NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
npm · #3751 most downloaded on npm
The all-batteries-included GitHub SDK for Browsers, Node.js, and Deno
Last release 11 months ago
31 Oct 2025
Release timing varies
gaps range from 8 days to 8 months
Nearly every release is documented
notes for 60 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
13 years old
100 releases · first in 2013
deps: update octokit monorepo (major)
deps: update dependency @octokit/types to v15
One column per quarter.
deps: update dependency @octokit/plugin-rest-endpoint-methods to v16
deps: update octokit monorepo (major)
deps: add explicit dependency on @octokit/webhooks (#2847) (2b5ed09), closes #2844
stop testing against NodeJS v18
deps: add explicit dependency on @octokit/webhooks (#2847) (3589cd2), closes #2844
deps: update octokit monorepo (major)
deps: update Octokit dependencies to mitigate ReDos vulnerabilities [security]
deps: bump @octokit/app to fix web users
deps: bump Octokit deps to fix Deno compatibility, new endpoints via @octokit/plugin-rest-endpoint-methods
deps: bump @octokit/app and @octokit/types
## 4.0.2 (2024-05-08) ### Bug Fixes * build: actually output ESM
docs: remove NodeJS 10 and add callout for conditional exports
remove authentication type "oauth" that was previously deprecated
@octokit/webhooks-types to @octokit/openapi-webhooks-types due to the transition to using GitHub's OpenAPI schemaupdate dependencies (95220f3), closes #2844
## 3.2.1 (2024-05-03) ### Bug Fixes * update rest endpoints
## 3.2.1-beta.1 (2024-05-06) ### Bug Fixes * adapt code for ESM/new deps (314b46e) * deps: update octokit monorepo
# 3.2.0 (2024-04-03) ### Features * security: Add provenance
updates app.js for the handling of an error being thrown by the verify method in webhooks.js
deps: update octokit monorepo (major)
# 3.1.0 (2023-07-26) ### Features * add plugin-paginate-graphql
Drop support for NodeJS v14, v16
agent option from octokit.request()@octokit/request)method, headers, body, signal (via @octokit/request)# 3.0.0-beta.5 (2023-07-11) ### Bug Fixes * deps: bump Octokit deps
deps: revert breaking changes (#2478) (6fb5995), closes #2475 #2474
deps: update dependency @octokit/plugin-retry to v5 (#2468) (a327cb8), closes #2460
revert): revert "fix(deps: update dependency @octokit/plugin-throttling to v6"
stop testing against NodeJS v14, v16
# 2.1.0 (2023-06-20) ### Features * add RequestError support
deps: update dependency @octokit/types to v10
deps: update dependency @octokit/plugin-throttling to v6
## 2.0.19 (2023-05-27) ### Bug Fixes * deps: upgrade @octokit/app
revert): revert "fix(deps: update dependency @octokit/plugin-throttling to v6"
deps: update dependency @octokit/plugin-throttling to v6
deps: update all `@octokit` modules
build: replace pika with esbuild and tsc
deps: update dependency @octokit/plugin-paginate-rest to v6
deps: update dependency @octokit/plugin-rest-endpoint-methods to v7
deps: update dependency @octokit/types to v9
deps: update @octokit/app in order to propogate fix to CVE-2022-23541
deps: update @octokit/plugin-retry to latest
deps: update dependency @octokit/plugin-paginate-rest to v5
deps: update dependency @octokit/types to v8
deps: update dependency @octokit/types to v7
deps: update dependency @octokit/plugin-paginate-rest to v4
use "secondary" instead of "abuse" for rate limit
README: app.getInstallationOctokit() doesn't need destructuring
deps: update @octokit dependencies to their latest version
deps: update dependency @octokit/app to v13
deps: update dependency @octokit/plugin-throttling to v4
stop testing against NodeJS v10, v12
## 1.8.1 (2022-06-22) ### Bug Fixes * set correct user agent
`.rest.actions.reRunWorkflow()`: no longer deprecated
