GitHub Universe · Recap · GitHub

Catch up on the key announcements shaping the future of software development
Break large changes into focused, linked pull requests. Review each independently, then merge the full stack in one click.
Opens a pre-configured Codespace with all the dependencies needed
Use GitHub CLI’s repeatable --attach flag to add images and videos inline in issues, pull requests, or comments.
Opens a pre-configured Codespace with all the dependencies needed
Attach plans, research, links, and other artifacts to an issue so your team can find the thinking behind the work.
Opens a Copilot app canvas for guided activity (5–10 min). Download Copilot app.
Scan open work, understand its status, and jump into what needs your attention next.
Select Standard, High, or Max. Copilot Fusion determines whether to use one model or combine multiple models, balancing quality, speed, and cost for the task.
Get 30% off Copilot Fusion usage through November 30, 2026
Copilot Projects keep goals, context, sessions, and results together, coordinating parallel work across one or more repositories so you can track progress and direct what happens next.
Run reusable Copilot tasks on demand, on a schedule, or from triggers. Share them with your team and control their access, actions, and cost.
Opens a Copilot app canvas for guided activity (25–30 min). Download Copilot app.
Authenticate once to services like Vercel, Cloudflare, and Sentry. GitHub configures and manages the supported MCP server connection across the Copilot app, CLI, VS Code, web and code review.
Review what you and your agents just wrote alongside your repository's code scanning alerts in one Security canvas. Ask Copilot to explain and fix findings, then review each change.
Scan a whole repository on demand and assign the backlog of findings to Copilot to fix. AI Scan also checks pull requests in languages CodeQL doesn't cover.
Push protection now uses AI to catch unstructured secrets, like passwords, and blocks them at push, whether you or your agents wrote the code.
Both push protection and AI secret detection must be enabled
Package firewall blocks malicious and risky npm packages before agents, runners, or IDEs install them. Reachability analysis shows which vulnerable functions your JavaScript code calls, so you fix those first.
A record year of momentum, and it showed up everywhere: every region, every industry, every field of research. See the 2026 Octoverse.
Sign up for news and be the first to know when Universe 2027 is announced.
Get tips, technical guides, and best practices. Twice a month. Right in your inbox.