diff --git a/CHANGELOG.md b/CHANGELOG.md
index b98b4b8e9bcf..fc3ef7444d06 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Docs changelog
 
+**13 August 2026**
+
+We made improvements to the [Copilot allowlist reference](https://docs.github.com/en/enterprise-cloud@latest/copilot/reference/copilot-allowlist-reference), including:
+
+* A recommendation to use the `/meta` API to find recommended wildcard domains, with an explanation of which specific Copilot URLs these cover
+* A separate section for enterprises on GHE.com, who previously had no indication of which domains from GitHub.com they were or weren't required to allow
+* Structural improvements including moving the editor-specific requirements out of further reading, where they were easy to miss, and moving some explanations out of footnotes to make them easier to find
+
+<hr>
+
 **13 July 2026**
 
 We published [Bring your own key for GitHub Copilot](https://docs.github.com/en/copilot/concepts/models/bring-your-own-key). This article distinguishes between two different mechanisms for customers to use Copilot with custom models. We have also retitled corresponding how-to content to make the distinction clearer.
diff --git a/content/code-security/concepts/code-scanning/repository-properties.md b/content/code-security/concepts/code-scanning/repository-properties.md
index cdc069f161b9..f3fef3f48492 100644
--- a/content/code-security/concepts/code-scanning/repository-properties.md
+++ b/content/code-security/concepts/code-scanning/repository-properties.md
@@ -45,6 +45,10 @@ The following is an overview of repository properties you can set up which affec
 
 You can set the `github-codeql-config-file` property to the local or remote path of a configuration file. Accepted values for this property are the same as for the `config-file` parameter of the `codeql-action/init` action. For more information about accepted path formats and possible contents of configuration files, see [AUTOTITLE](/code-security/reference/code-scanning/workflow-configuration-options#custom-configuration-files).
 
+{% data reusables.code-scanning.remote-config-file-registry %}
+
+Advanced setup does not use organization-level private registry configurations. To use a configuration file from an internal or private repository with advanced setup, pass a token that can access the repository to the `external-repository-token` input of the `codeql-action/init` action. See [AUTOTITLE](/code-security/reference/code-scanning/workflow-configuration-options#custom-configuration-files).
+
 A value specified for the `github-codeql-config-file` property will apply to both {% data variables.product.prodname_code_scanning %} default setup and {% data variables.product.prodname_code_scanning %} advanced setup. If an advanced setup workflow specifies an explicit input for the `config-file` parameter of the `codeql-action/init` action, then that input will take precedence over the value configured in the repository property. This allows advanced workflows to use different configurations than those applied to default setup workflows, if desired.
 
 {% data reusables.code-scanning.config-file-merged-with-default-setup %} See [AUTOTITLE](/code-security/concepts/code-scanning/setup-types#configuration-options) for more information about available configuration options in {% data variables.product.prodname_code_scanning %} default setup.
diff --git a/content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md b/content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md
index 01cfb5fb95f1..ab79860f3355 100644
--- a/content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md
+++ b/content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md
@@ -32,7 +32,7 @@ When you configure access to the private registries used in your organization, {
 
 {% ifversion codeql-config-property %}
 
-Additionally, _Git Source_ registries are supported for granting {% data variables.product.prodname_code_scanning %} access to configuration files in private repositories. For more information about customizing {% data variables.product.prodname_code_scanning %} using custom configuration files, see [AUTOTITLE](/code-security/reference/code-scanning/workflow-configuration-options#custom-configuration-files).
+Additionally, _Git Source_ registries are supported for granting {% data variables.product.prodname_code_scanning %} access to configuration files in internal or private repositories. For more information about customizing {% data variables.product.prodname_code_scanning %} using custom configuration files, see [AUTOTITLE](/code-security/reference/code-scanning/workflow-configuration-options#custom-configuration-files).
 
