GitHub vs Okta

Two rhythms run through GitHub's feed. Copilot absorbs a new frontier model roughly every few days — Grok 4.6 and Gemini 3.7 Flash both landed this week — on top of a weekly release digest covering editors, CLI and the Copilot app, and Agent Plugins 1.0 making a plugin portable across compatible agent clients. Separately, the developer platform gets security and administration work: OAuth apps can opt into expiring access tokens with refresh, rulesets gain an organization-level insights dashboard, license data is now sourced from package registries, and personal repositories allow blocking directly from a comment.

The model additions have become routine enough that they read as inventory management rather than direction — Copilot's position is now to carry whichever reasoning model a developer wants, and the differentiation has moved to the surrounding agent surface, where plugin portability and persistent memory are the actual bets. The platform work points the other way, toward closing the long tail of OAuth-era assumptions: opt-in token expiry is the kind of change that only matters once app authors have somewhere to migrate to. Enterprise Server 3.22 is in candidates, which is where the Copilot administration controls consolidate for self-hosted customers.

Expect the weekly model cadence to continue without much signal in any individual addition, and the OAuth token expiry to move from opt-in toward default once adoption data supports it. The Agent Plugins ecosystem is the thread worth watching, since its value depends on clients GitHub does not control.