GitHub Updates Blog provides announcements, product updates, and insights into new features and enhancements on the GitHub platform. Developers can stay informed about changes to GitHub's developer tools, collaboration features, and security offerings. With GitHub's commitment to empowering developers and supporting open source communities, the GitHub Updates Blog serves as a resource for staying connected with the latest developments in software development.

GitHub Changelog

GitHub is rolling out several updates to its secret scanning feature. New Cloudflare detectors have been added as a scanning partner, covering account API tokens, global user API keys, and user API tokens — all with push protection enabled by default. Push protection defaults are also expanded to include Figma, GCP, Langchain, OpenVSX, and PostHog patterns. On the API side, custom pattern alerts can now have their validity manually set via PATCH, alert responses now include provider fields with filtering support across repo/org/enterprise list endpoints, and AI-detected generic secrets now appear in the scan history API. Enterprise security teams gain a new endpoint to list dismissal requests across all organizations. EMU user-owned forks now inherit push protection from their nearest licensed ancestor repository.

Secret scanning pattern updates and product improvements

Scan history and delegation list improvements