Repository administrators can now select runner types, labels and groups for Dependabot updates.
The controls apply to private and internal repositories on github.com, covering self-hosted and larger hosted runners. Public repositories and Enterprise Server are excluded. Security configurations do not currently enforce these settings.
Source announcement: . This is an original summary, not independent on-the-ground reporting.
Last updated: . Editorial policy & corrections
Global
Trusted npm publishing configurations can now manage distribution tags using short-lived OIDC credentials.
Read update : npm adds opt-in tag management to trusted publishingGlobal
GitHub Team organizations can now start trials of Code Security and Secret Protection themselves.
Read update : GitHub Team gains self-serve Advanced Security trialsGlobal
GitHub Enterprise Cloud with data residency will stop accepting clients offering only X25519 key agreement on October 7.
Read update : GitHub warns of October 7 TLS change for data-residency customers