GitHub

GitHub has announced changes to its Copilot Individual subscription plans, citing the need for reliability and predictability for existing customers. The company has not yet disclosed specific details about pricing adjustments, feature modifications, or implementation timelines.

GitHub has integrated Copilot directly into its security assessment tools, enabling organization admins and security managers to request real-time explanations and guided remediation steps from detected secret risks and code vulnerabilities without leaving the assessment interface.

GitHub has extended Dependabot to allow direct assignment of security alerts to AI coding agents including Copilot, Claude, and Codex. The feature targets vulnerabilities requiring code changes beyond simple version bumps, automating remediation workflows across entire projects.

GitHub has added Rubber Duck to Copilot CLI, a feature that provides alternative suggestions by consulting different AI model families. The feature lets developers get a second opinion on code suggestions directly from the command line.

GitHub has added a feature called Rubber Duck to Copilot CLI that queries multiple AI model families to provide alternative perspectives on code suggestions. The feature acts as a second opinion mechanism, allowing developers to compare recommendations from different model architectures.

GitHub's Applied Science team deployed coding agents to automate parts of their own development workflow, testing how AI agents can handle increasingly complex programming tasks. The experiment reveals practical insights into agent-driven development patterns and limitations.

GitHub has disabled Copilot's ability to insert promotional tips into pull requests following developer backlash. The feature, which injected Raycast ads into over 11,400 pull requests without explicit developer consent, was enabled when Copilot was mentioned in PRs it didn't create. GitHub's product manager acknowledged the decision was a mistake.

GitHub will use Copilot interaction data from Free, Pro, and Pro+ plan users to train AI models starting April 24, 2026, unless users actively opt out. The policy does not affect Copilot Business and Enterprise customers. Data shared will include prompts, outputs, code snippets, filenames, and repository structures.

GitHub has released the Copilot SDK, positioning executable agent workflows as the successor to prompt-based AI interactions. The SDK enables developers to integrate agentic AI capabilities directly into applications rather than relying on text-based prompt-response patterns.

GitHub is positioning AI interaction as a shift from prompt-response text interfaces to programmable execution models. The company announced a GitHub Copilot SDK that enables agentic workflows to run directly within applications, marking a transition toward AI systems that take concrete actions rather than generate text responses.

GitHub has published technical details on the security architecture underlying its Agentic Workflows feature, which runs AI agents within GitHub Actions. The system implements process isolation, output constraints, and comprehensive audit logging to contain agent behavior.

GitHub Copilot has reached 60 million code reviews, marking significant adoption of AI-assisted code review workflows. The milestone reflects growing reliance on AI to manage review backlogs as development velocity increases across organizations.

GitHub has published a hands-on guide demonstrating how developers can use GitHub Copilot CLI to move from initial intent through to creating reviewable pull requests. The guide shows how CLI-based development naturally integrates with IDE workflows and GitHub's collaborative tools.

GitHub has expanded its Copilot coding agent with five major features: a model picker for agent selection, self-review functionality, built-in security scanning, custom agent creation, and CLI handoff integration.

GitHub has added a model picker feature to Copilot's autonomous coding agent for Business and Enterprise tier users. The feature allows teams to select which AI model powers the asynchronous background agent that handles delegated development tasks.