.rest.dependabot.addSelectedRepoToOrgSecret().rest.dependabot.removeSelectedRepoFromOrgSecret().rest.teams.listLinkedExternalIdpGroupsToTeamForOrg().rest.teams.linkExternalIdpGroupToTeamForOrg().rest.teams.unlinkExternalIdpGroupFromTeamForOrg().rest.enterpriseAdmin.listLabelsForSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.addCustomLabelsToSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.setCustomLabelsForSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.removeAllCustomLabelsFromSelfHostedRunnerForEnterprise().rest.actions.listLabelsForSelfHostedRunnerForOrg().rest.actions.addCustomLabelsToSelfHostedRunnerForOrg().rest.actions.setCustomLabelsForSelfHostedRunnerForOrg().rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForOrg().rest.actions.listLabelsForSelfHostedRunnerForRepo().rest.actions.addCustomLabelsToSelfHostedRunnerForRepo().rest.actions.setCustomLabelsForSelfHostedRunnerForRepo().rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForRepo().rest.codespaces.listInRepositoryForAuthenticatedUser().rest.codespaces.createWithRepoForAuthenticatedUser().rest.repos.listTagProtection().rest.repos.createTagProtection().rest.codespaces.listForAuthenticatedUser().rest.codespaces.createForAuthenticatedUser().rest.codespaces.listSecretsForAuthenticatedUser().rest.codespaces.getPublicKeyForAuthenticatedUser().rest.codespaces.getSecretForAuthenticatedUser().rest.codespaces.createOrUpdateSecretForAuthenticatedUser().rest.codespaces.deleteSecretForAuthenticatedUser().rest.codespaces.listRepositoriesForSecretForAuthenticatedUser().rest.codespaces.setRepositoriesForSecretForAuthenticatedUser().rest.codespaces.addRepositoryForSecretForAuthenticatedUser().rest.codespaces.removeRepositoryForSecretForAuthenticatedUser().rest.codespaces.getForAuthenticatedUser().rest.codespaces.updateForAuthenticatedUser().rest.codespaces.deleteForAuthenticatedUser().rest.codespaces.exportForAuthenticatedUser().rest.codespaces.getExportDetailsForAuthenticatedUser().rest.codespaces.codespaceMachinesForAuthenticatedUser().rest.codespaces.startForAuthenticatedUser().rest.codespaces.stopForAuthenticatedUser().rest.dependabot.getOrgSecret().rest.dependabot.createOrUpdateOrgSecret().rest.dependabot.deleteOrgSecret().rest.codespaces.getRepoSecret().rest.codespaces.createOrUpdateRepoSecret().rest.codespaces.deleteRepoSecret().rest.dependabot.getRepoSecret().rest.dependabot.createOrUpdateRepoSecret().rest.dependabot.deleteRepoSecret().rest.actions.getGithubActionsDefaultWorkflowPermissionsOrganization().rest.actions.setGithubActionsDefaultWorkflowPermissionsOrganization().rest.dependabot.listSelectedReposForOrgSecret().rest.dependabot.setSelectedReposForOrgSecret().rest.actions.getWorkflowAccessToRepository().rest.actions.setWorkflowAccessToRepository().rest.actions.getGithubActionsDefaultWorkflowPermissionsRepository().rest.actions.setGithubActionsDefaultWorkflowPermissionsRepository().rest.orgs.listCustomRoles().rest.actions.getActionsCacheUsageForOrg().rest.enterpriseAdmin.removeCustomLabelFromSelfHostedRunnerForEnterprise().rest.actions.removeCustomLabelFromSelfHostedRunnerForOrg().rest.actions.removeCustomLabelFromSelfHostedRunnerForRepo().rest.reactions.deleteForRelease().rest.repos.deleteTagProtection().rest.enterpriseAdmin.getServerStatistics().rest.actions.getActionsCacheUsageForEnterprise().rest.actions.getGithubActionsDefaultWorkflowPermissionsEnterprise().rest.enterpriseAdmin.listSelfHostedRunnerGroupsForEnterprise() - visible-to-organization paramter.rest.secretScanning.listAlertsForEnterprise().rest.billing.getGithubAdvancedSecurityBillingGhe().rest.actions.getActionsCacheUsageByRepoForOrg().rest.actions.listSelfHostedRunnerGroupsForOrg() - new parameter: visible_to_repository.rest.codeScanning.listAlertsForOrg().rest.orgs.listSamlSsoAuthorizations() - new parameters: per_page, page, login.rest.dependabot.getOrgPublicKey().rest.dependabot.listOrgSecrets().rest.teams.externalIdpGroupInfoForOrg().rest.teams.listExternalIdpGroupsForOrg().rest.secretScanning.listAlertsForOrg() - new parameters: sort, direction.rest.billing.getGithubAdvancedSecurityBillingOrg().rest.repos.codeownersErrors().rest.codespaces.listDevcontainersInRepositoryForAuthenticatedUser().rest.codespaces.repoMachinesForAuthenticatedUser().rest.codespaces.getRepoPublicKey().rest.codespaces.listRepoSecrets().rest.dependabot.getRepoPublicKey().rest.dependabot.listRepoSecrets().rest.dependencyGraph.diffRange().rest.reactions.listForRelease().rest.secretScanning.listLocationsForAlert().rest.actions.updateSelfHostedRunnerGroupForOrg() - new parameters: allows_public_repositories, restricted_to_workflows, selected_workflows.rest.orgs.update() - new parameter: members_can_fork_private_repositories.rest.actions.createSelfHostedRunnerGroupForOrg() - new parameters: allows_public_repositories, restricted_to_workflows, selected_workflows.rest.migrations.startForOrg() - new parrameters: exclude_metadata, exclude_git_data, org_metadata_only.rest.repos.createInOrg() - new parameter: use_squash_pr_title_as_default.rest.actions.reRunJobForWorkflowRun().rest.actions.reRunWorkflowFailedJobs().rest.codespaces.createWithPrForAuthenticatedUser().rest.migrations.startForAuthenticatedUser() - new parrameters: exclude_metadata, exclude_git_data, org_metadata_only.rest.actions.setGithubActionsDefaultWorkflowPermissionsEnterprise().rest.orgs.convertMemberToOutsideCollaborator() - new parameter: async.rest.actions.getActionsCacheUsage().rest.actions.listWorkflowRunsForRepo(): new parameter: check_suite_id.rest.actions.listWorkflowRuns(): new parameter: check_suite_id.rest.codeScanning.listAlertsForRepo(): new parameters: direction, sort.rest.repos.getAllEnvironments(): new parameters: per_page, page.rest.secretScanning.listAlertsForRepo(): new parameters: direction, sort.rest.repos.updatePullRequestReviewProtection(): new parameters: dismissal_restrictions.apps, bypass_pull_request_allowances.rest.repos.updateStatusCheckProtection(): new parameter: checks.rest.codeScanning.updateAlert(): new parameter: dismissed_comment.rest.repos.update(): secret_scanning_push_protection, use_squash_pr_title_as_default.rest.actions.reRunWorkflow(): new parameter: enable_debug_logging.rest.users.createGpgKeyForAuthenticatedUser(): new parameter: name.rest.repos.updateBranchProtection(): new parameter: required_status_checks.checks, required_pull_request_reviews.{apps,bypass_pull_request_allowances}, block_creations.rest.apps.createFromManifest() has no request body.rest.projects.getPermissionForUser(): correct response type and example.rest.repos.update(): visibility parameter cannot be set to visibility.rest.actions.reRunWorkflow(): no longer deprecated.rest.reactions.deleteLegacy().rest.apps.createContentAttachment()## 1.7.2 (2022-06-08) ### Bug Fixes * re-enable throttling plugin
docs: correct proxy servers headline not rendering
Renames methods to have consistent AuthenticatedUser() suffix, deprecates previous method names
.actions.downloadWorkflowRunAttemptLogs(), .actions.getWorkflowRunAttempt(), .repos.generateReleaseNotes(), .checks.rerequestRun(). Graduate nebula, zzzax, switcheroo, baptiste previews. Removes defunkt /repos/{owner}/{repo}/actions/runs/{run_id}/retry endpoint. Renames methods to have consistent AuthenticatedUser() suffix, deprecates previous method names (#2163) (e02541c)removes defunkt endpoints: GET /repos/{owner}/{repo}/community/code_of_conduct, DELETE /reactions/{reaction_id}. encrypted_value and key_id parameters
GET /repos/{owner}/{repo}/community/code_of_conduct, DELETE /reactions/{reaction_id}. encrypted_value and key_id parameters are required for .rest.actions.{createOrUpdateEnvironmentSecret,setSelectedReposForOrgSecret}(). access_token parameter is required for .rest.apps.deleteAuthorization(). Previews graduated: ant-man, flash, scarlet-witch, squirrel-girl (03e3055)luke-cage preview graduated (#2158) (6864592)graduate previews dorian, inertia, london, lydian, wyandotte
octokit.rest.repos.{enable,disable}LfsForRepo(), octokit.rest.repos.mergeUpstream({ owner, repo, branch })
Your coding agent can read these notes before it upgrades. Set up the MCP server →