From ff9c2167fdb0086c9346d268cea3fd6e02e49ab6 Mon Sep 17 00:00:00 2001 From: "release-controller[bot]" <110195724+release-controller[bot]@users.noreply.github.com> Date: Tue, 10 Nov 2026 17:18:04 +0000 Subject: [PATCH 1/2] Patch release notes for GitHub Enterprise Server (#64608) Co-authored-by: Release-Controller Co-authored-by: Sophie <29382425+sophietheking@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: bonsohi <31749534+bonsohi@users.noreply.github.com> Co-authored-by: SophiaSanles <109411113+SophiaSanles@users.noreply.github.com> Copilot-Session: a609ab6a-feda-4e30-a3fd-3b3807d5650f --- .../enterprise-server/3-19/15.yml | 46 ++++++++++++++++++ .../enterprise-server/3-20/11.yml | 45 ++++++++++++++++++ .../enterprise-server/3-21/9.yml | 47 +++++++++++++++++++ .../enterprise-server/3-22/4.yml | 47 +++++++++++++++++++ 4 files changed, 185 insertions(+) create mode 100644 data/release-notes/enterprise-server/3-19/15.yml create mode 100644 data/release-notes/enterprise-server/3-20/11.yml create mode 100644 data/release-notes/enterprise-server/3-21/9.yml create mode 100644 data/release-notes/enterprise-server/3-22/4.yml diff --git a/data/release-notes/enterprise-server/3-19/15.yml b/data/release-notes/enterprise-server/3-19/15.yml new file mode 100644 index 000000000000..e5e5470f9c1b --- /dev/null +++ b/data/release-notes/enterprise-server/3-19/15.yml @@ -0,0 +1,46 @@ +date: '2026-11-10' +sections: + security_fixes: + - | + **CRITICAL**: The Ruby Active Storage component was updated to address the file-read and remote code execution vulnerability CVE-2026-66066. + - | + **HIGH**: Updated Git to include fixes that address CVE-2026-105437, CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467, and CVE-2026-114469. + - | + **MODERATE**: The Brotli compression library bundled with the GitHub application was updated to address CVE-2026-111497. + - | + Security updates have been applied to Go, OpenSSL, and Ubuntu system packages, including SQLite, across targeted main and bundled container images. These updates partially address [CVE-2026-111943](https://www.cve.org/CVERecord?id=CVE-2026-111943), [CVE-2025-15467](https://www.cve.org/CVERecord?id=CVE-2025-15467), and [CVE-2025-6965](https://www.cve.org/CVERecord?id=CVE-2025-6965); remaining components will be updated in a future release. + - | + Packages have been updated to the latest security versions. + known_issues: + - | + During an upgrade of GitHub Enterprise Server, custom firewall rules are removed. If you use custom firewall rules, you must reapply them after upgrading. + - | + If the root site administrator is locked out of the Management Console after failed login attempts, the account does not unlock automatically after the defined lockout time. Someone with administrative SSH access to the instance must unlock the account using the administrative shell. For more information, see [AUTOTITLE](/admin/administering-your-instance/administering-your-instance-from-the-web-ui/troubleshooting-access-to-the-management-console#unlocking-the-root-site-administrator-account). + - | + {% data reusables.release-notes.large-adoc-files-issue %} + - | + Admin stats REST API endpoints may time out on appliances with many users or repositories. Retrying the request until data is returned is advised. + - | + When following the steps for [Replacing the primary database node](/admin/monitoring-and-managing-your-instance/configuring-clustering/replacing-a-cluster-node#replacing-the-primary-database-node-mysql-or-mysql-and-mssql), running `ghe-cluster-config-apply` might fail with errors. If this occurs, re-running `ghe-cluster-config-apply` is expected to succeed. + - | + Running a config apply as part of the steps for [Replacing a node in an emergency](/admin/monitoring-and-managing-your-instance/configuring-clustering/replacing-a-cluster-node#replacing-a-node-in-an-emergency) may fail with errors if the node being replaced is still reachable. If this occurs, shut down the node and repeat the steps. + - | + {% data reusables.release-notes.2024-06-possible-frontend-5-minute-outage-during-hotpatch-upgrade %} + - | + When restoring data originally backed up from a 3.13 or greater appliance version, the Elasticsearch indices need to be reindexed before some of the data will show up. This happens via a scheduled job that runs on the first Saturday of each month. It can also be forced by running `/usr/local/share/enterprise/ghe-es-search-repair`. + - | + When