ai tool
GitHub Copilot: security advisories, deprecations and releases
GitHub's AI pair programmer and coding agent.
- Items, 90 days
- 37
- Critical
- 0
- Last critical
- none
- This week
- 9
What your digest would have held this week
9 items from the last 7 days. Zero sends only the ones that touch your stack.
- MEDIUM GitHub Copilot computer-use control in public preview
- INFO Repository plugin defaults and enterprise plugin controls generally available
- INFO GitHub Copilot in VS Code adds cloud agent sessions and cross-client continuity
- INFO Generate and edit images directly in Copilot
- INFO Build shared workflows for your team with Copilot Automations
- INFO GitHub Copilot Memory generally available on paid plans
- INFO Security extension for the GitHub Copilot app
- INFO GitHub Enterprise now includes GitHub Copilot access
Most severe first. 1 more below.
Deprecations 4
- HIGH ACT BY 19 OCT 2026 GitHub Changelog · 20 Oct 2026
GitHub Copilot models deprecated October 19 2026
Six models including Gemini 3.7 Flash, GPT-5.x variants, and Grok 4.5 are deprecated today. Admins must switch to newer alternatives like GPT-6.1 Sol or Grok 4.7.
- MEDIUM ACT BY 16 NOV 2026 GitHub Changelog · 16 Oct 2026
Upcoming deprecation of selected GitHub Copilot models in mid-November
GitHub will retire Claude Opus 4.8, Claude Opus 5, and GPT-5.6 Terra from Copilot on 16 Nov 2026; switch to newer alternatives.
- HIGH GitHub Changelog · 11 Oct 2026
Copilot for JetBrains ends support for JetBrains IDE 2025.1
GitHub Copilot no longer supports JetBrains IDE 2025.1; only 2025.2 and later are compatible.
- HIGH ACT BY 2 OCT 2026 GitHub Changelog · 3 Oct 2026
Selected models in GitHub Copilot deprecated
GitHub has deprecated Gemini 3.5 Flash, Gemini 3.6 Flash, Kimi K2.7 Code and Claude Opus 4.7 in all Copilot experiences.
Releases 31
- INFO NEW THIS WEEK GitHub Changelog · 29 Oct 2026
Repository plugin defaults and enterprise plugin controls generally available
GitHub Copilot now lets repo maintainers set default plugins and lets enterprises require, block or restrict plugins via managed policies.
- INFO NEW THIS WEEK GitHub Changelog · 29 Oct 2026
GitHub Copilot in VS Code adds cloud agent sessions and cross-client continuity
New Agent Host, cloud sessions, and multi-client handoff let agents keep running even when VS Code is closed or laptop is offline.
- INFO NEW THIS WEEK GitHub Changelog · 28 Oct 2026
Generate and edit images directly in Copilot
Copilot now generates and edits images inline using GPT Image 2.5 Flare, saving results to your workspace without leaving the chat.
- INFO NEW THIS WEEK GitHub Changelog · 28 Oct 2026
Build shared workflows for your team with Copilot Automations
Shared Copilot Automations now let teams create, edit, and maintain AI-powered workflows together in a repository.
- INFO NEW THIS WEEK GitHub Changelog · 28 Oct 2026
GitHub Copilot Memory generally available on paid plans
Copilot Memory is now GA and persists preferences, conventions, and custom instructions across sessions, clients, and experiences.
- INFO NEW THIS WEEK GitHub Changelog · 28 Oct 2026
Security extension for the GitHub Copilot app
New public preview extension lets users browse, explain, fix, and dismiss GitHub code scanning alerts inside the Copilot app without switching contexts.
- INFO NEW THIS WEEK ACT BY 28 OCT 2026 GitHub Changelog · 28 Oct 2026
GitHub Enterprise now includes GitHub Copilot access
GitHub Enterprise Cloud now bundles Copilot for licensed users, shifting cost control to AI usage metering against enterprise budgets.
- MEDIUM NEW THIS WEEK GitHub Changelog · 28 Oct 2026
GitHub Copilot computer-use control in public preview
Copilot can now read and operate macOS and Windows desktop apps lacking APIs, with explicit user approval required before any action.
- INFO NEW THIS WEEK GitHub Changelog · 28 Oct 2026
GitHub Copilot supports server-to-server authentication
GitHub Copilot SDK now accepts installation access tokens from GitHub Apps, letting services and agents call Copilot on behalf of an organization without user credentials.
- INFO ACT BY 26 OCT 2026 GitHub Changelog · 27 Oct 2026
GitHub Copilot assisted permissions generally available
Copilot CLI, Copilot app, and VS Code now offer an assisted permission mode that auto-approves safe commands and file or URL access.
- INFO ACT BY 26 OCT 2026 GitHub Changelog · 26 Oct 2026
GPT-6.1 Terra now generally available in GitHub Copilot
OpenAI’s GPT-6.1 Terra model is live in Copilot for agentic coding and terminal tasks at lower cost than GPT-6.1 Sol.
- INFO GitHub Changelog · 24 Oct 2026
Copilot usage metrics API now reports usage from tools like OpenCode
Copilot usage metrics API adds totals_by_client array to 1-day and 28-day reports showing request count, sessions, and tokens from clients such as opencode, claude_code, zed, vscode.
