
GitHub has rolled out a new feature that lets developers customize their CodeQL code scanning setup using a configuration file. This enhancement allows for detailed control over security scans without the need for individual GitHub Actions workflows in each repository. Organizations can maintain a central configuration file, ensuring consistent security practices while allowing for repository-specific adjustments. This feature is now available on GitHub.com and will be included in GitHub Enterprise Server 3.23, offering a scalable solution for managing security across multiple repositories.
Read original
© GitHub ChangelogGitHub is phasing out GitHub Spark by August 2026, marking a shift towards more integrated development workflows. This decision aligns with the increasing developer preference for tools like GitHub Copilot, which seamlessly integrate with environments such as VS Code and Copilot CLI. While existing Spark applications will remain operational, the platform will stop accepting new users and app creations from August 4, 2026. Developers using Spark's llm() function must transition to other inference providers, as GitHub Models has already been retired. This change reflects GitHub's strategy to enhance developer experiences by focusing on cohesive toolsets that streamline the development process.
© GitHub ChangelogGitHub is making it easier to set up code coverage by introducing an AI-driven feature in its Code Quality settings. This new capability allows users to automatically generate a coverage workflow, significantly cutting down the time and effort usually required. By initiating a pull request for review, GitHub ensures that users can seamlessly integrate this feature into their repositories. This development is currently in public preview for GitHub Code Quality users on github.com, enhancing the efficiency of code quality management without the need for manual workflow authoring.
© GitHub ChangelogThe latest update to CodeQL, version 2.26.2, enhances its static analysis capabilities by adding support for Swift 6.3.3 and Kotlin 2.4.10. This means developers using these languages can now leverage CodeQL's security scanning features more effectively. The update also refines several queries, improving the detection of path injection and URL redirection vulnerabilities. These changes aim to provide more accurate results, helping developers identify and fix potential security issues in their codebases. This release is automatically available to GitHub code scanning users, ensuring immediate access to these improvements.
© Matt WolfeAnthropic has introduced a sandboxed in-app browser for Claude Code on desktop, enhancing its research and debugging capabilities.
The latest update to Claude Code, v2.1.218, introduces several improvements and fixes that enhance user experience and functionality. Notably, the /code-review feature now operates as a background subagent, preventing conversation clutter and improving workflow efficiency. The update also addresses various bugs, such as Windows path corruption and session stability issues, ensuring smoother operations. These changes make Claude Code more robust and user-friendly, particularly for developers relying on its tools for code review and management.
© Lev SelectorGoogle has launched TurboQuant, a new tool for vector compression.