- Dependabot now ingests malware advisories from the OpenSSF malicious‑packages repository
- Expands the range of malicious package data shown in alerts across more ecosystems
- Improves early detection and remediation of known malicious packages
Dependabot alerts on malicious packages across more ecosystems
Official GitHub changelog summary with source attribution, release tags, and community reactions.
Track this GitHub release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this GitHub release note into a weekly digest for the tools you actually use.
Create digestMore GitHub changelog updates
Add search by username, full name, or email for blocked users
Adds a public preview of GitHub Copilot integration in Slack, exposing Copilot CLI and app capabilities via the @GitHub bot.
Introduces collaborative GitHub Copilot agent sessions directly within Microsoft Teams discussions