Repo sync

CHANGELOG.md

@@ -1,5 +1,15 @@
 # Docs changelog
 
+**13 August 2026**
+
+We made improvements to the [Copilot allowlist reference](https://docs.github.com/en/enterprise-cloud@latest/copilot/reference/copilot-allowlist-reference), including:
+
+* A recommendation to use the `/meta` API to find recommended wildcard domains, with an explanation of which specific Copilot URLs these cover
+* A separate section for enterprises on GHE.com, who previously had no indication of which domains from GitHub.com they were or weren't required to allow
+* Structural improvements including moving the editor-specific requirements out of further reading, where they were easy to miss, and moving some explanations out of footnotes to make them easier to find
+
+<hr>
+
 **13 July 2026**
 
 We published [Bring your own key for GitHub Copilot](https://docs.github.com/en/copilot/concepts/models/bring-your-own-key). This article distinguishes between two different mechanisms for customers to use Copilot with custom models. We have also retitled corresponding how-to content to make the distinction clearer.

content/code-security/concepts/code-scanning/repository-properties.md

@@ -45,6 +45,10 @@ The following is an overview of repository properties you can set up which affec
 
 You can set the `github-codeql-config-file` property to the local or remote path of a configuration file. Accepted values for this property are the same as for the `config-file` parameter of the `codeql-action/init` action. For more information about accepted path formats and possible contents of configuration files, see [AUTOTITLE](/code-security/reference/code-scanning/workflow-configuration-options#custom-configuration-files).
 
+{% data reusables.code-scanning.remote-config-file-registry %}
+
+Advanced setup does not use organization-level private registry configurations. To use a configuration file from an internal or private repository with advanced setup, pass a token that can access the repository to the `external-repository-token` input of the `codeql-action/init` action. See [AUTOTITLE](/code-security/reference/code-scanning/workflow-configuration-options#custom-configuration-files).
+
 A value specified for the `github-codeql-config-file` property will apply to both {% data variables.product.prodname_code_scanning %} default setup and {% data variables.product.prodname_code_scanning %} advanced setup. If an advanced setup workflow specifies an explicit input for the `config-file` parameter of the `codeql-action/init` action, then that input will take precedence over the value configured in the repository property. This allows advanced workflows to use different configurations than those applied to default setup workflows, if desired.
 
 {% data reusables.code-scanning.config-file-merged-with-default-setup %} See [AUTOTITLE](/code-security/concepts/code-scanning/setup-types#configuration-options) for more information about available configuration options in {% data variables.product.prodname_code_scanning %} default setup.

content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md

@@ -32,7 +32,7 @@ When you configure access to the private registries used in your organization, {
 
 {% ifversion codeql-config-property %}
 
-Additionally, _Git Source_ registries are supported for granting {% data variables.product.prodname_code_scanning %} access to configuration files in private repositories. For more information about customizing {% data variables.product.prodname_code_scanning %} using custom configuration files, see [AUTOTITLE](/code-security/reference/code-scanning/workflow-configuration-options#custom-configuration-files).
+Additionally, _Git Source_ registries are supported for granting {% data variables.product.prodname_code_scanning %} access to configuration files in internal or private repositories. For more information about customizing {% data variables.product.prodname_code_scanning %} using custom configuration files, see [AUTOTITLE](/code-security/reference/code-scanning/workflow-configuration-options#custom-configuration-files).
 
 {% endif %}
 
@@ -51,7 +51,7 @@ You need to be an **organization owner** to set up access to private registries
    * **Type** is the type of registry.
 1. Select the authentication method for the registry:
    * **Token**: Enter the token used to authenticate with the registry.
-   * **Username and password**: Enter the username and password used to authenticate with the registry. Some types of authentication tokens, such as a {% data variables.product.github %} {% data variables.product.pat_generic_title_case %}, are tied to a particular user identity. Select this option for these and enter the relevant username as **Username** and the token as **Password**.
+   * **Username and password**: Enter the username and password used to authenticate with the registry. Some types of authentication tokens, such as a {% data variables.product.github %} {% data variables.product.pat_generic_title_case %}, are tied to a particular user identity. Select this option for these and enter the name of the user who created the token as **Username** and the token itself as **Password**. 
    {% ifversion org-private-registry-oidc %}
    * **OIDC (OpenID Connect)**: Use short-lived credentials from a cloud identity provider instead of storing long-lived secrets. When you select this option, choose a provider and fill in the provider-specific fields. For more information, see [Configuring OIDC authentication for a private registry](#configuring-oidc-authentication-for-a-private-registry).
    {% endif %}

content/code-security/reference/code-scanning/workflow-configuration-options.md

@@ -371,7 +371,9 @@ In the workflow file, use the `config-file` parameter of the `init` action to sp
 
