11/2021

GitHub Enterprise Cloud standalone organizations paying by invoice may now update to an enterprise account via a self-service flow. Organization owners may navigate to the organization’s billing page and click…

We’ve improved the depth of CodeQL’s analysis by adding support for more libraries and frameworks and increasing the coverage of our existing library and framework models. JavaScript analysis now supports…

Developers and security researchers using the CodeQL CLI and VS Code extension can now build databases and analyze code on machines powered by Apple Silicon (e.g. Apple M1). In order…

You can now require that all changes to a protected branch are made using a pull request, but without requiring reviews. This can be useful when you want to use…

Code scanning alerts now integrate with GitHub Issues task lists to make it easy to prioritize and track your alerts with all your development work. You can use the task…

We made three improvements to the repository invite experience, so you can start contributing faster: You will now see notifications for private repository invites, just as you already do for…

GitHub secret scanning helps protect users by searching repositories for known types of secrets. By flagging leaked secrets, our scans can prevent data leaks and prevent the fraudulent use of…

The GitHub Enterprise Server 3.3 Release Candidate is available. This release contains a broad range of features and enhancements across the platform including GitHub Actions, Security, and a host of…

Actions written in YAML, also known as composite actions, now support if conditionals. This lets you prevent specific steps from executing unless a condition has been met. Like steps defined…

A CODE_OF_CONDUCT.md file in the root of a repository will now be highlighted on the repository overview in the sidebar.

GitHub recently introduced the ability to set an expiration date when creating or regenerating a personal access token (PAT). For a PAT that is authorized to access an organization protected…

It’s now possible to use single-character prefixes for custom autolinks. Autolink prefixes also now allow ., -, _, +, =, :, /, and # characters, as well as alphanumerics. For…

Users and organizations can now verify GitHub Pages domains to protect against takeover attacks. Learn more about verifying your custom domain for GitHub Pages For questions, visit the GitHub Pages…

You can now use GitHub Actions to run workflows when branch protection rules change on a repository. For more info, see our docs.

It’s now possible to dismiss Dependabot alerts via the GraphQL API. For more info, see our docs.