--- title: "GitHub API changes, deprecations and deadlines | Harbyn" description: "GitHub: 7 upcoming deadlines and 97 recorded changes as of 2026-10-25, each with its source." canonical: "https://harbyn.com/vendors/github" last-updated: 2026-10-25 --- # GitHub: API changes and deadlines Markdown version of . Developer tools. 7 upcoming deadlines, 97 recorded changes. Every entry cites the GitHub page we read it from. ## What we read The GitHub pages and feeds our ingestion visits, politely and on a schedule. - **Deprecations**: - **Changelog**: - **Changelog**: ## What the scanner looks for How `harbyn scan` recognises GitHub in a repository, on your machine. Nothing leaves it. - **Packages**: `npm octokit`, `npm @octokit/rest`, `npm @octokit/core`, `pypi PyGithub`, `go github.com/google/go-github` - **API hosts**: `api.github.com` ## Upcoming deadlines | Deadline | Change | Use instead | Details | Source | | --- | --- | --- | --- | --- | | Nov 2, 2026 | GitHub Actions: macOS 14 runner image retired on November 2, 2026 | `macos-15`, `macos-15-xlarge`, `macos-latest`, `macos-latest-xlarge`, `macos-26`, `macos-26-xlarge` | | | | Nov 12, 2026 | Secret scanning audit log business field changes to enterprise slug | - | | | | Nov 16, 2026 | Claude Opus 4.8, Claude Opus 5 and GPT-5.6 Terra leave GitHub Copilot on 2026-11-16 | - | | | | Nov 16, 2026 | Legacy GitHub app in Teams retirement | - | | | | Nov 30, 2026 | X-GitHub-Stateless-S2S-Token header ignored from 2026-11-30 | - | | | | Dec 2026 | Intel-based Mac support deprecation | - | | | | Mar 10, 2028 | GitHub REST API version 2022-11-28: end of support 2028-03-10 | `2026-03-10` | | | ## Change history Newest first, by the date GitHub announced it. This is the archive: past changes are not warnings, and changes we recorded after they took effect are marked as such. ### October 2026 - Oct 23, 2026, Notice: [EMU deletions fix](https://github.blog/changelog/2026-10-23-emu-deletions-fix) - Oct 23, 2026, Feature: [Enterprise installations for GitHub Apps generally available](https://github.blog/changelog/2026-10-23-enterprise-installations-for-github-apps-generally-available) - Oct 23, 2026, Feature: [Public monitoring adds alert management, validity checks, API, and webhooks](https://github.blog/changelog/2026-10-23-public-monitoring-adds-triage-validity-api-and-webhooks) - Oct 23, 2026, Feature: [GitHub Copilot in Teams](https://github.blog/changelog/2026-10-23-turn-notifications-into-code-with-github-copilot-in-teams) - Oct 23, 2026, Feature: [Copilot usage metrics API adds client-level usage](https://github.blog/changelog/2026-10-23-usage-metrics-api-adds-usage-from-tools-like-opencode) - Oct 22, 2026, Behavior change: [Custom names in Copilot usage metrics API](https://harbyn.com/changes/github/2026-10-22-custom-skills-agents-and-mcp-servers-in-usage-metrics-api.md) - Oct 22, 2026, Behavior change: [Global default policy for generally available Copilot features](https://harbyn.com/changes/github/2026-10-22-global-default-for-copilot-features-generally-available.md) (effective Oct 22, 2026; recorded after the fact) - Oct 22, 2026, Behavior change: [New GitHub Actions blob storage hosts added to the meta API](https://harbyn.com/changes/github/2026-10-22-meta-api-endpoints-updated-for-actions-blob-storage.md) - Oct 21, 2026, Feature: [GitHub CLI adds opt-in expiring, auto-refreshing OAuth tokens](https://github.blog/changelog/2026-10-21-github-cli-opt-in-to-expiring-auto-refreshing-oauth-tokens) - Oct 20, 2026, Feature: [Dependabot alerts REST API includes dependency versions](https://github.blog/changelog/2026-10-20-dependabot-alerts-rest-api-now-includes-dependency-versions) - Oct 