diff --git a/content/actions/concepts/runners/about-self-hosted-runners.md b/content/actions/concepts/runners/about-self-hosted-runners.md
index 13e68ad293d0..bcd075c15e78 100644
--- a/content/actions/concepts/runners/about-self-hosted-runners.md
+++ b/content/actions/concepts/runners/about-self-hosted-runners.md
@@ -1,5 +1,6 @@
 ---
 title: About self-hosted runners
+shortTitle: Self-hosted runners
 intro: 'You can host your own runners and customize the environment used to run jobs in your {% data variables.product.prodname_actions %} workflows.'
 redirect_from:
   - /github/automating-your-workflow-with-github-actions/about-self-hosted-runners
@@ -13,14 +14,12 @@ versions:
 type: overview
 ---
 
-## About self-hosted runners
-
 A self-hosted runner is a system that you deploy and manage to execute jobs from {% data variables.product.prodname_actions %} on {% data variables.product.github %}.
 
 Self-hosted runners:
 
 {% ifversion fpt or ghec %}
-* Give you more control of hardware, operating system, and software tools than {% data variables.product.prodname_dotcom %}-hosted runners provide.{% endif %}
+* Give you more control of hardware, operating system, and software tools than {% data variables.product.prodname_dotcom %}-hosted runners provide. Be aware that you are responsible for updating the operating system and all other software.{% endif %}
 * Are free to use with {% data variables.product.prodname_actions %}, but you are responsible for the cost of maintaining your runner machines.
 * Let you create custom hardware configurations that meet your needs with processing power or memory to run larger jobs, install software available on your local network.
 * Receive automatic updates for the self-hosted runner application only, though you may disable automatic updates of the runner.
@@ -31,30 +30,12 @@ Self-hosted runners:
 
 You can use self-hosted runners anywhere in the management hierarchy. Repository-level runners are dedicated to a single repository, while organization-level runners can process jobs for multiple repositories in an organization. Organization owners can choose which repositories are allowed to create repository-level self-hosted runners. See [AUTOTITLE](/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners). Finally, enterprise-level runners can be assigned to multiple organizations in an enterprise account.
 
-### Requirements for self-hosted runner machines
-
-You can use any machine as a self-hosted runner as long as it meets these requirements:
-
-* You can install and run the self-hosted runner application on the machine.
-* The machine can communicate with {% data variables.product.prodname_actions %}.
-* The machine has enough hardware resources for the type of workflows you plan to run. The self-hosted runner application itself only requires minimal resources.
-* If you want to run workflows that use Docker container actions or service containers, you must use a Linux machine and Docker must be installed.
-
-{% ifversion ghes %}
-
-## Supported actions on self-hosted runners
-
-All `actions/setup-LANGUAGE` action repositories currently support three platforms: macOS, Windows, and Ubuntu.
-Some extra configuration might be required to use actions from {% data variables.product.github %} with {% data variables.product.prodname_ghe_server %}, or to use the `actions/setup-LANGUAGE` actions with self-hosted runners that do not have internet access. For more information, see [AUTOTITLE](/admin/github-actions/managing-access-to-actions-from-githubcom) and contact your {% data variables.product.prodname_enterprise %} site administrator.
+## Next steps
 
+{% ifversion ghec or ghes %}
+To get hands-on experience with the policies and usage of self-hosted runners, see [AUTOTITLE](/admin/github-actions/getting-started-with-github-actions-for-your-enterprise/getting-started-with-self-hosted-runners-for-your-enterprise)
+{% else %}
+To set up a self-hosted runner in your workspace, see [AUTOTITLE](/actions/how-tos/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners).
 {% endif %}
 