 {% ifversion codeql-config-property %}
 
-If the configuration file is located in an external private repository and you want to use it for a {% data variables.product.prodname_code_scanning %} default setup analysis, you can set up a _Git Source_ private registry configuration for your organization with credentials that allow access to the private repository containing the configuration file. For information about how to set up a private registry configuration, see [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries).
+You can also use custom configuration files in default setup and share the same configuration across multiple repositories. For more information, see [AUTOTITLE](/code-security/how-tos/find-and-fix-code-vulnerabilities/manage-your-configuration/edit-default-setup#customizing-default-setup-with-a-configuration-file).
+
+{% data reusables.code-scanning.remote-config-file-registry %}
 
 {% endif %}
 

content/code-security/reference/supply-chain-security/dependabot-options-reference.md

@@ -613,7 +613,7 @@ Package manager | YAML value      | Supported versions |
 | {% ifversion dependabot-sbt-support %} |
 | sbt          | `sbt`            | Not applicable   |
 | {% endif %} |
-| Swift   | `swift`      | v5  |
+| Swift   | `swift`      | v5, v6  |
 | Terraform    | `terraform`      | >= 0.13, <= 1.15.x  |
 | uv           | `uv`             | v0 |
 | {% ifversion dependabot-vcpkg-support %} |

content/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-personal-account.md

@@ -14,7 +14,7 @@ category:
 
 ## About blocking users
 
-You can block a user in your account settings or from the user's profile. {% data variables.product.prodname_dotcom %} will not notify the user when you block them. If you want to avoid contributing to the same project as someone you've blocked, you can choose to display a warning on any repositories with prior contributions from a blocked user. For more information, see [Blocking a user in your account settings](#blocking-a-user-in-your-account-settings). You may still see the activity of blocked users in shared spaces and blocked users can delete their existing content.
+You can block a user in your account settings, from the user's profile, or from an issue or pull request in a repository you own. {% data variables.product.prodname_dotcom %} will not notify the user when you block them. If you want to avoid contributing to the same project as someone you've blocked, you can choose to display a warning on any repositories with prior contributions from a blocked user. For more information, see [Blocking a user in your account settings](#blocking-a-user-in-your-account-settings). You may still see the activity of blocked users in shared spaces and blocked users can delete their existing content.
 
 > [!TIP]
 > If you're blocking a user because of a heated conversation, consider locking the conversation so only collaborators can comment. For more information, see [AUTOTITLE](/communities/moderating-comments-and-conversations/locking-conversations).
@@ -53,6 +53,13 @@ In repositories you own, blocked users also cannot:
 * Comment on issues, pull requests, or commits
 * Add or edit wiki pages
 
+## Blocking a user in an issue or pull request
+
+1. Navigate to an issue or pull request in a repository you own.
+1. In the upper-right corner of the description or comment whose author you would like to block, click {% octicon "kebab-horizontal" aria-label="Show options" %}, then click **Block user**.
+1. Optionally, add a note to describe why you blocked the user. The note will only be visible to you.
+1. To confirm, click **Block user**.
+
 ## Blocking a user in your account settings
 
 {% data reusables.user-settings.access_settings %}

content/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-personal-account.md

@@ -16,7 +16,12 @@ When you unblock a user, they'll be able to invite you to be a collaborator to t
 
 In repositories you own, the user will be able to collaborate normally.
 
-You can unblock a user in your account settings or from the user's profile page.
+You can unblock a user in your account settings, from the user's profile page, or from an issue or pull request in a repository you own.
+
+## Unblocking a user in an issue or pull request
+
+1. Navigate to an issue or pull request in a repository you own.
+1. In the upper-right corner of the description or comment whose author you would like to unblock, click {% octicon "kebab-horizontal" aria-label="Show options" %}, then click **Unblock user**.
 
