Changelog

Subscribe to all Changelog posts via RSS or follow GitHub Changelog on Twitter to stay updated on everything we ship.

~ cd github-changelog
~/github-changelog|main git log main
showing all changes successfully

Copilot and GitHub Models o3-mini Release

OpenAI’s latest model, o3-mini, is now available in GitHub Copilot and GitHub Models, bringing OpenAI’s newest reasoning model to your coding workflow.

The o3-mini reasoning model outperforms o1 on coding benchmarks with response times that are comparable to o1-mini, meaning you’ll get improved quality at nearly the same latency.

This cutting-edge model is rolling out gradually and will be available to GitHub Copilot Pro, Business, and Enterprise users today via the model picker in Visual Studio Code and github.com chat (support in Visual Studio, and JetBrains are coming soon). To accelerate your workflow, whether you’re debugging, refactoring, modernizing, testing, or just getting started, simply select “o3-mini (Preview)” to begin using it.

Paid Copilot subscribers get up to 50 messages every 12 hours. Business or Enterprise admins can enable o3-mini access for org members through their org and enterprise admin settings pages.

GitHub Models users with a paid Copilot plan will also be able to leverage the o3-mini model to enhance their AI applications and projects later today. In the GitHub Models playground, you can explore o3-mini’s versatility as you experiment with sample prompts, refine your ideas, and iterate as you build. You can also try it alongside other models available on GitHub Models including models from Cohere, DeepSeek, Meta, and Mistral.

To learn more, check out product documentation on GitHub Models. You can also join our community discussions.

See more

We’re releasing various improvements to security campaigns to help security teams and developers collaborate more effectively to resolve security debt with the help of Copilot Autofix.

Security campaigns with Copilot Autofix were released in public preview at GitHub Universe.

Available as part of GitHub Advanced Security, security campaigns help you rapidly reduce your backlog of application security debt. With security campaigns, you can make sure your developers focus on the most important security alerts across your portfolio. Copilot Autofix also automatically generates contextual explanations and suggests fixes for alerts in a campaign.

Today we are announcing multiple improvements based on the customer feedback we have received during the security campaigns public preview:

  • The repository limit for security campaigns has increased from 100 to 1000, making it easier to create campaigns from more of your critical repositories.
  • Multiple users or teams can now be specified as campaign managers, giving application security teams greater flexibility in assigning responsibility for monitoring campaign progress and collaborating with developers on fixing alerts.
  • We’ve added a new contact link field in the security campaigns user interface to facilitate better communication between security teams and developers during campaigns.
  • Email notifications are now consolidated when security campaigns are created or closed. Developers watching multiple repositories included in the same campaign will receive a single email including details of all relevant repositories rather than one email per repository.
  • Security campaigns are available for users of GitHub Advanced Security on GitHub Enterprise Cloud.

For more information about security campaigns, see About security campaigns in the GitHub documentation. If you have any feedback on security campaigns, join the discussion in the GitHub Community.

See more

GitHub Actions is excited to announce new enhancements to our suite of larger hosted runners.

Edit the size of a runner

Starting today, you can edit the size of your larger hosted runners. For customers using static IPs, you can size up or down while keeping your IP addresses the same. To edit your runners, follow the steps outlined in our documentation.

Windows Server 2025 4vCPU runner

We now offer Windows Server on a 4vCPU machine using the Windows 2025 image. The Windows Server 2025 image is still in public preview and subject to change. For more information on the Windows Server 2025, visit our runner-images repository. To set up a 4vCPU runner, follow the guide in our documentation.

See more

DeepSeek-R1 Release on Github Models

The latest trending AI model DeepSeek-R1 is now available in GitHub Models.

DeepSeek-R1 is a 671B parameter AI model designed to enhance deep learning, natural language processing, and computer vision capabilities. It offers a wide range of possibilities, provides quick insights, and allows users to explore the potential of AI in various applications.

GitHub Models makes it easy for every developer to build AI features and products on GitHub.

Try, compare, and implement this model in your code for free in the playground or via the API. Compare it to other models using side-by-side comparisons in GitHub Models.

