GitHub Copilot

Developers can use Copilot for chat, inline edits, asking questions, agent modes, and code completions with supported models.

Availability

Generally available on paid Copilot plans

Pricing model

Paid Copilot plans

Deployment

GitHub Enterprise Cloud

Privacy

Users can view or delete saved preferences in Copilot settings

Licence

No GHSP or GHAS license required for these checks

• Gemini 3.5 Flash, Gemini 3.6 Flash, Kimi K2.7 Code, and Claude Opus 4.7 were deprecated in GitHub Copilot on October 2, 2026. ^[1]
• The deprecated models are no longer supported across Copilot Chat, inline edits, ask and agent modes, and code completions. ^[1]

  As of today, October 2, 2026, we have deprecated the following models across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions).

• GitHub suggests Gemini 3.8 Flash as an alternative to Gemini 3.5 Flash and Gemini 3.6 Flash. ^[1]
• GitHub suggests Kimi K3 as an alternative to Kimi K2.7 Code. ^[1]
• GitHub suggests Claude Opus 5.5 as an alternative to Claude Opus 4.7. ^[1]
• Copilot Enterprise administrators may need to enable access to alternative models through model policies in Copilot settings. ^[1]

  Copilot Enterprise administrators may need to enable access to alternative models through their model policies in Copilot settings.

• HydraFusion lets Copilot select and coordinate models for a task. ^[2]

  Let Copilot select and coordinate models for your task with HydraFusion , a research preview now available in VS Code and the GitHub Copilot app alongside Copilot CLI.

• HydraFusion is a research preview in VS Code and the GitHub Copilot app alongside Copilot CLI. ^[2]

  Let Copilot select and coordinate models for your task with HydraFusion , a research preview now available in VS Code and the GitHub Copilot app alongside Copilot CLI.

• The announcement says HydraFusion provides clearer, more frequent progress updates. ^[2]

  Clearer, more frequent progress updates help you follow its work.

• Local sandboxing is generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host. ^[3]

  Local sandboxing for GitHub Copilot is now generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host.

• Sandbox policies can limit the files and directories that agent-run commands can read or modify. ^[3]

  Limit the files and directories that agent-run commands can read or modify.

• Developers can control access to the internet, local networks, Git credentials, and GitHub CLI credentials. ^[3]

  Control access to the internet, local networks, Git credentials, and GitHub CLI credentials.

• Microsoft eXecution Container translates a common sandbox policy into native operating-system controls across Windows, macOS, and Linux. ^[3]

  Local sandboxing is powered by Microsoft eXecution Container (MXC) , which translates a common sandbox policy into native operating-system controls across Windows, macOS, and Linux.

• Local sandboxing is included with GitHub Copilot at no additional cost. ^[3]

  Local sandboxing is included with GitHub Copilot at no additional cost.

• GitHub is adding checks from the secret classifier alongside the existing LLM-based security review. ^[4]

  Coming soon, GitHub is adding checks from the secret classifier alongside the existing LLM-based review.

• The new checks are coming soon in private preview. ^[4]

  AI-based secret scanning with the GitHub Copilot /security-review command for the Copilot CLI and Copilot app available soon in private preview.

• The new checks will consume AI Credits in addition to the review’s existing usage. ^[4]

  The new checks will consume AI Credits in addition to the review's existing usage.

• No GHSP or GHAS license is required to use these checks. ^[4]

  You don't need a GHSP or GHAS license to use these checks.

• The new checks will be off by default, and running /security-review will not enable them. ^[4]

  The new opt-in checks for push protection and the security review command will consume GitHub AI Credits.

• Local sandboxing can limit agents’ access to files, networks, and credentials. ^[5]

  Limit agents' access to files, networks, and credentials with local sandboxing, now generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host.

• Local sandboxing is generally available in Copilot CLI. ^[5]

  Limit agents' access to files, networks, and credentials with local sandboxing, now generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host.

• Local sandboxing is available in the Copilot app and VS Code sessions using Agent Host. ^[5]

  Limit agents' access to files, networks, and credentials with local sandboxing, now generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host.

• Local sandboxing is included with Copilot at no extra cost. ^[5]

  This is included with Copilot at no extra cost.

• Explicit managed values take precedence over local settings, SDK configuration, and environment variables. ^[6]

  Explicit managed values take precedence over local settings, SDK configuration, and environment variables.

• The telemetry.capture.identity setting adds user.name, process.user.name, and host.name attributes to OpenTelemetry data. ^[6]

  The telemetry.capture.identity setting adds three attributes to OpenTelemetry (OTel) data:

• Identity capture is off by default and remains separate from the existing pseudonymous user identifier. ^[6]

  Identity capture is off by default and remains separate from the existing pseudonymous user identifier.

