Skip to content
Merged
Show file tree
Hide file tree
Changes from 4 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions content/library/overview/release-notes/2025-q1.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@

## 2025 Q1

- **New Content: GitHub Actions Scalability** - Published guidance for scaling GitHub Actions reusability in enterprise environments, including best practices for workflow optimization, action management, and enterprise-wide deployment
- **New Content: Repository Migration Essentials** - Introduced a generalized repository migration checklist covering pre-planning, testing, execution, and post-migration, designed to serve as a single source of truth across migration approaches
- **New Content: [GitHub Actions Scalability](/library/collaboration/recommendations/scaling-actions-reusability/)** - Published guidance for scaling GitHub Actions reusability in enterprise environments, including best practices for workflow optimization, action management, and enterprise-wide deployment
- **New Content: [Repository Migration Essentials](/library/scenarios/migrations/repository-checklist/)** - Introduced a generalized repository migration checklist covering pre-planning, testing, execution, and post-migration, designed to serve as a single source of truth across migration approaches
- **Design Principle Updates** - Expanded real-world examples across pillars, including clearer guidance on pull request best practices, early vulnerability scanning, and multi-region deployment considerations
- **Checklists 2.0** - Overhauled the assessment checklists to align with recent GitHub product updates and introduced tiers to help teams prioritize actions based on maturity
- **Fixes & Refinements** - Improved clarity and usability with refinements to pillar content, navigation, homepage layout, and the hosting template for simpler ongoing maintenance
4 changes: 2 additions & 2 deletions content/library/overview/release-notes/2025-q2.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,6 @@

## 2025 Q2

- **New Content: Azure DevOps Migration Guide** - Published migration scenarios and playbooks for transitioning from Azure DevOps to GitHub, including phased approaches, feature comparisons, and practical guidance for translating Azure DevOps settings to GitHub equivalents
- **New Content: Engineering System Success Framework** - Published the Engineering System Success Framework to help organizations evaluate Copilot business value, including design principles, checklists, metrics, implementation phases, anti-patterns, and intervention strategies
- **New Content: [Azure DevOps Migration Guide](/library/scenarios/migrations/azure-devops-migration-guide/)** - Published migration scenarios and playbooks for transitioning from Azure DevOps to GitHub, including phased approaches, feature comparisons, and practical guidance for translating Azure DevOps settings to GitHub equivalents
- **New Content: [Engineering System Success Framework](/library/productivity/recommendations/engineering-system-metrics/)** - Published the Engineering System Success Framework to help organizations evaluate Copilot business value, including design principles, checklists, metrics, implementation phases, anti-patterns, and intervention strategies
- **Site Improvements** - Introduced a new Copilot Chat Widget that provides interactive assistance for users
10 changes: 5 additions & 5 deletions content/library/overview/release-notes/2025-q3.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@

## 2025 Q3

- **Update: Repository Management Enhancement** - Updated the "Managing repositories at scale" article with opinionated guidance on adopting rulesets and custom properties to meet business objectives, including actionable strategies for governance at scale
- **Update: GitHub Actions Policy Updates** - Updated the GitHub Actions recommendations with new policy capabilities and more prescriptive governance and security guidance for managing workflows at scale
- **New Content: GitHub Copilot Enterprise Administration** - Published an enterprise playbook for managing GitHub Copilot Premium Request Units (PRUs), including budget configuration, KPI targets, monitoring, and cost control strategies
- **New Content: Security Alert Management** - Published a scenario for prioritizing security alert remediation using GitHub's built-in metadata and organizational context, including practical guidance on implementing GitHub's security campaigns and vulnerability triage workflows
- **New Content: Champion Program** - Published a recommendation for champion programs that empower engaged employees to guide peers through AI-driven change.
- **Update: [Repository Management Enhancement](/library/governance/recommendations/managing-repositories-at-scale/)** - Updated the "Managing repositories at scale" article with opinionated guidance on adopting rulesets and custom properties to meet business objectives, including actionable strategies for governance at scale
- **Update: [GitHub Actions Policy Updates](/library/application-security/recommendations/actions-security/)** - Updated the GitHub Actions recommendations with new policy capabilities and more prescriptive governance and security guidance for managing workflows at scale
- **New Content: [GitHub Copilot Enterprise Administration](/library/governance/recommendations/copilot-policies-best-practices/copilot_pru_enterprise_admin_playbook/)** - Published an enterprise playbook for managing GitHub Copilot Premium Request Units (PRUs), including budget configuration, KPI targets, monitoring, and cost control strategies
- **New Content: [Security Alert Management](/library/application-security/recommendations/prioritizing-alerts/)** - Published a scenario for prioritizing security alert remediation using GitHub's built-in metadata and organizational context, including practical guidance on implementing GitHub's security campaigns and vulnerability triage workflows
- **New Content: [Champion Program](/library/collaboration/recommendations/champion-program/)** - Published a recommendation for champion programs that empower engaged employees to guide peers through AI-driven change.
6 changes: 3 additions & 3 deletions content/library/overview/release-notes/2025-q4.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,6 @@

