APIs / GitHub

GitHub API changes

Breaking changes, deprecations and new fields in the GitHub API, as they ship.

GitHubGitHub REST API2026-10-17 · bb7549412 additive

2 new response fields

dependabot-alert.dependency.version_requirement
dependabot-alert-with-repository.dependency.version_requirement

GitHubGitHub REST API2026-10-15 · 93c8981e2 additive

Additive
include_metadata is now optional
No action needed.
GET /orgs/{org}/rulesets/rule-suites/{rule_suite_id} · include_metadata · 2 call sites
Additive
Response field metadata added
No action needed unless you validate responses against a closed schema.
rule-suite.rule_evaluations[].metadata · reachable from 2 operations

GitHubGitHub REST API2026-10-14 · 02a2bc3d5 behavioral

Behavioral
422 is now documented on /enterprises/{enterprise}/code-security/configurations/{configuration_id}/defaults
An unhandled branch in your error handling.
PUT /enterprises/{enterprise}/code-security/configurations/{configuration_id}/defaults · 8 call sites
Behavioral
400 is now documented on /enterprises/{enterprise}/code-security/configurations/{configuration_id}/repositories
An unhandled branch in your error handling.
GET /enterprises/{enterprise}/code-security/configurations/{configuration_id}/repositories · 5 call sites
Behavioral
403 is now documented on /orgs/{org}/code-security/configurations
An unhandled branch in your error handling.
POST /orgs/{org}/code-security/configurations · 2 call sites
Behavioral
404 is now documented on /orgs/{org}/code-security/configurations
POST /orgs/{org}/code-security/configurations · 2 call sites
Behavioral
409 is now documented on /orgs/{org}/code-security/configurations/{configuration_id}
An unhandled branch in your error handling.
PATCH /orgs/{org}/code-security/configurations/{configuration_id}

GitHubGitHub REST API2026-10-14 · 78739cdc2 additive

Additive
Response field organization_copilot_requests added
No action needed unless you validate responses against a closed schema.
app-permissions.organization_copilot_requests · reachable from 11 operations
Additive
Request property organization_copilot_requests added
No action needed unless it is required.
app-permissions.organization_copilot_requests · reachable from 11 operations

GitHubGitHub REST API2026-10-13 · ad351b194 behavioral

Behavioral
400 is now documented on /orgs/{org}/code-security/configurations/{configuration_id}/attach
An unhandled branch in your error handling.
POST /orgs/{org}/code-security/configurations/{configuration_id}/attach
Behavioral
404 is now documented on /orgs/{org}/code-security/configurations/{configuration_id}/attach
POST /orgs/{org}/code-security/configurations/{configuration_id}/attach
Behavioral
409 is now documented on /orgs/{org}/code-security/configurations/{configuration_id}/attach
POST /orgs/{org}/code-security/configurations/{configuration_id}/attach
Behavioral
422 is now documented on /orgs/{org}/code-security/configurations/{configuration_id}/attach
POST /orgs/{org}/code-security/configurations/{configuration_id}/attach

GitHubGitHub REST API2026-10-13 · 949252727 additive

Additive
/agents/automations added
No action needed.
/agents/automations
Additive
/agents/automations/available-tools added
No action needed.
/agents/automations/available-tools
Additive
/agents/automations/available-triggers added
No action needed.
/agents/automations/available-triggers
Additive
/agents/automations/{automation_id} added
No action needed.
/agents/automations/{automation_id}
Additive
/agents/automations/{automation_id}/tasks added
No action needed.
/agents/automations/{automation_id}/tasks
Additive
/agents/repos/{owner}/{repo}/automations added
No action needed.
/agents/repos/{owner}/{repo}/automations
Additive
/agents/repos/{owner}/{repo}/automations/{automation_id} added
No action needed.
/agents/repos/{owner}/{repo}/automations/{automation_id}

GitHubGitHub REST API2026-10-12 · 985340e11 breaking

Breakingdirection flip: their tools call this safe
auth_type can now return "anonymous"
Producer-side tools call this additive. It breaks exhaustive switches, strict parsers and generated client enums.
can now return "anonymous"
2 places: org-private-registry-configuration.auth_type, org-private-registry-configuration-with-selected-repositories.auth_type
Code that breaks
```
switch (response.auth_type) {
  // existing branches …
  // no branch for "anonymous"
  default:
    throw new Error("unexpected auth_type");
}
```

GitHubGitHub REST API2026-10-03 · a0b077161 additive

Additive
/repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers/rerequest added
No action needed.
/repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers/rerequest

GitHubGitHub REST API2026-10-01 · fa705adf1 behavioral

Behavioral
304 is now documented on /repos/{owner}/{repo}/pulls/comments/{comment_id}
An unhandled branch in your error handling.
GET /repos/{owner}/{repo}/pulls/comments/{comment_id}

GitHubGitHub REST API2026-09-30 · f0e383552 additive

Additive
Response field bypass_rules added
No action needed unless you validate responses against a closed schema.
pull-request-merge-async-result.details.bypass_rules · reachable from 2 operations
Additive
Request property bypass_rules added
No action needed unless it is required.
PUT /repos/{owner}/{repo}/pulls/{pull_number}/merge-async · bypass_rules

GitHubGitHub REST API2026-09-28 · f68459281 additive

Additive
/repos/{owner}/{repo}/actions/jobs/{job_id}/steps/{step_number}/logs added
No action needed.
/repos/{owner}/{repo}/actions/jobs/{job_id}/steps/{step_number}/logs