• Administrators can independently control capture of prompts, responses, toolArguments, toolOutput, and policyDetail. ^[6]

  Administrators can also independently control five additional capture classes:

• Every capture class is off by default. ^[6]

  Every capture class is off by default.

• Fine-grained capture controls are available in Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host. ^[6]

  Fine-grained capture controls are available in Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host.

• The setting is supported in Copilot CLI, VS Code, and the GitHub Copilot app. ^[7]

  The setting is supported in Copilot CLI, VS Code, and the GitHub Copilot app.

• If a client cannot confirm current policy, it fails closed rather than running with stale or unconfirmed policy. ^[7]

  If the client cannot confirm current policy, it fails closed rather than running with a stale or unconfirmed policy.

• The sandbox key can enforce a required minimum client version, forcing users on older versions to update to resume using Copilot. ^[7]

  When this key is included in managed settings, users who pin to older versions of Copilot clients will now be forced to update in order to resume using Copilot.

• The forceRemoteSettingsRefresh setting can require supported clients to retrieve current settings at startup. ^[7]

  Enterprise administrators can now require supported GitHub Copilot clients to retrieve current server-managed settings at startup instead of relying on a cached policy.

• With the setting active, a cached response cannot satisfy the freshness requirement. ^[7]

  While the setting is active, a cached response cannot satisfy the freshness requirement.

• Claude Opus 4.8 remains available to individual GitHub Copilot subscribers on annual plans. ^[8]

  *Claude Opus 4.8 will remain available to individual GitHub Copilot subscribers on annual plans so they retain an Opus offering.

• Suggested alternatives are automatically enabled for Copilot Enterprise and Copilot Business customers under default model enablement, unless an administrator has disabled them. ^[8]

  Under default model enablement, the suggested alternatives are automatically enabled for Copilot Enterprise and Copilot Business customers unless an administrator has turned off the global default or explicitly disabled the model.

• GPT-6.1 Sol or GPT-6 Luna are suggested alternatives to GPT-5.6 Terra. ^[8]

  GPT-6.1 Sol or GPT-6 Luna

• Claude Opus 5.5 is the suggested alternative to Claude Opus 4.8 and Claude Opus 5. ^[8]

  The deprecation of Claude Opus 4.8 does not apply to these customers.

• Claude Opus 4.8, Claude Opus 5, and GPT-5.6 Terra are scheduled for deprecation across GitHub Copilot experiences on November 16, 2026. ^[8]
• The API supports model policies at the enterprise level. ^[9]

  You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, enterprise apps, and organizations.

• GET and PATCH endpoints for model policies are generally available. ^[9]

  GET and PATCH endpoints are now generally available for model policies at four levels:

• The API supports model policies for enterprise teams and enterprise apps. ^[9]

  You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, enterprise apps, and organizations.

• The API supports model policies at the organization level. ^[9]

  You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, enterprise apps, and organizations.

• Enterprise policies can delegate model control to organizations in organization mode, or to teams and apps in enterprise teams mode. ^[9]

  Enterprise policies can delegate model control to organizations in organization mode, or to teams and apps in enterprise teams mode.

• Enforcement is gradually rolling out through October 26. ^[10]

  Starting today, we're gradually rolling out enforcement of the policy through October 26, so it may take effect at different times for different enterprises and organizations.

• Preview features remain opt-in. ^[10]

  Preview features remain opt-in.

• Explicit choices for individual features are preserved during rollout. ^[10]

  Administrators can still make explicit choices for individual features at any time.

• Administrators can choose Enabled, Disabled, or Let organizations decide as the global default. ^[10]

  Eligible generally available features and capabilities left Unconfigured will be set according to the selected global default of Enabled , Disabled , or Let organizations decide .

• Eligible generally available features left Unconfigured are set according to the selected global default. ^[10]

  Eligible generally available features and capabilities left Unconfigured will be set according to the selected global default of Enabled , Disabled , or Let organizations decide .

• Server-to-server authentication is available in public preview. ^[11]

  GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, available in public preview.

• Services and agents built with the GitHub Copilot SDK can make requests on behalf of an organization without a signed-in user's credentials. ^[11]

  Services and agents built with the GitHub Copilot SDK can now make requests on behalf of an organization without relying on a signed-in user's credentials.

• A GitHub App can be given the read-only Copilot Requests organization permission and installed on an organization. ^[11]

  Developers can give a GitHub App the read-only Copilot Requests organization permission, install the app on an organization, and pass a short-lived installation access token to the Copilot SDK.

• Usage is attributed and billed to the organization that owns the installation. ^[11]

  Usage is attributed and billed to the organization that owns the installation.

