Merge pull request #45505 from github/repo-sync

Repo sync

Author: docs-bot

content/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise.md

@@ -58,8 +58,8 @@ To set up the audit log stream, follow the instructions for your provider:
 * [Azure Blob Storage](#setting-up-streaming-to-azure-blob-storage)
 * [Azure Event Hubs](#setting-up-streaming-to-azure-event-hubs)
 * [Datadog](#setting-up-streaming-to-datadog)
-* [Google Cloud Storage](#setting-up-streaming-to-google-cloud-storage)
-* [Microsoft Purview](#setting-up-streaming-to-microsoft-purview) (Copilot agent session events only)
+* [Google Cloud Storage](#setting-up-streaming-to-google-cloud-storage){% ifversion ghec %}
+* [Microsoft Purview](#setting-up-streaming-to-microsoft-purview) (Copilot agent session events only){% endif %}
 * [Splunk](#setting-up-streaming-to-splunk)
 
 {% ifversion ghec %}
@@ -213,7 +213,7 @@ From {% data variables.product.prodname_dotcom %}:
 
 ### Setting up streaming to Azure Event Hubs
 
-> [!NOTE] 
+> [!NOTE]
 > - Event Hubs instances in Azure Government are not supported.
 > - With **{% data variables.enterprise.data_residency %},** audit log streaming to Azure Event Hubs is not supported with IP Firewall rules enabled.
 
@@ -270,6 +270,8 @@ To set up streaming to Google Cloud Storage, create a service account in Google
 1. To verify that {% data variables.product.prodname_dotcom %} can connect and write to the Google Cloud Storage bucket, click **Check endpoint**.
 {% data reusables.enterprise.verify-audit-log-streaming-endpoint %}
 
+{% ifversion ghec %}
+
 ### Setting up streaming to Microsoft Purview
 
 {% data reusables.copilot.agent-session-streaming-availability-note %}
@@ -284,6 +286,8 @@ To set up streaming to Microsoft Purview, configure streaming in {% data variabl
 1. Click **Authorize with Entra**.
 1. When you're redirected to Microsoft Entra, add the {% data variables.product.github %} app and authorize it for your tenant.
 
+{% endif %}
+
 ### Setting up streaming to Splunk
 
 To stream audit logs to Splunk's HTTP Event Collector (HEC) endpoint, make sure that the endpoint is configured to accept HTTPS connections. See [Set up and use HTTP Event Collector in Splunk Web](https://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector) in the Splunk documentation.
@@ -355,8 +359,8 @@ To restart streaming, click **Resume stream**.
 {% data reusables.copilot.agent-session-streaming-availability-note %}
 
 {% data reusables.enterprise-accounts.access-enterprise %}
-1. At the top of the page, click AI Controls 
-1. Under "Copilot", select **Enabled everywhere** for "Copilot Usage Records Streaming" 
+1. At the top of the page, click AI Controls
+1. Under "Copilot", select **Enabled everywhere** for "Copilot Usage Records Streaming"
 1. Configure a streaming destination. See [Setting up audit log streaming](#setting-up-audit-log-streaming).
 
 You can also retrieve {% data variables.product.prodname_copilot_short %} usage data through the REST API by selecting **Enabled everywhere** for "Copilot Usage Records API". See [AUTOTITLE](/rest/copilot/copilot-usage-metrics#get-copilot-usage-records-for-an-enterprise).

content/code-security/tutorials/customize-code-scanning/prepare-code-for-analysis.md

@@ -297,7 +297,18 @@ The following examples are designed to give you an idea of some of the build com
 * Swift project built with `xcodebuild`:
 
   ```shell
-  codeql database create -l swift -c "xcodebuild build -target your-target" swift-database
+  # Build using the following xcodebuild flags:
+  # `CODE_SIGNING_REQUIRED=NO` and `CODE_SIGNING_ALLOWED=NO`: turn off code signing, which may fail with CodeQL
+  # `COMPILATION_CACHE_ENABLE_CACHING=NO` and `SWIFT_ENABLE_COMPILE_CACHE=NO`: turn off build caching, which may skip compilation steps
+  # `SWIFT_USE_INTEGRATED_DRIVER=NO`: turn off the Swift integrated driver, which is incompatible with CodeQL
+  codeql database create -l swift \
+  -c "xcodebuild build -target your-target
+    CODE_SIGNING_REQUIRED=NO
+    CODE_SIGNING_ALLOWED=NO
+    COMPILATION_CACHE_ENABLE_CACHING=NO
+    SWIFT_ENABLE_COMPILE_CACHE=NO
+    SWIFT_USE_INTEGRATED_DRIVER=NO" \
+  swift-database
   ```
 
   You can pass the `archive` and `test` options to `xcodebuild`. However, the standard `xcodebuild` command is recommended as it should be the fastest, and should be all that {% data variables.product.prodname_codeql %} requires for a successful scan.

