Webhook IP ranges added to the Meta API
Three new CIDR ranges appear in the Meta API's hooks field, and static webhook allowlists on any plan need them added to keep receiving deliveries.
Every GitHub update in one feed — release notes, features and changes, straight from the source.
178 updates
Three new CIDR ranges appear in the Meta API's hooks field, and static webhook allowlists on any plan need them added to keep receiving deliveries.
Fusion routes each prompt across models at three effort levels on all Copilot plans, with a 30% model-cost discount on paid plans through November 30.
Projects let Copilot coordinate agents across repositories and recurring tasks, and computer use arrives on macOS and Windows, both in public preview.
Copilot comes with GitHub Enterprise Cloud licences for account-team customers, with usage metered against the budget and Standalone seats at $10 a month.
The public preview covers code scanning alerts and local reviews on all Copilot plans, but not GitHub Enterprise Server.
Copilot Memory is generally available on paid plans, and Dreaming enters preview on eligible paid plans, needing GPT-6.1 Sol and billed in AI credits.
Shared automations are billed to the repository owner, act as Copilot, and are rolling out to Copilot Pro, Pro+, Max, Business and Enterprise plans.
Image generation is in public preview on paid Copilot plans, works in VS Code, the Copilot app and CLI, and can be disabled by admins.
Opt-in preview routes Copilot requests between local and cloud models in the CLI, app and VS Code, with managed setup on Windows with an NVIDIA GPU.
The open source GitHub Next project compiles Markdown instructions into Actions YAML, with Copilot or your own agent, and adds ARC runner support.
Free in public preview for GitHub Enterprise Cloud, it labels JavaScript and TypeScript alerts as reachable, potentially reachable or unreachable.
Cloud agent sessions can now move between VS Code, GitHub Mobile, github.com and Copilot CLI, and agents can run on a separate machine.
Maintainers can set default plugins per repository, and GitHub Enterprise Cloud admins can require or block plugins for Copilot Business and Enterprise users.
GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, available in public preview.
GPT-6.1 Terra is OpenAI's lower-cost agentic coding model, available to Copilot Pro, Pro+, Max, Business and Enterprise users across IDEs, CLI and github.com.
Copilot CLI, the Copilot app and VS Code can now auto-approve requests an LLM judges clearly safe, with enterprise policy controls.
Enterprise and organization admins get per-client request, session and token counts, including OpenCode, Claude Code and Codex, in 1-day and 28-day reports.
Teams users can @mention GitHub to turn an issue into a pull request, and the legacy GitHub app is retired on November 16.
GitHub restored about 12,285 Enterprise Managed User accounts wrongly deleted in June, and enterprise owners need to take no action.
Enterprise Cloud customers in the public preview can now dismiss and filter leaked-secret alerts, see token validity, and pull alerts through an API or webhook.
Enterprise owners can now install GitHub Apps with new governance, security and admin permissions, as an alternative to classic personal access tokens.
The Git agent can summarise pull requests, BYOM needs the new Agent (Preview), and NuGet warnings get a Copilot fix, on every Copilot plan.
Enterprise and organization Copilot reports now list custom skills, agents and MCP servers by name, with up to 25 entries per record instead of five.
Copilot Business and Enterprise admins have until October 26 to set a default, or unconfigured generally available features follow the global policy.
Organizations that allow individual Actions blob storage hosts must add the new ranges to avoid interruptions to job summaries and logs.
Public preview for GHEC data residency enterprises with a Secret Protection or Advanced Security license, at no extra cost, matching leaks by verified domain.
GitHub Next and Microsoft Research’s Chopin and Proof-Driven Development Kit aim to verify AI-generated code without line-by-line review. Now in research preview.
Opt-in for GitHub CLI v2.103.0 and later on GitHub.com and Enterprise Cloud; leaked access tokens stop working within hours.
Dependabot updates now cover the newer package manager versions on github.com, and they will arrive in GitHub Enterprise Server 3.24.
Free in preview for GitHub Enterprise Cloud, it blocks risky npm packages using malware advisories, cooldowns and attestation checks.