-## Further reading
-
-* [AUTOTITLE](/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions)
-* [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners)
-* [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/using-self-hosted-runners-in-a-workflow)
-* [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/autoscaling-with-self-hosted-runners){% ifversion ghec or ghes %}
-* [AUTOTITLE](/admin/github-actions/getting-started-with-github-actions-for-your-enterprise/getting-started-with-self-hosted-runners-for-your-enterprise){% endif %}
-* [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/supported-architectures-and-operating-systems-for-self-hosted-runners)
-* [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/communicating-with-self-hosted-runners)
+To find information about the requirements and supported software and hardware for self-hosted runners, see [AUTOTITLE](/actions/reference/self-hosted-runners-reference).
diff --git a/content/actions/reference/index.md b/content/actions/reference/index.md
index 34075502d25d..45e34709b9ea 100644
--- a/content/actions/reference/index.md
+++ b/content/actions/reference/index.md
@@ -18,7 +18,8 @@ children:
   - /actions-limits
   - /dockerfile-support-for-github-actions
   - /github-hosted-runners-reference
-  - /supported-architectures-and-operating-systems-for-self-hosted-runners
+  - /self-hosted-runners-reference
   - /usage-limits-for-self-hosted-runners
   - /supplemental-arguments-and-settings
 ---
+
diff --git a/content/actions/reference/self-hosted-runners-reference.md b/content/actions/reference/self-hosted-runners-reference.md
new file mode 100644
index 000000000000..ad0c571ed8ac
--- /dev/null
+++ b/content/actions/reference/self-hosted-runners-reference.md
@@ -0,0 +1,54 @@
+---
+title: Self-hosted runners reference
+shortTitle: Self-hosted runners reference
+intro: Find information about requirements and supported actions for self-hosted runners.
+redirect_from:
+  - /actions/hosting-your-own-runners/managing-self-hosted-runners/supported-architectures-and-operating-systems-for-self-hosted-runners
+  - /actions/reference/supported-architectures-and-operating-systems-for-self-hosted-runners
+versions:
+  fpt: '*'
+  ghes: '*'
+  ghec: '*'
+type: overview
+---
+
+## Requirements for self-hosted runner machines
+
+You can use a machine as a self-hosted runner as long as it meets these requirements:
+
+* You can install and run the self-hosted runner application on the machine. See [Supported operating systems](#supported-operating-systems) and [Supported processor architectures](#supported-processor-architectures).
+* The machine can communicate with {% data variables.product.prodname_actions %}.
+* The machine has enough hardware resources for the type of workflows you plan to run. The self-hosted runner application itself only requires minimal resources.
+* If you want to run workflows that use Docker container actions or service containers, you must use a Linux machine and Docker must be installed.
+
+### Supported operating systems
+
+#### Linux
+
+* Red Hat Enterprise Linux 8 or later
+* CentOS 8 or later
+* Oracle Linux 8 or later
+* Fedora 29 or later
+* Debian 10 or later
+* Ubuntu 20.04 or later
+* Linux Mint 20 or later
+* openSUSE 15.2 or later
+* SUSE Enterprise Linux (SLES) 15 SP2 or later
+
+#### Windows
+
+* Windows 10 64-bit
+* Windows 11 64-bit
+* Windows Server 2016 64-bit
+* Windows Server 2019 64-bit
+* Windows Server 2022 64-bit
+
+#### macOS
+
+* macOS 11.0 (Big Sur) or later
+
+### Supported processor architectures
+
+* `x64` - Linux, macOS, Windows.
+* `ARM64` - Linux, macOS{% ifversion actions-windows-arm %}, Windows (currently in {% data variables.release-phases.public_preview %}){% endif %}.
+* `ARM32` - Linux.
diff --git a/content/actions/reference/supported-architectures-and-operating-systems-for-self-hosted-runners.md b/content/actions/reference/supported-architectures-and-operating-systems-for-self-hosted-runners.md
deleted file mode 100644
index 0fadc2a4bea5..000000000000
--- a/content/actions/reference/supported-architectures-and-operating-systems-for-self-hosted-runners.md
+++ /dev/null
@@ -1,42 +0,0 @@
----
-title: Supported architectures and operating systems for self-hosted runners
-shortTitle: Supported platforms
-intro: 'The following processor architectures and operating systems are supported for the self-hosted runner application.'
-redirect_from:
-  - /actions/hosting-your-own-runners/managing-self-hosted-runners/supported-architectures-and-operating-systems-for-self-hosted-runners
-versions:
-  fpt: '*'
-  ghes: '*'
-  ghec: '*'
-type: overview
----
-
-## Linux
-
-* Red Hat Enterprise Linux 8 or later
-* CentOS 8 or later
-* Oracle Linux 8 or later
-* Fedora 29 or later
-* Debian 10 or later
-* Ubuntu 20.04 or later
-* Linux Mint 20 or later
-* openSUSE 15.2 or later
-* SUSE Enterprise Linux (SLES) 15 SP2 or later
-
-## Windows
-
-* Windows 10 64-bit
-* Windows 11 64-bit
-* Windows Server 2016 64-bit
-* Windows Server 2019 64-bit
-* Windows Server 2022 64-bit
-
-## macOS
-
-* macOS 11.0 (Big Sur) or later
-
-## Supported processor architectures
-
-* `x64` - Linux, macOS, Windows.
-* `ARM64` - Linux, macOS{% ifversion actions-windows-arm %}, Windows (currently in {% data variables.release-phases.public_preview %}){% endif %}.
-* `ARM32` - Linux.
diff --git a/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-automatic-dependency-submission-for-your-repository.md b/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-automatic-dependency-submission-for-your-repository.md
index f86ee2daa3de..946d1d7e4111 100644
--- a/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-automatic-dependency-submission-for-your-repository.md
+++ b/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-automatic-dependency-submission-for-your-repository.md
@@ -56,9 +56,9 @@ You can view details about the automatic workflows run by viewing the **Actions*
 