To learn more about GitHub Models, check out the docs. You can also join our community discussions.

See more

Today, Actions larger runner REST APIs are now generally available. These new APIs empower you to programmatically create larger runners, assign them to a runner group, configure network settings for Azure private networking, and apply these configurations to specific runner groups.

With this release, you can now create and manage runners at scale without using the GitHub interface, saving time and reducing manual effort. Additionally, the APIs offer flexibility to apply network configurations to specific runner groups for Azure private networking, ensuring the desired configurations are available to your development teams.

For more information, please refer to the Actions API documentation and look for the new larger runner and network configuration endpoints. Come join the conversation in the community discussion and share your experience on the new APIs.

See more

With this preview, GitHub Enterprise Cloud accounts with Enterprise Managed Users (EMU) can decide to allow EMU enterprise traffic to github.com only via their existing corporate proxies. Unapproved traffic would be blocked.

With enterprise access restrictions via corporate proxies, you can now configure your network proxy or firewall to inject a header into your users’ web and API requests to github.com. This signal tells GitHub to block the request if it is from a user outside of your EMU enterprise – helping ensure that only the accounts you control are used on your corporate network. This enables highly regulated EMU customers to define a secure network strategy in order to reduce the risk of intentional or accidental data leaks by allowing access only to a strictly governed EMU enterprise.

This new network restriction covers API and UI access to github.com and will work in tandem with access rules that enable Copilot traffic to flow properly for enterprise managed users. Copilot access is managed using a different network policy that helps control which version of Copilot (Enterprise, Business, or Individual) is allowed on your network. See Configuring your proxy server or firewall for Copilot for detailed guidance on that GA feature.

This feature is currently available by request to EMU enterprises with licensed users. To request access, contact your account manager in GitHub’s Sales team or sign up here.

If you’re currently trialing EMU or are early in adopting an existing EMU environment, we recommend exploring GitHub Enterprise Cloud with data residency which offers a unique subdomain of GHE.com, so the proxy header is not required to differentiate traffic to your enterprise’s resources. This is the optimal solution for customers who have data residency needs in addition to applying network controls on public github.com access.

Learn more about restricting access to GitHub.com using a corporate proxy.

See more

A landscape image with a dark background and a red, gradient-filled shape partially positioned off-canvas in the top-right corner. The top-left corner contains foreground text that reads "What's New in GitHub Mobile" followed by a description of the January Update.

This month, we’re highlighting two major updates to GitHub Mobile: repository forking and create a pull request!

Repository forking

Fork repositories directly from your devices, making it easier than ever to collaborate and contribute.

Hero image showcasing the repository forking feature in GitHub Mobile

Create a pull request

Create a pull request on the go from your mobile device, making your workflow smoother when moving between desktop and mobile.

Screenshot of GitHub Mobile showing the option to create a pull request from an existing branch

iOS

What’s new

  • Tapping on a link in a Copilot chat response navigates to the destination in the app, if possible.
  • When using a hardware keyboard, send a message to Copilot by pressing return, and add a new line by pressing shift + return.

Bug fixes

  • Add accessibility hint for navigating to release details from feed.
  • Improve accessibility for setting status with emojis.
  • Present editing files window in full screen on iPad.
  • A response of Copilot Chat automatically scrolls until its message header is on top of the chat view.
  • Assistive technologies, including VoiceOver, announce the expansion state of code lines in code search results, improving accessibility.
  • Issue and pull request cells display without unnecessary vertical space.
  • Fixed Copilot button duplication.
  • Keyboard inputs are recognized when setting the user status.
  • Pull requests in the feed display the title.
  • The commit list toggle view in the create pull request sheet is accessible via keyboard with full keyboard access enabled.
  • Unsubscribe displays as a swipe action for notification in the inbox for team mentions.
  • Swiping a notification in the inbox animates the change.
  • Resolved an issue where backticks in issue titles rendered with unnecessary spacing in pill shapes.
  • Pull request review comments now correctly reflect the review submission date rather than the comment creation date.
  • Jump to the issue template picker via a deep link that requires account switching.
  • Contrast improvements for buttons in dark mode.
  • Improved screen reader support to announce the expansion state of the commit list while creating a pull request while editing code.
  • Fixed an error when navigating to files or folders in repositories with branch names containing / characters.
  • Navigate to user profiles directly from issue and pull request timeline events.
  • Project views display relevant content without unnecessary loading spinners at the bottom of the view, providing a smoother experience.
  • Issue and discussion titles display emojis as images instead of text codes.
  • Preserve scroll position on a long ReadMe when the app is background and then resumed.
  • Commit history for code directories and files appears in a three-column layout.
  • Render file changes of a pull request where the head repository doesn’t exist.
  • Previewing file changes of a pull request doesn’t open unnecessary extra modal views.
  • The ReadMe header in the repository screen aligns its content accordingly.
  • Links within the same content doesn’t open new screens.

