Releasesby GlyphSecurity risk assessments include repository protection status
The GitHub code security risk assessment and secret risk assessment now show whether findings are in protected or unprotected repositories, helping you identify where to extend your security coverage. Organization admins and security managers can start an assessment by going to Assessments under their organization’s Security tab.
Also shipped Nov 2, 2026GitHub in November 2026 →
Managed warehouse for MLflow (Beta)
Managed warehouse for MLflow is available in Beta, enabling users to view Unity Catalog traces in the MLflow UI without manually choosing a SQL warehouse.
Check out GitHub code without long-lived credentials on self-hosted agents
Self-hosted agents can now use temporary, read-only GitHub App tokens for repository checkout. This eliminates the need to distribute and rotate long-lived SSH keys or personal access tokens across your agent fleet.
Serving tuned Gemini 3.x models on global endpoints
Serving tuned Gemini 3.x models on global endpoints is available in General Availability (GA) . You can copy fine-tuned Gemini 3.x models to the global region using the Model Registry models:copy API, deploy them to global serving endpoints, and send inference requests directly to aiplatform.googleapis.com .
[Launched] Generally Available: Change from virtual network integration to a private endpoint capable network configuration in Azure Database for PostgreSQL flexible server
You now have greater flexibility in network design for Azure Database for PostgreSQL Flexible Server workloads. Now you can change existing VNet-integrated servers from delegated-subnet networking to a private endpoint-capable configuration, enabling secu
[Launched] Generally Available: Restart databases in Azure SQL DB via the Azure portal
You can now restart or fail over databases directly from the Azure portal, including single databases, Hyperscale databases, and databases in elastic pools, without writing scripts against the Rest API or contacting support. Learn more.
Lakehouse caching for cross-cloud data access is generally available (GA)
Lakehouse caching for cross-cloud data access is generally available (GA). Cross-cloud caching is disabled by default. You can opt in to caching on a Lakehouse federated catalog or a BigQuery cross-cloud connection to cache remote files in your Google Cloud region. This helps reduce cross-cloud egress costs and accelerate subsequent queries.
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Public monitoring adds triage, validity, API, and webhooks
GitHub Advanced Security's public monitoring now includes alert management, validity checks, and API/webhook support for remediating leaked secrets.
Public monitoring now available with data residency
Public monitoring for secret scanning is now in public preview for GitHub Enterprise Cloud with data residency. It attributes exposed credentials to enterprises using verified domain matching while keeping data within the designated geography.
GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens
GitHub introduced a public preview in GitHub CLI allowing developers to opt in to expiring, automatically refreshed OAuth tokens using the --expiring flag or configuration settings.
Updates to GitHub secret scanning
This update covers improvements and bug fixes for GitHub secret scanning. Update to audit log events On November 12, 2026 , the business field in affected secret_scanning_alert.* and secret_scanning_push_protection.bypass audit log events will change from the enterprise display name to the enterprise slug .
Dependabot alerts REST API now includes dependency versions
You can now get the version of a vulnerable dependency directly from Dependabot alert responses in the REST API. Each alert’s dependency object includes a new version_requirement field with the version or version constraint that Dependabot last recorded for the alert.
GitHub package firewall in public preview
An increasing number of malware attacks exploit systems at package installation time, harvesting credentials on CI/CD hosts or developer workstations without even running the package’s code. To stem this tide of attacks, GitHub is introducing a new package firewall capability.
Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4
You can now upgrade your projects to npm 12, pnpm 11 or 12, or Bun 1.4 and keep receiving Dependabot updates. Support for these package manager versions is available to all github.com users and will be included in GitHub Enterprise Server 3.24.
CodeQL changes for macOS 27, Xcode 27, and Swift 6.4
Starting with macOS 27 and Xcode 27, Apple no longer includes Intel (x86_64) code in some of the system binaries and libraries that CodeQL relies on to trace builds. As a result, CodeQL can’t support traced scans on these versions or analyze Swift 6.4.