20, 2026, Feature: [Dependabot adds support for npm 12, pnpm 11 and 12, and Bun 1.4](https://github.blog/changelog/2026-10-20-dependabot-now-supports-npm-12-pnpm-11-and-12-and-bun-1-4) - Oct 20, 2026, Feature: [GitHub package firewall in public preview](https://github.blog/changelog/2026-10-20-github-package-firewall-in-public-preview) - Oct 20, 2026, Policy: [Package firewall billing at general availability](https://github.blog/changelog/2026-10-20-github-package-firewall-in-public-preview) - Oct 20, 2026, Behavior change: [Dismissal-request webhooks include request number](https://harbyn.com/changes/github/2026-10-20-updates-to-github-secret-scanning.md) - Oct 20, 2026, Feature: [Revocation supports encoded GitHub tokens](https://github.blog/changelog/2026-10-20-updates-to-github-secret-scanning) - Oct 20, 2026, Behavior change: [Custom pattern alerts remain open after matching rescans](https://harbyn.com/changes/github/2026-10-20-updates-to-github-secret-scanning-3.md) - Oct 20, 2026, Behavior change: [Bypass-request API responses and webhooks include corrected metadata](https://harbyn.com/changes/github/2026-10-20-updates-to-github-secret-scanning-4.md) - Oct 20, 2026, Behavior change: [Delegated bypass push and reviewer configuration errors fixed](https://harbyn.com/changes/github/2026-10-20-updates-to-github-secret-scanning-5.md) - Oct 20, 2026, Behavior change: [Invalid custom pattern API arguments return 422](https://harbyn.com/changes/github/2026-10-20-updates-to-github-secret-scanning-6.md) - Oct 19, 2026, Breaking change: [CodeQL tracing and Swift support changes](https://harbyn.com/changes/github/2026-10-19-codeql-changes-for-macos-27-xcode-27-and-swift-6-4-2.md) - Oct 19, 2026, Feature: [Copilot model policy REST API generally available](https://github.blog/changelog/2026-10-19-copilot-model-policy-api-for-enterprise-orgs-and-teams) - Oct 19, 2026, Deprecation: [GitHub Copilot models deprecated](https://harbyn.com/changes/github/2026-10-19-github-copilot-models-deprecated-on-october-19-2026.md) (effective Oct 19, 2026; recorded after the fact) - Oct 19, 2026, Behavior change: [Some Git over HTTPS may temporarily require authentication](https://harbyn.com/changes/github/2026-10-19-some-git-over-https-may-temporarily-require-authentication.md) - Oct 16, 2026, Feature: [Open source license compliance generally available](https://github.blog/changelog/2026-10-16-open-source-license-compliance-generally-available) - Oct 15, 2026, Feature: [Agentic autofix for code scanning alerts generally available](https://github.blog/changelog/2026-10-15-agentic-autofix-for-code-scanning-alerts-general-availability) - Oct 15, 2026, Feature: [AI Scan for pull requests generally available](https://github.blog/changelog/2026-10-15-ai-scan-for-pull-requests-generally-available) - Oct 15, 2026, Retirement: [Email notifications for repository push events retired](https://harbyn.com/changes/github/2026-10-15-email-notifications-for-repository-push-events-have-been-retired.md) (effective Oct 15, 2026) - Oct 15, 2026, Feature: [Multi-repository support and improvements for GitHub Copilot in Slack and Microsoft Teams](https://github.blog/changelog/2026-10-15-copilot-in-slack-and-teams-adds-model-and-repository-updates) - Oct 15, 2026, Feature: [Xcode 27 runner image generally available](https://github.blog/changelog/2026-10-15-xcode-27-runner-image-generally-available) - Oct 14, 2026, Feature: [Actions workflow lockfiles in public preview](https://github.blog/changelog/2026-10-14-github-actions-workflow-lockfiles-in-public-preview) - Oct 14, 