyphCredential revocation and deauthorization by token type
Building on our self-service credential revocation experiences for incident response, you can now take token-type and user-specific actions to deauthorize and revoke user credentials during a security incident. This gives you finer-grained control when responding to a compromise.
Also shipped Aug 18, 2026GitHub in August 2026 →
Access externally managed Apache Iceberg™ tables through Snowflake Horizon Catalog (Preview)
You can now use the Horizon Iceberg REST Catalog (IRC) API to access externally managed Apache Iceberg™ tables in a catalog-linked database from external engines such as Apache Spark™, Trino, DuckDB, or PyIceberg.
Power BI ingestion for Semantic View Autopilot (General availability)
Power BI ingestion for Semantic View Autopilot is now generally available. You can upload a .pbit or .pbix file to Semantic View Autopilot and have a semantic view created automatically from your existing data model, preserving the DAX measures, table relationships, and column descriptions you’ve already built in Power BI and making them available to Cortex...
User skills in Snowflake CoWork (Preview)
User skills are now available in public preview in Snowflake CoWork. Business users can create reusable workflows conversationally, from the UI ( + menu > Skills > Create new ), or by uploading a skill folder on Capabilities > Skills , then run them explicitly with / or from the Skills menus, or implicitly when a conversation matches the skill.
CodeMender updates (v0.4.0): Model support
This release introduces updates to CodeMender: Gemini 3 Flash removal : Gemini 3 Flash ( gemini-3-flash-preview ) is no longer supported as a model backend for CodeMender. CodeMender supports Gemini 3.5 Flash (default) and Gemini 3.1 Pro Preview. For more information, see Specifying the model .
Gemini Enterprise: Google Sites federated connector (GA)
The Google Sites federated connector is generally available (GA) on Gemini Enterprise. You can use the Gemini Enterprise app assistant to search across internal company websites, team sites, intranets, project hubs, and informational pages hosted on Google Sites, and get answers grounded in that content without needing to ingest the data.
Gemini Enterprise: Gemini 3.6 Flash available in US and EU multi-regions
Gemini 3.6 Flash is generally available in the us and eu multi-regions, and an allowlist is no longer required to use Gemini 3.6 Flash in the us multi-region. To make Gemini 3.6 Flash available to users in the Gemini Enterprise app, administrators must turn on the Gemini 3.6 Flash feature toggle in the Google Cloud console.
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Track organization code quality trends
The organization-level Code Quality dashboard now includes a Trends tab that shows how code quality has changed across your repositories over time. Instead of a point-in-time snapshot, you can see whether open findings are trending up or down and which repositories are driving the change.
Code scanning adds a mitigated alert dismissal reason
You can now dismiss a code scanning alert with the reason Mitigated when a vulnerability remains in the code but external controls, such as a web application firewall or network policy, mitigate its risk.
Track GitHub Code Quality enablement changes in the audit log
GitHub Code Quality now writes an audit log event whenever someone enables, disables, or changes its settings on a repository. Three new events give you that history: repo.code_quality_enabled records when someone turns on Code Quality for a repository. repo.code_quality_disabled records when someone turns it off.
License data quality improvements
GitHub now uses package registries like npmjs.org and PyPI to determine license information for software components in the dependency graph. This improves the accuracy and completeness of the licenses shown in dependency insights, software bills of materials (SBOMs), the open source license compliance feature in GitHub Advanced Security, and the dependency...
Block users directly from security advisories
You can now block a user directly from a security advisory page in public repositories owned by either an organization or a personal account. This brings the streamlined moderation experience available for issues and pull requests to security advisories.
Secret scanning coverage updates
This release expands secret scanning’s coverage with more secrets blocked by push protection, one new secret scanning partner, and richer metadata on alerts. Secret scanning partnership program Lovable Labs is now a GitHub secret scanning partner. Secret scanning now automatically detects the following new secret type in your repositories.
Customize code scanning default setup at scale
You can now apply your own configuration file to code scanning default setup, using the new github-codeql-config-file repository property. This gives you control over how CodeQL scans your code for security vulnerabilities, whether that’s on one repository or across your whole organization.
Customize Dependabot pull request branch names
You can now customize the branch names Dependabot creates for pull requests. New pull-request-branch-name options in .github/dependabot.yml let you set a prefix and maximum length, choose segment and word separators, set letter case, or define a custom template using placeholders.