 {% endif %}
 
@@ -51,7 +51,7 @@ You need to be an **organization owner** to set up access to private registries
    * **Type** is the type of registry.
 1. Select the authentication method for the registry:
    * **Token**: Enter the token used to authenticate with the registry.
-   * **Username and password**: Enter the username and password used to authenticate with the registry. Some types of authentication tokens, such as a {% data variables.product.github %} {% data variables.product.pat_generic_title_case %}, are tied to a particular user identity. Select this option for these and enter the relevant username as **Username** and the token as **Password**.
+   * **Username and password**: Enter the username and password used to authenticate with the registry. Some types of authentication tokens, such as a {% data variables.product.github %} {% data variables.product.pat_generic_title_case %}, are tied to a particular user identity. Select this option for these and enter the name of the user who created the token as **Username** and the token itself as **Password**. 
    {% ifversion org-private-registry-oidc %}
    * **OIDC (OpenID Connect)**: Use short-lived credentials from a cloud identity provider instead of storing long-lived secrets. When you select this option, choose a provider and fill in the provider-specific fields. For more information, see [Configuring OIDC authentication for a private registry](#configuring-oidc-authentication-for-a-private-registry).
    {% endif %}
diff --git a/content/code-security/reference/code-scanning/workflow-configuration-options.md b/content/code-security/reference/code-scanning/workflow-configuration-options.md
index 004b20ee4017..96676c6d01b2 100644
--- a/content/code-security/reference/code-scanning/workflow-configuration-options.md
+++ b/content/code-security/reference/code-scanning/workflow-configuration-options.md
@@ -371,7 +371,9 @@ In the workflow file, use the `config-file` parameter of the `init` action to sp
 
 {% ifversion codeql-config-property %}
 
-If the configuration file is located in an external private repository and you want to use it for a {% data variables.product.prodname_code_scanning %} default setup analysis, you can set up a _Git Source_ private registry configuration for your organization with credentials that allow access to the private repository containing the configuration file. For information about how to set up a private registry configuration, see [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries).
+You can also use custom configuration files in default setup and share the same configuration across multiple repositories. For more information, see [AUTOTITLE](/code-security/how-tos/find-and-fix-code-vulnerabilities/manage-your-configuration/edit-default-setup#customizing-default-setup-with-a-configuration-file).
+
+{% data reusables.code-scanning.remote-config-file-registry %}
 
 {% endif %}
 
diff --git a/content/code-security/reference/supply-chain-security/dependabot-options-reference.md b/content/code-security/reference/supply-chain-security/dependabot-options-reference.md
index 96b57533ccc8..63f74f778681 100644
--- a/content/code-security/reference/supply-chain-security/dependabot-options-reference.md
+++ b/content/code-security/reference/supply-chain-security/dependabot-options-reference.md
@@ -613,7 +613,7 @@ Package manager | YAML value      | Supported versions |
 | {% ifversion dependabot-sbt-support %} |
 | sbt          | `sbt`            | Not applicable   |
 | {% endif %} |
-| Swift   | `swift`      | v5  |
+| Swift   | `swift`      | v5, v6  |
 | Terraform    | `terraform`      | >= 0.13, <= 1.15.x  |
 | uv           | `uv`             | v0 |
 | {% ifversion dependabot-vcpkg-support %} |
diff --git a/content/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-personal-account.md b/content/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-personal-account.md
index 8a21a1306e6e..3d650d629e1c 100644
--- a/content/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-personal-account.md
+++ b/content/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-personal-account.md
@@ -14,7 +14,7 @@ category:
 
 ## About blocking users
 
-You can block a user in your account settings or from the user's profile. {% data variables.product.prodname_dotcom %} will not notify the user when you block them. If you want to avoid contributing to the same project as someone you've blocked, you can choose to display a warning on any repositories with prior contributions from a blocked user. For more information, see [Blocking a user in your account settings](#blocking-a-user-in-your-account-settings). You may still see the activity of blocked users in shared spaces and blocked users can delete their existing content.
+You can block a user in your account settings, from the user's profile, or from an issue or pull request in a repository you own. {% data variables.product.prodname_dotcom %} will not notify the user when you block them. If you want to avoid contributing to the same project as someone you've blocked, you can choose to display a warning on any repositories with prior contributions from a blocked user. For more information, see [Blocking a user in your account settings](#blocking-a-user-in-your-account-settings). You may still see the activity of blocked users in shared spaces and blocked users can delete their existing content.
 