 ## Unblocking a user in your account settings
 

content/copilot/reference/ai-models/model-hosting.md

@@ -74,6 +74,7 @@ Used for:
 * {% data variables.copilot.copilot_gemini_31_pro %}
 * {% data variables.copilot.copilot_gemini_35_flash %}
 * {% data variables.copilot.copilot_gemini_36_flash %}
+* {% data variables.copilot.copilot_gemini_37_flash %}
 
 {% data variables.product.prodname_copilot %} uses {% data variables.copilot.copilot_gemini %} models hosted on Google Cloud Platform (GCP). When using {% data variables.copilot.copilot_gemini %} models, prompts and metadata are sent to GCP, which makes the [following data commitment](https://cloud.google.com/vertex-ai/generative-ai/docs/data-governance): _{% data variables.copilot.copilot_gemini %} doesn't use your prompts, or its responses, as data to train its models._
 

content/copilot/reference/ai-models/supported-models.md

@@ -124,6 +124,7 @@ Some {% data variables.product.prodname_copilot_short %} models require minimum
 | {% data variables.copilot.copilot_gemini_31_pro %}       | `v1.115.0` | `17.14.22` or `18.1.0`         | `1.5.62` | `0.46.0` | `0.14.0` |
 | {% data variables.copilot.copilot_gemini_35_flash %}     | `v1.115.0` | `17.14.22` or `18.1.0`         | `1.5.62` | `0.46.0` | `0.14.0` |
 | {% data variables.copilot.copilot_gemini_36_flash %}     | `v1.128.0` | `17.14.22` or `18.1.0`         | TBD | TBD | TBD |
+| {% data variables.copilot.copilot_gemini_37_flash %}     | `v1.128.0` | `17.14.22` or `18.1.0`         | TBD | TBD | TBD |
 | {% data variables.copilot.copilot_gpt_52_codex %}        | No minimum listed | `17.14.19` or `18.0.0`         | `1.5.61` | `0.45.0` | `0.13.0` |
 | {% data variables.copilot.copilot_gpt_53_codex %}        | `v1.104.1` | `17.14.19`                     | `1.5.61` | `0.45.0` | `0.13.0` |
 | {% data variables.copilot.copilot_gpt_54 %}              | `v1.104.1` | `17.14.19`                     | `1.5.66` | `0.47.0` | `0.15.0` |

content/copilot/reference/copilot-billing/models-and-pricing.md

@@ -116,4 +116,4 @@ You can view your current {% data variables.product.prodname_actions %} usage fo
 
 {% data variables.copilot.copilot_pro_short %} and {% data variables.copilot.copilot_pro_plus_short %} subscribers on **existing annual billing plans** using the **request-based billing** model have different model multipliers. See [AUTOTITLE](/copilot/reference/copilot-billing/request-based-billing-legacy/model-multipliers-for-annual-plans).
 
-[^sonnet-5-promo]: {% data variables.copilot.copilot_claude_sonnet_5 %} is available at the promotional pricing of $2.00 per 1M input tokens, $0.20 per 1M cached input tokens, $2.50 per 1M cache write tokens, and $10.00 per 1M output tokens through August 31, 2026. 
+[^gemini-flash-promo]: {% data variables.copilot.copilot_gemini_36_flash %} and {% data variables.copilot.copilot_gemini_37_flash %} are available at the promotional pricing of $0.75 per 1M input tokens, $0.075 per 1M cached input tokens, and $3.75 per 1M output tokens through December 31, 2026.

data/reusables/code-scanning/remote-config-file-registry.md

@@ -1 +1 @@
-If the configuration file is stored in a private repository other than the one being analyzed, you also need to set up a _Git Source_ private registry configuration so that default setup can access it from other repositories. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries).
+The repository containing the configuration file can be public, internal, or private. To use a file from an internal or private repository other than the one being analyzed with default setup, you must set up a _Git Source_ private registry configuration. We recommend setting the registry URL to the full URL of the repository containing the configuration file, rather than the organization URL, so that the credentials are only used for requests to that repository. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries).