 ## Accessing private registries with self-hosted runners
 
-You can configure self-hosted runners to run automatic dependency submission jobs, instead of using the {% data variables.product.prodname_actions %} infrastructure. This is necessary to access private Maven registries.
+You can configure self-hosted runners to run automatic dependency submission jobs, instead of using the {% data variables.product.prodname_actions %} infrastructure. This is necessary to access private Maven registries. The self-hosted runners must be running on Linux or macOS. For .NET and Python auto-submission, they must have access to the public internet in order to download the latest component-detection release.
 
-1. Provision one or more self-hosted runners, at the repository or organization level. For more information, see [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners) and [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners). The self-hosted runners must be running on Linux or macOS, and must have Docker installed.
+1. Provision one or more self-hosted runners, at the repository or organization level. For more information, see [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners) and [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners).
 1. Assign a `dependency-submission` label to each runner you want automatic dependency submission to use. For more information, see [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/using-labels-with-self-hosted-runners#assigning-a-label-to-a-self-hosted-runner).
 {% data reusables.repositories.navigate-to-code-security-and-analysis %}
 1. Under "Dependency graph", click the dropdown menu next to “Automatic dependency submission”, then select **Enabled for labeled runners**.
@@ -85,6 +85,8 @@ Automatic dependency submission makes a best effort to cache package downloads b
 
 {% data reusables.dependency-graph.deduplication %}
 
+## Package ecosystem-specific information
+
 ### Maven projects
 
 For Maven projects, automatic dependency submission runs an open source fork of the [Maven Dependency Tree Dependency Submission](https://github.com/marketplace/actions/maven-dependency-tree-dependency-submission). The fork allows {% data variables.product.github %} to stay in sync with the upstream repository plus maintain some changes that are only applicable to automatic submission. The fork's source is available at [advanced-security/maven-dependency-submission-action](https://github.com/advanced-security/maven-dependency-submission-action).
@@ -95,6 +97,14 @@ If your repository's dependencies seem inaccurate, check that the timestamp of t
 
 For Gradle projects, automatic dependency submission runs a fork of the open source Gradle actions from [gradle/actions](https://github.com/gradle/actions). The fork is available at [actions/gradle-build-tools-actions](https://github.com/actions/gradle-build-tools-actions). You can view the results of the autosubmission action under your repository's **Actions** tab. Each run will be labeled "Automatic Dependency Submission (Gradle)" and its output will contain the JSON payload which the action submitted to the API.
 
