Browse All News (649)

Allison announces an update to GitHub Advanced Security that lets enterprise admins enforce security configurations across organizations, preventing org and repo admins from overriding enterprise-level settings and helping security and compliance teams apply consistent policies at scale.

Allison announces a public preview feature where GitHub Copilot suggests allowed values while admins define repository custom properties, helping organizations build consistent governance metadata that can be used to scope rulesets across large fleets of repositories.

Michaela Isaacs introduces pq-adbc-advisor, a self-serve notebook-based scanner that inventories Microsoft Fabric workspace items still using legacy ODBC drivers and helps teams plan the ODBC-to-ADBC cutover. It produces a per-item impact report, classifies cutover risk, and recommends concrete fixes to validate ahead of connector-specific deadlines.

Sharon Xu announces Foundry Dev Pack, an all-in-one installer that sets up a Microsoft Foundry development environment across the terminal, VS Code, and coding agents, including Azure CLI/azd tooling and starter workflows for creating hosted agents.

Allison announces that GitHub has completed the planned shutdown of SHA-1 support in HTTPS for github.com and partner CDNs, with notes on which GitHub Enterprise offerings are affected and where to find the earlier deprecation details.

Aaron Powell shows how to baseline and then raise unit test coverage in the Interview Coach app using Visual Studio’s code coverage tooling and GitHub Copilot’s Test Agent, moving from targeted tests for a single class to solution-wide analysis and test generation.

Justin Yoo walks through a sample “Interview Coach” app that uses the GitHub Copilot SDK as an agent runtime (outside the editor) to run an interview workflow: ingest a resume, ask behavioral/technical questions, store session context, and generate end-of-interview feedback using MCP tools and Agent Framework handoffs.

Stephen Toub walks through a large set of runtime and library performance changes in .NET 11, with runnable micro-benchmarks and disassembly examples. It covers JIT optimizations (devirtualization, escape analysis, bounds-check removal), a new runtime-driven async implementation, SIMD/codegen improvements, and faster paths across core libraries like networking, JSON, regex, and collections.

Luis Quintanilla invites teams to submit real-world stories about building, modernizing, and improving applications with .NET, with the goal of featuring more community and customer examples at .NET Conf 2026 and across official .NET channels.

Mariyaali announces the general availability of the SQL DW operations skill for Microsoft Fabric Data Warehouse, which lets teams use natural-language prompts (for example via GitHub Copilot CLI) to run bounded, read-only diagnostics and get structured findings, evidence, and recommended next steps for common warehouse incidents.

Allison announces new configuration tiers for GitHub Copilot auto model selection—efficiency, balance, and intelligence—so teams can control how Copilot trades off cost, response quality, and response time per prompt, with billing based on the model selected.

Allison announces a small GitHub profile update: profiles now display the highest tier earned for multi-level achievements, so your Achievements panel reflects your latest progress rather than the first tier you earned.

Allison announces new generally available GitHub Copilot usage metrics that track activity in the dedicated VS Code Agents window, including both aggregate (enterprise/org) and per-user fields for 1-day and 28-day reporting periods.

Allison announces improvements to GitHub Copilot code review, including automatic resolution of addressed review comments, smarter commit message suggestions when applying Copilot fixes, and deeper review analysis using Copilot SDK shell tools plus an ensemble approach for Lite reviews.

Tomoko Tanaka shows how her team turned event marketing runbooks into “ops as code” using GitHub Issues, GitHub Actions, and GitHub Copilot. The post breaks down the repo patterns (issue forms, labels, skills in Markdown, and a DRY_RUN switch) that automate setup, daily screening, and post-event reporting with guardrails.

Allison summarizes the September 7 weekly GitHub Copilot releases, including Jira integration in the Copilot app, Project HydraFusion model orchestration in Copilot CLI, new agent automations and voice mode updates in VS Code, and expanded enterprise sandbox controls for Copilot in JetBrains.

Gloridel Morales announces the September 2026 patch release for Azure DevOps Server, including the Patch 8 download link, release notes, and a quick command to verify whether the patch is installed on your server.

Kayla Cinnamon explains how to review agent-generated changes inside the GitHub Copilot app using three built-in panels: a diff view for inspecting edits, a terminal for running project commands, and a browser preview for validating UI changes before creating a pull request.

Allison announces a public preview of a refreshed repository-level pull request listing page on GitHub, focused on making it faster to find and act on PRs with improved filtering, advanced search, and a more compact, information-dense layout.

Brendan Burns explains why Microsoft was named a Leader in the 2026 Gartner Magic Quadrant for Container Management, and uses the announcement to outline how AKS, Azure Container Apps, Azure Arc, and Fleet Manager are positioned for AI, hybrid, and edge container operations at scale.

