Browse All News (724)

Allison announces an update to the GitHub Copilot usage metrics API that adds per-agent reporting for third-party agent apps (such as Claude and Codex) used in GitHub workflows. The change introduces a new totals_by_3rd_party_agent array and clarifies how to interpret the new counters alongside existing telemetry fields.

Allison announces updates to GitHub Issues and Projects: a new “Relates to” issue relationship in public preview, plus generally available multi-select fields with improvements for grouping, editing from sidebars, copy/paste, and clearing values.

Allison announces updates to GitHub secret scanning, including a new partner (Lovable Labs), more secret types blocked by push protection by default, and richer alert context via extended metadata to help teams assess ownership and impact faster.

Allison explains a GitHub Code Quality change: enabling Code Quality no longer creates a ruleset that automatically requests GitHub Copilot code review on pull requests, and existing auto-created rulesets have had those settings turned off.

Allison announces a GitHub organization setting that lets maintainers centrally limit how many open pull requests a user without write access can have at once, helping enforce consistent contribution policies across all repositories.

Yulia Turchin announces a Microsoft Fabric admin change that enables Item Recovery by default for tenants without an explicit setting, providing a built-in recovery window for supported item types and guidance on retention, restore workflows, and OneLake storage billing impact.

sbaynes outlines an Azure-native reference architecture for deploying Fireworks AI open-model inference on Azure AI Foundry, with guidance on moving from prototype to production while tracking latency, token usage, and cost. The post highlights optional platform components for caching, rate limiting, secrets management, and observability.

Jacklyn Carroll explains how slash commands in the GitHub Copilot app speed up common workflows like planning, pressure-testing designs, and delegating multi-step implementation work, with concrete examples you can paste into Copilot to get started.

goupadhy announces a preview opt-in setting for VNet data gateways in Microsoft Fabric: the modern evaluation engine. The post explains what workloads it applies to (Mashup evaluations), why it matters for refresh and DirectQuery performance, and what metrics and rollout practices to use when validating it in your environment.

Walker Chabbott announces that the open-weight Kimi K3 model is now generally available in GitHub Copilot, including where it can be selected, how it’s billed under usage-based pricing, and what Copilot Business/Enterprise admins need to do to enable it.

Amaury Levé explains how Microsoft.Testing.Platform (MTP) reporting helps teams move from a failing CI build to actionable evidence, with inline annotations in GitHub Actions and Azure DevOps, Azure DevOps-only history-based flaky/regression triage, crash-resilient TRX output, and multiple report formats for both humans and automation.

mk_sunitha introduces scheduled User Data Functions in Microsoft Fabric (Preview), showing how teams can run custom, parameterized business logic on a recurring cadence using the Fabric job scheduler, and then monitor outcomes and failures from the Fabric Monitoring Hub.

Ankit Kumar Honey explains how GitHub expanded Dependabot malware advisories from npm to eight package ecosystems by ingesting OpenSSF’s malicious-packages data into the GitHub Advisory Database, including the validation, normalization, deduplication, and safety controls used to keep auto-published advisories resilient.

Mike Hulme explains why Microsoft was named a Leader in Gartner’s 2026 Magic Quadrant for AI-augmented code modernization tools, and outlines how GitHub Copilot modernization and Azure are positioned to assess, upgrade, and migrate legacy applications with agentic workflows while keeping developers in control.

Dan Hellem announces a small Azure Boards update that shows pull request annotations directly on work item cards, so teams can see code review activity and PR status without leaving the Kanban board or opening individual work items.

Eric van Wijk introduces the new Azure DevOps service connection, which lets pipelines authenticate to Azure DevOps using a Microsoft Entra workload identity (service principal or managed identity) instead of PATs or build session tokens, and shows where and how to use it across YAML, tasks, and scripts.

Scirqueira explains how to choose a medallion architecture pattern in Microsoft Fabric Data Warehouse by focusing on how much Spark you actually need, then mapping Bronze/Silver/Gold layers to either an all-in-one warehouse approach or a Lakehouse + Warehouse hybrid.

Ran Rosin summarizes why KuppingerCole named Microsoft a Leader in its 2026 CNAPP Leadership Compass, and what that says about where cloud security is heading: unified risk management across cloud infrastructure, identities, data, applications, and AI, with runtime-driven prioritization and SOC integration.

robece-msft explains how to choose between Business Events, Fabric Events, and Azure Events in Microsoft Fabric, focusing on how each “event pillar” fits different event-driven architecture needs and enterprise implementation patterns across the Fabric platform.

Microsoft Security Research and Srinivasan Govindarajan break down how a macOS ClickFix infostealer campaign evolved from openly serving malicious lures to hiding them behind a server-side browser-fingerprinting gate, and they provide practical hunting pivots, IOCs, and Defender coverage to help defenders detect related activity.

