GITHUB

AutoGPT's founding AI engineer published the gates that keep an open source repo sane when agents submit the majority of pull requests: enforced PR templates, AGENTS.md placement, skills that fire on trigger phrases, a CLA as a human detector, and a commit-SHA rule that kills fake review resolutions. GitHub published the playbook August 12, and the details are sharper than the headline.

GitHub now lets enterprise owners install third-party GitHub Apps on their enterprise account, and lets any user or organization create apps with enterprise permissions. This opens the enterprise management layer to the broader ecosystem - with a hard security boundary around the most powerful permission set.

GitHub made Kimi K3 generally available in Copilot on August 6 at $3/$15 per million tokens, hosted on Fireworks AI. It is off by default for Business and Enterprise, the rollout was paused mid-day by a GitHub Actions incident, and it changes the price/quality calculus in the model picker.

Dependabot's malware detection expands from npm to PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer by ingesting OpenSSF's malicious-packages data into the GitHub Advisory Database.

GitHub Enterprise Importer now supports self-serve GitLab to GitHub migrations in GA. gh gl2gh exports GitLab projects, transforms merge requests into pull requests, and stages archives in GitHub or your own blob storage. Here is what actually moves and what you rebuild.

GitHub deprecated Gemini 2.5 Pro and Gemini 3 Flash in every Copilot surface on July 31, 2026. The suggested replacements are Gemini 3.1 Pro and Gemini 3.6 Flash. Here is what changed, what it costs, and how to migrate cleanly.

GitHub Actions added a $/ prefix that resolves a same-repository action or reusable workflow at the exact commit being run, with no checkout. It fixes the pinning trap that made enterprise SHA-pinning policies hard to satisfy for a repo's own actions.

GitHub open-sourced casefold, a Rust crate that folds the case of every byte Blackbird indexes at memory bandwidth. The counterintuitive trick: delete the early-exit, kill the branches, and fold Unicode as byte arithmetic.

GitHub's new model policy targeting lets enterprise admins set a baseline of Copilot models for the whole company, then grant extra models to specific teams. How the preview works, the least-restrictive evaluation rule, and what it changes for AI governance.

GitHub Models is fully retired as of July 30, 2026. The playground, model catalog, inference API, and BYOK are gone for every customer. Here is the timeline and where to get model access instead.

GitHub's stacked pull requests went into public preview on July 30. Stacks turn one large change into an ordered chain of small, reviewable PRs with one-click merge, plus a gh-stack skill for coding agents.

GitHub Spec Kit and gstack are trending for the same reason: coding agents need durable specs, plans, and task ledgers more than another one-shot prompt.

Security researchers discovered a prompt injection vulnerability in GitHub's Agentic Workflows that allows attackers to extract private repository contents through public issues.

Google's asynchronous coding agent. Point it at a GitHub repo, it clones to a cloud VM, plans with Gemini, and opens a pull request. Tiered plans from 15 to 300 tasks per day.

GitHub's Copilot cloud agent updates are not just about autonomous coding. The bigger shift is usage metrics, session visibility, validation, and review quality.

GitHub is filling with multi-agent frameworks, skills, and coding harnesses. The useful lesson is not that every team needs a swarm. It is that every agent needs receipts: tests, logs, diffs, and reviewable checkpoints.

GitHub Copilot is moving from autocomplete into asynchronous coding agents, terminal workflows, MCP, skills, and model choice. Here is what changed in 2026.

GitHub trending is full of agent skill frameworks. The real shift is not bigger prompts or more agents. It is turning team process into inspectable, reusable operating instructions.

Full GitHub CLI support for automated PR and issue workflows.

Managed scheduling on Anthropic infrastructure with API and GitHub triggers.