…security Jun.09 Retired Upcoming breaking changes for npm v12 supply chain security Jun.09 Release Periodic code scanning of inactive repositories application security enterprise management tools Jun.09 Improvement Security validation…
…Advanced Security Policies page. Previously, Dependabot could only access repositories within the same organization, which meant cross-organization dependencies in internal repositories couldn’t receive automatic updates. With this change, enterprise and…
…supply chain security Jun.09 Release Dependabot version updates now support the Deno ecosystem supply chain security Jun.09 Retired Upcoming breaking changes for npm v12 supply chain security May.26 Release…
Back to changelog You can now link code scanning alerts to GitHub Issues, bringing security remediation into your existing planning and tracking workflows. This functionality is in public preview. With this update…
Back to changelog Some dependency vulnerabilities require more than a version bump—they need code changes across your project. Now generally available, you can assign Dependabot alerts to AI coding agents, including…
Back to changelog Organization admins and security managers can now jump into a Copilot experience directly from secret risk assessment or Code Security risk assessment results to get contextual explanations and guided…
Back to changelog Dependabot and code scanning now support OpenID Connect (OIDC) authentication for private registries configured at the organization level for two additional registries: Cloudsmith and Google Artifact Registry . What’s…
Back to changelog CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.24.3 , which adds…
Back to changelog More than 10,000 enterprises have used the GitHub Code Quality public preview to detect maintainability and reliability issues, enforce quality gates, and track code coverage. On July 20…
Back to changelog You can now apply your own configuration file to code scanning default setup, using the new github-codeql-config-file repository property. This gives you control over how CodeQL…