data/reusables/copilot/copilot-cloud-agent-non-auto-models.md

@@ -4,6 +4,7 @@
 * {% data variables.copilot.copilot_gemini_31_pro %}
 * {% data variables.copilot.copilot_gemini_35_flash %}
 * {% data variables.copilot.copilot_gemini_36_flash %}
+* {% data variables.copilot.copilot_gemini_37_flash %}
 * {% data variables.copilot.copilot_gpt_54_mini %}
 * {% data variables.copilot.copilot_gpt_56_luna %}
 * {% data variables.copilot.copilot_gpt_56_sol %}

data/reusables/dependabot/supported-package-managers.md

@@ -53,7 +53,7 @@ pipenv                      | `pip` | 2024.4.1 | {% octicon "check" aria-label="
 | {% ifversion dependabot-sbt-support %} |
 [sbt](#sbt) | `sbt` | Not applicable | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} |
 | {% endif %} |
-[Swift](#swift)      | `swift`      | v5  | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} (git only) | {% octicon "x" aria-label="Not supported" %} |
+[Swift](#swift)      | `swift`      | v5, v6  | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} (git only) | {% octicon "x" aria-label="Not supported" %} |
 [Terraform](#terraform)      | `terraform`      | >= 0.13, <= 1.15.x  | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable |
 | {% ifversion dependabot-uv-security-support %} |
 uv        | `uv`            | v0               | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | Not applicable |

data/tables/copilot/model-comparison.yml

@@ -110,6 +110,11 @@
   excels_at: Fast, reliable answers to lightweight coding questions
   further_reading: '[Gemini 3.6 Flash model card](https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-3-6-Flash-Model-Card.pdf)'
 
+- name: Gemini 3.7 Flash
+  task_area: Fast help with simple or repetitive tasks
+  excels_at: Fast, reliable answers to lightweight coding questions
+  further_reading: '[Gemini 3.7 Flash model card](https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-3-7-Flash-Model-Card.pdf)'
+
 # Microsoft
 - name: MAI-Code-1-Flash
   task_area: General-purpose coding and writing

data/tables/copilot/model-release-status.yml

@@ -111,6 +111,10 @@
   provider: 'Google'
   release_status: 'GA'
 
+- name: 'Gemini 3.7 Flash'
+  provider: 'Google'
+  release_status: 'GA'
+
 # Microsoft models
 - name: 'MAI-Code-1-Flash'
   provider: 'Microsoft'

data/tables/copilot/model-supported-clients.yml

@@ -140,6 +140,15 @@
   xcode: true
   jetbrains: true
 
+- name: Gemini 3.7 Flash
+  dotcom: false
+  cli: true
+  vscode: true
+  vs: true
+  eclipse: true
+  xcode: true
+  jetbrains: true
+
 - name: MAI-Code-1-Flash
   dotcom: true
   cli: true

data/tables/copilot/model-supported-plans.yml

@@ -110,6 +110,13 @@
   business: true
   enterprise: true
 
+- name: Gemini 3.7 Flash
+  pro: true
+  pro_plus: true
+  max: true
+  business: true
+  enterprise: true
+
 - name: GPT-5 mini
   pro: true
   pro_plus: true

data/tables/copilot/models-and-pricing.yml

@@ -256,7 +256,7 @@
   output: $25.00
   cache_write: $6.25
 
-- model: Claude Sonnet 5[^sonnet-5-promo]
+- model: Claude Sonnet 5
   provider: anthropic
   release_status: GA
   category: Versatile
@@ -314,15 +314,25 @@
   cached_input: $0.15
   output: $9.00
 
-- model: 'Gemini 3.6 Flash'
+- model: 'Gemini 3.6 Flash[^gemini-flash-promo]'
   provider: google
   release_status: GA
   category: Versatile
   threshold: 'Not applicable'
   tier: 'Default'
-  input: $1.50
-  cached_input: $0.15
-  output: $7.50
+  input: $0.75
+  cached_input: $0.075
+  output: $3.75
+
+- model: 'Gemini 3.7 Flash[^gemini-flash-promo]'
+  provider: google
+  release_status: GA
+  category: Versatile
+  threshold: 'Not applicable'
+  tier: 'Default'
+  input: $0.75
+  cached_input: $0.075
+  output: $3.75
 
 # xAI
 - model: 'Grok 4.5'

data/variables/copilot.yml

@@ -208,6 +208,7 @@ copilot_gemini_3_pro: 'Gemini 3 Pro'
 copilot_gemini_31_pro: 'Gemini 3.1 Pro'
 copilot_gemini_35_flash: 'Gemini 3.5 Flash'
 copilot_gemini_36_flash: 'Gemini 3.6 Flash'
+copilot_gemini_37_flash: 'Gemini 3.7 Flash'
 # OpenAI GPT series:
 copilot_gpt_4o: 'GPT-4o'
 copilot_gpt_4o_mini: 'GPT-4o mini'