content/copilot/reference/ai-models/model-hosting.md

@@ -87,8 +87,9 @@ When using {% data variables.copilot.copilot_gemini %} models, input prompts and
 Used for:
 
 * {% data variables.copilot.copilot_grok_45 %}
+* {% data variables.copilot.copilot_grok_46 %}
 
-These models are hosted on xAI. xAI operates {% data variables.copilot.copilot_grok_45 %} in {% data variables.product.prodname_copilot %} under a zero data retention API policy. This means xAI commits that user content (both inputs sent to the model and outputs generated by the model):
+These models are hosted on xAI. xAI operates these models in {% data variables.product.prodname_copilot %} under a zero data retention API policy. This means xAI commits that user content (both inputs sent to the model and outputs generated by the model):
 
 Will **not** be:
 * Logged for any purpose, including human review

content/copilot/reference/ai-models/supported-models.md

@@ -142,6 +142,7 @@ Some {% data variables.product.prodname_copilot_short %} models require minimum
 | {% data variables.copilot.copilot_mai_code_1_flash %}    | `v1.121` | TBD                            | TBD | TBD | TBD |
 | {% data variables.copilot.copilot_mai_code_1_1_flash %}  | `v1.121` | TBD                            | TBD | TBD | TBD |
 | {% data variables.copilot.copilot_grok_45 %}             | TBD | `17.14.19` | TBD | TBD | TBD |
+| {% data variables.copilot.copilot_grok_46 %}             | TBD | TBD | TBD | TBD | TBD |
 
 {% endrowheaders %}
 

content/copilot/reference/enterprise-administrators/enterprise-managed-settings.md

@@ -32,7 +32,7 @@ In {% data variables.copilot.copilot_cli_short %}, the `sandbox` key is an excep
 | Key | Purpose | {% data variables.copilot.copilot_cli_short %} | {% data variables.product.prodname_vscode_shortname %} | {% data variables.copilot.github_copilot_app %} | {% data variables.copilot.copilot_cloud_agent %} | {% data variables.product.prodname_jetbrains_ides %} |
 | --- | --- | --- | --- | --- | --- | --- |
 | `permissions.disableBypassPermissionsMode` | Disables bypass or YOLO-style allow-all behavior | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} |
-| `permissions.model` | Sets auto model selection as the default for new conversations | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} |
+| `model` | Sets auto model selection as the default for new conversations | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} |
 | `enabledPlugins` | Enables or disables specific plugins by key | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} |
 | `extraKnownMarketplaces` | Adds plugin marketplaces that users can access | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} |
 | `strictKnownMarketplaces` | Restricts plugin installation to explicitly listed marketplaces | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} |
@@ -48,7 +48,7 @@ In {% data variables.copilot.copilot_cli_short %}, the `sandbox` key is an excep
 
 For server-managed deployments, the enterprise can apply different governance to groups of users based on their enterprise team membership. The enterprise defines all settings—team membership only determines which users receive a given set of values.
 
-To make a key eligible for team-specific values, mark it as overridable in `{% data variables.copilot.managed_setting_file %}` using the `{ "overridable": <VALUE> }` syntax. An overridable key uses the team's value when set, or falls back to your enterprise default when the team leaves it unset. The `{ "overridable": <VALUE> }` syntax applies to the `permissions.model`, `permissions.disableBypassPermissionsMode`, `allowedMcpServers`, and `deniedMcpServers` keys. Keys not marked overridable remain an enterprise-level decision that teams can't modify.
+To make a key eligible for team-specific values, mark it as overridable in `{% data variables.copilot.managed_setting_file %}` using the `{ "overridable": <VALUE> }` syntax. An overridable key uses the team's value when set, or falls back to your enterprise default when the team leaves it unset. The `{ "overridable": <VALUE> }` syntax applies to the `model`, `permissions.disableBypassPermissionsMode`, `allowedMcpServers`, and `deniedMcpServers` keys. Keys not marked overridable remain an enterprise-level decision that teams can't modify.
 
 `enabledPlugins` and `extraKnownMarketplaces` work additively. The enterprise `{% data variables.copilot.managed_setting_file %}` sets a baseline, and an enterprise team file can add more plugins and marketplaces on top of it. For the full setup steps, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings#overriding-settings-for-specific-teams).
 
