Content by Allison (824)
Allison announces the deprecation of the Gemini 2.5 Pro and Gemini 3 Flash models across GitHub Copilot experiences, and explains what Copilot Enterprise admins may need to change in model policies so users can select supported alternatives in VS Code and on github.com.
Allison announces a public preview for GitHub Enterprise that lets Copilot admins target AI model policies to enterprise teams, so different groups can be granted additional models beyond an enterprise-wide baseline.
Allison announces a security change for npm: granular access tokens configured to bypass 2FA can no longer perform sensitive account, org, and package-management actions without an interactive 2FA challenge, and automated publishing should move to trusted or staged publishing.
Allison announces the retirement of GitHub Models as of July 30, 2026, including the shutdown of the playground, model catalog, inference API, and BYOK support. The post also points teams to Microsoft Foundry for model access and GitHub Copilot for building AI-powered workflows on GitHub.
Allison announces a GitHub Actions update that lets workflows reference actions and reusable workflows in the same repository using a new $/ prefix, avoiding an explicit checkout and keeping internal references aligned with the exact commit being executed.
Allison announces GitHub stacked pull requests in public preview, a workflow for breaking large changes into an ordered series of smaller PRs that can be reviewed independently and merged together, while still respecting existing checks, reviews, and branch protections.
Allison summarizes the July 2026 updates for GitHub Copilot in Visual Studio, including a new preview agent built on the Copilot SDK, built-in .NET and Azure skills, selected-code review actions, and organization-wide custom instructions for consistent Copilot behavior across teams.
Allison announces a new GitHub Copilot enterprise managed setting that lets organizations restrict which managed devices can host remotely controlled Copilot sessions, including options to require SSO, disable remote control, or allow it without restrictions.
Allison summarizes the July 2026 GitHub Copilot updates in Visual Studio Code (v1.127–v1.131), focusing on the Agents window workflow, multi-chat sessions, model and chat controls (including Copilot Vision and BYOK), plus editor, terminal, browser, and accessibility improvements.
Allison announces general availability for Copilot code review support for agent skills and MCP server connections, enabling teams to bring internal standards and external context into reviews. The update includes attribution on generated comments and outlines where to configure MCP servers and store tokens in repository settings.
Allison announces a new GitHub Copilot policy that automatically enables newly generally available models by default for Copilot Business and Copilot Enterprise, with a single opt-out control for organizations that need stricter governance.
Allison summarizes what’s new in CodeQL 2.26.1 for GitHub code scanning, including expanded framework modeling across Go, Java/Kotlin, and JavaScript/TypeScript, plus query updates that reduce false positives and improve detection for issues like SSRF, path injection, and hard-coded cryptographic values.
Allison announces expanded GitHub Copilot app reporting in the Copilot usage metrics API, adding user attribution and rollups across features, models, and languages, plus token and code activity breakdowns to help enterprises compare Copilot surfaces consistently.
Allison announces npm publish-time malware scanning and explains how it can delay package availability, when publishes may be held or blocked, and how maintainers can declare dual-use security functionality using new package metadata and a required DISCLOSURE file.
Allison announces that Grok 4.5 (xAI’s reasoning model) is rolling out in GitHub Copilot, highlighting its large context window, multimodal inputs, and suitability for agentic, multi-step coding workflows. The post also covers where you can select the model and how admins enable it for Business and Enterprise.
Allison announces an update to Dependabot malware alerts: GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, expanding detection coverage across more ecosystems and surfacing matches as Dependabot alerts in your repos and orgs.
Allison announces a new GitHub Actions protection that automatically holds certain workflow runs flagged as potentially malicious until a collaborator with write access reviews and approves them via an authenticated web session.
Allison announces updates to GitHub Copilot for JetBrains, including configurable OpenTelemetry export for agent workflows, tighter controls for model behavior (token limits, enabling/disabling built-in models), and support for MCP servers and custom agents in Claude agent flows, plus Copilot CLI and UX improvements.
Allison announces a new dedicated policy for the GitHub Copilot app, letting enterprises and organizations control access independently from Copilot CLI. The update keeps existing guardrails in place by routing changes through isolated workspaces and pull requests, so reviews, checks, and audit history still apply.
Allison announces that enterprise managed settings now apply to the GitHub Copilot app and Copilot cloud agent, letting enterprise owners enforce a single managed-settings.json policy across more Copilot clients, including controls for plugins, marketplaces, and approval-prompt bypass behavior.