+### .NET projects
+
+The .NET autosubmission action uses the open source [component-detection](https://github.com/microsoft/component-detection/) project as the engine for its dependency detection. It supports .NET 8.x, 9.x, and 10.x. .NET autosubmission runs if the repository's `dependabot.yml` defines `nuget` as a [`package-ecosystem`](/code-security/dependabot/working-with-dependabot/dependabot-options-reference#package-ecosystem-) or when there is a supported manifest file in the root directory of the repository. Supported manifest files include `.sln`, `.csproj`, `packages.config`, `.vbproj`, `.vcxproj`, and `.fsproj`.
+
+### Python projects
+
+Python uses the open source [component-detection](https://github.com/microsoft/component-detection/) project as its underlying graph generation engine. The autosubmission action for Python will only run if there is a `requirements.txt` file in the root directory of the repository. Python autosubmission does not currently support private packages; packages referenced in `requirements.txt` which are not publicly available will cause the autosubmission action to fail.
+
 ## Further reading
 
 * [AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-supply-chain-security)
diff --git a/content/copilot/get-started/github-copilot-features.md b/content/copilot/get-started/github-copilot-features.md
index f59375f2d0e5..337da2978722 100644
--- a/content/copilot/get-started/github-copilot-features.md
+++ b/content/copilot/get-started/github-copilot-features.md
@@ -49,10 +49,6 @@ AI-generated text completion to help you write pull request descriptions quickly
 
 {% data reusables.copilot.copilot-extensions.copilot-extensions-intro %} See [AUTOTITLE](/copilot/building-copilot-extensions/about-building-copilot-extensions).
 
-### {% data variables.product.prodname_github_models %} ({% data variables.release-phases.public_preview %})
-
-Bringing the power of industry leading large and small language models to users directly on {% data variables.product.github %}. See [AUTOTITLE](/github-models).
-
 ### {% data variables.copilot.copilot_edits_short %}
 
 {% data variables.copilot.copilot_edits_short %} is available in {% data variables.product.prodname_vscode %}, {% data variables.product.prodname_vs %}, and JetBrains IDEs. {% data reusables.copilot.copilot-edits.about-copilot-edits %}
diff --git a/content/copilot/get-started/what-is-github-copilot.md b/content/copilot/get-started/what-is-github-copilot.md
index 0c4b57e25ad6..d4074c0520a2 100644
--- a/content/copilot/get-started/what-is-github-copilot.md
+++ b/content/copilot/get-started/what-is-github-copilot.md
@@ -40,7 +40,7 @@ redirect_from:
 * Organize and share task-specific context with {% data variables.copilot.copilot_spaces %} to get more relevant answers
 * Generate a description of the changes in a pull request
 * Create and manage collections of documentation, called knowledge bases, to use as a context for chatting with {% data variables.product.prodname_copilot_short %} _({% data variables.copilot.copilot_enterprise_short %} only)_
-* Work on code changes and create a pull request for you to review
+* Work on code changes and create a pull request for you to review _({% data variables.copilot.copilot_pro_plus_short %}, {% data variables.copilot.copilot_business_short %}, and {% data variables.copilot.copilot_enterprise_short %} only)_
 
