NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #1609 most downloaded on npm
Octokit plugin adding one method for all of api.github.com REST API endpoints
Last release 1 months ago
01 Aug 2026
Release timing varies
gaps range from 1 weeks to 9 months
Nearly every release is documented
notes for 60 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
7 years old
213 releases · first in 2019
One column per quarter.
update in-code documentation for repos.createOrUpdateFileContents (PUT /repos/{owner}/{repo}/contents/{path}) and repos.deleteFile (DELETE /repos/{own
typescript: add support for filtering the "List repository collaborators" API (GET /repos/{owner}/{repo}/collaborators) by permission using a query pa
update in-code documentation and generated Markdown documentation to reflect the latest API changes
deps: bump @octokit/types to latest (v7.3.1)
tweak documentation for git.getTree (GET /repos/{owner}/{repo}/git/trees/{tree_sha}) to clarify maximum limits on size and number of entries
add new public beta APIs for creating, reading, updating and deleting custom repo roles (POST /orgs/{org}/custom_roles, PATCH /orgs/{org}/custom_roles
update docs for repos.createUsingTemplate to clarify that it doesn't require special permissions with a public repo
repos.createUsingTemplate to clarify that it doesn't require special permissions with a public repois_alphnumeric attribute accepted by repos.createAutolinkrepos.createAutolink so the English reads betteradd support for new "Enable or disable a security feature for an organization" API (POST /orgs/{org}/{security_product}/{enablement})
POST /orgs/{org}/{security_product}/{enablement})GET /user/ssh_signing_keys, POST /user/ssh_signing_keys, GET /user/ssh_signing_keys/{ssh_signing_key_id}, DELETE /user/ssh_signing_keys/{ssh_signing_key_id}, GET /users/{username}/ssh_signing_keys)update docs to reflect new request parameters in 3 APIs and updated API descriptions
add support for new "create Pages deployment" API (createPagesDeployment)
createPagesDeployment) (0ead9cc)createDeploymentBranchPolicy, deleteDeploymentBranchPolicy, getDeploymentBranchPolicy, (b4ce9a1)addSecurityManagerTeam, listSecurityManagerTeams, removeSecurityManagerTeam) (3b3da2b)add support for GET /enterprises/{enterprise}/code-scanning/alerts endpoint via octokit.rest.codeScanning.listAlertsForEnterprise() function (and desc
don't pin to an exact version of @octokit/types, use ^
ci: pin to a specific version of @octokit/types when running the update task
Add support for new GET /repos/{owner}/{repo}/codespaces/new API with octokit.rest.codespaces.preFlightWithRepoForAuthenticatedUser function
GET /repos/{owner}/{repo}/codespaces/new API with octokit.rest.codespaces.preFlightWithRepoForAuthenticatedUser functionscripts/update-endpoints/generated/endpoints.jsonimprove parameter descriptions for GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers
update documentation for POST /orgs/{org}/migrations
stop testing against NodeJS v10, v12
clarify docs to make it clear that POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments is only available to required reviewers
gracefully rename org_id path parameter for GET /orgs/{org_id}/codespaces to org
feat: PUT /enterprises/{enterprise}/actions/oidc/customization/issuer
PUT /enterprises/{enterprise}/actions/oidc/customization/issuerGET /orgs/{org_id}/codespacesPOST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stopGET /orgs/{org}/actions/oidc/customization/subPUT /orgs/{org}/actions/oidc/customization/subDELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}GET /repos/{owner}/{repo}/actions/cachesDELETE /repos/{owner}/{repo}/actions/cachesDELETE /repos/{owner}/{repo}/actions/caches/{cache_id}GET /repos/{owner}/{repo}/actions/oidc/customization/subPUT /repos/{owner}/{repo}/actions/oidc/customization/subPOST /repos/{owner}/{repo}/dependency-graph/snapshotsadd new before and after parameters to GET /orgs/{org}/secret-scanning/alerts and GET /repos/{owner}/{repo}/secret-scanning/alerts
