You can now bulk convert all branch protection rules in a repo to rulesets in one action.
• Preview, select enforcement, & choose to keep or delete original protections during import
GitHub Changelog
The official GitHub Changelog feed. Your source for new releases, improvements, security updates, and fixes across GitHub products.
- GitHub secret scanning improvements refine alerts, audit logs, and token revocation workflows. • Audit log business field switches from enterprise display name to slug on Nov 12, 2026; update integrations to avoid issues.
- Dependabot alerts REST API now includes the vulnerable dependency version directly in alert responses. • version_requirement shows the dependency version or constraint detected by Dependabot
- A package firewall is available in public preview to inspect npm package metadata and downloads for malware before they reach endpoints like CI/CD hosts or coding agents.
- Dependabot now supports npm 12, pnpm 11 and 12, and Bun 1.4. • Available to all users and included in GitHub Enterprise Server 3.24 • Keeps projects updated when using these package manager versions
