- Introduces automatic malware scanning of packages at publish time to enhance supply‑chain security.
- Adds a new dual‑use metadata requirement for publishers to provide additional package information.
- Publishers will see scanning results and may need to address flagged issues before successful publish.
npm publish-time malware scanning and dual-use metadata
Official GitHub changelog summary with source attribution, release tags, and community reactions.
Track this GitHub release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this GitHub release note into a weekly digest for the tools you actually use.
Create digestMore GitHub changelog updates
Copilot code review now fully supports agent skills and MCP servers for all Pro, Pro+, Business, and Enterprise plans
Adds a global default enablement policy for GA Copilot models on Business and Enterprise plans
Updated CodeQL to version 2.26.1