We have introduced the ability for enterprises to enable or disable GitHub Actions for specific organizations. GitHub organization admins can also opt in or opt out specific repositories from using GitHub Actions.
Additionally, organizations and repositories may now be able to choose Actions settings that are more restrictive than their organization or enterprise settings.
If you have any questions or thoughts about these changes, we recommend asking in our GitHub Community Forum's Actions Board!
You can now assign Dependabot-created pull requests to a team for review. Use the @dependabot use these reviewers command in any Dependabot pull request, or configure the default reviewer to be a team using the reviewers option in the new Dependabot config file.
Learn more about GitHub-native Dependabot on the GitHub blog
We are changing the way commits are ordered in the pull request timeline and commits view. Commits are currently ordered by author date, which can cause commits to appear out of order in some scenarios, like after rebasing. With this change, commits are ordered according to their chronological order in the head branch, which is consistent with the ordering in Git.
This ordering is also reflected in the List commits on a pull request REST API and PullRequest object's timeline connection in GraphQL.
Learn more about pull requests