GitHub Copilot

Copilot can now fix your security alerts and prove it. Assign a CodeQL alert; it explores, fixes, re-runs CodeQL, then opens a draft PR. Batch up to 25 alerts. Needs the Agentic autofix enterprise policy.

HydraFusion gets a bigger model pool and a Max tier. New in the pool: Claude Opus 5.5, GPT-6 Astra, GPT-6.1 Sol, GPT-6 Luna. Medium effort for drafts, high for review; Max handles harder tasks. It is still an early test.

Gemini 4 Argon is now generally available in Copilot. Use it in VS Code, Visual Studio, Copilot CLI, coding agent, Copilot app, JetBrains, Xcode and Eclipse for Pro+/Max/Business/Enterprise. Gradual rollout.

Copilot’s local sandbox is now generally available. It covers Copilot CLI, the Copilot app and VS Code Agent Host. In Copilot CLI, /model discovers local Ollama models.

Long /ask answers in Copilot CLI are easier to read and reuse. Press Ctrl+E to expand one and Ctrl+Y to copy it.

Autopilot no longer stalls on a hook’s “ask” when nobody is watching. It now denies a preToolUse “ask” instead of stopping on a permission dialog. Custom agents also get declarative hooks.

Let Copilot CLI into one more folder, just for this session. The new /add-dir for session-only sandbox access; interactive settings suggest secret-masking hosts.

Claude Fable 5.2 is now in your Copilot model picker, if your plan and admin allow it. GitHub made it generally available on Nov 9, 2026, for complex, multistep coding tasks across large codebases.

Google’s Gemini 4 Carbon just landed in Copilot’s model picker. GitHub announced on Nov 10, 2026 that it is generally available, with a rollout that is gradual.

Dependabot alerts go quiet on repos with no activity for a year, starting Dec 8, 2026. GitHub announced the change on Nov 10, 2026, and says existing alerts are archived, not deleted.

A key that slips into a build log can now raise a secret scanning alert. GitHub announced on Nov 9, 2026 that secret scanning covers GitHub Actions workflow logs, in public preview.

Your Copilot plan now doubles as an agent inside JetBrains Air. Since Nov 3, 2026, you can pick GitHub Copilot in Air’s agent picker, hand it coding tasks in your JetBrains IDE or in the cloud, and review the changes next to your code.

Action needed: the legacy GitHub app in Microsoft Teams retires on Nov 16, 2026. GitHub announced this on Oct 23, 2026. Install the consolidated GitHub app (formerly GitHub notifications) so @GitHub and Copilot in Teams keep working.

GitHub Copilot now sits inside Xcode’s built-in coding assistant. The public preview, announced Nov 4, 2026, starts with Xcode 27.3 beta, and the older Copilot for Xcode extension stays available as a separate path.

No more guessing which model fits the job. Fusion went generally available on Oct 28, 2026: select Fusion in the model picker, choose Standard, High or Max, and Copilot routes and orchestrates models for each prompt.

Billing change: GitHub Enterprise now includes Copilot for every licensed user. Announced Oct 28, 2026, it’s available now on GitHub Enterprise Cloud for enterprises that work with a GitHub or Microsoft account team, with AI usage metered from the first request against the enterprise budget.

Stop telling Copilot your test command every session. Copilot Memory became generally available on paid Copilot plans on Oct 28, 2026, so personal preferences and repository conventions carry across sessions and clients. Dreaming, now in public preview, keeps those memories current.

Give Copilot a goal that spans repos — or your desktop.

The GitHub Copilot app’s Oct 28, 2026 Universe release puts Projects and computer use in public preview: Projects gather multi-repo or non-repo work in one place, and computer use (macOS and Windows) can click and type in desktop apps after you approve.

Your next GitHub Action can start as a Markdown file. Agentic Workflows went generally available on Oct 28, 2026. Describe issue triage, CI failure analysis, docs updates or test writing in natural-language Markdown, and they compile into standard Actions YAML.

Your Copilot SDK agents can stop riding on someone’s login. In public preview since Oct 27, 2026, a GitHub App installed on your organization can make Copilot requests for the org, with no signed-in user’s credentials. Usage is billed to the org.

Let Copilot run the clearly safe steps without asking. Assisted permissions are now generally available in Copilot CLI, the Copilot app and VS Code.

A language model checks each request to run a command, access a file path or open a URL, lets clearly safe ones proceed and asks you about the rest.

Action needed: Copilot features you left unconfigured will follow your global default. GitHub began rolling out enforcement of the global default policy for Copilot Business and Copilot Enterprise on Oct 22, 2026, through Oct 26, so timing can differ by enterprise or organization.

Choices you made yourself stay as they are.

Action needed: six Copilot models were deprecated on Oct 19, 2026, including GPT-5.5, GPT-5.4 and Grok 4.5. Move workflows and integrations to the suggested alternatives, such as GPT-6.1 Sol, GPT-6 Luna, Gemini 3.8 Flash and Grok 4.7.

Set Copilot model rules with a script, not a settings page. GET and PATCH REST endpoints are now generally available to read and update Copilot model policies for enterprises, enterprise teams, enterprise apps and organizations.

Action needed: three Copilot models retire Nov 16, 2026. Claude Opus 4.8, Claude Opus 5 and GPT-5.6 Terra leave every Copilot experience. Move to Claude Opus 5.5 or GPT-6.1 Sol (or GPT-6 Luna) before your workflows find out the hard way. Individual annual plans keep Opus 4.8.

Ask about several repos at once without leaving Slack or Teams. Mention @GitHub to cover open PRs or issues across repos in one conversation. You can now mention it anywhere in your message, and in Slack it can read shared messages and threads as context.

Claude Haiku 5.5 lands in Copilot as a speedy pick. Copilot CLI adds it to model selection and to --model completions.

Tweak Copilot CLI settings without opening a config file. New copilot config subcommands to list, read, set and remove them.

Action needed: four Copilot models are gone as of Oct 2, 2026. Suggested replacements: Gemini 3.8 Flash for Gemini 3.5 Flash and Gemini 3.6 Flash, Kimi K3 for Kimi K2.7 Code, and Claude Opus 5.5 for Claude Opus 4.7. Update workflows that name them.

GPT-6.1 Sol is now on the Copilot menu for real work. OpenAI’s model is generally available for agentic coding and terminal workflows. Copilot CLI lists it in model selection too.

Claude Opus 5.5 arrives in Copilot for the long hauls. It is aimed at agentic coding and long-running tasks.

Your custom agents can finally read the house rules. Set include-custom-instructions to load AGENTS.md and friends.

Action needed: MAI-Code-1-Flash is gone from every Copilot experience. The model is deprecated across all GitHub Copilot experiences.

Action needed: some Copilot models were set to retire October 2, 2026. GitHub scheduled the deprecation of selected models ahead of that date.