 {% data variables.product.prodname_copilot_short %} is available:
 
diff --git a/content/copilot/how-tos/administer/organizations/configuring-your-proxy-server-or-firewall-for-copilot.md b/content/copilot/how-tos/administer/organizations/configuring-your-proxy-server-or-firewall-for-copilot.md
index 009ee370b23e..4523cba7cfab 100644
--- a/content/copilot/how-tos/administer/organizations/configuring-your-proxy-server-or-firewall-for-copilot.md
+++ b/content/copilot/how-tos/administer/organizations/configuring-your-proxy-server-or-firewall-for-copilot.md
@@ -25,48 +25,17 @@ If your company employs security measures like a firewall or proxy server, you s
 
 | Domain and/or URL                      | Purpose |
 | :------------------------------------- | :--------------------------------- |
-| `https://github.com/login/*`             | Authentication, only required with Personal Users |
-| `https://github.com/login?*`             | Authentication, only required with Personal Users |
-| `https://github.com/login/oauth/*`             | Authentication, only required with {% data variables.product.prodname_emus %} |
-| `https://api.github.com/user/*`             | User Management |
-| `https://github.com/favicon.ico` | Icon |
-| `https://github.com/account/*` | Account |
-| `https://github.com/settings/*` | Settings |
-| `https://avatars.githubusercontent.com/*` | Avatars |
-| `https://github.com/copilot/*` | Copilot |
-| `https://raw.githubusercontent.com/*` | Raw Content |
-| `https://github.githubassets.com/*` | GitHub Assets |
-| `https://collector.github.com/*` | Collector |
-| `https://github.com/github-copilot/*` | GitHub Copilot |
-| `https://api.github.com/*` | API |
-| `https://github.com/notifications/*` | Notifications |
-| `https://github.com/session/*` | Session |
-| `https://github.com/dashboard/*` | Dashboard |
-| `https://github.com/dashboard?*` | Dashboard |
-| `https://github.com/logout/*` | Logout |
-| `https://github.com/logout?*` | Logout |
-| `https://github.com/switch_account?*` | Switch Account |
-| `https://github.com/switch_account/*` | Switch Account |
-
-## {% data variables.product.prodname_copilot_short %} related URLs
-
-| Domain and/or URL                      | Purpose |
-| :------------------------------------- | :--------------------------------- |
+| `https://github.com/login/*`             | Authentication |
+| `https://api.github.com/user`             | User Management |
 | `https://api.github.com/copilot_internal/*` | User Management |
-| `https://copilot-telemetry.githubusercontent.com/telemetry/*` | Telemetry |
-| `https://default.exp-tas.com/*` | Telemetry |
-| `https://copilot-proxy.githubusercontent.com/*` | API service for {% data variables.product.prodname_copilot_short %} suggestions |
-| `https://origin-tracker.githubusercontent.com/*` | API service for {% data variables.product.prodname_copilot_short %} suggestions |
-| `https://*.githubcopilot.com/*`[^1] | API service for {% data variables.product.prodname_copilot_short %} suggestions |
-| `https://*.individual.githubcopilot.com/*`[^2] | API service for {% data variables.product.prodname_copilot_short %} suggestions |
-| `https://*.business.githubcopilot.com/*`[^3] | API service for {% data variables.product.prodname_copilot_short %} suggestions |
-| `https://*.enterprise.githubcopilot.com/*`[^4] | API service for {% data variables.product.prodname_copilot_short %} suggestions |
-
-If your organization is using Microsoft Entra ID, you also need to add the following URLs to the allowlist:
-* `https://login.microsoftonline.com/*`
-* `https://aadcdn.msauth.net/*`
-* `https://login.live.com/*`
-* `https://*.activedirectory.windowsazure.com/*`
+| `https://copilot-telemetry.githubusercontent.com/telemetry` | Telemetry |
+| `https://default.exp-tas.com` | Telemetry |
+| `https://copilot-proxy.githubusercontent.com` | API service for {% data variables.product.prodname_copilot_short %} suggestions |
+| `https://origin-tracker.githubusercontent.com` | API service for {% data variables.product.prodname_copilot_short %} suggestions |
+| `https://*.githubcopilot.com`[^1] | API service for {% data variables.product.prodname_copilot_short %} suggestions |
+| `https://*.individual.githubcopilot.com`[^2] | API service for {% data variables.product.prodname_copilot_short %} suggestions |
+| `https://*.business.githubcopilot.com`[^3] | API service for {% data variables.product.prodname_copilot_short %} suggestions |
+| `https://*.enterprise.githubcopilot.com`[^4] | API service for {% data variables.product.prodname_copilot_short %} suggestions |
 
