Primary-source security announcements and release notes, newest first.
5 verified updates · Latest publication 2026-10-18 · Subscribe via RSS →
FastMCP v4.1.1 rejects regex tool-search patterns longer than 1,000 characters and stops searches after about a second. It also restores discovery of linked skill folders, while requiring each skill's files to resolve inside the linked folder.
Prefect · Official source ↗ # Permalink
Related directory guides: FastMCP
GitHub made agentic autofix generally available for default-branch alerts to Code Security and Advanced Security customers on Enterprise Cloud; it reruns CodeQL to check fixes before opening draft pull requests. Access requires enterprise policy approval, organization or repository enablement and a Copilot billing method.
Easy MCP AI v2.2.0 adds managed skills delivered over MCP and a WP-CLI runner with plugin, theme and core tools. It also introduces an option to reject API keys supplied in URLs.
Enterprise administrators can require Copilot CLI, VS Code and the Copilot app to fetch current managed settings before starting. GitHub also enforces a minimum client version when the sandbox managed setting is present.
GitHub added optional identity attribution and separate controls for prompt, response, tool and policy capture in Copilot enterprise telemetry. Identity and content capture are off by default, with controls available in Copilot CLI, the Copilot app and VS Code sessions using Agent Host.