enabling automatic update checks for the first time in the Management Console, the status is not dynamically reflected until the "Updates" page is reloaded. + - | + When restoring from a backup snapshot, a large number of `mapper_parsing_exception` errors may be displayed. + - | + When initializing a new GHES cluster, nodes with the `consul-server` role should be added to the cluster before adding additional nodes. Adding all nodes simultaneously creates a race condition between nomad server registration and nomad client registration. + - | + In a cluster, the host running restore requires access to the storage nodes via their private IPs. + - | + After a restore, existing outside collaborators cannot be added to repositories in a new organization. This issue can be resolved by running `/usr/local/share/enterprise/ghe-es-search-repair` on the appliance. + - | + After a geo-replica is promoted to be a primary by running `ghe-repl-promote`, the actions workflow of a repository does not have any suggested workflows. + - | + The setting to define private registries at the organization level for code scanning is only available if Dependabot is also enabled for the instance. + - | + After a restart, an instance can remain unavailable with "Starting..." displayed in the web interface. To recover, an administrator can connect using administrative SSH and rerun `ghe-config-apply`. This provides temporary recovery but does not prevent the issue from recurring. This issue is resolved in {% data variables.product.prodname_ghe_server %} 3.21.0 and later. diff --git a/data/release-notes/enterprise-server/3-20/11.yml b/data/release-notes/enterprise-server/3-20/11.yml new file mode 100644 index 000000000000..903ace7689ac --- /dev/null +++ b/data/release-notes/enterprise-server/3-20/11.yml @@ -0,0 +1,45 @@ +date: '2026-11-10' +sections: + security_fixes: + - | + **CRITICAL**: The Ruby Active Storage component was updated to address the file-read and remote code execution vulnerability CVE-2026-66066. + - | + **HIGH**: Updated Git to include fixes that address CVE-2026-105437, CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467, and CVE-2026-114469. + - | + **MODERATE**: The Brotli compression library bundled with the GitHub application was updated to address CVE-2026-111497. + - | + Security updates have been applied to Go, OpenSSL, and Ubuntu system packages, including SQLite, across targeted main and bundled container images. These updates partially address [CVE-2026-111943](https://www.cve.org/CVERecord?id=CVE-2026-111943), [CVE-2025-15467](https://www.cve.org/CVERecord?id=CVE-2025-15467), and [CVE-2025-6965](https://www.cve.org/CVERecord?id=CVE-2025-6965); remaining components will be updated in a future release. + - | + Packages have been updated to the latest security versions. + bugs: + - | + On large instances with a license for {% data variables.product.prodname_GHAS %}, applying a security configuration to many repositories could time out while checking license usage, leaving repositories that failed to enable. License usage checks are now faster under concurrent load. + known_issues: + - | + During an upgrade of GitHub Enterprise Server, custom firewall rules are removed. If you use custom firewall rules, you must reapply them after upgrading. + - | + If the root site administrator is locked out of the Management Console after failed login attempts, the account does not unlock automatically after the defined lockout time. Someone with administrative SSH access to the instance must unlock the account using the administrative shell. For more information, see [AUTOTITLE](/admin/administering-your-instance/administering-your-instance-from-the-web-ui/troubleshooting-access-to-the-management-console#unlocking-the-root-site-administrator-account). + - | + {% data reusables.release-notes.large-adoc-files-issue %} + - | + Admin stats REST API endpoints may time out on appliances with many users or repositories. Retrying the request until data is returned is advised. + - | + When following the steps for [Replacing the primary database node](/admin/monitoring-and-managing-your-instance/configuring-clustering/replacing-a-cluster-node#replacing-the-primary-database-node-mysql-or-mysql-and-mssql), running `ghe-cluster-config-apply` might fail with errors. If this occurs, re-running `ghe-cluster-config-apply` is expected to succeed. + - | + Running a config apply as part of the steps