Releasesby IbisCodeQL changes for macOS 27, Xcode 27, and Swift 6.4
Update5 days agoUnverifiedAdded Oct 20, 2026
Starting with macOS 27 and Xcode 27, Apple no longer includes Intel (x86_64) code in some of the system binaries and libraries that CodeQL relies on to trace builds. As a result, CodeQL can’t support traced scans on these versions or analyze Swift 6.4.
Topics: Observability, Developer tools
More GitHub Advanced Security releases
Every GitHub Advanced Security releaseUpdates to GitHub secret scanning
This update covers improvements and bug fixes for GitHub secret scanning. Update to audit log events On November 12, 2026 , the business field in affected secret_scanning_alert.* and secret_scanning_push_protection.bypass audit log events will change from the enterprise display name to the enterprise slug .
Dependabot alerts REST API now includes dependency versions
You can now get the version of a vulnerable dependency directly from Dependabot alert responses in the REST API. Each alert’s dependency object includes a new version_requirement field with the version or version constraint that Dependabot last recorded for the alert.
GitHub package firewall in public preview
An increasing number of malware attacks exploit systems at package installation time, harvesting credentials on CI/CD hosts or developer workstations without even running the package’s code. To stem this tide of attacks, GitHub is introducing a new package firewall capability.
Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4
You can now upgrade your projects to npm 12, pnpm 11 or 12, or Bun 1.4 and keep receiving Dependabot updates. Support for these package manager versions is available to all github.com users and will be included in GitHub Enterprise Server 3.24.
GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens
You can now use expiring, automatically refreshing OAuth credentials in GitHub CLI as part of a public preview. When you opt in, gh stores an expiring access token alongside a rotating refresh token and automatically refreshes the token whenever it is needed.
Public monitoring now available with data residency
Public monitoring is now available in public preview for GitHub Enterprise Cloud with data residency (GHEC DR). Public monitoring with data residency Public monitoring extends secret scanning beyond internal repositories by monitoring public commits across github.com, attributing exposed credentials back to your enterprise in real time.
Open source license compliance generally available
Enterprises can now manage their dependencies’ licenses at scale with sophisticated, ruleset-based checks that enforce a centralized policy. Open source license compliance is now generally available for GitHub Enterprise Cloud customers, including data-resident GHEC, for repositories with GitHub Code Security enabled.
Download GitHub Code Quality license usage as a CSV
You can now download a CSV report of your GitHub Code Quality license usage to reconcile your license count with your own records. The report includes: Each active committer who consumes a Code Quality license. The repositories that received their commits in the last 90 days. Whether each committer is unique to a single repository or organization.
Also shipped on Oct 19, 2026
GitHub in October 2026Training Upcoming Serverless Training deprecation: DeepSeek V4 Flash (0731) On November 2, 2026 , DeepSeek V4...
Training Upcoming Serverless Training deprecation: DeepSeek V4 Flash (0731) On November 2, 2026 , DeepSeek V4 Flash (0731) will be removed from the shared Serverless Training pool. This change applies only to Serverless Training. If you train DeepSeek V4 Flash (0731) on Serverless Training, migrate to DeepSeek V4.1 Flash 1017 before November 2, 2026.
Cloud Workload Security is now available in Beta
Cloud Workload Security (CWS) is now available in Beta. Apply policy controls to cloud API requests before they reach your cloud provider. Define policies with request filters and Rego checks. For example, block requests that would make an R2 bucket public. Use workloads and policy sets to target your cloud environments.
Postgres wait events, now in Query Insights
Query Insights for ClickHouse Managed Postgres now includes wait event breakdowns, blocked-session charts, and lock-wait charts. These metrics are also available in Prometheus.
Send OpenTelemetry traces to Agent Observability, no SDK required
You can now send OpenTelemetry traces straight to Agent Observability, without the SDK. If your agents already emit OpenTelemetry generative AI spans, from your framework, an instrumentation library, or spans you write yourself, keep your existing route through Grafana Alloy or an OpenTelemetry Collector and opt in your AI spans with a single attribute.
Cortex Tools for Cortex AI Gateway (Preview)
We are pleased to announce the preview of Cortex Tools, a part of Cortex AI Gateway that connects the AI clients your organization uses to the business tools your work already lives in, using the Model Context Protocol (MCP). Supported clients include CoCo Desktop, CoCo CLI, Claude, and Cursor.
Retiring the Fabric data agent custom tool in Microsoft Foundry: move to Fabric IQ
Microsoft is deprecating the custom-connection integration for Fabric data agents in Microsoft Foundry on November 6, 2026. Users must migrate to the Fabric IQ integration, which allows connecting multiple data agents and simplifies the connection workflow.