#github-actions - February 2026

So following the recent GHA security incident ... we only allow GHA that are pinned to SHA's.

How hard and how much of a problem would it be to make sure all your (composite?) actions in org are pinned to SHA's?

https://dev.to/suzukishunsuke/pin-github-actions-to-a-full-length-commit-sha-for-security-2n7p

GitHub Actions: Early February 2026 updates
This month, GitHub Actions introduces new capabilities, including custom runner autoscaling, expanded security controls for all users, and early access to new Windows and macOS runner images. GitHub Actions runner…
The post GitHub Actions: Early February 2026 updates appeared first on The GitHub Blog.

GitHub Actions: Self-hosted runner minimum version enforcement extended
We’ve extended the timeline for configuration‑time version enforcement of the minimum self‑hosted runner requirement by one week. You now have until March 16, 2026 to upgrade your runners to v2.329.0 or later.…
The post GitHub Actions: Self-hosted runner minimum version enforcement extended appeared first on The GitHub Blog.

GitHub Agentic Workflows are now in technical preview
GitHub Agentic Workflows let you automate repository tasks using AI agents that run within GitHub Actions. Write workflows in plain Markdown instead of complex YAML, and let AI handle intelligent…
The post GitHub Agentic Workflows are now in technical preview appeared first on The GitHub Blog.

Updated GitHub status page experience
We’ve updated the GitHub status page to make incident information easier to find and more useful during an active event. The status site now includes a 90-day historical view of availability and…
The post Updated GitHub status page experience appeared first on The GitHub Blog.

Workflow dispatch API now returns run IDs
When you trigger a workflow using the GitHub Actions workflow dispatch API endpoint, you’ll now have the option to receive metadata in the response that helps you map your request…
The post Workflow dispatch API now returns run IDs appeared first on The GitHub Blog.

macos-26 is now generally available for GitHub-hosted runners
The macOS 26 runner image is now generally available for GitHub Actions. Previously in public preview, macOS 26 runners give you a fully supported environment for building and testing apps…
The post macos-26 is now generally available for GitHub-hosted runners appeared first on The GitHub Blog.

GitHub Actions now supports uploading and downloading non-zipped artifacts
GitHub Actions now supports uploading and downloading non-zipped artifacts within workflows. Previously, when you uploaded an artifact using the actions/upload-artifact action it was automatically zipped. Downloading it using the actions/download-artifact…
The post GitHub Actions now supports uploading and downloading non-zipped artifacts appeared first on <a...