GitHub API breaking changes (2025–2026): complete tracker and fixes
github 10 breaking / deprecation entries 2025–2026
GitHub ships API and SDK changes continuously. Most are additive — but the ones that are not can silently break integrations that worked yesterday. This page is the complete, continuously regenerated record of every GitHub breaking change and deprecation in the mendapi change database: 10 entries (9 breaking, 1 deprecation), each linked to its upstream source and, where possible, to a concrete fix.
How to read this page
Every entry carries a fixability verdict from the mendapi adjudication pipeline: code-fixable means a mechanical code change repairs the break (0 entries); not code-fixable means the change requires a business decision, credential provisioning, or upstream action that no codemod can produce (9 entries). Entries marked auto-fix pack have a deterministic, gold-tested migration pack that mendapi fix can apply locally.
Am I affected?
Reading a changelog tells you what changed — not whether your code uses the affected surface. The mendapi scanner answers that locally, in about 30 seconds, without any code leaving your machine:
npx mendapi sync # -> one network call: pulls the change feed into a local database npx mendapi scan # -> N findings: file, line, provider, confidence mendapi deps --match # -> which of the changes below actually hit your endpoints
See Getting Started for the full workflow and the security model for why zero code upload is the default and only mode.
Complete GitHub breaking change timeline
| Date | Change | Ref |
|---|---|---|
| 2026-08-10 | Custom thread subscriptions are being deprecated breaking |
source |
| 2026-08-07 | GitHub Code Quality no longer adds Copilot as a reviewer breaking not code-fixable |
source |
| 2026-08-04 | Upcoming deprecation of GitHub Spark on github.com breaking not code-fixable |
source |
| 2026-08-04 | Retiring the Copilot Billing Preview app breaking not code-fixable |
source |
| 2026-07-31 | Restricting npm bypass-2FA granular access tokens breaking not code-fixable |
source |
| 2026-07-31 | Gemini 2.5 Pro and Gemini 3 Flash deprecated deprecation not code-fixable |
source |
| 2026-07-30 | GitHub Models is now retired breaking not code-fixable |
source |
| 2026-07-23 | GitHub MCP Server supports the next MCP specification breaking not code-fixable |
source |
| 2026-07-22 | Upcoming GHES change impacting uploading support bundles breaking not code-fixable |
source |
| 2025-05-20 | v5.0.0 breaking not code-fixable Drops Node.js 18 support only |
source |
Automated migration packs for GitHub
No deterministic pack ships for GitHub yet; code-fixable entries above carry reviewed migration guidance, and BYO-LLM draft fixes can generate patch drafts on your own compute.
Recent GitHub releases adjudicated non-breaking
Not paging you is the other half of the job. The same pipeline that produced the timeline above also cleared 25 GitHub changes as additive or fix-only — releases an integrator can upgrade through without a migration. The most recent:
| Date | Release | Ref |
|---|---|---|
| 2026-08-07 | Copilot impact dashboard adds a return on investment section additive |
source |
| 2026-08-07 | Copilot usage metrics API adds agent app activity additive |
source |
| 2026-08-04 | CodeQL 2.26.2 adds Swift 6.3.3 and Kotlin 2.4.10 support additive |
source |
| 2026-07-29 | Default model enablement for Copilot Business and Enterprise additive |
source |
| 2026-07-29 | Copilot code review: Agent skills and MCP now generally available additive |
source |
| 2026-07-28 | npm publish-time malware scanning and dual-use metadata additive |
source |
| 2026-07-28 | GitHub Copilot for JetBrains adds improved OpenTelemetry configuration and model management additive |
source |
| 2026-07-28 | GitHub Actions holds potentially malicious workflows for approval additive |
source |
Measured: when every verdict in the feed says no codemod
The GitHub entries above come from changelog capture, not a spec-diff corridor — so unlike the Stripe or Twilio trackers this page makes no corridor claim. What every entry does carry is an adjudicated fixability verdict with a machine-readable reason, and GitHub is the extreme case: of the 10 breaking and deprecation entries above, 0 are code-fixable, 9 are not and 1 is unclear (documented too thinly to rule a codemod in or out, so it stays in the coverage denominator). Not one carries a codemod today — they are product retirements, platform policy changes and spec transitions the vendor absorbs. An unadjudicated feed would page you 10 times; the verdicts tell you, with reasons, that the work is triage and planning, not patching.
A verdict that says the vendor absorbed it. “GitHub MCP Server supports the next MCP specification” sounds like a wire-protocol break. The adjudicated reason reads: Changelog post fetched in full: MCP stateless transition is absorbed by backwards-compatible tier 1 SDKs; GitHub states consumers need do nothing to maintain support. No breaking wire surface for SDK-based consumers, so no fix exists or is needed - honest exit from the denominator. A headline that implies migration work, and a verdict that measures none — that is exactly the noise adjudication exists to filter.
A verdict that says this is a business decision. “GitHub Models is now retired” is a genuine break — the inference API is gone — but the reason is honest about what a tool can do: GitHub Models product retirement (playground, model catalog, inference API, BYOK all withdrawn with no successor endpoint); choosing a replacement inference provider is a business decision, not a mechanical mend. Pretending a codemod could pick your replacement provider would be lying; flagging the retirement early, with its scope, is the honest maximum.
Monitoring GitHub going forward
This page is regenerated from the change database, which is fed by release feeds, changelog capture and OpenAPI spec diffing — so it does not depend on GitHub writing a perfect changelog. mendapi monitors 84125 change records across 20 providers; hosted plans watch your repos continuously and open fix PRs when a change lands. See pricing.
Frequently asked questions
How do I check if my codebase is affected by GitHub breaking changes?
Run npx mendapi scan in your repo. It statically matches your files against the 10 GitHub breaking changes and deprecations in this tracker and reports file, line and confidence for every hit — locally, in about 30 seconds, with zero network calls.
How many GitHub API breaking changes are on record?
This tracker records 10 entries for GitHub (9 breaking changes and 1 deprecations, 2025–2026). Each entry is adjudicated: 0 are code-fixable, 9 require a decision no codemod can make, and 1 is unclear — documented too thinly to rule a codemod in or out, so it stays in the coverage denominator.
Are there automated fixes for GitHub breaking changes?
Not yet as a deterministic pack. Code-fixable entries above carry reviewed migration guidance, and the optional BYO-LLM mode can draft patches on your own compute — nothing is applied without your review.
Does my code get uploaded when scanning for GitHub changes?
No. mendapi scan, deps and fix run with zero network code, mechanically enforced by the test suite. Optional hosted reporting is metadata-only, secrets-redacted, and requires an explicit flag.
Related
- API breaking change detection — how upstream breakage is caught before it ships, and why default severity gates stay silent.
- All breaking-change reports — per-change deep dives with migration guides.
- All monitored providers — live change counts.
- Migration pack catalog — every deterministic fix mendapi ships.