As of November 2, 2026, GitHub's code and secret risk assessments flag whether each finding sits in a protected repository or not, making it easier to prioritize where to reinforce coverage.
As of October 27, 2026, GitHub Apps installed in organizations can call the Copilot SDK with their own identity, without depending on a logged-in user to authenticate or foot the bill.
The feature became generally available in GitHub Copilot on October 28, 2026, replacing the manual choice between Claude, GPT-4, and other models with a system that decides on its own, task by task.
In the Universe 2026 releases for Copilot in VS Code, GitHub separates two decisions that used to come preset: where the agent executes and which model handles the task. The choice changes cost, latency, and what leaves (or doesn't leave) your machine.