for [Replacing a node in an emergency](/admin/monitoring-and-managing-your-instance/configuring-clustering/replacing-a-cluster-node#replacing-a-node-in-an-emergency) may fail with errors if the node being replaced is still reachable. If this occurs, shut down the node and repeat the steps. + - | + When restoring data originally backed up from a 3.13 or greater appliance version, the Elasticsearch indices need to be reindexed before some of the data will show up. This happens via a scheduled job that runs on the first Saturday of each month. It can also be forced by running `/usr/local/share/enterprise/ghe-es-search-repair`. + - | + When initializing a new GHES cluster, nodes with the `consul-server` role should be added to the cluster before adding additional nodes. Adding all nodes simultaneously creates a race condition between nomad server registration and nomad client registration. + - | + In a cluster, the host running restore requires access to the storage nodes via their private IPs. + - | + After a restore, existing outside collaborators cannot be added to repositories in a new organization. This issue can be resolved by running `/usr/local/share/enterprise/ghe-es-search-repair` on the appliance. + - | + After a geo-replica is promoted to be a primary by running `ghe-repl-promote`, the actions workflow of a repository does not have any suggested workflows. + - | + On instances with multiple Git storage nodes in a voting configuration, including cluster and geo-replication high availability topologies, upgrading may fail to correctly install Actions that ship with the new version. In some cases, previous versions of these Actions remain on the instance. To resolve this issue, run the following commands on the primary node: `ghe-config --unset 'app.actions.actions-repos-sha1sum'`, `ghe-config-apply`, and `/usr/local/share/enterprise/ghe-run-init-actions-graph`. + - | + When an administrator restores a backup with `ghe-restore` to a configured standalone instance with Replication Controller enabled, `ghe-restore` may skip storage data, such as avatars and attachments, and still complete successfully. The restore output includes `Warning: no routes found, skipping storage restore ...`. If you see this warning or storage data is missing after a restore, contact GitHub Support. + - | + After a restart, an instance can remain unavailable with "Starting..." displayed in the web interface. To recover, an administrator can connect using administrative SSH and rerun `ghe-config-apply`. This provides temporary recovery but does not prevent the issue from recurring. This issue is resolved in {% data variables.product.prodname_ghe_server %} 3.21.0 and later. diff --git a/data/release-notes/enterprise-server/3-21/9.yml b/data/release-notes/enterprise-server/3-21/9.yml new file mode 100644 index 000000000000..bb85f9921e07 --- /dev/null +++ b/data/release-notes/enterprise-server/3-21/9.yml @@ -0,0 +1,47 @@ +date: '2026-11-10' +sections: + security_fixes: + - | + **CRITICAL**: The Ruby Active Storage component was updated to address the file-read and remote code execution vulnerability CVE-2026-66066. + - | + **HIGH**: Updated Git to include fixes that address CVE-2026-105437, CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467, and CVE-2026-114469. + - | + **MODERATE**: The Brotli compression library bundled with the GitHub application was updated to address CVE-2026-111497. + - | + Security updates have been applied to Go, OpenSSL, and Ubuntu system packages, including SQLite, across targeted main and bundled container images. These updates partially address [CVE-2026-111943](https://www.cve.org/CVERecord?id=CVE-2026-111943), [CVE-2025-15467](https://www.cve.org/CVERecord?id=CVE-2025-15467), and [CVE-2025-6965](https://www.cve.org/CVERecord?id=CVE-2025-6965); remaining components will be updated in a future release. + - | + Packages have been updated to the latest security versions. + bugs: + - | + On large instances with a license for {% data variables.product.prodname_GHAS %}, applying a security configuration to many repositories could time out while checking license usage, leaving repositories that failed to enable. License usage checks are now faster under concurrent load. + known_issues: + - | + During an upgrade of GitHub Enterprise Server, custom firewall rules are removed. If you use custom firewall rules, you must reapply them after upgrading. + - | + If the root site administrator