Open Source changelog digest

Summary

Adds total merge count per AI adoption phase to enterprise and organization reports

Summary

GitHub Actions now issues read‑only cache tokens for workflow events triggered without write permissions.

Summary

MAI-Code-1-Flash, Microsoft’s in‑house coding model, is now generally available for GitHub Copilot Business and Enterprise users

Summary

Added Git worktree support, allowing multiple workspaces per repository directly in GitHub Desktop.

Summary

Copilot code review now leverages built‑in file exploration tools from the Copilot CLI/SDK.

Summary

Enterprises can now restrict which plugins users install in GitHub Copilot CLI and VS Code via the new strictKnownMarketplaces setting

Summary

Introduces saved views for repository issue pages, allowing teams to create and share custom filtered views (public preview).

Summary

Admins can disable standard GitHub-hosted runner labels (e.g., ubuntu-latest) to limit runner usage

Summary

GitHub Actions now allows steps to execute concurrently using background processes

Summary

Introduces a temporary preventive safeguard for high‑impact npm accounts.

Summary

GitHub-hosted larger runners now support Red Hat Enterprise Linux (RHEL) 9 and RHEL 10 images in public preview.

Summary

GitHub Copilot for Jira reaches general availability after public preview

Summary

Enterprise teams can be added as resources in cost centers.

Summary

Introduced numerous new APIs and enhancements: caller‑supplied readFile buffers, synchronous dgram connect/bind, TCP KEEPINTVL/KEEPCNT in net.setKeepAlive, TLS certificateCompression option, HTTP idle‑socket cleanup, loader package maps,...

Summary

Introduces break‑glass capability for GitHub Enterprise owners to instantly revoke all credentials of a compromised account

Summary

Copilot Free and Student plans now default to auto model selection

Summary

Updated crypto subsystem: new root certificates (NSS 3.123.1), added TurboSHAKE, KangarooTwelve, ML‑KEM and other algorithms, hardened WebCrypto checks and unified key import handling.

Summary

Secret scanning now captures extended metadata for Replicate secrets

Summary

Added public preview read‑only REST endpoints for fetching repository‑level Code Quality findings.

Summary

Dependabot can now read private GitHub Packages registries without using a personal access token.

Summary

Fixed unexpected behavior introduced by the prior security release (22.23.0).

Summary

Introduces a GA tabbed terminal UI for GitHub Copilot CLI

Summary

Dependabot drops support for Python 3.9 now that it has reached end-of-life.

Summary

Added BYOK support to the GitHub Copilot app, enabling use of your own keys.

Summary

Added support for organization and enterprise agents from GitHub.