Briefing Summary Market GitHub expanded Copilot from review assistance into a more authoritative workflow layer: Max review coordinates multiple model-backed agents, while Copilot approvals can now satisfy required repository approvals, with admin controls and automatic dismissal after new commits. [Source] Its connected cloud experience also makes persistent, resumable agent sessions available across GitHub, IDE, CLI, mobile, and chat surfaces, but November sandbox billing and shared dollar-based Actions entitlements make compute governance increasingly important. [Source] Compared with last cycle’s GA review and remediation automation, the material shift is deeper trust and continuity; separately, Windows/WSL teams should directly inventory OpenCode and upgrade to 1.18.33 because a reported MCP-triggered RCE was patched without a CVE or advisory. [Source] |
Top Coverage Top StoryCopilot code review: Merge with confidence with Max and approvals GitHub · Published Oct 28, 10:30 AM CT · github.blog GitHub has put Copilot code review’s Max effort level into public preview and made Copilot pull-request approvals generally available. Max coordinates independent review agents across models and consumes more time and AI credits, while enabled approvals can count toward required repository approvals and are dismissed when new commits are pushed; admins can control availability and approved file paths. Work from anywhere with a new, connected Copilot cloud experience GitHub · Published Oct 28, 10:30 AM CT · github.blog GitHub has made a connected Copilot cloud experience generally available on paid plans, enabling persistent agent sessions across GitHub.com, Mobile, CLI, the Copilot app, VS Code, Slack, and Teams. Sessions run by default in resumable GitHub-managed cloud sandboxes, while Actions compute is becoming a shared dollar-based entitlement for builds, sandboxes, and eligible larger runners; sandbox billing begins in November 2026. Security extension for the GitHub Copilot app GitHub · Published Oct 28, 10:45 AM CT · github.blog Also reported by Jonathan Vella GitHub has put a Security extension for the GitHub Copilot app into public preview, allowing developers to browse code-scanning alerts, ask Copilot to explain or fix them in the local working copy, and run `/security-review` on current changes. The feature consolidates alert triage and remediation in the Copilot app; AI-powered actions consume credits, while access to existing private-repository alerts requires GitHub Code Security. GPT-6.1 Terra reaches GitHub Copilot with plan, rollout and admin-policy limits - OpenTools OpenTools Team · Published Oct 27, 7:01 AM CT · opentools.ai GitHub made GPT-6.1 Terra generally available in Copilot on October 26 for Pro, Pro+, Max, Business and Enterprise plans across major Copilot clients. Availability is gradual, enterprise access remains subject to administrator model policy, and usage is billed at provider list pricing under usage-based billing. GitHub Copilot assisted permissions generally available GitHub · Published Oct 26, 5:31 PM CT · github.blog GitHub has made Copilot assisted permissions generally available in Copilot CLI, the Copilot app, and VS Code. The mode uses an LLM to automatically allow requests classified as clearly safe while requiring developer approval for others; enterprise administrators can set defaults and restrict permission modes. Critical OpenCode RCE Was Patched as a ‘Refactor.’ No CVE Exists, So Nothing Flags It. – Forkast Heath Callahan · Published Oct 22, 1:46 PM CT · forkast.news Forkast reports that OpenCode versions 1.0.137 through 1.18.32 exposed Windows and WSL users to RCE through a malicious MCP OAuth discovery endpoint, with the server-controlled URL reaching PowerShell. The reported fix is OpenCode 1.18.33, including an update to open@11.0.4, but it shipped without a security advisory or CVE, so teams must inventory installations directly rather than relying on vulnerability scanners or dependency alerts.
|
Read Online · Forwarded this? Subscribe free |