is locked out of the Management Console after failed login attempts, the account does not unlock automatically after the defined lockout time. Someone with administrative SSH access to the instance must unlock the account using the administrative shell. For more information, see [AUTOTITLE](/admin/administering-your-instance/administering-your-instance-from-the-web-ui/troubleshooting-access-to-the-management-console#unlocking-the-root-site-administrator-account). + - | + {% data reusables.release-notes.large-adoc-files-issue %} + - | + Admin stats REST API endpoints may time out on appliances with many users or repositories. Retrying the request until data is returned is advised. + - | + When following the steps for [Replacing the primary database node](/admin/monitoring-and-managing-your-instance/configuring-clustering/replacing-a-cluster-node#replacing-the-primary-database-node-mysql-or-mysql-and-mssql), running `ghe-cluster-config-apply` might fail with errors. If this occurs, re-running `ghe-cluster-config-apply` is expected to succeed. + - | + Running a config apply as part of the steps for [Replacing a node in an emergency](/admin/monitoring-and-managing-your-instance/configuring-clustering/replacing-a-cluster-node#replacing-a-node-in-an-emergency) may fail with errors if the node being replaced is still reachable. If this occurs, shut down the node and repeat the steps. + - | + When restoring data originally backed up from a 3.13 or greater appliance version, the Elasticsearch indices need to be reindexed before some of the data will show up. This happens via a scheduled job that runs on the first Saturday of each month. It can also be forced by running `/usr/local/share/enterprise/ghe-es-search-repair`. + - | + When initializing a new GHES cluster, nodes with the `consul-server` role should be added to the cluster before adding additional nodes. Adding all nodes simultaneously creates a race condition between nomad server registration and nomad client registration. + - | + In a cluster, the host running restore requires access to the storage nodes via their private IPs. + - | + After a restore, existing outside collaborators cannot be added to repositories in a new organization. This issue can be resolved by running `/usr/local/share/enterprise/ghe-es-search-repair` on the appliance. + - | + After a geo-replica is promoted to be a primary by running `ghe-repl-promote`, the actions workflow of a repository does not have any suggested workflows. + - | + On instances with multiple Git storage nodes in a voting configuration, including cluster and geo-replication high availability topologies, upgrading may fail to correctly install Actions that ship with the new version. In some cases, previous versions of these Actions remain on the instance. To resolve this issue, run the following commands on the primary node: `ghe-config --unset 'app.actions.actions-repos-sha1sum'`, `ghe-config-apply`, and `/usr/local/share/enterprise/ghe-run-init-actions-graph`. + - | + When an administrator restores a backup with `ghe-restore` to a configured standalone instance with Replication Controller enabled, `ghe-restore` may skip storage data, such as avatars and attachments, and still complete successfully. The restore output includes `Warning: no routes found, skipping storage restore ...`. If you see this warning or storage data is missing after a restore, contact GitHub Support. + - | + In some cases, pull requests using auto-merge or merge queue may not merge automatically until mergeability is recalculated. + - | + On a newly booted GitHub Enterprise Server instance, the merge box on a newly created pull request can stay on "Checking for the ability to merge automatically" and not show the merge status. If encountered, refreshing the page shows the correct merge status. diff --git a/data/release-notes/enterprise-server/3-22/4.yml b/data/release-notes/enterprise-server/3-22/4.yml new file mode 100644 index 000000000000..7bc97822a29c --- /dev/null +++ b/data/release-notes/enterprise-server/3-22/4.yml @@ -0,0 +1,47 @@ +date: '2026-11-10' +sections: + security_fixes: + - | + **CRITICAL**: The Ruby Active Storage component was updated to address the file-read and remote code execution vulnerability CVE-2026-66066. + - | + **HIGH**: Updated Git to include fixes that address CVE-2026-105437, CVE-2026-111760, CVE-2026-113408, CVE-2026-114466, CVE-2026-114467, and CVE-2026-114469. + - | + **MODERATE**: