03/2021

We now group multiple Dependabot alerts together if they’re discovered at the same time. This significantly reduces the volume of Dependabot alert notifications that users receive. A user with admin…

A dimmed theme, with a more subdued UI with a little less contrast than our dark mode theme, is now available to all GitHub.com users as a public beta. This…

The latest version of GitHub Mobile includes native support of GitHub Releases: View your repository’s releases on the go. Read release notes to keep up with everything new in the…

Dependabot can now access dependencies from authenticated private registries, such as GitHub Packages, Azure Artifacts, and Artifactory. These private registries are similar to their public equivalents, but they require authentication…

Repositories on an organization’s page can now be sorted alphabetically by name. Previously, all repositories on an organization’s page were sorted by last updated.

The latest release of the CodeQL CLI supports uploading analysis results to GitHub. This makes it easier to run code analysis for customers who wish to use CI/CD systems other…

GitHub Advanced Security customers can now view their active committer count and the remaining number of unused committer seats on their organization or enterprise account’s Billing page. If Advanced Security…

CodeQL now supports more libraries and frameworks for a variety of languages (C++, JavaScript, Python,Java, Go). The CodeQL engine can now detect more sources of untrusted user data, which improves…

GitHub Discussions is now available for private repositories. To get started, maintainers and admins of private repositories can now enable Discussions under Features in the repository settings. For more information,…

GitHub Enterprise Cloud enterprise owners may verify domains across their enterprise account and restrict the sending of email notifications to addresses within those domains. This feature expands upon the existing…

Secret scanning on private repositories now notifies commit authors when they push a change that includes a potential secret. The commit author can view the associated alert and mark it…

The Packages npm registry no longer returns a time value in metadata responses. This was done to allow for substantial performance improvements. We continue to have all the data necessary…

March 29, 2021: We’ve updated this Changelog entry to reflect current prefix format In two weeks, we will change the format of newly minted GitHub authentication tokens as part of…

Syntax highlight is now available when creating a file from the web. Previously it was only available when editing a file that was already committed. Highlighting is based on the…

You can now attach files, including images, to markdown files while you’re editing them in the web. This works just like file attachments in issues and pull requests and supports…