Releasesby GlyphSecret scanning upgrades detectors, adds SpaceX as partner
GitHub secret scanning now supports SpaceX as a partner and includes a new detector for Starlink public API secrets. Additionally, existing detectors for AWS, Google, and other providers have been updated to reduce false positives.
Also shipped Nov 5, 2026GitHub in November 2026 →
Gemini Omni 1.2 Flash
Gemini Omni 1.2 Flash is now generally available, offering omni-modal processing for text, image, and video. New features include standalone video upscaling, extended generation durations, and reference-guided video editing.
Use GPT-6-Cyber to investigate vulnerabilities, reproduce them in an authorized test environment, and verify
OpenAI has released GPT-6-Cyber, a model designed to investigate vulnerabilities, reproduce them in authorized environments, and verify fixes.
Gemini Enterprise: Prepaid credits for Pay-as-you-go subscriptions and usage above quota
Prepaid credits are now generally available for self-serve Cloud Billing accounts, allowing users to pay for Gemini Enterprise usage without an invoiced billing account.
The BigQuery Metadata curation console page has been removed
The BigQuery Metadata curation console page has been deprecated. Users should now use Knowledge Catalog for data discovery, profiling, and governance tasks.
Conversational analytics in BigQuery is now available in the asia-northeast1 (Tokyo) location
Conversational analytics in BigQuery is now supported in the asia-northeast1 (Tokyo) region.
Announcing Web Answer on Amazon Bedrock AgentCore
Web Answer is now generally available on Amazon Bedrock AgentCore. It provides a managed tool that returns synthesized, cited answers grounded in web sources in a single call.
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
CodeQL 2.27.4 improves accuracy and query metadata
CodeQL 2.27.4 improves query accuracy for Java, Kotlin, Rust, and C/C++ and updates CWE metadata.
Dependabot version updates support Agent Package Manager
You can now keep your AI agent skills, prompts, and instructions up to date with Dependabot version updates for Agent Package Manager (APM) . Dependabot opens pull requests to update supported git dependencies declared in apm.yml and regenerates apm.lock.yaml when it’s present. This support covers version updates, not security updates.
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.27.3 . It supports new Python 3.15 language features, adds JSON syntax for data extensions, adds C23 bit-precise integers, and includes accuracy improvements across languages.
Dependabot now supports Python 3.15
You can now upgrade your projects to Python 3.15 and keep receiving Dependabot updates. Support for Python 3.15 is available to all github.com users and will be included in GitHub Enterprise Server 3.24. For the full list of ecosystems that Dependabot supports, see Dependabot supported ecosystems and repositories .
GitHub Desktop adds short-lived authentication tokens
When you sign in to GitHub Desktop 3.6.10 or later, eligible accounts can now use short-lived, automatically refreshing authentication tokens. Short-lived access tokens reduce how long a leaked token can be used. Desktop automatically refreshes them for GitHub API requests and Git operations, keeping token renewal out of your everyday workflow.
Security risk assessments include repository protection status
The GitHub code security risk assessment and secret risk assessment now show whether findings are in protected or unprotected repositories, helping you identify where to extend your security coverage. Organization admins and security managers can start an assessment by going to Assessments under their organization’s Security tab.
Public monitoring adds triage, validity, API, and webhooks
GitHub Advanced Security's public monitoring now includes alert management, validity checks, and API/webhook support for remediating leaked secrets.
Public monitoring now available with data residency
Public monitoring for secret scanning is now in public preview for GitHub Enterprise Cloud with data residency. It attributes exposed credentials to enterprises using verified domain matching while keeping data within the designated geography.