Android

Bug Fixes

  • Fixed a bug that was breaking search in discussions.
  • Fixed a bug that prevents dragging favorite repositories downwards.
  • Fixed a crash that could occur when navigating to the newly forked repository.
  • Fixed a bug where the Add your review button was sometimes not visible on the pull request screen.
  • Increased contrast of the create pull request subtitle and commit chevron for improved accessibility.
  • Improved contrast and touch target accessibility in the deployment review screen.

Download or update GitHub Mobile today from the Apple App Store or Google Play Store to get started.

Learn more about GitHub Mobile and share your feedback to help us improve.

If you loved this, check out our Mobile 2024 in Review for highlights of major feature releases last year.

See more

You can now access a new prompt editor within GitHub Models, purpose-built to help you iterate, refine, and perfect your prompts. This powerful tool is designed to provide a focused and intuitive experience for crafting and testing your inputs, enabling you to optimize prompts for maximum performance and relevance in your projects. Whether you’re fine-tuning for precision or experimenting with different approaches, this editor empowers you to unlock the full potential of the models with ease and efficiency.

Image of prompt editor

This addition empowers you to:
– Quickly test and refine prompts without the complexity of multi-turn interactions.
– Utilize a dedicated space for single-turn message scenarios to ensure consistent results.

Start experimenting with the new prompt editor today!

Learn more about GitHub Models or join the conversation in our community discussions.

See more

Repository administrators and organization owners with a Copilot Business or Copilot Enterprise license can use content exclusions to configure Copilot in GitHub.com to ignore certain files. For example, ignore files called “secrets.json”, ignore files with the “*.cfg” extension, or ignore all files in the “/scripts/**” directory. Content exclusions can be applied through Settings > Copilot > Content exclusion.

See more

GitHub will deprecate the Docker registry for GitHub Packages on Feb 24th, 2025 in favor of the GitHub Container Registry, which supports Docker packages. All packages in the Docker registry will be deleted and cannot be fetched past the deprecation date.

When GitHub Container Registry (GHCR) became generally available in 2021, we automatically migrated packages in the Docker registry over, with the exception of packages that encountered namespace conflicts due to the same package name in both registries. To see if you are impacted, use our API endpoint to check for any affected packages that will need to migrate from the legacy Docker registry to GHCR.

If you are not in the small group with conflicting packages, no action is needed, as all requests will automatically forward to GHCR.

To learn more about working with the GitHub Container Registry

See more

Screenshot of GitHub Mobile showing the option to create a pull request from an existing branch

With this update, developers can review edited files and open a pull request from an existing branch anytime, anywhere, making your workflow smoother when moving between desktop and mobile.

Simply tap the + button on the repository or pull request view, select a branch, review the code and create a pull request if everything looks good. You can then continue testing or making adjustments on the desktop, making the development process more flexible and efficient.

Download or update GitHub Mobile today from the Apple App Store or Google Play Store to get started.


Learn more about GitHub Mobile and share your feedback to help us improve.

Join the discussion within GitHub Community.

