Copilot code review gets resolution reasons and stops skipping giant PRs
GitHub removed the 300-file limit, started reviewing PRs opened by bots, and added a reason field when resolving comments. What changes in the PR routine of those who already use the tool.

O GitHub anunciou, no August 27, 2026 Changelog, três mudanças no Copilot code review, o recurso que faz a IA comentar automaticamente em pull requests.
GitHub announced, in the August 27, 2026 Changelog, three changes to Copilot code review, the feature that has the AI automatically comment on pull requests. None of them is revolutionary on its own, but together they tackle three concrete friction points for those who have already plugged the tool into their review flow: large PRs that went unanalyzed, bot-opened PRs that fell into a capped mode, and the feedback void when the team dismissed a suggestion. It's worth understanding what changes under the hood before deciding whether this alters your routine.
The end of the 300-file limit
This is the change with the biggest operational impact. Until now, Copilot code review refused to review PRs above 300 files or 20,000 lines of code, bailing out exactly in the cases where a second read would be most useful. According to the changelog, this limitation simply no longer applies.
In practice, anyone working with a monorepo, a framework migration, or that dependency-bump PR that drags along entire lockfiles kept running into this ceiling. The classic case: you update a lib and package-lock.json or Gemfile.lock blows up the file count, the PR busts the limit, and automated review doesn't even start. Now it runs.
The trade-off here is signal versus noise, not availability. A giant PR usually produces a giant review, and AI review on top of 20,000 lines tends to generate a lot of low-value comments amid few relevant findings. The absence of the technical limit doesn't change the fact that a large PR remains bad engineering practice. The feature now covers the case, but that's not an invitation to drop the discipline of slicing changes into pieces reviewable by humans.
PRs opened by bots and by the Copilot cloud agent
There are two things bundled here. The first is about billing and identity. When a PR is opened by a bot and the review is triggered automatically, there's no account with a Copilot license to attribute the usage to. GitHub solved this by tying it to a specific policy: with the "Allow members without a Copilot license to use Copilot code review in GitHub.com" option enabled, the review runs and the usage is billed directly to the organization. In other words, it's an administrative decision, not something that shows up on its own, and it affects the bill at the end of the month.
The second is more interesting for those using the Copilot cloud agent (the agent that opens PRs autonomously). Before, when automated review landed on a PR opened by this agent, Copilot delivered a "limited experience", a reduced mode. Now those PRs get full agentic review.
This closes a loop that was somewhat broken: you had an agent writing code and opening a PR, but the automated review layer wasn't looking at that PR with the same depth it would apply to a human PR. The methodological point of attention is obvious and worth saying out loud: AI reviewing AI-written code doesn't replace a human eye. It does close the automation loop, but the risk of two models agreeing on each other's mistakes is real. Treat this as a first pass, not as approval.
Resolution reasons: the missing feedback
The most discreet change and, from a product standpoint, the shrewdest. Next to the "Resolve conversation" button on any Copilot comment, there's now a dropdown with three options when resolving:
| Option | What it signals | |---|---| | Addressed | The comment was right and the suggestion was applied | | Won't fix | Valid, but the team chose not to address it now | | Incorrect | The comment was wrong, it was a false positive |
The difference between these three states is huge for those building the product and, indirectly, for those using it. Before, resolving a comment was a binary signal: closed. A comment that was applied and a comment dismissed as junk generated exactly the same event. Now GitHub distinguishes "got it right" from "got it wrong", and that's what feeds the real quality metric of automated review.
For the dev, the immediate gain is small (one more click), but there's a good management side effect: systematically marking Incorrect builds, over time, an honest picture of how much noise the tool generates in your repository. It's the kind of data that helps decide whether Copilot code review is helping or turning into approval theater on your team. The changelog is direct in saying that the choice "provides valuable feedback to the product team and helps improve the product", which makes clear the primary objective is telemetry.
What remains open
The announcement offers no numbers: it doesn't say how Copilot now handles PRs with 5,000 files in terms of response time or cost, nor how much agentic review by a cloud agent consumes. It also doesn't detail whether resolution reasons influence the model's behavior in that specific repository or whether they're just aggregate signal for the product team. Based on the description, it appears to be global telemetry, which means marking Incorrect won't calibrate Copilot on the spot for your code.
As the changelog itself lists, these changes come bundled with a package of policy and billing adjustments announced the following day ("Upcoming changes to GitHub Copilot policies and billing"). Whoever administers the organization should read both together before turning on the policy that authorizes review without a license: it opens the door to billing that doesn't exist today.
In the end, the practical takeaway is sober. If you already use Copilot code review, the removed limit is a net gain and the resolution reason costs one worthwhile click. If you don't use it yet, nothing here changes the underlying question: AI review is a cheap first layer to catch the obvious, not a substitute for the human reviewer who understands the business context. The updates improve the tool within the role it already had, without expanding that role.
Translated from the Brazilian Portuguese original · Read the original
CodeQL 2.27.1 gets C/C++ queries and Kotlin 2.4.20 support
The version released on September 25, 2026 refines GitHub's static analysis engine with new taint flow models for C/C++, adjustments to Kotlin's K2 compiler, and fixes that reduce false positives across several languages.