@@ -58,9 +58,9 @@ The following example shows these keys in one managed settings file.
 
 ```json
 {
+  "model": "auto",
   "permissions": {
-    "disableBypassPermissionsMode": "disable",
-    "model": "auto"
+    "disableBypassPermissionsMode": "disable"
   },
   "enabledPlugins": {
     "my-plugin@agent-skills": true
@@ -148,6 +148,13 @@ Restricts plugin installation to only the marketplaces explicitly defined by the
 * `"hostPattern"` — requires `hostPattern` (regex matching marketplace hosts)
 * `"pathPattern"` — requires `pathPattern` (regex matching marketplace paths)
 
+## model
+
+Sets auto model selection as the default for new conversations. See [AUTOTITLE](/copilot/concepts/models/auto-model-selection).
+
+* When you set `model` to `"auto"`, new sessions use Auto model unless the user specifies a different model on a per-conversation basis.
+* This key is overridable by enterprise team mapping. In your `{% data variables.copilot.managed_setting_file %}`, use the `{ "overridable": "auto" }` syntax to specialize the key's configuration on a per-team basis. You can then set `"model": "unmanaged"` in a team settings file, providing a specialization that takes precedence over `{% data variables.copilot.managed_setting_file %}` for members of the subject team.
+
 ## permissions
 
 ### disableBypassPermissionsMode
@@ -161,13 +168,6 @@ When you set `disableBypassPermissionsMode` to `"disable"`, users cannot turn on
 * In the {% data variables.copilot.github_copilot_app %}, the "Allow all" setting for "Tool Permissions" is blocked in the sessions settings.
 * This key is overridable by enterprise team mapping. In your `{% data variables.copilot.managed_setting_file %}`, use the `{ "overridable": "disable" }` syntax to specialize the key's configuration on a per-team basis. You can then set `"disableBypassPermissionsMode": "unmanaged"` in a team settings file, providing a specialization that takes precedence over `{% data variables.copilot.managed_setting_file %}` for members of the subject team.
 
-### model
-
-Sets auto model selection as the default for new conversations. See [AUTOTITLE](/copilot/concepts/models/auto-model-selection).
-
-* When you set `permissions.model` to `"auto"`, new sessions use Auto model unless the user specifies a different model on a per-conversation basis.
-* This key is overridable by enterprise team mapping. In your `{% data variables.copilot.managed_setting_file %}`, use the `{ "overridable": "auto" }` syntax to specialize the key's configuration on a per-team basis. You can then set `"model": "unmanaged"` in a team settings file, providing a specialization that takes precedence over `{% data variables.copilot.managed_setting_file %}` for members of the subject team.
-
 ## telemetry
 
 Configures OpenTelemetry export, routing {% data variables.product.prodname_copilot_short %} usage data to a collector of your choice.

content/issues/using-labels-and-milestones-to-track-work/managing-labels.md

@@ -38,6 +38,7 @@ You can manage your work on {% data variables.product.github %} by creating labe
 
 Label | Description
 ---  | ---
+`accessibility` | Indicates a barrier affecting people with disabilities
 `bug` | Indicates an unexpected problem or unintended behavior
 `documentation` | Indicates a need for improvements or additions to documentation
 `duplicate` | Indicates similar {% ifversion fpt or ghec %}issues, pull requests, or discussions{% else %}issues or pull requests{% endif %}

data/reusables/actions/azure-vnet-about-larger-runners.md

@@ -1,3 +1,3 @@
-2-64 vCPU Ubuntu and Windows runners are supported with Azure VNET. For more information on these runner types, see [AUTOTITLE](/actions/reference/runners/larger-runners#specifications-for-general-larger-runners).
+Azure VNET private networking is only available for larger runners (2-64 vCPU Ubuntu and Windows). Standard {% data variables.product.company_short %}-hosted runners are not supported. For more information on larger runner types, see [AUTOTITLE](/actions/reference/runners/larger-runners#specifications-for-general-larger-runners).
 
 {% data reusables.actions.static-ip-limitation-vnet %} You must use dynamic IP addresses, which is the default configuration for larger runners. For more information about networking for larger runners, see [AUTOTITLE](/actions/reference/runners/larger-runners#networking-for-larger-runners).

data/reusables/copilot/copilot-cloud-agent-non-auto-models.md

@@ -10,5 +10,6 @@
 * {% data variables.copilot.copilot_gpt_56_sol %}
 * {% data variables.copilot.copilot_gpt_56_terra %}
 * {% data variables.copilot.copilot_grok_45 %}
+* {% data variables.copilot.copilot_grok_46 %}
 * {% data variables.copilot.copilot_mai_code_1_flash %}
 * {% data variables.copilot.copilot_mai_code_1_1_flash %}

data/tables/copilot/model-comparison.yml

@@ -132,6 +132,11 @@
   excels_at: Complex problem-solving challenges, sophisticated reasoning
   further_reading: '[Grok 4.5 model card](https://media.x.ai/v1/website/card-7f81d41b.pdf)'
 
+- name: Grok 4.6
+  task_area: General-purpose coding and agent tasks
+  excels_at: Complex problem-solving challenges, sophisticated reasoning
+  further_reading: '[Grok 4.6 model card](https://media.x.ai/v1/website/card-4p6-4cd2dc57.pdf)'
+
 # Other providers (alphabetized by model name)
 - name: Qwen2.5
   task_area: General-purpose coding and writing

data/tables/copilot/model-release-status.yml

@@ -142,3 +142,7 @@
 - name: 'Grok 4.5'
   provider: 'xAI'
   release_status: 'GA'
+
+- name: 'Grok 4.6'
+  provider: 'xAI'
+  release_status: 'GA'