Releasesby GlyphCodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.27.3 . It supports new Python 3.15 language features, adds JSON syntax for data extensions, adds C23 bit-precise integers, and includes accuracy improvements across languages.
Also shipped Nov 3, 2026GitHub in November 2026 →
Gemini Enterprise: Salesforce federated data store
Connecting a Salesforce data source with Gemini Enterprise using data federation is generally available (GA). You can use the Gemini Enterprise app assistant to search across your Salesforce accounts, contacts, opportunities, cases, leads, and custom objects, get answers grounded in that content, and create, update, and delete records without needing to...
[In preview] Public Preview: Extend immutability for PITR backups for Azure SQL Database and Azure SQL Managed Instance
With this enhancement, you have the ability to lock your retention to the configured PITR retention, beyond the default 7 days of immutable backups that are already available. This is especially useful for financial customers who typically have 35 days of
UI improvements now generally available for PD Reliability Platform customers
Customers on PD Reliability Platform now have an improved UI experience, including: Consolidated settings: Brings all your configuration and admin settings together in one place. New nav: Provides streamlined access to your most important capabilities. Your Subscription: Shows where the opportunities are to shift work off humans and onto AI and automation.
Claude auto-connect (beta) for PagerDuty MCP Server now in Early Access
With Claude auto-connect, members with a matching PagerDuty account are connected to PagerDuty in Claude automatically, with no sign-in screen and no identity provider (IdP) configuration. Members act as themselves in PagerDuty, with the permissions they already have there.
In BigQuery Studio , the left pane has been updated with new tab names
In BigQuery Studio , the left pane has been updated with new tab names. The Classic Explorer tab has been renamed to the Data tab, and the Repository tab has been renamed to the Source control tab. The Data tab now includes the Add data button and focuses on data hierarchies. These changes are generally available (GA).
Okta connector is available in Beta
The managed Okta connector is now available in Beta in Databricks Lakeflow Connect. Workspace admins can enable Lakeflow Connect for Okta on the Previews page . Use the connector to ingest identity and access data from Okta into Databricks, including users, groups, group memberships, app integrations, devices, policies, and administrator roles.
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Dependabot version updates support Agent Package Manager
You can now keep your AI agent skills, prompts, and instructions up to date with Dependabot version updates for Agent Package Manager (APM) . Dependabot opens pull requests to update supported git dependencies declared in apm.yml and regenerates apm.lock.yaml when it’s present. This support covers version updates, not security updates.
Dependabot now supports Python 3.15
You can now upgrade your projects to Python 3.15 and keep receiving Dependabot updates. Support for Python 3.15 is available to all github.com users and will be included in GitHub Enterprise Server 3.24. For the full list of ecosystems that Dependabot supports, see Dependabot supported ecosystems and repositories .
GitHub Desktop adds short-lived authentication tokens
When you sign in to GitHub Desktop 3.6.10 or later, eligible accounts can now use short-lived, automatically refreshing authentication tokens. Short-lived access tokens reduce how long a leaked token can be used. Desktop automatically refreshes them for GitHub API requests and Git operations, keeping token renewal out of your everyday workflow.
Security risk assessments include repository protection status
The GitHub code security risk assessment and secret risk assessment now show whether findings are in protected or unprotected repositories, helping you identify where to extend your security coverage. Organization admins and security managers can start an assessment by going to Assessments under their organization’s Security tab.
Public monitoring adds triage, validity, API, and webhooks
GitHub Advanced Security's public monitoring now includes alert management, validity checks, and API/webhook support for remediating leaked secrets.
Public monitoring now available with data residency
Public monitoring for secret scanning is now in public preview for GitHub Enterprise Cloud with data residency. It attributes exposed credentials to enterprises using verified domain matching while keeping data within the designated geography.
GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens
GitHub introduced a public preview in GitHub CLI allowing developers to opt in to expiring, automatically refreshed OAuth tokens using the --expiring flag or configuration settings.
Updates to GitHub secret scanning
This update covers improvements and bug fixes for GitHub secret scanning. Update to audit log events On November 12, 2026 , the business field in affected secret_scanning_alert.* and secret_scanning_push_protection.bypass audit log events will change from the enterprise display name to the enterprise slug .