 Depending on the security policies and editors your organization uses, you may need to allowlist additional domains and URLs. For more information on specific editors, see [Further reading](#further-reading).
 
diff --git a/content/github-models/about-github-models.md b/content/github-models/about-github-models.md
index 6a5f4e217c9d..8daf73a3a6f8 100644
--- a/content/github-models/about-github-models.md
+++ b/content/github-models/about-github-models.md
@@ -52,6 +52,10 @@ Use the Comparisons view to evaluate the outputs of multiple prompt configuratio
 
 Use the Playground to quickly explore models and test prompt ideas in real time. The Playground is ideal for early experimentation, helping you understand a model’s behavior, capabilities, and response style. You can interactively select models, adjust parameters, and compare responses side by side.
 
+## Billing
+
+For more information about billing for {% data variables.product.prodname_github_models %}, see [AUTOTITLE](/billing/managing-billing-for-your-products/about-billing-for-github-models).
+
 ## Join the community
 
 To ask questions and share feedback, see this [GitHub Models discussion post](https://github.com/orgs/community/discussions/159087).  
@@ -62,3 +66,4 @@ To learn how others are using {% data variables.product.prodname_github_models %
 * [AUTOTITLE](/github-models/use-github-models/prototyping-with-ai-models)
 * [AUTOTITLE](/github-models/use-github-models/optimizing-your-ai-powered-app-with-github-models)
 * [AUTOTITLE](/github-models/use-github-models/evaluating-ai-models)
+* [AUTOTITLE](/billing/managing-billing-for-your-products/about-billing-for-github-models)
diff --git a/content/github-models/github-models-at-scale/index.md b/content/github-models/github-models-at-scale/index.md
index 403015ee5829..17066195cd96 100644
--- a/content/github-models/github-models-at-scale/index.md
+++ b/content/github-models/github-models-at-scale/index.md
@@ -6,5 +6,6 @@ versions:
 children:
   - /use-models-at-scale
   - /manage-models-at-scale
-  - /set-up-custom-model-integration-models-byok
+  - /using-your-own-api-keys-in-github-models
 ---
+
diff --git a/content/github-models/github-models-at-scale/set-up-custom-model-integration-models-byok.md b/content/github-models/github-models-at-scale/using-your-own-api-keys-in-github-models.md
similarity index 72%
rename from content/github-models/github-models-at-scale/set-up-custom-model-integration-models-byok.md
rename to content/github-models/github-models-at-scale/using-your-own-api-keys-in-github-models.md
index a48a98383657..7232a77eae4f 100644
--- a/content/github-models/github-models-at-scale/set-up-custom-model-integration-models-byok.md
+++ b/content/github-models/github-models-at-scale/using-your-own-api-keys-in-github-models.md
@@ -1,23 +1,25 @@
 ---
 title: Using your own API keys in GitHub Models
 shortTitle: Use custom models
-intro: Learn how to integrate your preferred custom models with {% data variables.product.prodname_github_models %} by using your own LLM API keys.
+intro: 'Learn how to integrate your preferred custom models with {% data variables.product.prodname_github_models %} by using your own LLM API keys.'
 versions:
   feature: github-models
-permissions: Organization owners can add custom models to {% data variables.product.prodname_github_models %} for their organization
+permissions: 'Organization owners can add custom models to {% data variables.product.prodname_github_models %} for their organization'
 topics:
   - Enterprise
 allowTitleToDifferFromFilename: true
+redirect_from:
+  - /github-models/github-models-at-scale/set-up-custom-model-integration-models-byok
 ---
 
 {% data reusables.models.byok-preview-note %}
+>
+> Model support is currently limited to OpenAI and AzureAI.
 