update descriptions and examples
`.rest.actions.reRunWorkflow()`: no longer deprecated
.rest.dependabot.addSelectedRepoToOrgSecret().rest.dependabot.removeSelectedRepoFromOrgSecret().rest.teams.listLinkedExternalIdpGroupsToTeamForOrg().rest.teams.linkExternalIdpGroupToTeamForOrg().rest.teams.unlinkExternalIdpGroupFromTeamForOrg().rest.enterpriseAdmin.listLabelsForSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.addCustomLabelsToSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.setCustomLabelsForSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.removeAllCustomLabelsFromSelfHostedRunnerForEnterprise().rest.actions.listLabelsForSelfHostedRunnerForOrg().rest.actions.addCustomLabelsToSelfHostedRunnerForOrg().rest.actions.setCustomLabelsForSelfHostedRunnerForOrg().rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForOrg().rest.actions.listLabelsForSelfHostedRunnerForRepo().rest.actions.addCustomLabelsToSelfHostedRunnerForRepo().rest.actions.setCustomLabelsForSelfHostedRunnerForRepo().rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForRepo().rest.codespaces.listInRepositoryForAuthenticatedUser().rest.codespaces.createWithRepoForAuthenticatedUser().rest.repos.listTagProtection().rest.repos.createTagProtection().rest.codespaces.listForAuthenticatedUser().rest.codespaces.createForAuthenticatedUser().rest.codespaces.listSecretsForAuthenticatedUser().rest.codespaces.getPublicKeyForAuthenticatedUser().rest.codespaces.getSecretForAuthenticatedUser().rest.codespaces.createOrUpdateSecretForAuthenticatedUser().rest.codespaces.deleteSecretForAuthenticatedUser().rest.codespaces.listRepositoriesForSecretForAuthenticatedUser().rest.codespaces.setRepositoriesForSecretForAuthenticatedUser().rest.codespaces.addRepositoryForSecretForAuthenticatedUser().rest.codespaces.removeRepositoryForSecretForAuthenticatedUser().rest.codespaces.getForAuthenticatedUser().rest.codespaces.updateForAuthenticatedUser().rest.codespaces.deleteForAuthenticatedUser().rest.codespaces.exportForAuthenticatedUser().rest.codespaces.getExportDetailsForAuthenticatedUser().rest.codespaces.codespaceMachinesForAuthenticatedUser().rest.codespaces.startForAuthenticatedUser().rest.codespaces.stopForAuthenticatedUser().rest.dependabot.getOrgSecret().rest.dependabot.createOrUpdateOrgSecret().rest.dependabot.deleteOrgSecret().rest.codespaces.getRepoSecret().rest.codespaces.createOrUpdateRepoSecret().rest.codespaces.deleteRepoSecret().rest.dependabot.getRepoSecret().rest.dependabot.createOrUpdateRepoSecret().rest.dependabot.deleteRepoSecret().rest.actions.getGithubActionsDefaultWorkflowPermissionsOrganization().rest.actions.setGithubActionsDefaultWorkflowPermissionsOrganization().rest.dependabot.listSelectedReposForOrgSecret().rest.dependabot.setSelectedReposForOrgSecret().rest.actions.getWorkflowAccessToRepository().rest.actions.setWorkflowAccessToRepository().rest.actions.getGithubActionsDefaultWorkflowPermissionsRepository().rest.actions.setGithubActionsDefaultWorkflowPermissionsRepository().rest.orgs.listCustomRoles().rest.actions.getActionsCacheUsageForOrg().rest.enterpriseAdmin.removeCustomLabelFromSelfHostedRunnerForEnterprise().rest.actions.removeCustomLabelFromSelfHostedRunnerForOrg().rest.actions.removeCustomLabelFromSelfHostedRunnerForRepo().rest.reactions.deleteForRelease().rest.repos.deleteTagProtection().rest.enterpriseAdmin.getServerStatistics().rest.actions.getActionsCacheUsageForEnterprise().rest.actions.getGithubActionsDefaultWorkflowPermissionsEnterprise().rest.enterpriseAdmin.listSelfHostedRunnerGroupsForEnterprise() - visible-to-organization