… Tackle complex dependency updates with coding agents Dependabot security updates already automatically open pull requests to upgrade vulnerable dependencies to the nearest patched version. …
… This update is now generally available on github.com. …
… With this update, you can: Link alerts to issues : Connect code scanning alerts to GitHub Issues from the alert page using the new “Tracking” section or from the issue page using the new “Security alerts” section in the “Relationships” panel. …
… This update is now generally available on github.com. …
Kevin Crosby · @kevincrosby March 17, 2026 | Updated March 25, 2026 | 5 minutes 5 minutes Share: Open source has always been about community. …
… May.26 Release GitHub Code Quality: Repository Enablement API application security enterprise management tools May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.26 Improvement Filter secret scanning approval requests by sort order and bypass status ap…
… C We’ve updated the cs/useless-tostring-call query to avoid false positives in calls to StringBuilder.AppendLine and in calls of the form base.ToString , and we’ve made the alert message more precise. …
… Missed our last update? …
… Security severity updates We’ve updated @security-severity scores across several languages to better align log injection and XSS queries with their actual impact: C/C++ : cpp/cgi-xss increased from medium 6.1 to high 7.8 . …
… Updates are available in the following releases: GitHub Enterprise Server 3.14.25 or later GitHub Enterprise Server 3.15.20 or later GitHub Enterprise Server 3.16.16 or later GitHub Enterprise Server 3.17.13 or later GitHub Enterprise Server 3.18.7 or later GitHub Enterprise Server 3.19.4 or later … …