 You can bring your own API keys (BYOK) to {% data variables.product.prodname_github_models %}, and enable teams to use your preferred large language model (LLM) providers across tools like Prompts, Playground, and Models in Actions. For more information about {% data variables.product.prodname_github_models %}, see [AUTOTITLE](/github-models/about-github-models).
 
 To learn about billing and pricing, see [AUTOTITLE](/billing/managing-billing-for-your-products/about-billing-for-github-models).
 
->[!NOTE] Model support is currently limited to OpenAI and AzureAI.
-
 ## Why bring your own API keys?
 
 As an organization owner, you may have specific requirements for governance, data security, and compliance. By setting up your own API keys, you can:
@@ -47,10 +49,23 @@ You must first add the relevant API keys for the organization. After that, your
 {% data reusables.profile.access_org %}
 {% data reusables.profile.org_settings %}
 {% data reusables.organizations.models-development %}
-1. Under "Models permissions", select **All publishers** to enable models added by API keys.
+1. Under "Models permissions," select **All publishers** to enable models added by API keys.
    * If this option isn't available, you need to allow the use of the model in the organization. See [AUTOTITLE](/github-models/github-models-at-scale/manage-models-at-scale#controlling-model-usage-in-your-organization).
 1. Optionally, select **Only select models** to create a custom list of enabled or disabled models. This allows you to control which models are available to your organization.  
 
+## Creating an enabled or disabled models list
+
+To control which models are available to your organization, create an enabled or disabled models list as follows:
+
+{% data reusables.profile.access_org %}
+{% data reusables.profile.org_settings %}
+{% data reusables.organizations.models-development %}
+1. Under "Models permissions," select **Only select models**, then select **Enabled list** from the dropdown to create a list of allowed models.
+1. Optionally, select **Disabled list** from the dropdown if you want to create a list of blocked models.
+1. Above the table of models, click **Add models or publishers**.
+1. In the "Select models and publishers to allow" dialog, select the models and publishers you want to include in your list.
+1. Click **Update enabled list** to save your changes.
+
 ## Next steps
 
