Releasesby GlyphCodeQL 2.27.4 improves accuracy and query metadata
CodeQL 2.27.4 improves query accuracy for Java, Kotlin, Rust, and C/C++ and updates CWE metadata.
Also shipped Nov 4, 2026GitHub in November 2026 →
[Launched] Generally Available: Azure Database for PostgreSQL stable REST API version 2026-10-01
The Azure Database for PostgreSQL Flexible Server REST API version 2026-10-01 is now generally available, introducing new capabilities for maintenance, immutable backups, and encryption.
Analytics API (Public preview): report on the health of the data behind your agents, from your AI tool
The Monte Carlo Analytics API is now in public preview, allowing users to query data health, alert status, and cost metrics directly from AI tools via the Monte Carlo MCP server.
Twice the included embedding tokens through December 31
Pinecone is doubling the included monthly embedding tokens for Starter and Builder organizations through December 31, 2026.
Gemini Enterprise: Switch between teams in the mobile app
The Gemini Enterprise mobile app now supports switching between multiple teams without re-authentication, and allows renaming or removing teams from the list.
Compare AI agent changes with Online Experiments in Agent Observability
Datadog Online Experiments allows engineers to test AI agent changes against production traffic. It enables comparison of response quality, cost, latency, and error rates.
Postmortems End of Life Completed
The Postmortems feature has been retired in favor of the upgraded Post-Incident Reviews in the PagerDuty web UI.
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Secret scanning upgrades detectors, adds SpaceX as partner
GitHub secret scanning now supports SpaceX as a partner and includes a new detector for Starlink public API secrets. Additionally, existing detectors for AWS, Google, and other providers have been updated to reduce false positives.
Dependabot version updates support Agent Package Manager
You can now keep your AI agent skills, prompts, and instructions up to date with Dependabot version updates for Agent Package Manager (APM) . Dependabot opens pull requests to update supported git dependencies declared in apm.yml and regenerates apm.lock.yaml when it’s present. This support covers version updates, not security updates.
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.27.3 . It supports new Python 3.15 language features, adds JSON syntax for data extensions, adds C23 bit-precise integers, and includes accuracy improvements across languages.
Dependabot now supports Python 3.15
You can now upgrade your projects to Python 3.15 and keep receiving Dependabot updates. Support for Python 3.15 is available to all github.com users and will be included in GitHub Enterprise Server 3.24. For the full list of ecosystems that Dependabot supports, see Dependabot supported ecosystems and repositories .
GitHub Desktop adds short-lived authentication tokens
When you sign in to GitHub Desktop 3.6.10 or later, eligible accounts can now use short-lived, automatically refreshing authentication tokens. Short-lived access tokens reduce how long a leaked token can be used. Desktop automatically refreshes them for GitHub API requests and Git operations, keeping token renewal out of your everyday workflow.
Security risk assessments include repository protection status
The GitHub code security risk assessment and secret risk assessment now show whether findings are in protected or unprotected repositories, helping you identify where to extend your security coverage. Organization admins and security managers can start an assessment by going to Assessments under their organization’s Security tab.
Public monitoring adds triage, validity, API, and webhooks
GitHub Advanced Security's public monitoring now includes alert management, validity checks, and API/webhook support for remediating leaked secrets.
Public monitoring now available with data residency
Public monitoring for secret scanning is now in public preview for GitHub Enterprise Cloud with data residency. It attributes exposed credentials to enterprises using verified domain matching while keeping data within the designated geography.