Releasesby GlyphManage AI Scan for repositories using the REST API
GitHub launched a public preview enabling organization and repository-level REST API management for code scanning AI Scan.
Also shipped Nov 13, 2026GitHub in November 2026 →
AI Function task support in Declarative Automation Bundles (Beta)
Databricks introduced Beta support for AI Function tasks within Declarative Automation Bundles.
Give agents only the access they need
Buildkite released token permissions and queue scopes for agent tokens, allowing teams to restrict agent capabilities and limit job acceptance to specific queues.
Many-to-many relationships in semantic views (Preview)
Snowflake Cortex AI launched a public preview for modeling many-to-many relationships between logical tables within semantic views.
BigQuery connections for MySQL, Oracle, and PostgreSQL are in preview
Google Cloud introduced BigQuery federated query connections to MySQL, Oracle, and PostgreSQL in public preview.
Aurora PostgreSQL with express configuration now supported in CloudFormation
AWS added support for Aurora PostgreSQL express configuration in CloudFormation, enabling single-property automated cluster creation and faster serverless database setup.
Deploy pg\_pinecone to Render or Railway
Pinecone released one-click templates to deploy pg_pinecone on Render or Railway running PostgreSQL 18 with preloaded vector extensions.
More from GitHub Advanced SecurityEvery GitHub Advanced Security release →
Secret scanning detects Cloudflare service tokens
Secret scanning now detects Cloudflare service tokens. Detectors added Secret scanning now automatically detects the following new secret type in your repositories.
Public monitoring alerts now have direct links
You can now access individual public monitoring alerts with a direct link to each alert. In your enterprise’s Public monitoring view, click an alert number to open the alert. You can use its URL to bookmark the finding or share it with teammates who have access.
Dependabot alerts will pause on inactive repositories
Starting December 8, 2026, GitHub will archive Dependabot alerts for repositories with no activity in the past year. Alerts are automatically restored if the repository becomes active again or if security configurations enforce them.
Secret scanning upgrades detectors, adds SpaceX as partner
GitHub secret scanning now supports SpaceX as a partner and includes a new detector for Starlink public API secrets. Additionally, existing detectors for AWS, Google, and other providers have been updated to reduce false positives.
CodeQL 2.27.4 improves accuracy and query metadata
CodeQL 2.27.4 improves query accuracy for Java, Kotlin, Rust, and C/C++ and updates CWE metadata.
Dependabot version updates support Agent Package Manager
You can now keep your AI agent skills, prompts, and instructions up to date with Dependabot version updates for Agent Package Manager (APM) . Dependabot opens pull requests to update supported git dependencies declared in apm.yml and regenerates apm.lock.yaml when it’s present. This support covers version updates, not security updates.
CodeQL 2.27.3 adds Python 3.15 features and JSON data extensions
CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.27.3 . It supports new Python 3.15 language features, adds JSON syntax for data extensions, adds C23 bit-precise integers, and includes accuracy improvements across languages.
Dependabot now supports Python 3.15
You can now upgrade your projects to Python 3.15 and keep receiving Dependabot updates. Support for Python 3.15 is available to all github.com users and will be included in GitHub Enterprise Server 3.24. For the full list of ecosystems that Dependabot supports, see Dependabot supported ecosystems and repositories .