# GitHub updates

Every GitHub update in one feed — release notes, features and changes, straight from the source.

178 updates

- ## [Webhook IP ranges added to the Meta API](<https://creatorstoolbox.com/blog/github-webhook-ip-ranges-added-to-the-meta-api>)

Three new CIDR ranges appear in the Meta API's hooks field, and static webhook allowlists on any plan need them added to keep receiving deliveries.

2026-10-29

- ## [Route and orchestrate models with GitHub Copilot Fusion](<https://creatorstoolbox.com/blog/github-route-and-orchestrate-models-with-github-copilot-fusion>)

Fusion routes each prompt across models at three effort levels on all Copilot plans, with a 30% model-cost discount on paid plans through November 30.

2026-10-28

- ## [GitHub Copilot app, Universe releases](<https://creatorstoolbox.com/blog/github-github-copilot-app-universe-releases>)

Projects let Copilot coordinate agents across repositories and recurring tasks, and computer use arrives on macOS and Windows, both in public preview.

2026-10-28

- ## [GitHub Enterprise now includes access to GitHub Copilot](<https://creatorstoolbox.com/blog/github-github-enterprise-now-includes-access-to-github-copilot>)

Copilot comes with GitHub Enterprise Cloud licences for account-team customers, with usage metered against the budget and Standalone seats at $10 a month.

2026-10-28

- ## [Security extension for the GitHub Copilot app](<https://creatorstoolbox.com/blog/github-security-extension-for-the-github-copilot-app>)

The public preview covers code scanning alerts and local reviews on all Copilot plans, but not GitHub Enterprise Server.

2026-10-28

- ## [GitHub intelligence puts your code, context, and history to work](<https://creatorstoolbox.com/blog/github-github-intelligence-puts-your-code-context-and-history-to-work>)

Copilot Memory is generally available on paid plans, and Dreaming enters preview on eligible paid plans, needing GPT-6.1 Sol and billed in AI credits.

2026-10-28

- ## [Build shared workflows for your team with Copilot Automations](<https://creatorstoolbox.com/blog/github-build-shared-workflows-for-your-team-with-copilot-automations>)

Shared automations are billed to the repository owner, act as Copilot, and are rolling out to Copilot Pro, Pro+, Max, Business and Enterprise plans.

2026-10-28

- ## [Generate and edit images directly in Copilot](<https://creatorstoolbox.com/blog/github-generate-and-edit-images-directly-in-copilot>)

Image generation is in public preview on paid Copilot plans, works in VS Code, the Copilot app and CLI, and can be disabled by admins.

2026-10-28

- ## [GitHub Copilot Fusion now supports selection of local models](<https://creatorstoolbox.com/blog/github-github-copilot-fusion-now-supports-selection-of-local-models>)

Opt-in preview routes Copilot requests between local and cloud models in the CLI, app and VS Code, with managed setup on Windows with an NVIDIA GPU.

2026-10-28

- ## [GitHub Agentic Workflows generally available](<https://creatorstoolbox.com/blog/github-github-agentic-workflows-generally-available>)

The open source GitHub Next project compiles Markdown instructions into Actions YAML, with Copilot or your own agent, and adds ARC runner support.

2026-10-28

- ## [Prioritize Dependabot alerts with reachability analysis](<https://creatorstoolbox.com/blog/github-prioritize-dependabot-alerts-with-reachability-analysis>)

Free in public preview for GitHub Enterprise Cloud, it labels JavaScript and TypeScript alerts as reachable, potentially reachable or unreachable.

2026-10-28

- ## [GitHub Copilot in VS Code, Universe releases](<https://creatorstoolbox.com/blog/github-github-copilot-in-vs-code-universe-releases>)

Cloud agent sessions can now move between VS Code, GitHub Mobile, github.com and Copilot CLI, and agents can run on a separate machine.

2026-10-28

- ## [Repository plugin defaults and enterprise plugin controls generally available](<https://creatorstoolbox.com/blog/github-repository-plugin-defaults-and-enterprise-plugin-controls-generally>)

Maintainers can set default plugins per repository, and GitHub Enterprise Cloud admins can require or block plugins for Copilot Business and Enterprise users.

2026-10-28

- ## [GitHub Copilot supports server-to-server authentication](<https://creatorstoolbox.com/blog/github-github-copilot-supports-server-to-server-authentication>)

GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, available in public preview.

2026-10-27

- ## [GPT-6.1 Terra in GitHub Copilot](<https://creatorstoolbox.com/blog/github-gpt-6-1-terra-in-github-copilot>)

GPT-6.1 Terra is OpenAI's lower-cost agentic coding model, available to Copilot Pro, Pro+, Max, Business and Enterprise users across IDEs, CLI and github.com.