2026, Feature: [HydraFusion updates and HydraFusion Max](https://github.blog/changelog/2026-10-14-hydrafusion-updates-and-new-max-option) - Oct 13, 2026, Feature: [Audit log events for Code Quality finding dismissals and reopenings](https://github.blog/changelog/2026-10-13-audit-github-code-quality-finding-dismissals-and-reopenings) - Oct 13, 2026, Behavior change: [Copilot managed settings can force a policy refresh at startup and require a minimum client version](https://harbyn.com/changes/github/2026-10-13-enterprise-managed-settings-enforcement-updates.md) - Oct 13, 2026, Feature: [Gemini 4 Argon in GitHub Copilot](https://github.blog/changelog/2026-10-13-gemini-4-argon-in-github-copilot) - Oct 13, 2026, Feature: [GitHub Apps get repository creation and installation management permissions, offline\_access and wider Get an app access](https://github.blog/changelog/2026-10-13-github-app-improvements-for-least-privilege-and-management) - Oct 13, 2026, Behavior change: [Withdrawn Dependabot alerts return 410 Gone and send a withdrawn webhook action](https://harbyn.com/changes/github/2026-10-13-improved-detection-for-withdrawn-dependabot-alerts.md) - Oct 13, 2026, Behavior change: [Push protection blocks Anthropic API keys by default; secret scanning adds Salesforce and Cloudsmith](https://harbyn.com/changes/github/2026-10-13-secret-scanning-blocks-anthropic-keys-by-default-adds-salesforce.md) - Oct 12, 2026, Feature: [Anonymous authentication for organization-level Dependabot registries](https://github.blog/changelog/2026-10-12-anonymous-organization-level-registries-for-dependabot) - Oct 12, 2026, Feature: [Client telemetry user attribution and configurable capture](https://github.blog/changelog/2026-10-12-client-telemetry-user-attribution-and-configurable-capture) - Oct 12, 2026, Feature: [Push attribution for commits enters limited public preview](https://github.blog/changelog/2026-10-12-push-attribution-public-preview) - Oct 9, 2026, Feature: [CodeQL 2.27.2 language analysis improvements](https://github.blog/changelog/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis) - Oct 9, 2026, Deprecation: [CodeQL Go library deprecates IfStmt.getCond](https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-2.md) - Oct 9, 2026, Behavior change: [CodeQL CLI error handling and output changes](https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-3.md) - Oct 9, 2026, Breaking change: [CodeQL build modes unsupported on macOS 27 and Xcode 27](https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-4.md) - Oct 9, 2026, Breaking change: [CodeQL Go control-flow graph changes may break custom queries](https://harbyn.com/changes/github/2026-10-09-codeql-2-27-2-improves-c-go-rust-and-javascript-analysis-5.md) - Oct 8, 2026, Feature: [Organization billing for Copilot code reviews](https://github.blog/changelog/2026-10-08-copilot-code-review-new-organization-billing-options-and-controls) - Oct 8, 2026, Feature: [Restrict who can request Copilot code reviews](https://github.blog/changelog/2026-10-08-copilot-code-review-new-organization-billing-options-and-controls) - Oct 8, 2026, Feature: [Pull request limits can now include draft pull requests](https://github.blog/changelog/2026-10-08-draft-pull-requests-count-toward-pull-request-limits) - Oct 8, 2026, Behavior change: [Triage role users or higher can now archive pull requests](https://harbyn.com/changes/github/2026-10-08-triage-role-users-or-higher-can-now-archive-pull-requests.md) - Oct 7, 2026, Feature: [Claude Haiku 5.5 in GitHub Copilot](https://github.blog/changelog/2026-10-07-claude-haiku-5-5-in-github-copilot) - Oct 7, 