From 93cc826550e6d1c340f19588c5f414bf269e20f7 Mon Sep 17 00:00:00 2001 From: Malix | Alix Brunet Date: Mon, 17 Nov 2025 19:53:54 +0100 Subject: [PATCH 1/4] feat(avoiding-duplication): marketplace comparison (#39060) Co-authored-by: Sharra-writes --- .../workflows-and-actions/reusing-workflow-configurations.md | 1 + 1 file changed, 1 insertion(+) diff --git a/content/actions/concepts/workflows-and-actions/reusing-workflow-configurations.md b/content/actions/concepts/workflows-and-actions/reusing-workflow-configurations.md index 11832419a1..3c7f565071 100644 --- a/content/actions/concepts/workflows-and-actions/reusing-workflow-configurations.md +++ b/content/actions/concepts/workflows-and-actions/reusing-workflow-configurations.md @@ -58,6 +58,7 @@ Let's compare some aspects of each solution: | Each step is logged in real-time | Logged as one step even if it contains multiple steps | | Can connect a maximum of ten levels of workflows | Can be nested to have up to 10 composite actions in one workflow | | Can use secrets | Cannot use secrets | +| Cannot be published to the [marketplace](https://github.com/marketplace?type=actions) | Can be published to the [marketplace](https://github.com/marketplace?type=actions) | ## Workflow templates From 4f49e3bc00b12fbb811aeab258a3cf14d6c9be76 Mon Sep 17 00:00:00 2001 From: Linda_pp Date: Tue, 18 Nov 2025 04:26:48 +0900 Subject: [PATCH 2/4] Fix `image_version` workflow trigger name (#41267) Co-authored-by: Sharra-writes --- .../workflows-and-actions/events-that-trigger-workflows.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/actions/reference/workflows-and-actions/events-that-trigger-workflows.md b/content/actions/reference/workflows-and-actions/events-that-trigger-workflows.md index 903e39449f..ca9ae26db6 100644 --- a/content/actions/reference/workflows-and-actions/events-that-trigger-workflows.md +++ b/content/actions/reference/workflows-and-actions/events-that-trigger-workflows.md @@ -234,7 +234,7 @@ on: gollum ``` -## image_version_ready +## `image_version` | Webhook event payload | Activity types | `GITHUB_SHA` | `GITHUB_REF` | |----------------------| -------------- | ------------ | -------------| From b2561a14a19cffa1a6df62fd57fb18b226e3b522 Mon Sep 17 00:00:00 2001 From: Luke Symes <101844513+luke-symes@users.noreply.github.com> Date: Mon, 17 Nov 2025 19:58:37 +0000 Subject: [PATCH 3/4] Fix typo: reference to `cooldown` in Dependabot options reference docs (#41269) Co-authored-by: Sharra-writes --- .../working-with-dependabot/dependabot-options-reference.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md b/content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md index 19e314dd68..188cea1a9e 100644 --- a/content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md +++ b/content/code-security/dependabot/working-with-dependabot/dependabot-options-reference.md @@ -171,7 +171,7 @@ Supported by: `bundler`, `composer`, `mix`, `maven`, `npm`, and `pip`. ## `cooldown` {% octicon "versions" aria-label="Version updates" height="24" %} -Defines a **cooldown period** for dependency updates, allowing updates to be delayed for a configurable number of days. The `coooldown` option is only available for _version_ updates, not _security_ updates. +Defines a **cooldown period** for dependency updates, allowing updates to be delayed for a configurable number of days. The `cooldown` option is only available for _version_ updates, not _security_ updates. This feature enables users to customize how often {% data variables.product.prodname_dependabot %} generates new version updates, offering greater control over update frequency. For examples, see [AUTOTITLE](/code-security/dependabot/dependabot-version-updates/optimizing-pr-creation-version-updates#setting-up-a-cooldown-period-for-dependency-updates). From 8f4872bd72ff6ce93a6bc5e24c97b7c22c7646c9 Mon Sep 17 00:00:00 2001 From: iamcjwilliams <40559511+iamcjwilliams@users.noreply.github.com> Date: Mon, 17 Nov 2025 15:57:33 -0600 Subject: [PATCH 4/4] Update model hosting and data commitment details (#41310) Co-authored-by: Sharra-writes --- .../copilot/reference/ai-models/model-hosting.