LoginSign Up
← Back to all sparks
GitHub logo

GitHub

DEVOPSCOLLABINFRA · APIS
Velocity10.0

Development platform for version control and collaboration

github.com ↗

GitHub is shipping models into Copilot weekly while quietly modernizing the OAuth platform underneath

copilotagent-pluginsoauthmodel-catalogenterprise-server
◆Current state
Two rhythms run through GitHub's feed. Copilot absorbs a new frontier model roughly every few days — Grok 4.6 and Gemini 3.7 Flash both landed this week — on top of a weekly release digest covering editors, CLI and the Copilot app, and Agent Plugins 1.0 making a plugin portable across compatible agent clients. Separately, the developer platform gets security and administration work: OAuth apps can opt into expiring access tokens with refresh, rulesets gain an organization-level insights dashboard, license data is now sourced from package registries, and personal repositories allow blocking directly from a comment.
◆Where it's heading
The model additions have become routine enough that they read as inventory management rather than direction — Copilot's position is now to carry whichever reasoning model a developer wants, and the differentiation has moved to the surrounding agent surface, where plugin portability and persistent memory are the actual bets. The platform work points the other way, toward closing the long tail of OAuth-era assumptions: opt-in token expiry is the kind of change that only matters once app authors have somewhere to migrate to. Enterprise Server 3.22 is in candidates, which is where the Copilot administration controls consolidate for self-hosted customers.
◆Prediction
Expect the weekly model cadence to continue without much signal in any individual addition, and the OAuth token expiry to move from opt-in toward default once adoption data supports it. The Agent Plugins ecosystem is the thread worth watching, since its value depends on clients GitHub does not control.

◆Recent moves

  1. 4d ago

    Multiple redirect URIs and token refresh for OAuth apps

    OAuth apps can opt into expiring access tokens with refresh tokens, and both OAuth and GitHub App platforms gain multiple redirect URIs. Overdue modernization of an authorization surface that a large share of the ecosystem depends on, delivered as opt-in rather than a forced migration.

    View source ↗
  2. 4d ago

    Grok 4.6 is now available in GitHub Copilot

    xAI's Grok 4.6 joins the Copilot model catalog, pitched at agentic coding and multi-step workflows. Another entry in a catalog that now turns over weekly — the capability surface widens, but the pattern is well established.

    View source ↗
  3. 5d ago

    Copilot weekly: portable plugins and agent workflows across editors and CLI

    The weekly Copilot digest, covering new models, portable plugins and agent workflow changes across editors, the CLI and the Copilot app. The digest format buries individual releases, but the consistent theme is Copilot behaving the same way wherever a developer invokes it.

    View source ↗
  4. 5d ago

    License data quality improvements

    The dependency graph now reads license information from package registries like npmjs.org and PyPI rather than inferring it, improving accuracy and coverage. A quiet fix with real consequences for anyone running license compliance off GitHub's data.

    View source ↗
  5. 5d ago

    Block users from comments in personal repositories

    Blocking and unblocking a user is now available directly from a comment on pull requests and issues in personally owned repositories. A moderation shortcut that removes a trip to account settings at the moment it is most needed.

    View source ↗
  6. 5d ago

    Gemini 3.7 Flash is now available in GitHub Copilot

    Gemini 3.7 Flash rolls out in Copilot, positioned around web and app development and agentic work. Paired with the Grok 4.6 addition the following day, it shows the catalog refreshing faster than any single model can differentiate it.

    View source ↗