See more

GitHub Models makes it easy for every developer to build AI features and products directly on GitHub. Try and compare models for free in the playground, or integrate all 40+ models into your app with just one API key.

models sorting options

In order to improve navigation thorugh our growing catalog of models, you can now sort models by:

  • Alphabetical
  • Recently added
  • Output token limit (maximum text generated by the model)
  • Input token limit (maximum text length model can process)

Learn more about GitHub Models or share feedback in our community discussions.

See more

Copilot chat on GitHub.com just leveled up! It now supports repository-specific custom instructions, giving you a more tailored and personalized chat experience. This means you can provide Copilot with important details about your development stack, coding standards, or even how you prefer to chat. 🎉

Now, you can use repository-specific custom instructions when chatting with Copilot in Visual Studio, VS Code and on GitHub.com

🚀 Getting Started

  1. Create a .github/copilot-instructions.md file in your repository (if .github doesn’t exist yet, go ahead and create it).
  2. Add your custom instructions to the file.

That’s it! Copilot chat will automatically apply these instructions whenever you’re chatting about that repository.

💡 Looking for ideas? Here are some examples to kick things off:

  • JavaScript: “Omit semicolons in code examples.”
  • Python: “We use Poetry for dependencies, not pip. Share instructions using Poetry.”
  • General style preference: “Use arrow functions instead of traditional function expressions.”

Start customizing and make Copilot chat feel like an extension of your team! 🛠

See more

GitHub Code Scanning powered by CodeQL now supports dependency caching for Java, Go, and C# projects. This feature ensures that scans can deliver meaningful results even if registries are temporarily unavailable, while also reducing overall scanning time after the cache is established.

Dependency Caching Availability:

  • Default Setup: For repositories using GitHub-hosted runners, dependency caching is automatically enabled for both public and private repositories during scans.
  • Advanced Setup: Users with custom configurations can manually enable dependency caching as needed.

This is now available on github.com.

See more

As of January 20th, 2025, Dependabot no longer supports npm version 6, which has reached its end-of-life. If you continue to use npm version 6, Dependabot will be unable to create pull requests to update dependencies. If this affects you, we recommend updating to a supported release of npm. As of December 2024, npm 11 is the newest supported release.

View npm’s official documentation for more information about supported releases.

See more

Starting Tuesday, February 18, 2025, we are updating our retention policy so that the last_activity_at value of the user management API will only be stored by GitHub for 90 days. Previously, the contents of this field were retained indefinitely.

See what’s changing

  • Old Policy: Unlimited retention of the last_activity_at value.
  • New Policy: A rolling 90-day retention period. If your data’s last_activity_at exceeds 90 days, its value will be set to nil.

Expected impact

Only users with no new activity within a 90-day window will have their last_activity_at value replaced by nil. In practice this means that on the changeover date, users whose last activity with Copilot took place prior to November 20, 2024 will have the value for their last_activity_at replaced on a rolling-forward basis.

Detail

Clarifying the behavior of last_activity_at in the context of the current changes:

  1. Assigning a Seat: When you assign a seat to a user, the last_activity value for that seat will be nil until the user interacts with it for the first time. This is true even if the user had previous activity from a different seat assignment in another organization.
  2. Removing a Seat: When you remove a seat from a user, the last_activity data for that user is set to nil in the revoking org. Their data is unaffected for other admins who have granted that user a seat in other orgs, when pulled for those orgs.

  3. Reassigning a User to Seat: If you remove a seat from a user and later assign a new seat to the same user, the last_activity value for the new seat will again be nil until the user’s next interaction, regardless of whether the seat was previously assigned to them.

  4. Deleting a User: If you delete a user, all associated last_activity data for that user is immediately deleted.

  5. Determining Dormancy: When retrieving activity data for a seat, you can use the created_at and last_activity values to determine dormancy. For example, if created_at is more than 30 days ago and last_activity is either more than 30 days ago or nil, the seat may considered dormant.

  6. Activity Data for Assigned Seats: When retrieving last_activity data for assigned seats, you will receive a nil value if the assignee’s most recent activity record is older than 90 days.

Note: Behavior of the data will remain consistent with the Activity Report, available in Admin UI.

