Coding Tools
GitHub draft PRs now count toward limits
GitHub Changeloghigh confidence
Why it matters
- →Maintainers can now prevent spammers from bypassing PR limits using drafts.
- →Reduces unnecessary CI runs and notification clutter for open source projects.
- →Closes a loophole that allowed unlimited low-quality contributions under the guise of drafts.
GitHub has updated its pull request limit settings to include draft pull requests in the count. Previously, users could bypass limits by opening unlimited drafts, leading to increased noise and CI resource waste for maintainers. The new configuration option allows repository owners to restrict both open and draft PRs per user, helping to curb spam and low-quality contributions. This change aims to improve signal-to-noise ratios in popular repositories.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
How we got here
- 1GitHub Limits Open Pull Requests for Non-Writers
GitHub Changelog · June 17, 2026 · Related
- 2GitHub rate limits private vulnerability reports
GitHub Changelog · October 1, 2026 · Related
More from GitHub Changelog
© GitHub ChangelogCoding Toolscoding
Copilot adds sandboxing and Claude Haiku 5.5
GitHub Copilot is tightening the leash on autonomous agents with local sandboxing, a critical step for enterprise security that restricts file, network, and credential access. The update also brings Claude Haiku 5.5 to all paid tiers, expanding the model lineup available within the IDE. Meanwhile, the CLI now integrates seamlessly with local Ollama instances, allowing developers to swap between cloud and local models without leaving their workflow. These changes shift Copilot from a simple autocomplete tool toward a more controlled, multi-model agent platform.
GitHub Changelog
© GitHub ChangelogCoding Toolscoding
CodeQL 2.27.2 updates analysis and breaks macOS 27 support
CodeQL 2.27.2 tightens security coverage with new C++ regex parsing and SQL-injection models for Comdb2, while refining Rust async data flow. The release also corrects false positives in C# clickjacking and XSS queries, making enterprise scanning more precise. However, the most disruptive change is the abrupt loss of support for macOS 27 and Xcode 27 due to Apple dropping multi-architecture binaries, forcing developers to downgrade their toolchains for compiled language analysis. This update underscores the fragility of static analysis pipelines when underlying OS dependencies shift without warning.
GitHub Changelog
© GitHub ChangelogCoding Toolscoding
GitHub Copilot Code Review adds org billing controls
GitHub is tightening the leash on enterprise AI spending with new billing and access controls for Copilot Code Review. Organizations can now shift costs from individual member quotas to a central cost center using AI Credits, preventing personal license exhaustion from halting team workflows. Simultaneously, admins can block external licenses from triggering reviews, ensuring only authorized corporate accounts consume resources. This moves Copilot from a perk to a managed utility, giving finance teams actual visibility into AI consumption.
GitHub Changelog
More in Coding Tools
Coding Toolscoding
Claude Code v2.1.292 patches security and agent logic
This release tightens the leash on Claude Code's autonomous capabilities while fixing critical sandbox escapes. The new effort parameter for Agent tools lets developers explicitly control sub-agent depth, a necessary guardrail as these systems grow more complex. Security fixes are prominent, addressing how plugins handle network paths and how file permissions persist during session resumption. It’s a stability patch that ensures the tool remains usable in enterprise environments without compromising on the new agent features.
Claude Code Releases
Coding Toolscoding
Claude Code v2.1.293 updates Haiku and fixes agent bugs
Anthropic quietly shipped a significant model update alongside routine maintenance. Claude Haiku 5.5 is now the default on the API, offering a 1M context window at $0.10 per million tokens, which lowers the cost floor for high-volume coding tasks. The release also patches critical stability issues in the local agent runtime, specifically fixing memory leaks in HTTP MCP connections and resolving session state corruption during context compaction. These fixes matter because they stabilize the autonomous coding workflow that developers rely on daily. With Haiku 5.5 now standard, teams can deploy cheaper, faster iterations without manual configuration.
Claude Code Releases
Coding Toolscoding
Claude Code v2.1.294 fixes hook logic
Anthropic quietly patched a frustrating edge case in Claude Code’s agent hooks. Previously, instructions like 'Block commands that...' were often ignored because the model didn't recognize them as valid blocking criteria. This update ensures those prompts are properly interpreted, while also refining how stop conditions are judged to prevent premature termination. It’s a small but necessary fix for anyone relying on strict guardrails in automated coding workflows.
Claude Code Releases