Releasesby GlyphTrack organization code quality trends
The organization-level Code Quality dashboard now includes a Trends tab that shows how code quality has changed across your repositories over time. Instead of a point-in-time snapshot, you can see whether open findings are trending up or down and which repositories are driving the change.
Also shipped Aug 19, 2026GitHub in August 2026 →
Data movement policies (General availability)
With this release, data movement policies are now generally available for Enterprise Edition (or higher). Data movement policies are part of Snowflake’s data exfiltration protection controls. These SQL-style conditional policies can help you limit, alert on, or block data movement operations based on specific movement types.
Organization Features in Organization Command Center (Preview)
Organization Features is now in preview in Organization Command Center. From the organization account, a user with the GLOBALORGADMIN role can open Organization Hub » Command center , then the Organization Features tile, to see which organization-level capabilities are enabled. In preview, the main control is premium views for cross-account telemetry.
Organization Command Center 3rd party access configuration (Preview)
3rd party access configuration is now in preview in Organization Command Center. From the organization account, a user with the GLOBALORGADMIN role can open Organization Hub » Command center , then the 3rd party access configuration tile, to classify member accounts as internal or external, set the default tenant type for new accounts, and maintain allowed...
Role-based access control (RBAC) is generally available
Role-based access control (RBAC) is now generally available. RBAC lets users assume a role in Databricks. When a user assumes a role, only that role's permissions apply, rather than the user's accumulated permissions. This enables exclusive access.
ai_extract precision mode is now generally available
You can now use ai_extract precision mode for advanced extraction workloads, including multi-page documents, schemas with 50 or more fields, many extracted items per document, and complex conditional field logic. See ai_extract function .
[Launched] Generally Available: Azure Databricks Lakebase in four additional regions
Lakebase is now generally available in four additional Azure regions: North Central US, France Central, Germany West Central, and East Asia. This expansion provides customers with additional deployment options and broader regional availability for Lakebas
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Code scanning adds a mitigated alert dismissal reason
You can now dismiss a code scanning alert with the reason Mitigated when a vulnerability remains in the code but external controls, such as a web application firewall or network policy, mitigate its risk.
Track GitHub Code Quality enablement changes in the audit log
GitHub Code Quality now writes an audit log event whenever someone enables, disables, or changes its settings on a repository. Three new events give you that history: repo.code_quality_enabled records when someone turns on Code Quality for a repository. repo.code_quality_disabled records when someone turns it off.
Credential revocation and deauthorization by token type
Building on our self-service credential revocation experiences for incident response, you can now take token-type and user-specific actions to deauthorize and revoke user credentials during a security incident. This gives you finer-grained control when responding to a compromise.
Block users directly from security advisories
You can now block a user directly from a security advisory page in public repositories owned by either an organization or a personal account. This brings the streamlined moderation experience available for issues and pull requests to security advisories.
License data quality improvements
GitHub now uses package registries like npmjs.org and PyPI to determine license information for software components in the dependency graph. This improves the accuracy and completeness of the licenses shown in dependency insights, software bills of materials (SBOMs), the open source license compliance feature in GitHub Advanced Security, and the dependency...
Secret scanning coverage updates
This release expands secret scanning’s coverage with more secrets blocked by push protection, one new secret scanning partner, and richer metadata on alerts. Secret scanning partnership program Lovable Labs is now a GitHub secret scanning partner. Secret scanning now automatically detects the following new secret type in your repositories.
Multiple trusted publishing configurations for npm
We’re continuing to make trusted publishing smoother for npm publishers, guided by maintainers feedback. Three updates to npm publishing are now generally available: Multiple trusted publishing configurations per package Staged packages can only be approved after malware scanning is complete Maintainers can see their staged history in the package versions...
Customize code scanning default setup at scale
You can now apply your own configuration file to code scanning default setup, using the new github-codeql-config-file repository property. This gives you control over how CodeQL scans your code for security vulnerabilities, whether that’s on one repository or across your whole organization.