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/content/copilot/reference/ai-models/model-hosting.md b/content/copilot/reference/ai-models/model-hosting.md index 486312f023..95bce5d792 100644 --- a/content/copilot/reference/ai-models/model-hosting.md +++ b/content/copilot/reference/ai-models/model-hosting.md @@ -28,11 +28,13 @@ Used for: * {% data variables.copilot.copilot_gpt_51_codex %} * {% data variables.copilot.copilot_gpt_51_codex_mini %} -{% data variables.copilot.copilot_gpt_41 %} is hosted by {% data variables.product.github %}'s Azure tenant when used in {% data variables.product.prodname_copilot %}. +These models are hosted by OpenAI and {% data variables.product.github %}'s Azure infrastructure. -{% data variables.copilot.copilot_gpt_51 %}, {% data variables.copilot.copilot_gpt_51_codex %}, {% data variables.copilot.copilot_gpt_51_codex_mini %}, {% data variables.copilot.copilot_gpt_5_codex %}, {% data variables.copilot.copilot_gpt_5 %}, and {% data variables.copilot.copilot_gpt_5_mini %} models are hosted by OpenAI and {% data variables.product.github %}'s Azure tenant. OpenAI makes the [following data commitment](https://openai.com/enterprise-privacy/): _We [OpenAI] do not train our models on your business data by default_. {% data variables.product.github %} maintains a [zero data retention agreement](https://platform.openai.com/docs/guides/your-data) with OpenAI. +OpenAI makes the [following data commitment](https://openai.com/enterprise-privacy/): _We [OpenAI] do not train models on customer business data_. Data processing follows OpenAI's enterprise privacy comments. -When using OpenAI's models, input requests and output responses continue to run through {% data variables.product.prodname_copilot %}'s content filters for public code matching, when applied, along with those for harmful or offensive content. +{% data variables.product.github %} maintains a [zero data retention agreement](https://platform.openai.com/docs/guides/your-data) with OpenAI. + +All input requests and output responses processed by {% data variables.product.prodname_copilot %}'s models continue to pass through GitHub Copilot's, content filtering systems. These filters include checks for public code matches (when applied) as well as mechanisms to detect and block harmful or offensive content. ## OpenAI models fine-tuned by Microsoft @@ -51,7 +53,7 @@ Used for: * {% data variables.copilot.copilot_claude_opus_41 %} * {% data variables.copilot.copilot_claude_sonnet_40 %} -{% data variables.copilot.copilot_claude_haiku_45 %} and {% data variables.copilot.copilot_claude_opus_41 %} are hosted by Anthropic PBC. {% data variables.copilot.copilot_claude_sonnet_40 %} is hosted by Anthropic PBC and Google Cloud Platform. {% data variables.copilot.copilot_claude_sonnet_45 %} is hosted by Amazon Web Services, Anthropic PBC, and Google Cloud Platform. {% data variables.product.github %} has provider agreements in place to ensure data is not used for training. Additional details for each provider are included below: +These models are hosted by Amazon Web Services, Anthropic PBC, and Google Cloud Platform. {% data variables.product.github %} has provider agreements in place to ensure data is not used for training. Additional details for each provider are included below: * Amazon Bedrock: Amazon makes the [following data commitments](https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html): _Amazon Bedrock doesn't store or log your prompts and completions. Amazon Bedrock doesn't use your prompts and completions to train any AWS models and doesn't distribute them to third parties_. * Anthropic PBC: {% data variables.product.github %} maintains a [zero data retention agreement](https://privacy.anthropic.com/en/articles/8956058-i-have-a-zero-retention-agreement-with-anthropic-what-products-does-it-apply-to) with Anthropic. @@ -77,9 +79,9 @@ When using {% data variables.copilot.copilot_gemini %} models, input prompts and {% data reusables.copilot.grok-promo-period %} -{% data variables.copilot.copilot_grok_code %} is hosted by xAI when used in {% data variables.product.prodname_copilot %}. +Complimentary access to Grok Code Fast 1 is continuing past the previously announced end time. A new end date has not been set. We may update or conclude this promotion at any time. [Regular pricing](https://docs.github.com/en/copilot/reference/ai-models/supported-models#model-multipliers) applies after the extension ends. -xAI operates {% data variables.copilot.copilot_grok_code %} in {% data variables.product.prodname_copilot %} under a zero data retention API policy. This means xAI commits that user content (both inputs sent to the model and outputs generated by the model): +These models are hosted on xAI. xAI operates {% data variables.copilot.copilot_grok_code %} in {% data variables.product.prodname_copilot %} under a zero data retention API policy. This means xAI commits that user content (both inputs sent to the model and outputs generated by the model): Will **not** be: * Logged for any purpose, including human review