paramter.rest.secretScanning.listAlertsForEnterprise().rest.billing.getGithubAdvancedSecurityBillingGhe().rest.actions.getActionsCacheUsageByRepoForOrg().rest.actions.listSelfHostedRunnerGroupsForOrg() - new parameter: visible_to_repository.rest.codeScanning.listAlertsForOrg().rest.orgs.listSamlSsoAuthorizations() - new parameters: per_page, page, login.rest.dependabot.getOrgPublicKey().rest.dependabot.listOrgSecrets().rest.teams.externalIdpGroupInfoForOrg().rest.teams.listExternalIdpGroupsForOrg().rest.secretScanning.listAlertsForOrg() - new parameters: sort, direction.rest.billing.getGithubAdvancedSecurityBillingOrg().rest.repos.codeownersErrors().rest.codespaces.listDevcontainersInRepositoryForAuthenticatedUser().rest.codespaces.repoMachinesForAuthenticatedUser().rest.codespaces.getRepoPublicKey().rest.codespaces.listRepoSecrets().rest.dependabot.getRepoPublicKey().rest.dependabot.listRepoSecrets().rest.dependencyGraph.diffRange().rest.reactions.listForRelease().rest.secretScanning.listLocationsForAlert().rest.actions.updateSelfHostedRunnerGroupForOrg() - new parameters: allows_public_repositories, restricted_to_workflows, selected_workflows.rest.orgs.update() - new parameter: members_can_fork_private_repositories.rest.actions.createSelfHostedRunnerGroupForOrg() - new parameters: allows_public_repositories, restricted_to_workflows, selected_workflows.rest.migrations.startForOrg() - new parrameters: exclude_metadata, exclude_git_data, org_metadata_only.rest.repos.createInOrg() - new parameter: use_squash_pr_title_as_default.rest.actions.reRunJobForWorkflowRun().rest.actions.reRunWorkflowFailedJobs().rest.codespaces.createWithPrForAuthenticatedUser().rest.migrations.startForAuthenticatedUser() - new parrameters: exclude_metadata, exclude_git_data, org_metadata_only.rest.actions.setGithubActionsDefaultWorkflowPermissionsEnterprise().rest.orgs.convertMemberToOutsideCollaborator() - new parameter: async.rest.actions.getActionsCacheUsage().rest.actions.listWorkflowRunsForRepo(): new parameter: check_suite_id.rest.actions.listWorkflowRuns(): new parameter: check_suite_id.rest.codeScanning.listAlertsForRepo(): new parameters: direction, sort.rest.repos.getAllEnvironments(): new parameters: per_page, page.rest.secretScanning.listAlertsForRepo(): new parameters: direction, sort.rest.repos.updatePullRequestReviewProtection(): new parameters: dismissal_restrictions.apps, bypass_pull_request_allowances.rest.repos.updateStatusCheckProtection(): new parameter: checks.rest.codeScanning.updateAlert(): new parameter: dismissed_comment.rest.repos.update(): secret_scanning_push_protection, use_squash_pr_title_as_default.rest.actions.reRunWorkflow(): new parameter: enable_debug_logging.rest.users.createGpgKeyForAuthenticatedUser(): new parameter: name.rest.repos.updateBranchProtection(): new parameter: required_status_checks.checks, required_pull_request_reviews.{apps,bypass_pull_request_allowances}, block_creations.rest.apps.createFromManifest() has no request body.rest.projects.getPermissionForUser(): correct response type and example.rest.repos.update(): visibility parameter cannot be set to visibility.rest.actions.reRunWorkflow(): no longer deprecated.rest.reactions.deleteLegacy().rest.apps.createContentAttachment()GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_number}/jobs
typescript: exclude_pull_requests parameter for action runs endpoints
Renames methods to have consistent AuthenticatedUser() suffix, deprecates previous method names
GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_num}, GET /repos/{owner}/{repo}/actions/runs/{run_id}/attempts/{attempt_num}/logs, POST /repos/{owner}/{repo}/releases/generate-notes, POST /repos/{owner}/{repo}/check-runs/{check_run_id}/rerequest. Graduate nebula, zzzax, switcheroo, baptiste previews. Removes defunkt /repos/{owner}/{repo}/actions/runs/{run_id}/retry endpoint. Renames methods to have consistent AuthenticatedUser() suffix, deprecates previous method names (#462) (5d2de25)removes defunkt endpoints: GET /repos/{owner}/{repo}/community/code_of_conduct, DELETE /reactions/{reaction_id}. encrypted_value and key_id parameters
GET /repos/{owner}/{repo}/community/code_of_conduct, DELETE /reactions/{reaction_id}. encrypted_value and key_id parameters are required for .rest.actions.{createOrUpdateEnvironmentSecret,setSelectedReposForOrgSecret}(). access_token parameter is required for .rest.apps.deleteAuthorization(). Previews graduated: ant-man, flash, scarlet-witch, squirrel-girl (#458) (5f230f3)## 5.11.3 (2021-09-27) ### Bug Fixes * luke-cage preview graduated
graduate previews dorian, inertia, london, lydian, wyandotte
(should have been a feature release)
octokit.rest.actions.retryWorkflow(). Deprecates octokit.rest.actions.reRunWorkflow()
type updates (allow_forking in repositories, diff item status now has an enum)
typescript: response type fixes
typescript: do not mark .user and other response properties as nullable where it does not apply
typescript: description updates for .repos.mergeUpstream()
.rest.repos.mergeUpstream({ owner, repo, branch })
.packages.deletePackageForUser(), .packages.deletePackageVersionForUser(), .packages.restorePackageForUser(), .packages.restorePackageVersionForUser()
typescript: permissions key in responses now consistently include maintain and triage roles
typescript: allow_auto_merge parameter when creating / updating a repository. Search: owner in repository items may no longer be null
.rest.repos.createAutolink(), .rest.repos.listAutolinks(), .rest.repos.getAutolink(), .rest.repos.deleteAutolink()
typescript: .rest.repos.getRelease() response data now includes mentions_count
typescript: .rest.repos.uploadReleaseAsset() requires name parameter. .head.repo property is optional in pull request response type
typescript: add created parameter to octokit.actions.listWorkflowRuns() and octokit.actions.listWorkflowRunsForRepo()
deps: bump @octokit/types to v6.19.1
typescript: octokit.rest.codeScanning.updateAlert() and octokit.rest.codeScanning.getAlert() response types no longer include .rule.security_severity_
.apps.redeliverWebhookDelivery()
typescript: octokit.rest.codeScanning.updateAlert() and octokit.rest.codeScanning.getAlert() response types now include .rule.security_severity_level
typescript: bump @octokit/types to ^6.17.3
typescript: .security_and_analysis.secret_scanning property in repository responses
typescript: .rest.repos.update() - security_and_analysis.secret_scanning parameter
typescript: pagination parameters for .search.topics() and .search.labels()
typescript: lots of type improvements via @octokit/types@6.16.5
deps: bump @octokit/types to v6.16.2
apps.createContentAttachmentForRepo(), reactions.createForRelease(), repos.compareCommitsWithBasehead()
codeScanning.listAlertInstances(), actions.approveWorkflowRun(). Deprecates codeScanning.listAlertsInstances()
POST /repos/{owner}/{repo}/deployments (repos/create-deployment) does not accept a created_at parameter
octokit.rest.repos.getPagesHealthCheck()
remove legacy parameters from octokit.repos.createFork() again
…the forseeable time, but eventually it will be deprecated and removed
octokit.* any more, only on octokit.rest.*. You can use Octokit.plugin(legacyRestEndpointMethods) to recover the previous behavior for the forseeable time, but eventually it will be deprecated and removedremove legacy org and organization parameters from octokit.repos.createFork() again
Your coding agent can read these notes before it upgrades. Set up the MCP server →