GitHubGitHub REST API2026-09-28 · 8de506896 additive

Additive
/orgs/{org}/properties/installations/schema added
No action needed.
/orgs/{org}/properties/installations/schema
Additive
/orgs/{org}/properties/installations/values added
No action needed.
/orgs/{org}/properties/installations/values
Additive
/orgs/{org}/properties/installations added
No action needed.
/orgs/{org}/properties/installations
Additive
/orgs/{org}/properties/installations/values/{property_name} added
No action needed.
/orgs/{org}/properties/installations/values/{property_name}
Additive
Response field organization_external_properties_for_repos added
No action needed unless you validate responses against a closed schema.
app-permissions.organization_external_properties_for_repos · reachable from 11 operations
Additive
Request property organization_external_properties_for_repos added
No action needed unless it is required.
app-permissions.organization_external_properties_for_repos · reachable from 11 operations

GitHubGitHub REST API2026-09-24 · 4fc0ed662 additive

Additive
/repos/{owner}/{repo}/issues/{issue_number}/relates_to added
No action needed.
/repos/{owner}/{repo}/issues/{issue_number}/relates_to
Additive
/repos/{owner}/{repo}/issues/{issue_number}/relates_to/{issue_id} added
No action needed.
/repos/{owner}/{repo}/issues/{issue_number}/relates_to/{issue_id}

GitHubGitHub REST API2026-09-24 · f4f0708f1 behavioral

Behavioral
503 is now documented on /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers
An unhandled branch in your error handling.
POST /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers

GitHubGitHub REST API2026-09-23 · 677c1b8f1 breaking

Breakingdirection flip: their tools call this safe
budget_entity_name is no longer accepted
Usually ignored rather than rejected, so the call succeeds and does something subtly different.
5 places: PATCH /organizations/{org}/settings/billing/budgets/{budget_id} · budget_entity_name, PATCH /organizations/{org}/settings/billing/budgets/{budget_id} · user, PATCH /organizations/{org}/settings/billing/budgets/{budget_id} · budget_product_sku, PATCH /organizations/{org}/settings/billing/budgets/{budget_id} · budget_scope, PATCH /organizations/{org}/settings/billing/budgets/{budget_id} · budget_type
Code that breaks
```
await client.post("/organizations/{org}/settings/billing/budgets/{budget_id}", {
  // budget_entity_name is now ignored, not rejected
  budget_entity_name: value,
});
```

GitHubGitHub REST API2026-09-18 · 814de7ac2 additive

Additive
Response field include_drafts added
No action needed unless you validate responses against a closed schema.
GET /orgs/{org}/interaction-limits/pulls/creation-cap · include_drafts · 4 call sites
Additive
Request property include_drafts added
No action needed unless it is required.
PATCH /orgs/{org}/interaction-limits/pulls/creation-cap · include_drafts · 2 call sites

GitHubGitHub REST API2026-09-17 · 649b8c491 breaking

Breakingdirection flip: their tools call this safe
permissions can now return "triage_plus"
Producer-side tools call this additive. It breaks exhaustive switches, strict parsers and generated client enums.
repository-invitation.permissions · reachable from 4 operations
Code that breaks
```
switch (response.permissions) {
  // existing branches …
  // no branch for "triage_plus"
  default:
    throw new Error("unexpected permissions");
}
```

GitHubGitHub REST API2026-09-16 · 29bcb5562 behavioral

Behavioral
422 is now documented on /repos/{owner}/{repo}/commits
An unhandled branch in your error handling.
GET /repos/{owner}/{repo}/commits · 3 call sites
Behavioral
429 is now documented on /repos/{owner}/{repo}/commits
GET /repos/{owner}/{repo}/commits · 2 call sites

GitHubGitHub REST API2026-09-16 · 6b1cc8631 breaking1 behavioral4 additive

Breakingdirection flip: their tools call this safe
enforcement can now return "enterprise_enforced"
Producer-side tools call this additive. It breaks exhaustive switches, strict parsers and generated client enums.
can now return "enterprise_enforced"
3 places: code-security-configuration.enforcement, code-security-configuration-for-repository.status, code-security-configuration-repositories.status
Code that breaks
```
switch (response.enforcement) {
  // existing branches …
  // no branch for "enterprise_enforced"
  default:
    throw new Error("unexpected enforcement");
}
```
Behavioral
403 is now documented on /orgs/{org}/code-security/configurations/{configuration_id}/attach
An unhandled branch in your error handling.
POST /orgs/{org}/code-security/configurations/{configuration_id}/attach
Additive
/orgs/{org}/actions/policies added
No action needed.
/orgs/{org}/actions/policies
Additive
/orgs/{org}/actions/policies/{policy_id} added
No action needed.
/orgs/{org}/actions/policies/{policy_id}
Additive
/repos/{owner}/{repo}/actions/policies added
No action needed.
/repos/{owner}/{repo}/actions/policies
Additive
/repos/{owner}/{repo}/actions/policies/{policy_id} added
No action needed.
/repos/{owner}/{repo}/actions/policies/{policy_id}

GitHubGitHub REST API2026-09-12 · e16cc25811 additive

11 new response fields

issue.labels[].archived_by
label.archived_at
label.archived_by
pull-request-simple.labels[].archived_by
pull-request.labels[].archived_by
nullable-issue.labels[].archived_by
issue-search-result-item.labels[].archived_at
issue-search-result-item.labels[].archived_by
label-search-result-item.archived_at
label-search-result-item.archived_by
labels[].archived_by

GitHubGitHub REST API2026-09-11 · f5d6d10f1 behavioral

Behavioral
410 is now documented on /repos/{owner}/{repo}/dependabot/alerts/{alert_number}
An unhandled branch in your error handling.
GET /repos/{owner}/{repo}/dependabot/alerts/{alert_number} · 2 call sites