1. GitHub adds strictKnownMarketplaces for Copilot enterprise plugin governance - GitHub added enterprise-managed support for strictKnownMarketplaces in VS Code and the Copilot CLI, letting enterprises restrict plugin installs to explicitly approved marketplaces before tool execution.
2. Copilot code review adds organization-level Medium analysis defaults - GitHub updated Copilot code review with Medium analysis depth attribution, organization-level default review level settings, and CLI-based file exploration tools for more efficient reviews.
3. npm adds preventive account protection for high-impact packages - npm now applies a temporary preventive safeguard for high-impact accounts when sensitive account changes are detected, strengthening protection against account takeover for widely used packages.
4. GitHub Actions supports parallel workflow steps with background - GitHub Actions now supports running steps concurrently using background, enabling parallel step execution while keeping separate logs instead of relying on shell backgrounding.
5. Cloudflare Workflows adds saga-style rollback patterns - Cloudflare Workflows now supports saga-style rollbacks, allowing developers to declare compensating actions for workflow steps when failures leave earlier work inconsistent.