GitHub

November 2026

• GitHub Next opens Ace, a local agent workspace (opens in a new tab)

  11-08 · Launch · ace.githubnext.com ↗ (opens in a new tab)

  GitHub Next released Ace, an MIT-licensed experiment for working with agents and teammates from your own.

• @GitHub in Slack and Teams is generally available (opens in a new tab)

  11-07 · Release · github.blog ↗ (opens in a new tab)

  GitHub made its Copilot agent generally available in Slack and Teams.

• GitHub previews a new Git storage design (opens in a new tab)

  11-06 · News · github.blog ↗ (opens in a new tab)

  GitHub described a rebuilt Git storage system built for many agents pushing to one repository.

• GitHub will block pull_request_target by default (opens in a new tab)

  11-03 · Release · github.blog ↗ (opens in a new tab)

  GitHub Actions will block pull_request_target runs by default in public repositories on Free.

October 2026

• GitHub Enterprise now includes Copilot for every licensed user (opens in a new tab)

  10-29 · News · github.blog ↗ (opens in a new tab)

  GitHub now bundles Copilot access into GitHub Enterprise for account-team customers.

• GitHub Agentic Workflows reaches general availability (opens in a new tab)

  10-29 · Release · github.blog ↗ (opens in a new tab)

  GitHub Agentic Workflows is generally available on Free, Team and Enterprise plans.

• Copilot assisted permissions reach GA (opens in a new tab)

  10-27 · Release · github.blog ↗ (opens in a new tab)

  GitHub made assisted permissions generally available in Copilot CLI, the Copilot app and VS Code.

• Copilot for JetBrains lets admins set the default model and mute MCP auto-start (opens in a new tab)

  10-11 · Release · github.blog ↗ (opens in a new tab)

  GitHub Copilot for JetBrains now lets enterprise admins choose any available Copilot agent model.

• GitHub Copilot's local sandboxing reaches general availability (opens in a new tab)

  10-08 · Release · github.blog ↗ (opens in a new tab)

  Local sandboxing for GitHub Copilot is now generally available in the Copilot CLI, the Copilot app.

• GitHub takes stacked pull requests to general availability (opens in a new tab)

  10-07 · Release · github.blog ↗ (opens in a new tab)

  Stacked pull requests - breaking a large change into smaller.

September 2026

• GitHub dogfoods its own AI security agent, finds 24 real vulnerabilities (opens in a new tab)

  09-29 · Campaign · github.blog ↗ (opens in a new tab)

  GitHub Security Lab ran its own open-source "taskflow" agent against popular Android apps.

• GitHub Copilot adds Claude Sonnet 5.5 (opens in a new tab)

  09-29 · Release · github.blog ↗ (opens in a new tab)

  Claude Sonnet 5.5 is generally available across every paid Copilot tier - Pro, Pro+, Max.

• GitHub adds proof-of-presence for high-impact actions (opens in a new tab)

  09-25 · Release · github.blog ↗ (opens in a new tab)

  GitHub Enterprise Cloud now offers "proof of presence," requiring an interactive MFA or re-authentication.

• GitHub lets admins set a default for new Copilot features (opens in a new tab)

  09-25 · Release · github.blog ↗ (opens in a new tab)

  GitHub is adding a global default policy for Copilot Business and Enterprise.

• GitHub's redesigned pull requests page goes GA (opens in a new tab)

  09-22 · Release · github.blog ↗ (opens in a new tab)

  GitHub took the redesigned repository pull requests page out of preview for all users.

• GitHub Enterprise adds a credential inventory export (opens in a new tab)

  09-22 · Release · github.blog ↗ (opens in a new tab)

  GitHub Enterprise owners can now export a full inventory of every credential able to reach their enterprise.

• GitHub Copilot adds Grok 4.7 (opens in a new tab)

  09-22 · Release · github.blog ↗ (opens in a new tab)

  GitHub is rolling out xAI's Grok 4.7 across every paid Copilot tier and every surface - VS Code.

• GitHub ports the Copilot runtime to Rust, mostly solo (opens in a new tab)

  09-17 · Campaign · github.blog ↗ (opens in a new tab)

  GitHub rewrote its Copilot agent runtime from ~430,000 lines of TypeScript to ~832,000 lines of Rust in 14.5.

