GitHub has opened a public preview of computer use in Copilot CLI and the Copilot app for macOS and Windows. The assistant can work through desktop interfaces, including software without an API or command line. GitHub says users approve app control and can review those permissions; managed organizations can disable the feature. On macOS, additional accessibility and screen-recording permissions are required.
GitHub will remove its macOS 14 Actions runner images on November 2, 2026, covering the standard, large and xlarge labels. Scheduled brownouts beginning October 5 will temporarily fail affected jobs before retirement, and reduced capacity may lengthen queues. GitHub directs workflow maintainers to its listed macOS 15 or macOS 26 arm64 alternatives; the announcement includes the individual UTC interruption windows.
GitHub’s September roundup covers Copilot changes across VS Code versions 1.136 through 1.140. Preview features add recurring agent tasks and assistance with preparing pull requests for merge, while session controls and Dev Container support aim to keep work organized. The update also expands ways to attach GitHub issues and pull requests to chats. Availability varies by feature; several additions remain previews.
GitHub now makes repository accessibility statements easier to find from the overview page when maintainers place ACCESSIBILITY.md in the root, .github, or docs directory. Public repositories also let contributors add or propose a statement through Community Standards. The change is available across GitHub.com plans; GitHub says Enterprise Server support will arrive in version 3.24.
Red Hat OpenShift Container Platform release 4.12.99 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Red Hat OpenShift Container Platform release 4.12.99 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Old checks and workflow history now expire alongside Actions logs and artifacts. GitHub says the same retention setting also covers statuses from third-party apps, subject to organization and enterprise limits. Public repositories retain a maximum of 90 days, and extending the setting cannot bring back records already deleted.
Oct 1, 17:56 UTC Resolved - This incident has been resolved. Thank you for your patience and understanding as we addressed this issue. A detailed root cause analysis will be shared as soon as it is available.
Turning on code scanning no longer starts months of weekly scans for an otherwise dormant repository. GitHub still runs the initial validation, but scheduled scanning begins only after a push or pull request triggers analysis. The change applies to Enterprise Cloud, requires no configuration changes and is planned for Enterprise Server 3.24.
A new branch without a pull request will no longer make GitHub's code coverage upload step fail CI. The action now skips that upload and explains why. For workflows triggered only by pushes, opening a pull request does not itself resume uploads: coverage returns on the next push unless a pull-request trigger is also configured.
Canonical has issued fixes for four GStreamer Good Plugins flaws involving FLAC audio, AVI files and closed-caption data. The notice describes possible information exposure or denial of service, depending on the flaw. Updates cover several Ubuntu LTS releases; fixes for older releases require Ubuntu Pro, with Legacy Support also specified for 16.04. The notice does not establish active exploitation.
GitHub introduced dynamic workflows in public preview across Copilot CLI, the Copilot app and the Copilot SDK. Workflows define agent orchestration in code, combining sequential or parallel steps, structured results and checkpoints for review. They are available on all Copilot plans; the app needs no setup, while the latest CLI requires experimental features to be enabled.
Red Hat JBoss Web Server 6.2.5 zip release is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, and Windows Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
GitHub's redesigned dashboard is now the default, bringing active agent sessions, issues and pull requests into one workspace. Filters control each list, while news updates live in a separate Feed tab. Users can start Copilot work from the dashboard or switch back to the previous experience through the preview dropdown.
Red Hat OpenShift Container Platform release 4.18.56 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
In a Google Cloud customer account, PayPal describes migrating analytics workloads from on-premises Hadoop systems to Managed Service for Apache Spark. The company says the move consolidated fragmented workflows, shortened cluster provisioning and improved integration with Cloud Storage and BigQuery. PayPal reports a 25% improvement in core workload processing times, alongside lower operational overhead; those results reflect its own deployment.
Google says the latest Cloud Storage SDKs now enable end-to-end upload checksumming by default, reducing extra work previously required from application developers. The SDKs calculate and send checksums when applications do not supply them, and support verification during downloads. Range reads through the gRPC API also receive integrity checks. Google recommends updating clients to use these protections against accidental data corruption.
An update for dracut is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
A new release is now available for Red Hat Satellite 6.19 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
An update for freerdp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
An update for freerdp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Automation no longer has to wait for a complex pull-request merge to finish inside one request. GitHub's generally available async merge API accepts the job and returns an identifier to poll for progress. It supports individual and stacked pull requests, merge queues and direct merges; bypassing rules still requires the appropriate permission.
Oct 1, 13:57 UTC Resolved - This incident has been resolved. Thank you for your patience and understanding as we addressed this issue. A detailed root cause analysis will be shared as soon as it is available.
An update for ghostscript is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Source Red HatCC BY 4.0 · Publisher excerpt shortened and converted to plain text. Original source license applies.
Original briefs are AI-assisted and checked against the linked source. Publisher excerpts are labeled separately; each story keeps its original date and article link.