 > [!TIP]
 > If you're blocking a user because of a heated conversation, consider locking the conversation so only collaborators can comment. For more information, see [AUTOTITLE](/communities/moderating-comments-and-conversations/locking-conversations).
@@ -53,6 +53,13 @@ In repositories you own, blocked users also cannot:
 * Comment on issues, pull requests, or commits
 * Add or edit wiki pages
 
+## Blocking a user in an issue or pull request
+
+1. Navigate to an issue or pull request in a repository you own.
+1. In the upper-right corner of the description or comment whose author you would like to block, click {% octicon "kebab-horizontal" aria-label="Show options" %}, then click **Block user**.
+1. Optionally, add a note to describe why you blocked the user. The note will only be visible to you.
+1. To confirm, click **Block user**.
+
 ## Blocking a user in your account settings
 
 {% data reusables.user-settings.access_settings %}
diff --git a/content/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-personal-account.md b/content/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-personal-account.md
index bd38b3463d33..25bc6e42bc09 100644
--- a/content/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-personal-account.md
+++ b/content/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-personal-account.md
@@ -16,7 +16,12 @@ When you unblock a user, they'll be able to invite you to be a collaborator to t
 
 In repositories you own, the user will be able to collaborate normally.
 
-You can unblock a user in your account settings or from the user's profile page.
+You can unblock a user in your account settings, from the user's profile page, or from an issue or pull request in a repository you own.
+
+## Unblocking a user in an issue or pull request
+
+1. Navigate to an issue or pull request in a repository you own.
+1. In the upper-right corner of the description or comment whose author you would like to unblock, click {% octicon "kebab-horizontal" aria-label="Show options" %}, then click **Unblock user**.
 
 ## Unblocking a user in your account settings
 
diff --git a/content/copilot/reference/ai-models/model-hosting.md b/content/copilot/reference/ai-models/model-hosting.md
index 53bf6e87aa11..8b4f04732626 100644
--- a/content/copilot/reference/ai-models/model-hosting.md
+++ b/content/copilot/reference/ai-models/model-hosting.md
@@ -74,6 +74,7 @@ Used for:
 * {% data variables.copilot.copilot_gemini_31_pro %}
 * {% data variables.copilot.copilot_gemini_35_flash %}
 * {% data variables.copilot.copilot_gemini_36_flash %}
+* {% data variables.copilot.copilot_gemini_37_flash %}
 
 {% data variables.product.prodname_copilot %} uses {% data variables.copilot.copilot_gemini %} models hosted on Google Cloud Platform (GCP). When using {% data variables.copilot.copilot_gemini %} models, prompts and metadata are sent to GCP, which makes the [following data commitment](https://cloud.google.com/vertex-ai/generative-ai/docs/data-governance): _{% data variables.copilot.copilot_gemini %} doesn't use your prompts, or its responses, as data to train its models._
 
diff --git a/content/copilot/reference/ai-models/supported-models.md b/content/copilot/reference/ai-models/supported-models.md
index 1d92e0b7cf46..85447f03e1be 100644
--- a/content/copilot/reference/ai-models/supported-models.md
+++ b/content/copilot/reference/ai-models/supported-models.md
@@ -124,6 +124,7 @@ Some {% data variables.product.prodname_copilot_short %} models require minimum
 | {% data variables.copilot.copilot_gemini_31_pro %}       | `v1.115.0` | `17.14.22` or `18.1.0`         | `1.5.62` | `0.46.0` | `0.14.0` |
 | {% data variables.copilot.copilot_gemini_35_flash %}     | `v1.115.0` | `17.14.22` or `18.1.0`         | `1.5.62` | `0.46.0` | `0.14.0` |
 | {% data variables.copilot.copilot_gemini_36_flash %}     | `v1.128.0` | `17.14.22` or `18.1.0`         | TBD | TBD | TBD |
+| {% data variables.copilot.copilot_gemini_37_flash %}     | `v1.128.0` | `17.14.22` or `18.1.0`         | TBD | TBD | TBD |
 | {% data variables.copilot.copilot_gpt_52_codex %}        | No minimum listed | `17.14.19` or `18.0.0`         | `1.5.61` | `0.45.0` | `0.13.0` |
 | {% data variables.copilot.copilot_gpt_53_codex %}        | `v1.104.1` | `17.14.19`                     | `1.5.61` | `0.45.0` | `0.13.0` |
 | {% data variables.copilot.copilot_gpt_54 %}              | `v1.104.1` | `17.14.19`                     | `1.5.66` | `0.47.0` | `0.15.0` |
diff --git a/content/copilot/reference/copilot-billing/models-and-pricing.md b/content/copilot/reference/copilot-billing/models-and-pricing.md
index 26760b2df8b9..d68b7e956970 100644
--- a/content/copilot/reference/copilot-billing/models-and-pricing.md
+++ b/content/copilot/reference/copilot-billing/models-and-pricing.md
@@ -116,4 +116,4 @@ You can view your current {% data variables.product.prodname_actions %} usage fo
 
 {% data variables.copilot.copilot_pro_short %} and {% data variables.copilot.copilot_pro_plus_short %} subscribers on **existing annual billing plans** using the **request-based billing** model have different model multipliers. See [AUTOTITLE](/copilot/reference/copilot-billing/request-based-billing-legacy/model-multipliers-for-annual-plans).
 