Allison announces that Anthropic’s Claude Opus 5 is now selectable in GitHub Copilot, highlighting its strengths on long-running, multi-step coding tasks and agentic workflows, plus where it’s available, how admins enable it for Business/Enterprise, and how usage-based billing applies.
Allison announces general availability of Copilot cloud agent for Linear, letting teams assign Linear issues to Copilot to produce draft pull requests, run work in an ephemeral environment backed by GitHub Actions, and report progress back into Linear with configurable models, branches, and custom agents.
Allison announces that GitHub MCP Server already supports the upcoming stateless MCP specification, outlining protocol changes (like removing sessions and initialize) and what GitHub changed internally to stay compatible while improving scalability and verification.
Allison announces a GitHub Mobile improvement that lets you use the Copilot cloud coding agent to investigate and fix failing GitHub Actions checks directly from a pull request, creating a follow-up PR for you to review and merge.
Allison announces a public preview update for GitHub Projects and GitHub Issues: multi-select fields, allowing a single field to store multiple values and enabling filtering, grouping, and searching across project views.
Allison announces a public preview for GitHub Issues agent automation controls, adding approvals, confidence ratings, and rationale so teams can review or auto-apply agent-driven changes like labeling, assigning, and closing issues.
Allison announces a new GitHub Copilot metrics impact dashboard for enterprise admins and org owners, turning Copilot usage metrics API cohort data into a visual view of adoption depth, developer impact, and recommended next steps to move users into deeper adoption phases.
Allison announces a GitHub Enterprise Server security change that will reject command-line support bundle uploads from unpatched GHES versions starting August 18, 2026, and lists the minimum patch releases required to avoid disruption.
Allison announces that Gemini 3.6 Flash is rolling out as a selectable model in GitHub Copilot, highlighting its focus on coding and longer-horizon agentic tasks, plus where it’s available and what admins need to enable for Business and Enterprise plans.
Allison announces that GitHub Enterprise Cloud admins can now manage a cost center’s AI credit pool directly in the billing UI for Copilot Business and Copilot Enterprise, including automatic pool limit calculation and options for what happens when the included credit limit is reached.
Allison announces an update to GitHub Copilot usage reporting: Copilot Business and Copilot Enterprise users can now see the number of AI credits used in the current billing cycle, even when an admin hasn’t configured an individual budget.
Allison announces general availability of GitHub Code Quality for GitHub Enterprise Cloud and GitHub Team, combining deterministic CodeQL analysis with AI-assisted detection and Copilot Autofix to flag maintainability and reliability issues in pull requests, plus new org-level dashboards, coverage reporting, ruleset-based quality gates, and APIs.
Allison announces general availability of repository-level GitHub Copilot usage metrics via the Copilot usage metrics REST API, enabling daily per-repository reporting for Copilot coding agent and Copilot code review pull request activity across enterprises and organizations.
Allison announces an update to the Copilot usage metrics API that adds dedicated reporting for GitHub Copilot app activity in enterprise and organization reports, including active user counts and token usage breakdowns.
Allison announces new controls for GitHub Copilot code review, including reading custom instructions from the PR head branch, expanded instruction file support, repository-level setup steps via a workflow YAML, and a default-on firewall with separate configuration from Copilot cloud agent.
Allison announces a GitHub Mobile improvement that lets you start “Fix with Copilot” directly from Copilot code review pull request comments, making it quicker to address review feedback from a phone while keeping PRs moving.
Allison announces that GitHub Projects views now support advanced search in the filter bar, enabling boolean AND/OR expressions to build more precise views. The update also adds a reviews: filter for PR items and introduces a 90-day retention policy for deployment statuses in the REST and GraphQL APIs.
Allison announces a GitHub update that lets repository admins archive pull requests so they’re removed from public view without being deleted. The post explains what happens when a PR is archived (closed and locked), how visibility changes for non-admins, and how to find archived PRs during triage.
Allison announces new GitHub Enterprise Cloud REST API endpoints that let enterprise admins manage Visual Studio Subscription (VSS) assignments in bulk, including listing assignments, mapping UPNs to GitHub handles, and removing incorrect matches—useful when SCIM identities don’t align with VSS UPN formats.
Allison announces a public preview GitHub Actions runner image for Xcode 27 on GitHub-hosted macOS runners, including the new Xcode-version-based support model, the workflow labels to target the image, and current limitations around arm64-only availability.