• GitHub lets admins govern what Copilot agents are allowed to do (opens in a new tab)

  09-10 · Release · github.blog ↗ (opens in a new tab)

  Copilot Business and Enterprise admins can now centrally block, require approval.

• GitHub Copilot for JetBrains gets enterprise-managed sandbox policies (opens in a new tab)

  09-09 · Release · github.blog ↗ (opens in a new tab)

  Admins can now centrally set Copilot's sandbox behavior in JetBrains IDEs - filesystem access.

• GitHub reopens Copilot Business and Enterprise signups (opens in a new tab)

  09-04 · Release · github.blog ↗ (opens in a new tab)

  GitHub is gradually reopening Copilot Business and Enterprise signups for customers who pay by credit card.

• GitHub sets a four-week runway for four Copilot model deprecations (opens in a new tab)

  09-04 · Release · github.blog ↗ (opens in a new tab)

  GitHub will drop four models on October 2 - Gemini 3.5 Flash, Gemini 3.6 Flash.

August 2026

• Reopens Copilot Business signups, moves seats to prepaid (opens in a new tab)

  08-28 · News · github.blog ↗ (opens in a new tab)

  GitHub is making three changes to Copilot Business and Enterprise: signups reopen for new customers paying.

• Global model policy for Copilot reaches general availability (opens in a new tab)

  08-27 · Release · github.blog ↗ (opens in a new tab)

  GitHub Copilot admins on Business and Enterprise plans can now set one default enablement state.

• GitHub Copilot moves into Slack and Microsoft Teams (opens in a new tab)

  08-22 · Release · github.blog ↗ (opens in a new tab)

  Copilot's cloud agent landed in public preview in Slack and Microsoft Teams at once.

• Publishes the August 17 postmortem, and it names its own limit (opens in a new tab)

  08-21 · News · github.blog ↗ (opens in a new tab)

  A Central US data center component failed to scale under load and cascaded into authentication failures.

• Copilot adds canvases, a shared surface for agent work (opens in a new tab)

  08-18 · Launch · github.blog ↗ (opens in a new tab)

  GitHub shipped canvases in the Copilot app.

• Universe 2026 catalog goes live with an August 19 cutoff (opens in a new tab)

  08-14 · Campaign · github.blog ↗ (opens in a new tab)

  The full session catalog and schedule for GitHub Universe 2026 are live, covering workshops.

• Opens a GitHub Marketplace category for third-party agent apps (opens in a new tab)

  08-14 · Launch · github.blog ↗ (opens in a new tab)

  Agent apps is a new GitHub Marketplace category that plugs third-party tools into the same harness.

• GitHub ships a Copilot SDK for Java, in preview (opens in a new tab)

  08-11 · Release · github.blog ↗ (opens in a new tab)

  GitHub published a preview release, 1.0.7-preview.1, of the Copilot SDK for Java: a framework-agnostic.

• Adds a return-on-investment section to the Copilot dashboard (opens in a new tab)

  08-09 · Release · github.blog ↗ (opens in a new tab)

  GitHub added a "Potential ROI" section to the Copilot impact dashboard.

• GitHub Spark shuts down on 27 days' notice (opens in a new tab)

  08-05 · Release · github.blog ↗ (opens in a new tab)

  GitHub Spark stops accepting new users and new apps immediately.

• GitHub markets Copilot CLI by showing its lawyers using it (opens in a new tab)

  08-04 · News · github.blog ↗ (opens in a new tab)

  GitHub's own legal team, not engineers, show two Copilot CLI workflows they built: one drafts contracts.

July 2026

• GitHub Models goes dark six weeks after closing to new customers (opens in a new tab)

  07-31 · News · github.blog ↗ (opens in a new tab)

  GitHub Models is fully retired for every customer, including those with active usage.

• A SKILL.md file now steers Copilot code review, in GA (opens in a new tab)

  07-30 · Release · github.blog ↗ (opens in a new tab)

  GitHub moved Copilot code review's agent skills and MCP support from preview to general availability.

• A supply-chain bundle lands a day after a viral trust critique (opens in a new tab)

  07-28 · Release · github.blog ↗ (opens in a new tab)

  GitHub now scans npm packages for malware at publish time.

• A researcher shows 10,000 deleted malware repos grew back (opens in a new tab)

  07-27 · Discussion · orchidfiles.com ↗ (opens in a new tab)

  GitHub deleted about 10,000 malware-distributing repositories after a researcher's post hit Hacker News.