Dan Hellem announces the general availability of the Azure DevOps Remote MCP Server, explaining how AI assistants can securely connect to Azure DevOps via a hosted endpoint. The post covers the minimal mcp.json setup, Entra ID authentication requirements, current client support, and when to use the local MCP server instead.

The Visual Studio Code Team shares the 1.133 Insiders release notes, highlighting a change for extension authors: custom editor extensions can now set different default priorities for normal editing versus diff views, improving how custom editors behave when comparing files.

Microsoft Security Research, Ravikant Tiwari, Sagar Patil and Suriyaraj Natarajan break down ChainDrop, a large-scale npm supply chain compromise that used a Bun-based, self-propagating worm to steal credentials from developer machines and CI/CD runners, then republish infected packages. The post includes mitigation steps, IOCs, and Defender XDR hunting queries.

Bruno Capuano shows how to build a Windows-only C# console app that performs live speech-to-text locally using Foundry Local and a compact Nemotron streaming ASR model, including model lifecycle management (download/cache/load/unload) and real-time interim/final transcription via async streams.

Allison announces a new way to customize GitHub code scanning default setup using a repository property, enabling teams to apply a shared CodeQL configuration across one repo or an entire organization without maintaining per-repo GitHub Actions workflows.

MattH_OneLake announces preview mirroring features in Microsoft Fabric that let teams surface Azure Monitor (Log Analytics) tables and AWS Glue-cataloged Apache Iceberg tables in OneLake using a zero-copy, metadata-based approach for cross-domain and cross-cloud analytics.

Allison announces that the GitHub Copilot Billing Preview app has been retired and explains how to manage Copilot spend directly in GitHub billing settings, including viewing AI usage, setting budgets, and exporting or pulling raw usage data via reports and the billing API.

Bria Ford shares how GitHub’s legal team used GitHub Copilot CLI to turn repetitive legal work into repeatable, repo-backed workflows—ranging from contract drafting style guides to DMCA code-analysis playbooks—while keeping human judgment central.

Ron Pessner announces updates to Microsoft’s Zero Trust for AI approach, including new AI-focused checks in the Zero Trust Assessment, a DevSecOps pillar in the Zero Trust Workshop, and a companion e-book with practical patterns for securing AI agents, AI memory, and the software supply chain.

Giles Odigwe announces the stable release of the GitHub Copilot Agent for Microsoft Agent Framework in .NET and Python, showing how to use Copilot’s coding harness (shell, file, URL, and MCP tools) with Agent Framework features like middleware, streaming, OpenTelemetry tracing, and human-in-the-loop approvals.

Microsoft Security Research (David Shiran and Ayelet Artzi) explains how Microsoft Defender’s Automatic Attack Disruption used a new device isolation action to contain a multi-stage ransomware attack at QNET in 128 seconds, including a detailed attack timeline and mapped MITRE ATT&CK techniques.

robece-msft continues the Microsoft Fabric Business Events series with guidance on designing business event schemas that downstream consumers can reliably interpret and act on in event-driven architectures.

Julia Muiruri explains how to turn a single, oversized AI-generated pull request into a clean stack of smaller PRs using GitHub stacked pull requests and the gh-stack CLI, with a practical example and reviewer-focused guidance for keeping CI and merge rules working across the whole stack.

Allison announces the retirement timeline for GitHub Spark on github.com, including key dates, what happens to existing deployed apps, and what builders need to do to keep editing their apps after shutdown. The post also explains the impact of the earlier GitHub Models retirement on Spark apps that call llm().

sbaynes reports on PRISM2, a pathology foundation model from Microsoft Research and Paige (Tempus) that links tissue images with diagnostic language from real pathology reports, aiming to reduce the need to rebuild separate models for each cancer-detection task.

Allison announces new Dependabot configuration options that let you control the branch names created for dependency update pull requests, including prefixes, maximum length, separators, letter casing, and custom templates—useful for CI/CD naming constraints and for keeping monorepo branches easier to identify.

Allison announces a public preview feature in GitHub Code Quality that can generate a code coverage workflow with AI from repository settings, opening a pull request for review before you merge.

Allison summarizes the CodeQL 2.26.2 release for GitHub code scanning, including new language support (Swift 6.3.3 and Kotlin 2.4.10), query behavior changes that may surface more findings, and a breaking change affecting how query authors embed links in alert messages.

Allison announces that GitHub Copilot cloud agent now lets you choose a reasoning level (for supported models) when starting a task, trading off deeper reasoning against higher token and credit consumption across paid Copilot plans.

Allison announces a GitHub Copilot Enterprise governance update that lets enterprise admins target managed settings to specific enterprise teams using itemized configuration files, so large orgs can scale guardrails while still letting teams tailor Copilot within defined boundaries.