The Brotli compression library bundled with the GitHub application was updated to address CVE-2026-111497. + - | + Security updates have been applied to Go, OpenSSL, and Ubuntu system packages, including SQLite, across targeted main and bundled container images. These updates partially address [CVE-2026-111943](https://www.cve.org/CVERecord?id=CVE-2026-111943), [CVE-2025-15467](https://www.cve.org/CVERecord?id=CVE-2025-15467), and [CVE-2025-6965](https://www.cve.org/CVERecord?id=CVE-2025-6965); remaining components will be updated in a future release. + - | + Packages have been updated to the latest security versions. + bugs: + - | + On large instances with a license for {% data variables.product.prodname_GHAS %}, applying a security configuration to many repositories could time out while checking license usage, leaving repositories that failed to enable. License usage checks are now faster under concurrent load. + known_issues: + - | + During an upgrade of GitHub Enterprise Server, custom firewall rules are removed. If you use custom firewall rules, you must reapply them after upgrading. + - | + If the root site administrator is locked out of the Management Console after failed login attempts, the account does not unlock automatically after the defined lockout time. Someone with administrative SSH access to the instance must unlock the account using the administrative shell. For more information, see [AUTOTITLE](/admin/administering-your-instance/administering-your-instance-from-the-web-ui/troubleshooting-access-to-the-management-console#unlocking-the-root-site-administrator-account). + - | + {% data reusables.release-notes.large-adoc-files-issue %} + - | + Admin stats REST API endpoints may time out on appliances with many users or repositories. Retrying the request until data is returned is advised. + - | + When following the steps for [Replacing the primary database node](/admin/monitoring-and-managing-your-instance/configuring-clustering/replacing-a-cluster-node#replacing-the-primary-database-node-mysql-or-mysql-and-mssql), running `ghe-cluster-config-apply` might fail with errors. If this occurs, re-running `ghe-cluster-config-apply` is expected to succeed. + - | + Running a config apply as part of the steps for [Replacing a node in an emergency](/admin/monitoring-and-managing-your-instance/configuring-clustering/replacing-a-cluster-node#replacing-a-node-in-an-emergency) may fail with errors if the node being replaced is still reachable. If this occurs, shut down the node and repeat the steps. + - | + When restoring data originally backed up from a 3.13 or greater appliance version, the Elasticsearch indices need to be reindexed before some of the data will show up. This happens via a scheduled job that runs on the first Saturday of each month. It can also be forced by running `/usr/local/share/enterprise/ghe-es-search-repair`. + - | + When initializing a new GHES cluster, nodes with the `consul-server` role should be added to the cluster before adding additional nodes. Adding all nodes simultaneously creates a race condition between nomad server registration and nomad client registration. + - | + In a cluster, the host running restore requires access to the storage nodes via their private IPs. + - | + After a restore, existing outside collaborators cannot be added to repositories in a new organization. This issue can be resolved by running `/usr/local/share/enterprise/ghe-es-search-repair` on the appliance. + - | + After a geo-replica is promoted to be a primary by running `ghe-repl-promote`, the actions workflow of a repository does not have any suggested workflows. + - | + When publishing npm packages in a workflow after restoring from a backup to GitHub Enterprise Server, you may encounter a `401 Unauthorized` error from the GitHub Packages service. This can happen if the restore is from an N-1 or N-2 version and the workflow targets the npm endpoint on the backup instance. To avoid this issue, ensure the access token is valid and includes the correct scopes for publishing to GitHub Packages. + - | + On instances with multiple Git storage nodes in a voting configuration, including cluster and geo-replication high availability topologies, upgrading may fail to correctly install Actions that ship with the new version. In some cases, previous versions of these Actions remain on the instance. To resolve this issue, run the following commands on the primary node: `ghe-config --unset 'app.actions.actions-repos-sha1sum'`, `ghe-config-apply`, and `/usr/local/share/enterprise/ghe-run-init-actions-graph`. + - | + In some cases, pull requests using auto-merge or merge queue may not merge automatically until mergeability is recalculated. + - | + On a newly booted GitHub Enterprise Server instance, the merge box on a newly created pull request can stay on "Checking for the ability to merge automatically" and not show the merge status. If encountered, refreshing the page shows the correct merge status. From d8541d452854274e2d37ddaba9613dc8c4fa524d Mon Sep 17 00:00:00 2001 From: Sunbrye Ly <56200261+sunbrye@users.noreply.github.com> Date: Tue, 10 Nov 2026 19:38:37 +0000 Subject: [PATCH 2/2] Tented Model 0077 (Gemini 4 Carbon) (#64654) Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .../copilot/reference/ai-models/model-hosting.md | 1 + .../copilot/reference/ai-models/supported-models.md | 1 + .../reference/copilot-billing/models-and-pricing.md | 2 ++ .../copilot/copilot-cloud-agent-non-auto-models.md | 1 + data/tables/copilot/model-comparison.yml | 7 ++++++- data/tables/copilot/model-release-status.yml | 4 ++++ data/tables/copilot/model-supported-clients.yml | 9 +++++++++ data/tables/copilot/model-supported-plans.yml | 7 +++++++ data/tables/copilot/models-and-pricing.yml | 13 +++++++++++++ data/variables/copilot.yml | 1 + 10 files changed, 45 insertions(+), 1 deletion(-) diff --git a/content/copilot/reference/ai-models/model-hosting.md b/content/copilot/reference/ai-models/model-hosting.md index 075f2cbc4c8c..e2c7e2a297df 100644 --- a/content/copilot/reference/ai-models/model-hosting.md +++ b/content/copilot/reference/ai-models/model-hosting.md @@ -83,6 +83,7 @@ Used for: * {% data variables.copilot.gemini_38_flash %} * {% data variables.copilot.gemini_4_argon %} +* {% data variables.copilot.gemini_4_carbon %} {% data variables.product.prodname_copilot %} uses {% data variables.copilot.gemini %} models hosted on Google Cloud Platform (GCP). When using {% data variables.copilot.gemini %} models, prompts and metadata are sent to GCP, which makes the [following data commitment](https://cloud.google.com/vertex-ai/generative-ai/docs/data-governance): _{% data variables.copilot.gemini %} doesn't use your prompts, or its responses, as data to train its models._ diff --git a/content/copilot/reference/ai-models/supported-models.md b/content/copilot/reference/ai-models/supported-models.md index b2c51de1d84c..1944701722f0 100644 --- a/content/copilot/reference/ai-models/supported-models.md +++ b/content/copilot/reference/ai-models/supported-models.md @@ -129,6 +129,7 @@ Some {% data variables.product.prodname_copilot_short %} models require minimum |----------------------------------------------------------|----------------------------------------------|------------------------------------------|----------------|-------|---------| | {% data variables.copilot.gemini_38_flash %} | TBD | `17.14.22` or `18.1.0` | TBD | TBD | TBD | | {% data variables.copilot.gemini_4_argon %} | TBD | `17.14.22` or `18.1.0` | TBD | TBD | TBD | +| {% data variables.copilot.gemini_4_carbon %} | TBD | TBD | TBD | TBD | TBD | | {% data variables.copilot.gpt_53_codex %} | `v1.104.1` | `17.14.19` | `1.5.61` | `0.45.0` | `0.13.0` | | {% data variables.copilot.gpt_56_luna %} | `1.128.0` | TBD | TBD | TBD | TBD | | {% data variables.copilot.gpt_56_sol %} | `1.128.0` | TBD | TBD | TBD | TBD | diff --git a/content/copilot/reference/copilot-billing/models-and-pricing.md b/content/copilot/reference/copilot-billing/models-and-pricing.md index ce42c51237fb..e5d37ec9269c 100644 --- a/content/copilot/reference/copilot-billing/models-and-pricing.md +++ b/content/copilot/reference/copilot-billing/models-and-pricing.md @@ -140,4 +140,6 @@ You can view your current {% data variables.product.prodname_actions %} usage fo [^gemini-4-argon-promo]: {% data variables.copilot.gemini_4_argon %} is available at the promotional pricing of $2.00 per 1M input tokens, $0.10 per 1M cached input tokens, and $10.00 per 1M output tokens until December 1, 2026. +[^gemini-4-carbon-promo]: {% data variables.copilot.gemini_4_carbon %} is available at the promotional pricing of $2.00 per 1M input tokens, $0.10 per 1M cached input tokens, and $10.00 per 1M output tokens until December 1, 2026. Starting December 1, 2026, pricing is $4.00 per 1M input tokens, $0.20 per 1M cached input tokens, and $20.00 per 1M output tokens. + diff --git a/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md b/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md index 3236d5c875db..ce2a301dfac8 100644 --- a/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md +++ b/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md @@ -5,6 +5,7 @@ * {% data variables.copilot.claude_haiku_55 %} * {% data variables.copilot.gemini_38_flash %} * {% data variables.copilot.gemini_4_argon %} +* {% data variables.copilot.gemini_4_carbon %} * {% data variables.copilot.gpt_56_luna %} * {% data variables.copilot.gpt_56_sol %} * {% data variables.copilot.gpt_56_terra %} diff --git a/data/tables/copilot/model-comparison.yml b/data/tables/copilot/model-comparison.yml index 103ed9e7be6f..ccda5c2d7512 100644 --- a/data/tables/copilot/model-comparison.yml +++ b/data/tables/copilot/model-comparison.yml @@ -67,7 +67,7 @@ - name: Claude Fable 5.2 task_area: Long-horizon, autonomous coding and knowledge-work excels_at: Substantial, long-running coding tasks, including deep codebase research, feature development, and complex agentic workflows - further_reading: 'Coming soon' + further_reading: '[Claude Fable 5.2 model card](https://assets.claude.com/27d60918d218125e7504bc7354c4b4626ec56b11.pdf)' - name: Claude Haiku 4.5 task_area: Fast help with simple or repetitive tasks @@ -125,6 +125,11 @@ excels_at: Thorough work that tests edge cases before finishing further_reading: '[Gemini 4 Argon](https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-4-Argon-Model-Card.pdf)' +- name: Gemini 4 Carbon + task_area: Complex coding, agentic, and reasoning tasks + excels_at: Secure code generation and security-focused work + further_reading: 'Coming soon' + # Microsoft - name: MAI-Code-1.1-Flash task_area: General-purpose coding and writing, image understanding diff --git a/data/tables/copilot/model-release-status.yml b/data/tables/copilot/model-release-status.yml index 39052e9cbe80..b504e45b4c0b 100644 --- a/data/tables/copilot/model-release-status.yml +++ b/data/tables/copilot/model-release-status.yml @@ -115,6 +115,10 @@ provider: 'Google' release_status: 'GA' +- name: 'Gemini 4 Carbon' + provider: 'Google' + release_status: 'GA' + # Microsoft models - name: 'MAI-Code-1.1-Flash' provider: 'Microsoft' diff --git a/data/tables/copilot/model-supported-clients.yml b/data/tables/copilot/model-supported-clients.yml index 05b352e182d2..478b9fccbef4 100644 --- a/data/tables/copilot/model-supported-clients.yml +++ b/data/tables/copilot/model-supported-clients.yml @@ -140,6 +140,15 @@ xcode: true jetbrains: true +- name: Gemini 4 Carbon + dotcom: false + cli: true + vscode: true + vs: true + eclipse: true + xcode: true + jetbrains: true + - name: MAI-Code-1.1-Flash dotcom: true cli: true diff --git a/data/tables/copilot/model-supported-plans.yml b/data/tables/copilot/model-supported-plans.yml index 1565854b7940..2345995afdda 100644 --- a/data/tables/copilot/model-supported-plans.yml +++ b/data/tables/copilot/model-supported-plans.yml @@ -110,6 +110,13 @@ business: true enterprise: true +- name: Gemini 4 Carbon + pro: false + pro_plus: true + max: true + business: true + enterprise: true + - name: GPT-5.3-Codex pro: true pro_plus: true diff --git a/data/tables/copilot/models-and-pricing.yml b/data/tables/copilot/models-and-pricing.yml index c4eeacb06f87..0521f2f1c94f 100644 --- a/data/tables/copilot/models-and-pricing.yml +++ b/data/tables/copilot/models-and-pricing.yml @@ -374,6 +374,19 @@ cached_input: $0.10 output: $10.00 +# Promotional pricing expires 2026-12-01. Standard pricing from 2026-12-01 is $4.00 input, +# $0.20 cached input, and $20.00 output. On that date, update input, cached_input, +# and output below, then remove the [^gemini-4-carbon-promo] footnote here and in models-and-pricing.md. +- model: 'Gemini 4 Carbon[^gemini-4-carbon-promo]' + provider: google + release_status: GA + category: Powerful + threshold: 'Not applicable' + tier: 'Default' + input: $2.00 + cached_input: $0.10 + output: $10.00 + # xAI - model: 'Grok 4.5' provider: xai diff --git a/data/variables/copilot.yml b/data/variables/copilot.yml index 51dc1ed32213..c052c05390d4 100644 --- a/data/variables/copilot.yml +++ b/data/variables/copilot.yml @@ -251,6 +251,7 @@ gemini_3_pro: 'Gemini 3 Pro' gemini_31_pro: 'Gemini 3.1 Pro' gemini_38_flash: 'Gemini 3.8 Flash' gemini_4_argon: 'Gemini 4 Argon' +gemini_4_carbon: 'Gemini 4 Carbon' # OpenAI GPT series: gpt_4o: 'GPT-4o' gpt_4o_mini: 'GPT-4o mini'