• Organization owners can review app access, identify app-attributed usage in AI usage CSV reports, and suspend or uninstall an app to stop its access. ^[11]

  Organization owners can review which apps have access, identify app-attributed usage in AI usage CSV reports using the app_client_id field, and stop an app's access by suspending or uninstalling it.

• Enterprise administrators can block Allow All while keeping Assisted available, or disable Assisted separately. ^[12]

  If you're an enterprise administrator, you can use enterprise-managed settings to block Allow All while keeping Assisted available or disable Assisted separately.

• Administrators can choose the default permission mode for new sessions. ^[12]

  You can also choose the default permission mode for new sessions.

• Assisted permissions are generally available in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. ^[12]

  Assisted permissions are now generally available in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code.

• A large language model evaluates requests to run commands, access a file system path, or open a URL. ^[12]

  When Copilot requests permission to run a command, access a file system path, or open a URL, a large language model evaluates the request.

• Requests classified as clearly safe automatically proceed. ^[12]

  Requests classified as clearly safe automatically proceed.

• Requests not classified as clearly safe require approval. ^[12]

  Requests classified as clearly safe automatically proceed.

• Copilot access through GitHub Enterprise has the same features and models as Copilot Enterprise but does not include monthly AI credits per seat. ^[13]

  Copilot access through GitHub Enterprise and Copilot Standalone has the same features and models as Copilot Enterprise but does not include monthly AI credits per seat.

• Available now for GitHub Enterprise Cloud customers working with a GitHub or Microsoft account team. ^[13]

  Enterprises working with a GitHub or Microsoft account team can now get Copilot included with GitHub Enterprise for every licensed user.

• Self-serve availability is opening in stages, and current self-serve subscriptions are unaffected. ^[13]

  Self-serve availability is coming in stages, and current self-serve subscriptions are unaffected.

• AI usage is metered from the first request against the enterprise budget. ^[13]

  AI usage is metered from the first request against your enterprise budget, using the policies, alerts, and attribution you already have.

• Code completion and next edit suggestions keep working even when no budget is available. ^[13]

  Code completion and next edit suggestions keep working even with no budget available.

• Copilot Chat, Copilot code review, and Copilot in the cloud require available budget. ^[13]

  Copilot Chat, Copilot code review, and Copilot in the cloud require available budget to use.

• Image generation is billed separately from the chat model based on image tokens that count toward the plan’s AI credits. ^[14]

  It's billed separately from your chat model, based on image tokens that count toward your plan's AI credits.

• Copilot can generate and edit images using natural language. ^[14]

  You can now generate and edit images using natural language in GitHub Copilot.

• The selected reasoning model calls a dedicated image-generation tool powered by GPT Image 2.5 Flare. ^[14]

  When you ask for an image, your selected reasoning model calls a dedicated image-generation tool powered by GPT Image 2.5 Flare, previews the result inline, and saves it to your project.

• Generated images are previewed inline and saved to the project. ^[14]

  When you ask for an image, your selected reasoning model calls a dedicated image-generation tool powered by GPT Image 2.5 Flare, previews the result inline, and saves it to your project.

• Image generation is in public preview for Copilot Pro, Copilot Pro+, Copilot Business, and Copilot Enterprise. ^[14]

  Image generation is in public preview for Copilot Pro, Copilot Pro+, Copilot Business, and Copilot Enterprise.

• Organization and enterprise owners can disable image generation using Copilot model policies. ^[14]

  Organization and enterprise owners can turn off image generation by disabling the image generation model using Copilot model policies .

• Copilot can remember personal preferences and repository conventions across sessions and clients. ^[15]

  Copilot can remember personal preferences and repository conventions across sessions and clients.

• GitHub Copilot Memory is generally available on paid Copilot plans. ^[15]

  GitHub Copilot Memory is now generally available on paid Copilot plans.

• Users can view or delete saved preferences in Copilot settings. ^[15]

  You can interact with memories in the Copilot app, Copilot CLI, and VS Code, or manage personal memories in your Copilot settings, where you can view or delete saved preferences .

• AWS Continuum can investigate code vulnerabilities and propose fixes Daily brief 2026-10-25
• OpenGCUA for macOS leads 12 AI developments on 19 October 2026 Daily brief 2026-10-19
• Bespoke-Nimble-9B-v2 leads 12 AI developments on 15 October 2026 Daily brief 2026-10-15
• An open model for tool-using agents, plus a checkpoint to fine-tune Daily brief 2026-10-13
• Two local models can classify, route, or score text and images Daily brief 2026-10-10
• Liquid AI’s decision models classify inputs without writing a response Daily brief 2026-10-07
• Backburner leads 25 AI developments in week 40, 2026 Weekly brief 2026-W40
• Google introduces Gemini 4 Argon reasoning model Daily brief 2026-10-02