AI Coding & Developer Tools

What Happened GitHub released CodeQL 2.26.3: improved JavaScript/TypeScript/Vue modeling, more accurate GitHub Actions taint recognition, additional C/C++ flow sources, and a breaking removal of the codeql.actions.security.SelfHostedQuery module — auto-deployed to GitHub.com with staged Enterprise Server availability [2]. The GitHub Copilot app added a "My work" pane to centralize PRs and issues…

What Happened GitHub added token-type and user-specific deauthorization and revocation controls so enterprise owners, organization admins, and members with the Manage enterprise credentials permission can revoke or deauthorize only specific credential types (for example, personal access tokens, SSH keys, OAuth app tokens, or GitHub App user access tokens) instead of removing all of a user’s…

What Happened GitHub introduced Copilot canvases: a persistent, shared surface that combines agents and human inputs into repeatable development workflows. Canvases let teams define workflow states, surface key decisions, persist drafts and intermediate artifacts, and place explicit human approval points. Two published examples — a Java Modernization Studio (assessment → planning → migration → validation)…

What Happened GitHub changed its OAuth platform behavior to make short‑lived access tokens the default for new OAuth apps and added support for multiple redirect (callback) URIs per app. Key points: OAuth apps can opt into expiring access tokens: short‑lived access tokens (8 hours) plus refresh tokens (refresh tokens valid up to 6…

What Happened GitHub rolled out a set of coordinated updates that change how teams use AI inside IDEs, CLIs and GitHub itself: Grok 4.6 (xAI) is being added to GitHub Copilot as a reasoning model tuned for agentic coding, terminal-based workflows and longer-horizon, multi-step tasks; it’s selectable in the model picker across VS…

What Happened GitHub released multiple platform and product updates that affect license metadata, moderation, availability, and AI-assisted development: Registry-first license metadata: GitHub now prioritizes license information from canonical package registries (npm, PyPI, crates.io, NuGet, Rubygems, pkg.go.dev, deps.dev, pub.dev, packagist) for dependency graphs, SBOMs, license compliance, and the dependency-review action, falling back to ClearlyDefined…

What Happened Recent updates consolidate AI agents, governance and onboarding for developer tooling—primarily in the GitHub/Copilot ecosystem—while VS Code Insiders released new builds whose details were not available in the supplied notes. Agent Plugins 1.0: an open standard for packaging agent skills and MCP servers into a single, cross-client installable plugin. Published Aug…

What Happened GitHub Enterprise Server 3.22 release candidate published with enterprise and admin improvements; Copilot CLI can be configured for disconnected/air‑gapped GHES installs in technical preview and Enterprise Teams went GA for centralized team management [1]. GitHub Copilot for JetBrains added persistent Copilot memory, local model access via Ollama (BYOK), expanded…

What Happened Several GitHub updates impact developer tooling and platform operations: GitHub Copilot SDK for Java (v1.0.7-preview.1) — a framework‑agnostic, vendor‑neutral Java client that supports BYOK (call OpenAI, Azure, Anthropic or OpenAI‑compatible endpoints), Java-native async APIs (CompletableFuture, lambdas), virtual-thread friendliness, three tool-definition styles (annotations, lambdas, JSON Schema), session-based agent loops, streaming events, and…