2026, Feature: [Discover local models in GitHub Copilot CLI](https://github.blog/changelog/2026-10-07-discover-local-models-in-github-copilot-cli) - Oct 7, 2026, Feature: [Local sandboxing for GitHub Copilot is generally available](https://github.blog/changelog/2026-10-07-local-sandboxing-for-github-copilot-now-generally-available) - Oct 7, 2026, Behavior change: [AI-detected secret alert scans switch to a new model](https://harbyn.com/changes/github/2026-10-07-purpose-built-model-for-leaked-secret-detection.md) - Oct 7, 2026, Feature: [AI-detected secrets in push protection](https://github.blog/changelog/2026-10-07-purpose-built-model-for-leaked-secret-detection) - Oct 7, 2026, Policy: [AI secret checks in push protection and /security-review will consume AI Credits](https://github.blog/changelog/2026-10-07-purpose-built-model-for-leaked-secret-detection) - Oct 6, 2026, Feature: [Stacked pull requests generally available](https://github.blog/changelog/2026-10-06-stacked-pull-requests-generally-available) - Oct 6, 2026, Notice: [Copilot usage metrics undercount agent activity until IDEs are updated](https://github.blog/changelog/2026-10-06-update-your-ide-to-restore-agent-activity-in-copilot-usage-metrics) - Oct 5, 2026, Feature: [Secret scanning adds new secret detectors](https://github.blog/changelog/2026-10-05-secret-scanning-adds-detectors-for-lovable-supabase-and-more) - Oct 2, 2026, Feature: [Confidential advisory comments available in GraphQL API](https://github.blog/changelog/2026-10-02-confidential-comments-on-repository-security-advisories) - Oct 2, 2026, Feature: [Copilot code review API support](https://github.blog/changelog/2026-10-02-copilot-code-review-api-support-and-new-default-effort-level) - Oct 2, 2026, Behavior change: [Copilot code review now defaults to the Balanced effort level](https://harbyn.com/changes/github/2026-10-02-copilot-code-review-api-support-and-new-default-effort-level-2.md) - Oct 2, 2026, Breaking change: [GitHub App installation tokens are now about 520 characters long](https://harbyn.com/changes/github/2026-10-02-github-app-installation-tokens-now-about-520-characters.md) - Oct 2, 2026, Feature: [New fields and filters for the SecurityAdvisory GraphQL API](https://github.blog/changelog/2026-10-02-new-fields-for-securityadvisory-graphql-api) - Oct 2, 2026, Feature: [Repository security advisory comments API in public preview](https://github.blog/changelog/2026-10-02-repository-security-advisory-comments-api-in-public-preview) - Oct 2, 2026, Deprecation: [Gemini 3.5 Flash deprecated in GitHub Copilot](https://harbyn.com/changes/github/2026-10-02-selected-models-in-github-copilot-deprecated.md) (effective Oct 2, 2026) - Oct 2, 2026, Deprecation: [Gemini 3.6 Flash deprecated in GitHub Copilot](https://harbyn.com/changes/github/2026-10-02-selected-models-in-github-copilot-deprecated-2.md) (effective Oct 2, 2026) - Oct 2, 2026, Deprecation: [Kimi K2.7 Code deprecated in GitHub Copilot](https://harbyn.com/changes/github/2026-10-02-selected-models-in-github-copilot-deprecated-3.md) (effective Oct 2, 2026) - Oct 2, 2026, Deprecation: [Claude Opus 4.7 deprecated in GitHub Copilot](https://harbyn.com/changes/github/2026-10-02-selected-models-in-github-copilot-deprecated-4.md) (effective Oct 2, 2026) - Oct 1, 2026, Behavior change: [GitHub Actions: retention setting now deletes old checks, workflow runs and statuses](https://harbyn.com/changes/github/2026-10-01-actions-retention-now-covers-checks-runs-and-statuses.md) - Oct 1, 2026, Behavior change: [Code coverage uploads no longer fail CI for new