Why we’re making this change

Our external data surfaces must be quality first. Retaining data of this volume for multi-year retention periods increases storage and backup overhead significantly, as well as the cost and complexity of quality checks. A time-bound retention policy allows us to maintain efficiency while still offering relevant, up-to-date information. This will allow us to further improve the resilience of the data that is returned by the endpoint, while limiting the impact only to very old records.

Next steps

You don’t need to take any action if you rely on the last_activity_at field for current activity records.

However, if you have workflows or reports that depend on usage dates for active seats that have been dormant for 90 or more days, please be aware that these values will become nil for records older than 90 days, for dates on or before November 20, 2024, as of Tuesday, February 18, 2025. While exceptionally rare, we encourage you to store API responses for cases where this will become problematic.

See more

A setup user is responsible for configuring an identity provider for any new Enterprise Managed User (EMU) enterprise account. After your first login to this user account, we strongly recommend you setup 2FA in addition to saving your enterprise recovery codes.

All subsequent login attempts for the setup user account will require a successful 2FA challenge response or the use of an enterprise recovery code to complete authentication. If you do not at least save your enterprise recovery codes, you will be locked out of the account.

Learn more about the setup user on your GHEC enterprise account with Enterprise Managed Users – EMU or data residency.

See more

GitHub Marketplace will be deprecating the “Featured Customers” section from app listing pages. This change will not cause any breaking changes. Here’s what publishers need to know:

Timeline:

  • January 27, 2025: Featured Customers sections will no longer be visible on public Marketplace listings
  • March 3, 2025: The Featured Customers section in publisher dashboards will be completely removed

Publishers can continue showcasing customer success stories directly in their app listing descriptions. However, GitHub will not review or approve customer lists provided in listing descriptions. Publishers are responsible for:

  • Obtaining explicit permission from customers before featuring them
  • Ensuring all customer usage claims are accurate and truthful

If a customer reports that they are falsely listed as a user of an app/extension, GitHub may review the authenticity of these claims. Listings found to be making false claims about customer usage will be notified, and may be removed from GitHub Marketplace.

Publishers with existing Featured Customers sections should save this information from the publisher settings before March 3rd if they wish to migrate it to their listing description.

This change helps streamline the Marketplace experience and aligns with our ongoing improvements to listing pages.

See more

This week’s Copilot Workspace updates are focused on improvements to navigation and file management. As ever, drop your feedback into this discussion.

Simpler file tree navigation

When folders don’t have any direct file children but only have other folders as children, we now combine those into one folder to reduce the amount of nesting in the file tree.

In addition, when you open the file tree and have generated files, we now show Changed files as the default viewing mode.

combine paths with single child

Delete a file from the actions menu

By clicking on the ellipses in a file, you’re now able to delete a file directly from the actions menu of Copilot Workspace.

delete file navigation

Opening files now opens them in an ephemeral tab

When you click a file in the tree, a new ephemeral tab is opened. When you double-click a file in the tree, it opens as a new regular tab. This aligns with the experience of most other IDEs and keeps your open tab list to just the ones you need.

Forwarded ports are easier to access

Now, when a command action uses port forwarding, a globe icon is added next to the command row, allowing you to view a live preview of the running port.

port forwarding button example

Improved screen layout in pull requests for smaller devices

Now, when working on smaller screens, the commit panel and suggestions pane will close as necessary, to better fit within your screen.

We want to hear from you

Please drop any and all feedback in our GitHub Discussion. We appreciate any and all feedback you have!

See more

On March 31, 2025, GitHub Copilot Extensions will require an updated header format for agent requests. Both updated and previous versions of the request headers will be supported until then. These headers denote requests that come from GitHub and enable your extension to communicate with GitHub.

Updated headers:
X-GitHub-Public-Key-Identifier
X-GitHub-Public-Key-Signature

Previous headers, to be deprecated on March 31, 2025:
Github-Public-Key-Identifier
Github-Public-Key-Signature

Please update your relevant checks to the correct headers by March 31, 2025 for a consistent experience and to avoid breaking changes. To learn more, visit this page.

See more