Allison announces a public preview that adds GitHub REST API endpoints for enabling and managing GitHub code scanning’s AI Scan for pull requests at both the organization and repository level, making it easier to roll out AI-powered security detections across selected repos without manual UI configuration.

yaronc announces a preview Fabric REST API that exposes item lineage as a dependency graph you can query from code, enabling automated impact analysis, documentation/catalog scenarios, CI/CD checks, and richer context for AI agents that need to reason about upstream sources and downstream consumers.

Rena Liu announces Azure AI Speech LLM 2607 and explains what changes for developers building speech-to-text and real-time voice experiences, including better multilingual and mixed-language recognition, improved punctuation and numeric transcription, lower latency, and a simpler phrase list parameter for domain-specific customization.

Allison announces GitHub Actions cache-mode, a generally available workflow/job setting that lets teams apply least-privilege access to the Actions cache and reduce cache poisoning risk by controlling whether jobs can restore and/or save caches.

Microsoft Security Research breaks down a large-scale business email compromise campaign that used AI-assisted executive impersonation and fake invoices to push finance teams into fraudulent ACH payments, and maps practical mitigations using Microsoft Defender for Office 365, Defender XDR, and Security Copilot.

Santhosh_Ravin1 announces a preview update to Microsoft Fabric’s Spark Native Execution Engine that adds native JSON reading and parsing. The post explains why JSON parsing often becomes a pipeline bottleneck in lakehouse workloads, and how keeping JSON in a columnar native path can improve end-to-end Spark job performance.

Steve Sweetman explains how to govern AI agent spend in Microsoft Foundry by combining request-path token limits, observability (traces, monitoring, evaluations), and finance-grade budgets, then tying those signals to ROI so teams can decide what to optimize, scale, or retire.

Dmitrii Korolev explains how C# 15 union types and closed class hierarchies behave in ASP.NET Core when serialized with System.Text.Json, including what works in Minimal APIs, MVC, SignalR, Blazor, and OpenAPI, plus the trade-offs around discriminator-free JSON and ambiguous payloads.

Allison announces the deprecation of the MAI-Code-1-Flash model across GitHub Copilot experiences and points Copilot Enterprise admins to the steps needed to enable the replacement model via Copilot model policies and settings.

Rob Lefferts explains how threat actors are using AI brands (like ChatGPT, Copilot, DeepSeek, and Claude) as social-engineering bait, and how Microsoft Defender helps detect and disrupt these campaigns across email, identity, endpoints, and SaaS signals.

Maria Bledsoe outlines how Azure IaaS resiliency is shifting from one-time DR planning to continuous design-and-operations practices, highlighting new and updated Azure capabilities for assessing resiliency posture, reducing blast radius during failures, and validating recovery readiness.

Allison announces that the GitHub Actions Xcode 27 runner image now runs on macOS 27 (public preview), enabling Apple app validation against the latest macOS version while keeping the same workflow runner labels.

Juan Montes profiles Kinaxis’ Maestro platform and how it uses Azure (including AKS, Databricks, Azure OpenAI, Cosmos DB, and Azure AI Content Safety) to run large-scale supply chain scenario modeling, forecasting, and agentic AI experiences. The piece also touches on Kinaxis’ internal use of GitHub Copilot for an agentic, PR-driven development workflow.

Jakub Oleksy’s August 2026 GitHub availability report breaks down five production incidents across GitHub Actions, authentication, and Copilot services, including what failed, how GitHub mitigated impact, and what reliability work is planned next (capacity, autoscaling, retries, and regional failover).

Nick Brady rounds up July and August 2026 updates for Microsoft Foundry, including GA for Hosted Agents, Voice Live integration, and Toolboxes, plus Model Router pool/region changes and new model releases. It also calls out SDK migrations (Python/JS/Java/.NET) and runtime requirement bumps you should test before upgrading.

Allison announces a new npm security protection: after signing in with a recovery code, any npm account is placed under a 72-hour security hold that blocks publishing and other sensitive write actions while still allowing sign-in and package installs.

Allison announces CodeQL 2.27.0, highlighting native Linux ARM64 support, improvements to GitHub code scanning default setup, and multiple query and framework-modeling updates that improve vulnerability detection across C#, Java/Kotlin, C/C++, and Rust projects.

Microsoft Security Research and Lior Leizerovich introduce the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework for understanding and prioritizing threats against cloud-hosted web apps and serverless platforms, with practical examples spanning identities, deployment pipelines, managed runtimes, and connected cloud resources.

Allison announces generally available enterprise managed permissions for GitHub Copilot agent operations, letting admins centrally decide which actions are blocked, require human approval, or run without prompting across supported Copilot clients.

Mark Russinovich, Eric Henry and Sai Vaidhyanathan lay out a practical way to decide when an Azure workload should use two availability zones versus three, focusing on component-by-component requirements like capacity after a zone loss, durability targets, and quorum-based behavior rather than defaulting to “three zones everywhere.”