2026-10-26

- ## [GitHub Copilot assisted permissions generally available](<https://creatorstoolbox.com/blog/github-github-copilot-assisted-permissions-generally-available>)

Copilot CLI, the Copilot app and VS Code can now auto-approve requests an LLM judges clearly safe, with enterprise policy controls.

2026-10-26

- ## [Usage metrics API adds usage from tools like OpenCode](<https://creatorstoolbox.com/blog/github-usage-metrics-api-adds-usage-from-tools-like-opencode>)

Enterprise and organization admins get per-client request, session and token counts, including OpenCode, Claude Code and Codex, in 1-day and 28-day reports.

2026-10-23

- ## [Turn notifications into code with GitHub Copilot in Teams](<https://creatorstoolbox.com/blog/github-turn-notifications-into-code-with-github-copilot-in-teams>)

Teams users can @mention GitHub to turn an issue into a pull request, and the legacy GitHub app is retired on November 16.

2026-10-23

- ## [EMU deletions fix](<https://creatorstoolbox.com/blog/github-emu-deletions-fix>)

GitHub restored about 12,285 Enterprise Managed User accounts wrongly deleted in June, and enterprise owners need to take no action.

2026-10-23

- ## [Public monitoring adds triage, validity, API, and webhooks](<https://creatorstoolbox.com/blog/github-public-monitoring-adds-triage-validity-api-and-webhooks>)

Enterprise Cloud customers in the public preview can now dismiss and filter leaked-secret alerts, see token validity, and pull alerts through an API or webhook.

2026-10-23

- ## [Enterprise installations for GitHub Apps generally available](<https://creatorstoolbox.com/blog/github-enterprise-installations-for-github-apps-generally-available>)

Enterprise owners can now install GitHub Apps with new governance, security and admin permissions, as an alternative to classic personal access tokens.

2026-10-23

- ## [GitHub Copilot in Visual Studio — September update](<https://creatorstoolbox.com/blog/github-github-copilot-in-visual-studio-september-update>)

The Git agent can summarise pull requests, BYOM needs the new Agent (Preview), and NuGet warnings get a Copilot fix, on every Copilot plan.

2026-10-23

- ## [Custom skills, agents, and MCP servers in usage metrics API](<https://creatorstoolbox.com/blog/github-custom-skills-agents-and-mcp-servers-in-usage-metrics-api>)

Enterprise and organization Copilot reports now list custom skills, agents and MCP servers by name, with up to 25 entries per record instead of five.

2026-10-22

- ## [Global default for Copilot features generally available](<https://creatorstoolbox.com/blog/github-global-default-for-copilot-features-generally-available>)

Copilot Business and Enterprise admins have until October 26 to set a default, or unconfigured generally available features follow the global policy.

2026-10-22

- ## [Meta API endpoints updated for Actions blob storage](<https://creatorstoolbox.com/blog/github-meta-api-endpoints-updated-for-actions-blob-storage>)

Organizations that allow individual Actions blob storage hosts must add the new ranges to avoid interruptions to job summaries and logs.

2026-10-22

- ## [Public monitoring now available with data residency](<https://creatorstoolbox.com/blog/github-public-monitoring-now-available-with-data-residency>)

Public preview for GHEC data residency enterprises with a Secret Protection or Advanced Security license, at no extra cost, matching leaks by verified domain.

2026-10-22

- ## [GitHub previews Chopin for shipping AI code with proofs](<https://creatorstoolbox.com/blog/github-chopin-proof-driven-development-preview>)

GitHub Next and Microsoft Research’s Chopin and Proof-Driven Development Kit aim to verify AI-generated code without line-by-line review. Now in research preview.

2026-10-21

- ## [GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens](<https://creatorstoolbox.com/blog/github-github-cli-opt-in-to-expiring-auto-refreshing-oauth-tokens>)

Opt-in for GitHub CLI v2.103.0 and later on GitHub.com and Enterprise Cloud; leaked access tokens stop working within hours.

2026-10-21

- ## [Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4](<https://creatorstoolbox.com/blog/github-dependabot-now-supports-npm-12-pnpm-11-and-12-and-bun-1-4>)

Dependabot updates now cover the newer package manager versions on github.com, and they will arrive in GitHub Enterprise Server 3.24.

2026-10-20

- ## [GitHub package firewall in public preview](<https://creatorstoolbox.com/blog/github-github-package-firewall-in-public-preview>)

Free in preview for GitHub Enterprise Cloud, it blocks risky npm packages using malware advisories, cooldowns and attestation checks.

2026-10-20

[Open GitHub updates on Creators Toolbox](<https://creatorstoolbox.com/updates/github>)

---
Canonical source: https://creatorstoolbox.com/updates/github
