AI Coding & Developer Tools

What Happened GitHub introduced a Copilot app automation template to automate Dependabot pull request triage: it groups open Dependabot PRs by risk (safe patch, minor, major), verifies CI status, produces short summaries with next-step recommendations, and can start an interactive Copilot session from the automation context. Automations support manual, hourly, daily, weekly, or…

What Happened Recent updates center on GitHub platform controls for developer workflows and guidance for evaluating LLMs before production deployment. GitHub Copilot app added a centralized Customize tab (generally available). It consolidates MCP servers, plugins, skills and canvases, surfaces featured customizations, and preserves canvas context for moving from understanding to action (for example,…

What Happened GitHub added support for shared Copilot cloud agents inside Microsoft Teams so users can start and steer agent work directly from a Teams channel, thread or DM by mentioning @GitHub. Any participant can add context; participants with write access to the target repository can trigger code changes. Work runs in a secure cloud…

What Happened Several updates to developer tooling and AI assistants affect collaboration, moderation and code navigation: GitHub improved blocked-user management for personal accounts and organizations: searchable and sortable lists, filtering by block reason, private moderation notes, editable block settings, and visibility into who applied organization blocks and expirations; the blocked-user search UI is…

What Happened GitHub published a set of coordinated updates that affect CI runners, code‑scanning workflows and audit telemetry: The Windows 11 arm64 image with Visual Studio 2026 is now generally available; workflows can opt in immediately with runs-on: windows-11-vs2026-arm. GitHub will migrate the existing windows-11-arm image to Visual Studio 2026 by default between…

What Happened GitHub released CodeQL 2.26.3: improved JavaScript/TypeScript/Vue modeling, more accurate GitHub Actions taint recognition, additional C/C++ flow sources, and a breaking removal of the codeql.actions.security.SelfHostedQuery module — auto-deployed to GitHub.com with staged Enterprise Server availability [2]. The GitHub Copilot app added a "My work" pane to centralize PRs and issues…

What Happened GitHub added token-type and user-specific deauthorization and revocation controls so enterprise owners, organization admins, and members with the Manage enterprise credentials permission can revoke or deauthorize only specific credential types (for example, personal access tokens, SSH keys, OAuth app tokens, or GitHub App user access tokens) instead of removing all of a user’s…

What Happened GitHub introduced Copilot canvases: a persistent, shared surface that combines agents and human inputs into repeatable development workflows. Canvases let teams define workflow states, surface key decisions, persist drafts and intermediate artifacts, and place explicit human approval points. Two published examples — a Java Modernization Studio (assessment → planning → migration → validation)…

What Happened GitHub changed its OAuth platform behavior to make short‑lived access tokens the default for new OAuth apps and added support for multiple redirect (callback) URIs per app. Key points: OAuth apps can opt into expiring access tokens: short‑lived access tokens (8 hours) plus refresh tokens (refresh tokens valid up to 6…

What Happened GitHub rolled out a set of coordinated updates that change how teams use AI inside IDEs, CLIs and GitHub itself: Grok 4.6 (xAI) is being added to GitHub Copilot as a reasoning model tuned for agentic coding, terminal-based workflows and longer-horizon, multi-step tasks; it’s selectable in the model picker across VS…

What Happened GitHub released multiple platform and product updates that affect license metadata, moderation, availability, and AI-assisted development: Registry-first license metadata: GitHub now prioritizes license information from canonical package registries (npm, PyPI, crates.io, NuGet, Rubygems, pkg.go.dev, deps.dev, pub.dev, packagist) for dependency graphs, SBOMs, license compliance, and the dependency-review action, falling back to ClearlyDefined…

What Happened Recent updates consolidate AI agents, governance and onboarding for developer tooling—primarily in the GitHub/Copilot ecosystem—while VS Code Insiders released new builds whose details were not available in the supplied notes. Agent Plugins 1.0: an open standard for packaging agent skills and MCP servers into a single, cross-client installable plugin. Published Aug…