-[^sonnet-5-promo]: {% data variables.copilot.copilot_claude_sonnet_5 %} is available at the promotional pricing of $2.00 per 1M input tokens, $0.20 per 1M cached input tokens, $2.50 per 1M cache write tokens, and $10.00 per 1M output tokens through August 31, 2026. 
+[^gemini-flash-promo]: {% data variables.copilot.copilot_gemini_36_flash %} and {% data variables.copilot.copilot_gemini_37_flash %} are available at the promotional pricing of $0.75 per 1M input tokens, $0.075 per 1M cached input tokens, and $3.75 per 1M output tokens through December 31, 2026.
diff --git a/data/reusables/code-scanning/remote-config-file-registry.md b/data/reusables/code-scanning/remote-config-file-registry.md
index 4920f2d2231c..28554b522fe6 100644
--- a/data/reusables/code-scanning/remote-config-file-registry.md
+++ b/data/reusables/code-scanning/remote-config-file-registry.md
@@ -1 +1 @@
-If the configuration file is stored in a private repository other than the one being analyzed, you also need to set up a _Git Source_ private registry configuration so that default setup can access it from other repositories. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries).
+The repository containing the configuration file can be public, internal, or private. To use a file from an internal or private repository other than the one being analyzed with default setup, you must set up a _Git Source_ private registry configuration. We recommend setting the registry URL to the full URL of the repository containing the configuration file, rather than the organization URL, so that the credentials are only used for requests to that repository. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries).
diff --git a/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md b/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md
index 1feb82218e62..dfebd20c1deb 100644
--- a/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md
+++ b/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md
@@ -4,6 +4,7 @@
 * {% data variables.copilot.copilot_gemini_31_pro %}
 * {% data variables.copilot.copilot_gemini_35_flash %}
 * {% data variables.copilot.copilot_gemini_36_flash %}
+* {% data variables.copilot.copilot_gemini_37_flash %}
 * {% data variables.copilot.copilot_gpt_54_mini %}
 * {% data variables.copilot.copilot_gpt_56_luna %}
 * {% data variables.copilot.copilot_gpt_56_sol %}
diff --git a/data/reusables/dependabot/supported-package-managers.md b/data/reusables/dependabot/supported-package-managers.md
index 2f62085428f8..24284b26b206 100644
--- a/data/reusables/dependabot/supported-package-managers.md
+++ b/data/reusables/dependabot/supported-package-managers.md
@@ -53,7 +53,7 @@ pipenv                      | `pip` | 2024.4.1 | {% octicon "check" aria-label="
 | {% ifversion dependabot-sbt-support %} |
 [sbt](#sbt) | `sbt` | Not applicable | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} |
 | {% endif %} |
-[Swift](#swift)      | `swift`      | v5  | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} (git only) | {% octicon "x" aria-label="Not supported" %} |
+[Swift](#swift)      | `swift`      | v5, v6  | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} (git only) | {% octicon "x" aria-label="Not supported" %} |
 [Terraform](#terraform)      | `terraform`      | >= 0.13, <= 1.15.x  | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable |
 | {% ifversion dependabot-uv-security-support %} |
 uv        | `uv`            | v0               | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable |
diff --git a/data/tables/copilot/model-comparison.yml b/data/tables/copilot/model-comparison.yml
index 5e93e742ca35..316f047c40e1 100644
--- a/data/tables/copilot/model-comparison.yml
+++ b/data/tables/copilot/model-comparison.yml
@@ -110,6 +110,11 @@
   excels_at: Fast, reliable answers to lightweight coding questions
   further_reading: '[Gemini 3.6 Flash model card](https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-3-6-Flash-Model-Card.pdf)'
 