 Now that you've enabled your custom models in {% data variables.product.prodname_github_models %}, learn how to:
diff --git a/data/reusables/dependency-graph/supported-package-ecosystems.md b/data/reusables/dependency-graph/supported-package-ecosystems.md
index 14189039f2c5..419e8b374c0c 100644
--- a/data/reusables/dependency-graph/supported-package-ecosystems.md
+++ b/data/reusables/dependency-graph/supported-package-ecosystems.md
@@ -8,7 +8,7 @@
 | Gradle | Java  | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} |  {% octicon "x" aria-label="None" %} | {% octicon "x" aria-label="None" %} |
 | Maven | Java, Scala | {% octicon "check" aria-label="Supported" %} | {% octicon "check" aria-label="Supported" %} | `pom.xml`  | {% octicon "x" aria-label="None" %}  |
 | npm | JavaScript | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | `package-lock.json` | `package.json`|
-| pip             | Python                    | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} | `requirements.txt`, `pipfile.lock` | `pipfile`, `setup.py` |
+| pip             | Python                    | {% octicon "x" aria-label="Not supported" %} | {% octicon "check" aria-label="Supported" %} | `requirements.txt`, `pipfile.lock` | `pipfile`, `setup.py` |
 | pnpm             | JavaScript                    | {% octicon "check" aria-label="Supported" %} | {% octicon "x" aria-label="Not supported" %} | `pnpm-lock.yaml` | `package.json` |
 | pub             | Dart                    | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} | `pubspec.lock` | `pubspec.yaml` |
 | Poetry | Python                    | {% octicon "x" aria-label="Not supported" %} | {% octicon "x" aria-label="Not supported" %} | `poetry.lock` | `pyproject.toml` |
diff --git a/src/secret-scanning/data/public-docs.yml b/src/secret-scanning/data/public-docs.yml
index 408cb320706d..86bb2acf23b0 100644
--- a/src/secret-scanning/data/public-docs.yml
+++ b/src/secret-scanning/data/public-docs.yml
@@ -595,7 +595,7 @@
   isduplicate: false
 - provider: Azure
   supportedSecret: Azure ML Internal Service Principal Key
-  secretType: azure_ml_interal_service_principal_identifiable_key
+  secretType: azure_ml_internal_service_principal_identifiable_key
   versions:
     fpt: '*'
     ghec: '*'
@@ -974,7 +974,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: true
 - provider: Chief Tools
   supportedSecret: Chief Tools Token
@@ -1152,7 +1152,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: false
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Databricks
   supportedSecret: Databricks Access Token
@@ -1378,7 +1378,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Doppler
   supportedSecret: Doppler CLI Token
@@ -1390,7 +1390,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Doppler
   supportedSecret: Doppler Personal Token
@@ -1414,7 +1414,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Doppler
   supportedSecret: Doppler Service Account Token
@@ -1426,7 +1426,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Doppler
   supportedSecret: Doppler Service Token
@@ -1438,7 +1438,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Dropbox
   supportedSecret: Dropbox Access Token
@@ -1594,7 +1594,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Finicity
   supportedSecret: Finicity App Key
@@ -1630,7 +1630,7 @@
   isPublic: false
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Flutterwave
   supportedSecret: Flutterwave Test API Secret Key
@@ -1642,7 +1642,7 @@
   isPublic: false
   isPrivateWithGhas: true
   hasPushProtection: false
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Frame.io
   supportedSecret: Frame.io Developer Token
@@ -1666,7 +1666,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: FullStory
   supportedSecret: FullStory API Key
@@ -2066,7 +2066,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Highnote
   supportedSecret: Highnote SK Test Key
@@ -2078,7 +2078,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: HOP
   supportedSecret: HOP Bearer
@@ -2292,7 +2292,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: false
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Lichess
   supportedSecret: Lichess Personal Access Token
@@ -2304,7 +2304,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: false
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Lightspeed
   supportedSecret: Lightspeed Personal Access Token
@@ -2364,7 +2364,7 @@
   isPublic: false
   isPrivateWithGhas: true
   hasPushProtection: false
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Lob
   supportedSecret: Lob Test API Key
@@ -2376,7 +2376,7 @@
   isPublic: false
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Localstack
   supportedSecret: Localstack API Key
@@ -2517,7 +2517,7 @@
   isPublic: false
   isPrivateWithGhas: true
   hasPushProtection: false
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: MaxMind
   supportedSecret: MaxMind License Key
@@ -2541,7 +2541,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Mercury
   supportedSecret: Mercury Production API Token
@@ -2553,7 +2553,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Mergify
   supportedSecret: Mergify Application Key
@@ -3366,7 +3366,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: PyPI
   supportedSecret: PyPI API Token
@@ -3450,7 +3450,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
   isduplicate: false
 - provider: Rootly
   supportedSecret: Rootly API Key
diff --git a/src/secret-scanning/lib/config.json b/src/secret-scanning/lib/config.json
index 0191b228eec6..99f0e3a6cee0 100644
--- a/src/secret-scanning/lib/config.json
+++ b/src/secret-scanning/lib/config.json
@@ -1,5 +1,5 @@
 {
-  "sha": "a627ff0bef22dedd2ee339f750bf317ec9fd4a34",
-  "blob-sha": "fb8cffebc3c5d5710a273313de807e5abc809d6e",
+  "sha": "9e7c83f3df4cb2d20d66627debf62a5d9dc7cd48",
+  "blob-sha": "5e45dd83af6526c7fbdcab9d8f5adfa51f8d551a",
   "targetFilename": "code-security/secret-scanning/introduction/supported-secret-scanning-patterns"
 }
\ No newline at end of file