branches](https://harbyn.com/changes/github/2026-10-01-code-coverage-uploads-no-longer-fail-ci-for-new-branches.md) - Oct 1, 2026, Feature: [Dynamic workflows in Copilot CLI and the Copilot app](https://github.blog/changelog/2026-10-01-dynamic-workflows-in-copilot-cli-and-the-copilot-app) - Oct 1, 2026, Feature: [GitHub Copilot can now interact with desktop apps with computer use](https://github.blog/changelog/2026-10-01-github-copilot-can-now-interact-with-desktop-apps) - Oct 1, 2026, Feature: [GitHub Copilot in VS Code, September 2026 releases](https://github.blog/changelog/2026-10-01-github-copilot-in-vs-code-september-2026-releases) - Oct 1, 2026, Rate limit: [Rate limits for private vulnerability reports](https://github.blog/changelog/2026-10-01-rate-limits-for-private-vulnerability-reports) - Oct 1, 2026, Behavior change: [Scheduled code scanning skips inactive repositories](https://harbyn.com/changes/github/2026-10-01-scheduled-code-scanning-skips-inactive-repositories.md) - Oct 1, 2026, Behavior change: [Structured forms for private vulnerability reports](https://harbyn.com/changes/github/2026-10-01-structured-forms-for-private-vulnerability-reports.md) ### September 2026 - Sep 29, 2026, Feature: [Bring business context with external custom properties](https://github.blog/changelog/2026-09-29-bring-business-context-with-external-custom-properties) - Sep 29, 2026, Feature: [GPT-6.1 Sol in GitHub Copilot](https://github.blog/changelog/2026-09-29-gpt-6-1-sol-in-github-copilot) - Sep 29, 2026, Feature: [Repository custom runner settings for Dependabot](https://github.blog/changelog/2026-09-29-repository-custom-runner-settings-for-dependabot) - Sep 28, 2026, Notice: [Claude Sonnet 5.5 in GitHub Copilot](https://github.blog/changelog/2026-09-28-claude-sonnet-5-5-in-github-copilot) - Sep 28, 2026, Retirement: [GitHub Actions: self-hosted runner minimum versions enforced from September 29, 2026](https://harbyn.com/changes/github/2026-09-28-self-hosted-runner-version-enforcement-date-has-moved.md) (effective Sep 29, 2026) - Sep 25, 2026, Feature: [Agentic autofix now uses Copilot Memory](https://github.blog/changelog/2026-09-25-agentic-autofix-now-uses-copilot-memory) - Sep 25, 2026, Breaking change: [Changes to query results in the GitHub Actions API and UI](https://harbyn.com/changes/github/2026-09-25-changes-to-query-results-in-the-github-actions-api-and-ui.md) - Sep 25, 2026, Notice: [CodeQL 2.27.1 adds C and C++ query and Kotlin 2.4.20 support](https://github.blog/changelog/2026-09-25-codeql-2-27-1-adds-c-and-c-query-and-kotlin-2-4-20-support) - Sep 25, 2026, Notice: [Enterprise managed settings in-product validator](https://github.blog/changelog/2026-09-25-enterprise-managed-settings-in-product-validator) - Sep 25, 2026, Notice: [GitHub Copilot weekly releases — September 21](https://github.blog/changelog/2026-09-25-github-copilot-weekly-releases-september-21) - Sep 25, 2026, Notice: [Private saved views for repository issues and “Relates to” issue relationship is generally available](https://github.blog/changelog/2026-09-25-personal-saved-views-for-repository-issues-and-more) - Sep 25, 2026, Feature: [Updates to GitHub Copilot for Slack and Microsoft Teams](https://github.blog/changelog/2026-09-25-updates-to-github-copilot-for-slack-and-microsoft-teams) - Sep 25, 2026, Notice: [Usage metrics API adds pull request review stages](https://github.blog/changelog/2026-09-25-usage-metrics-api-adds-pull-request-review-stages) ### July 2026 - Jul 1, 2026, Retirement: [GitHub Models retired on 2026-07-30](https://harbyn.com/changes/github/2026-07-01-github-models-retired-2026-07-30.md) (effective Jul 30, 2026; recorded after the fact)