+- name: Gemini 3.7 Flash
+  task_area: Fast help with simple or repetitive tasks
+  excels_at: Fast, reliable answers to lightweight coding questions
+  further_reading: '[Gemini 3.7 Flash model card](https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-3-7-Flash-Model-Card.pdf)'
+
 # Microsoft
 - name: MAI-Code-1-Flash
   task_area: General-purpose coding and writing
diff --git a/data/tables/copilot/model-release-status.yml b/data/tables/copilot/model-release-status.yml
index c54f29851378..5d1b3ab3ebcf 100644
--- a/data/tables/copilot/model-release-status.yml
+++ b/data/tables/copilot/model-release-status.yml
@@ -111,6 +111,10 @@
   provider: 'Google'
   release_status: 'GA'
 
+- name: 'Gemini 3.7 Flash'
+  provider: 'Google'
+  release_status: 'GA'
+
 # Microsoft models
 - name: 'MAI-Code-1-Flash'
   provider: 'Microsoft'
diff --git a/data/tables/copilot/model-supported-clients.yml b/data/tables/copilot/model-supported-clients.yml
index 58ceb1928510..a1876cf9003d 100644
--- a/data/tables/copilot/model-supported-clients.yml
+++ b/data/tables/copilot/model-supported-clients.yml
@@ -140,6 +140,15 @@
   xcode: true
   jetbrains: true
 
+- name: Gemini 3.7 Flash
+  dotcom: false
+  cli: true
+  vscode: true
+  vs: true
+  eclipse: true
+  xcode: true
+  jetbrains: true
+
 - name: MAI-Code-1-Flash
   dotcom: true
   cli: true
diff --git a/data/tables/copilot/model-supported-plans.yml b/data/tables/copilot/model-supported-plans.yml
index a30e9797138c..a9394e0a5638 100644
--- a/data/tables/copilot/model-supported-plans.yml
+++ b/data/tables/copilot/model-supported-plans.yml
@@ -110,6 +110,13 @@
   business: true
   enterprise: true
 
+- name: Gemini 3.7 Flash
+  pro: true
+  pro_plus: true
+  max: true
+  business: true
+  enterprise: true
+
 - name: GPT-5 mini
   pro: true
   pro_plus: true
diff --git a/data/tables/copilot/models-and-pricing.yml b/data/tables/copilot/models-and-pricing.yml
index 2a1871aa2170..2a0d21bc1c52 100644
--- a/data/tables/copilot/models-and-pricing.yml
+++ b/data/tables/copilot/models-and-pricing.yml
@@ -256,7 +256,7 @@
   output: $25.00
   cache_write: $6.25
 
-- model: Claude Sonnet 5[^sonnet-5-promo]
+- model: Claude Sonnet 5
   provider: anthropic
   release_status: GA
   category: Versatile
@@ -314,15 +314,25 @@
   cached_input: $0.15
   output: $9.00
 
-- model: 'Gemini 3.6 Flash'
+- model: 'Gemini 3.6 Flash[^gemini-flash-promo]'
   provider: google
   release_status: GA
   category: Versatile
   threshold: 'Not applicable'
   tier: 'Default'
-  input: $1.50
-  cached_input: $0.15
-  output: $7.50
+  input: $0.75
+  cached_input: $0.075
+  output: $3.75
+
+- model: 'Gemini 3.7 Flash[^gemini-flash-promo]'
+  provider: google
+  release_status: GA
+  category: Versatile
+  threshold: 'Not applicable'
+  tier: 'Default'
+  input: $0.75
+  cached_input: $0.075
+  output: $3.75
 
 # xAI
 - model: 'Grok 4.5'
diff --git a/data/variables/copilot.yml b/data/variables/copilot.yml
index 4c235d1b97fa..75e1c8deb35a 100644
--- a/data/variables/copilot.yml
+++ b/data/variables/copilot.yml
@@ -208,6 +208,7 @@ copilot_gemini_3_pro: 'Gemini 3 Pro'
 copilot_gemini_31_pro: 'Gemini 3.1 Pro'
 copilot_gemini_35_flash: 'Gemini 3.5 Flash'
 copilot_gemini_36_flash: 'Gemini 3.6 Flash'
+copilot_gemini_37_flash: 'Gemini 3.7 Flash'
 # OpenAI GPT series:
 copilot_gpt_4o: 'GPT-4o'
 copilot_gpt_4o_mini: 'GPT-4o mini'