Releasesby GlyphSecret scanning detects Cloudflare service tokens
Secret scanning now detects Cloudflare service tokens. Detectors added Secret scanning now automatically detects the following new secret type in your repositories.
Also shipped Nov 12, 2026GitHub in November 2026 →
Genie ZeroOps is available in Beta
Genie ZeroOps is now in beta, providing automated monitoring for jobs, pipelines, and tables. It detects failures and data quality issues, investigates root causes, and proposes fixes.
You can track table-level data lineage in Knowledge Catalog for BigQuery pipelines
You can track table-level data lineage in Knowledge Catalog for BigQuery pipelines. For more information, see Track data lineage . This feature is generally available (GA).
BigQuery generative AI functions now support the gemini-4-hydrogen model
BigQuery generative AI functions now support the gemini-4-hydrogen model. This model is generally available .
Amazon Aurora and RDS now support Graviton5-based R9g database instances
AWS Graviton5-based R9g database instances are now generally available for Amazon Aurora with PostgreSQL compatibility and MySQL compatibility, and for Amazon RDS for PostgreSQL, MySQL, and MariaDB.
[In preview] Public Preview: SQL performance monitoring for Azure SQL Managed Instance
The public preview of Microsoft-managed performance monitoring for Azure SQL Managed Instance is now available. Customers monitoring business-critical SQL Managed Instance workloads often rely on custom scripts and disconnected monitoring tools. This requ
Gemini Enterprise: Gemini 4 Hydrogen available in web app, mobile app, Workflow Builder, and AI developer tools
Gemini 4 Hydrogen is generally available (GA) for the Gemini Enterprise web app, mobile app, Workflow Builder, and AI developer tools. Location availability : Supported in global , us , and eu multi-regions, with data residency and ML processing support in us and eu . For more information, see Data residency for Gemini Enterprise .
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Public monitoring alerts now have direct links
You can now access individual public monitoring alerts with a direct link to each alert. In your enterprise’s Public monitoring view, click an alert number to open the alert. You can use its URL to bookmark the finding or share it with teammates who have access.
Dependabot alerts will pause on inactive repositories
Starting December 8, 2026, GitHub will archive Dependabot alerts for repositories with no activity in the past year. Alerts are automatically restored if the repository becomes active again or if security configurations enforce them.
Secret scanning upgrades detectors, adds SpaceX as partner
GitHub secret scanning now supports SpaceX as a partner and includes a new detector for Starlink public API secrets. Additionally, existing detectors for AWS, Google, and other providers have been updated to reduce false positives.
CodeQL 2.27.4 improves accuracy and query metadata
CodeQL 2.27.4 improves query accuracy for Java, Kotlin, Rust, and C/C++ and updates CWE metadata.
Dependabot version updates support Agent Package Manager
You can now keep your AI agent skills, prompts, and instructions up to date with Dependabot version updates for Agent Package Manager (APM) . Dependabot opens pull requests to update supported git dependencies declared in apm.yml and regenerates apm.lock.yaml when it’s present. This support covers version updates, not security updates.
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.27.3 . It supports new Python 3.15 language features, adds JSON syntax for data extensions, adds C23 bit-precise integers, and includes accuracy improvements across languages.
Dependabot now supports Python 3.15
You can now upgrade your projects to Python 3.15 and keep receiving Dependabot updates. Support for Python 3.15 is available to all github.com users and will be included in GitHub Enterprise Server 3.24. For the full list of ecosystems that Dependabot supports, see Dependabot supported ecosystems and repositories .
GitHub Desktop adds short-lived authentication tokens
When you sign in to GitHub Desktop 3.6.10 or later, eligible accounts can now use short-lived, automatically refreshing authentication tokens. Short-lived access tokens reduce how long a leaked token can be used. Desktop automatically refreshes them for GitHub API requests and Git operations, keeping token renewal out of your everyday workflow.