## 2025 Q4

- **New Content: Actions Runner Controller (ARC) best practices** - Published an opinionated guidance for operating ARC on Kubernetes, including recommendations for runner images, configuration, observability, and security trade-offs
- **New Content: Securing developer workspace** - Published an design guidance for hardening developer workspaces, including identity and authorization, workspace isolation, and signed commit practices
- **Update: Securing GitHub Actions workflows** - Added opinionated guidance for OIDC, repository rulesets, and safer workflow patterns, with specific recommendations for public repository security
- **New Content: [Actions Runner Controller (ARC) best practices](/library/architecture/recommendations/deploying-actions-runner-controller/)** - Published an opinionated guidance for operating ARC on Kubernetes, including recommendations for runner images, configuration, observability, and security trade-offs
- **New Content: [Securing developer workspace](/library/application-security/recommendations/securing-developer-workspace/)** - Published an design guidance for hardening developer workspaces, including identity and authorization, workspace isolation, and signed commit practices
- **Update: [Securing GitHub Actions workflows](/library/application-security/recommendations/actions-security/)** - Added opinionated guidance for OIDC, repository rulesets, and safer workflow patterns, with specific recommendations for public repository security
14 changes: 7 additions & 7 deletions content/library/overview/release-notes/2026-q1.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@

## 2026 Q1

- **New Content: Managing dependency threats** - Published a comprehensive guide for defending against supply chain attacks and managing dependency risks, covering layered defenses from lockfiles and dependency review to attestation verification and package confusion mitigation
- **New Content: Expanding Enterprise Custom Agents context** - Published architecture guidance for extending GitHub Copilot custom agents with enterprise knowledge, including strategies for context enrichment, secure integration patterns, and scaling agent capabilities across the organization
- **New Content: Implementing polyrepo engineering** - Published a design guide for coordinating engineering across multiple repositories, including manifest-driven integration, change set management, reusable workflow versioning, and release governance patterns
- **Update: NIST SSDF implementation** - Expanded the NIST Secure Software Development Framework scenario with updated guidance on security configurations, repository rulesets, and practical implementation steps across all SSDF practice areas
- **Update: Securing GitHub Actions workflows** - Enhanced the Actions security recommendation with detailed OIDC claims guidance, immutable subject identifiers, repository ruleset examples, and refined best practices for secure workflow patterns
- **Update: Application Security design principles** - Added a security-by-design approach and developer workspace security considerations to the Application Security pillar's design principles
- **Update: Anti-patterns** - Added guidance on avoiding PII detection with secret scanning custom patterns, highlighting why repurposing secret scanning for personally identifiable information creates compliance risk and alert fatigue
- **New Content: [Managing dependency threats](/library/application-security/recommendations/managing-dependency-threats/)** - Published a comprehensive guide for defending against supply chain attacks and managing dependency risks, covering layered defenses from lockfiles and dependency review to attestation verification and package confusion mitigation
- **New Content: [Expanding Enterprise Custom Agents context](/library/architecture/recommendations/expanding-enterprise-custom-agents-context/)** - Published architecture guidance for extending GitHub Copilot custom agents with enterprise knowledge, including strategies for context enrichment, secure integration patterns, and scaling agent capabilities across the organization
- **New Content: [Implementing polyrepo engineering](/library/architecture/recommendations/implementing-polyrepo-engineering/)** - Published a design guide for coordinating engineering across multiple repositories, including manifest-driven integration, change set management, reusable workflow versioning, and release governance patterns
- **Update: [NIST SSDF implementation](/library/scenarios/nist-ssdf-implementation/)** - Expanded the NIST Secure Software Development Framework scenario with updated guidance on security configurations, repository rulesets, and practical implementation steps across all SSDF practice areas
- **Update: [Securing GitHub Actions workflows](/library/application-security/recommendations/actions-security/)** - Enhanced the Actions security recommendation with detailed OIDC claims guidance, immutable subject identifiers, repository ruleset examples, and refined best practices for secure workflow patterns
- **Update: [Application Security design principles](/library/application-security/design-principles/)** - Added a security-by-design approach and developer workspace security considerations to the Application Security pillar's design principles
- **Update: [Anti-patterns](/library/scenarios/anti-patterns/)** - Added guidance on avoiding PII detection with secret scanning custom patterns, highlighting why repurposing secret scanning for personally identifiable information creates compliance risk and alert fatigue
Loading