- INFO ACT BY 30 SEPT 2026 GitHub Changelog · 23 Oct 2026
GitHub Copilot in Visual Studio — September 2026 update
New Git agent explores pull requests in chat, Bring Your Own Model (BYOM) is in preview, and NuGet vulnerabilities can be fixed from the Error List.
- INFO GitHub Changelog · 23 Oct 2026
Custom skills, agents, and MCP servers in usage metrics API
GitHub Copilot usage metrics API now surfaces real names of custom skills, agents, MCP servers, slash commands and plugins instead of grouping them under other/custom, with up to 25 entries per record.
- INFO ACT BY 26 OCT 2026 GitHub Changelog · 23 Oct 2026
Global default for Copilot features generally available
GitHub is enforcing a global default policy for eligible generally available Copilot features on Business and Enterprise plans through October 26.
- INFO GitHub Changelog · 22 Oct 2026
Industry comparisons in the Copilot impact dashboard
GitHub Copilot impact dashboard now shows industry benchmarks for agentic adoption, PR merge rates and peer comparisons by company size and sector.
- INFO GitHub Changelog · 20 Oct 2026
Copilot model policy API for enterprise, orgs, and teams
REST API endpoints now available to retrieve and update Copilot model policies at enterprise, team, app, and organization levels.
- INFO GitHub Changelog · 16 Oct 2026
Multi-repo support and other improvements for GitHub Copilot in Slack and Microsoft Teams
GitHub Copilot in Slack and Teams now works across multiple repositories in one conversation. It also adds more natural mentions, easier repo switching, better Slack thread context, and improved reliability.
- INFO ACT BY 13 OCT 2026 GitHub Changelog · 13 Oct 2026
Gemini 4 Argon now generally available in GitHub Copilot
Google's newest frontier model Gemini 4 Argon is released in GitHub Copilot for complex coding, agentic, and reasoning tasks across multiple IDEs and CLI.
- MEDIUM GitHub Changelog · 13 Oct 2026
Enterprise managed settings enforcement updates
GitHub adds forceRemoteSettingsRefresh and minimum client version enforcement for Copilot sandbox. Clients must pull fresh policies at startup or be blocked.
- INFO GitHub Changelog · 13 Oct 2026
Client telemetry user attribution and configurable capture
Enterprise admins can now attribute GitHub Copilot activity to users without capturing prompts or responses using new telemetry settings in managed configuration.
- INFO GitHub Changelog · 10 Oct 2026
GitHub Copilot weekly releases — October 5
Claude Haiku 5.5 added, local sandboxing generally available for agents, multi-account support in Copilot app, local Ollama model discovery in CLI, and VS Code agent session grid and worktree cleanup.
- INFO GitHub Changelog · 9 Oct 2026
Copilot code review: New organization billing options and controls
Organization admins can now bill Copilot code reviews to the org instead of member quotas and restrict review requests to users with organization-provided licenses.
- INFO GitHub Changelog · 7 Oct 2026
Local sandboxing for GitHub Copilot now generally available
Local sandboxing for GitHub Copilot is now generally available in Copilot CLI, GitHub Copilot app, and VS Code using Agent Host, providing secure execution boundaries for agentic workflows on developer machines.
- INFO GitHub Changelog · 7 Oct 2026
Claude Haiku 5.5 in GitHub Copilot
Anthropic's lightweight Claude Haiku 5.5 model is now generally available in GitHub Copilot for fast, high-volume coding tasks.
- INFO GitHub Changelog · 7 Oct 2026
HydraFusion research preview: automatic model routing in Copilot
Experimental feature lets Copilot pick the best model per task and show clearer progress.
- INFO GitHub Changelog · 3 Oct 2026
Copilot code review: API support and new default effort level
GitHub Copilot code review now supports REST and GraphQL API requests and defaults to Balanced effort level for all plans.
- INFO Azure Updates · 3 Oct 2026
Public Preview: Guided Copilot Experience for Azure Apps in VS Code
Microsoft is previewing a structured Copilot workflow in VS Code that guides developers from idea to deployed Azure app.
- INFO Visual Studio Code updates · 3 Oct 2026
Building the new GitHub Copilot Inline Suggestions Model: Part Two
GitHub Copilot adds completions to its unified inline suggestions model, refines ghost text and editor behavior, and improves user satisfaction.
- INFO GitHub Changelog · 3 Oct 2026
Dynamic workflows available in Copilot CLI, Copilot app and SDK
GitHub Copilot now supports dynamic workflows that let engineers define multi-step, code-controlled processes combining automated tasks and agent work.
- INFO GitHub Changelog · 2 Oct 2026
GitHub Copilot in VS Code, September 2026 releases
September updates focus on agent-driven development with automations, agent merge, improved session management, and better workspace/Dev Container support.
News and tools 2
- INFO Visual Studio Code updates · 26 Oct 2026
Tune GitHub Copilot Inline Suggestions with Configurable Eagerness
VS Code now lets users adjust how proactively GitHub Copilot offers inline code suggestions via a new eagerness setting.
- MEDIUM ACT BY 30 NOV 2026 GitHub Changelog · 7 Oct 2026
Update your IDE to restore agent activity in Copilot usage metrics
Agent sessions from Copilot SDK in several IDEs were not attributed correctly, causing undercounted agent activity and inflated CLI metrics.
Only hear about GitHub Copilot when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.