← Back to all sparks
GitHub logo

GitHub

DEVOPSCOLLABINFRA · APIS
Velocity10.0

Development platform for version control and collaboration

GitHub sets a December 8 cutoff for ARM32 Actions runners and opens AI Scan to the API.

copilotcode-securityactionsdeprecationsenterprise-admin
◆Current state
GitHub's week splits between Copilot supply and platform upkeep. Claude Fable 5.2 and Gemini 4 Carbon reached general availability in Copilot, issue types reached personal-account repositories, and enterprise GitHub Apps can assign Copilot seats. Since then it has added REST control over code scanning's AI Scan, a Cloudflare service-token detector and direct links to public monitoring alerts, and announced that hosted Actions runners stop running ARM32 jobs on December 8.
◆Where it's heading
Two deadlines now land on December 8: Dependabot alerts pausing on year-idle repositories and the end of ARM32 job execution on hosted runners. GitHub is pruning what it supports while putting its AI security features behind APIs that organizations can script.
◆Prediction
Expect AI Scan to move from public preview toward general availability with more organization-level controls, and more retirement notices timed around December 8.

◆Recent moves

  1. 22h ago

    Manage AI Scan for repositories using the REST API

    Organizations and repositories can now switch code scanning's AI Scan on or off through the REST API, in public preview. Like the Copilot seat API earlier in the week, it lets admins script an AI feature instead of clicking through settings.

    View source ↗
  2. 1d ago

    Actions for ARM32 Linux & Windows retirement

    Hosted Actions runners stop running ARM32 jobs on Windows and Linux by December 8, following the end of node20 support. Workflows still targeting 32-bit ARM need a self-hosted runner or a move to 64-bit, on the same date Dependabot pauses alerts on idle repositories.

    View source ↗
  3. 1d ago

    Secret scanning detects Cloudflare service tokens

    Secret scanning adds one detector, for Cloudflare Access service tokens. A routine addition to the partner pattern list that follows last week's Actions-log scanning preview.

    View source ↗
  4. 1d ago

    Public monitoring alerts now have direct links

    Each public monitoring alert in the enterprise view now has its own link. A small convenience for teams handing leaked-secret alerts to each other.

    View source ↗
  5. 2d ago

    Issue types and fields are available for personal accounts

    Issue types and fields, until now an organization feature, reach repositories owned by personal accounts. Solo maintainers and open source projects get the same structured planning that teams already use.

    View source ↗
  6. 3d ago

    GitHub App support for Enterprise Copilot seat management

    Enterprise GitHub Apps can now call the Copilot seat APIs to assign and remove seats for users and teams. It follows code review settings moving to the API, so Copilot administration can run from automation rather than the settings pages.

    View source ↗