- GitHub will retain data for closed Dependabot security alerts for a defined period starting August 25, 2026.
- Provides a clear commitment on how long alert data is stored, improving transparency for users.
- Applies to all repositories using Dependabot; no code changes required.
Upcoming cloud data retention policy for closed security alerts
Official GitHub changelog summary with source attribution, release tags, and community reactions.
Track this GitHub release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this GitHub release note into a weekly digest for the tools you actually use.
Create digestMore GitHub changelog updates
Users can now pin saved issue views directly in the repository’s issues sidebar for one‑click access
Adds Windows 11 arm64 runner image with Visual Studio 2026 to GitHub‑hosted runners
Introduce a new "Mitigated" dismissal reason for code scanning alerts, enabling dismissal when external controls reduce risk.