Browse All Posts (130)
GitHub shows how to use the new attach flag in the GitHub CLI to add images directly to pull requests and issues, making it easier to share screenshots and other visual context during reviews and issue triage.
Microsoft Developer introduces Toolboxes in Microsoft Foundry as a way to make MCP (Model Context Protocol) integrations more enterprise-ready, with centralized governance, consistent authentication, and reusable configuration across multiple agents and tools.
Microsoft Developer discusses the MCP Triggers & Events experimental extension, showing how agents can poll MCP servers for events and be triggered via webhooks, and what new event-driven agent architectures this enables.
Caitie McCaffrey reviews the current state of the Model Context Protocol (MCP), focusing on the major changes in the 2026-07-28 specification release and what they mean for developers building AI agents and agent-to-agent communication patterns.
Microsoft Developer explains why Dynamic Client Registration becomes a scaling problem for MCP clients, and how switching to Client ID Metadata Documents turns the client_id into a durable, URL-based identity that servers can fetch on demand.
Jeremiah Lowin shows how MCP Apps can render interactive UI (buttons, charts, forms) directly inside AI clients, and walks through building these experiences in Python using FastMCP and Prefab—from basic components to dynamically generated interfaces.
Den Delimarsky explains how MCP authorization evolved, covering the original OAuth profile, protected resource metadata, changes to client registration, and how enterprise-managed authorization fits into the model.
Microsoft Developer demonstrates how to build modern Model Context Protocol (MCP) servers in VS Code, moving beyond simple local tool calls to more production-ready agent integrations with notifications, elicitation, stateless HTTP, and plugin-based distribution.
Sam Morrow discusses GitHub’s Model Context Protocol (MCP), covering what his team is shipping across MCP server and client implementations, plus the spec areas he’s most excited about and what’s coming next.
Jakub Oleksy’s August 2026 GitHub availability report breaks down five production incidents across GitHub Actions, authentication, and Copilot services, including what failed, how GitHub mitigated impact, and what reliability work is planned next (capacity, autoscaling, retries, and regional failover).
Authorised Territory demonstrates how to build domain-specific AI agent evaluators in .NET using Microsoft Agent Framework connected to a local Ollama model, then run automated checks against the agent’s responses to validate both content and output structure.
Nick Brady rounds up July and August 2026 updates for Microsoft Foundry, including GA for Hosted Agents, Voice Live integration, and Toolboxes, plus Model Router pool/region changes and new model releases. It also calls out SDK migrations (Python/JS/Java/.NET) and runtime requirement bumps you should test before upgrading.
HilaryWang announces a public preview feature for Azure Virtual Machine Scale Sets that lets Azure automatically choose availability zones based on SKU availability, capacity signals, and your placement constraints, reducing the need to maintain region-specific zone lists for multi-region zonal deployments.
Allison announces CodeQL 2.27.0, highlighting native Linux ARM64 support, improvements to GitHub code scanning default setup, and multiple query and framework-modeling updates that improve vulnerability detection across C#, Java/Kotlin, C/C++, and Rust projects.
Microsoft Security Research and Lior Leizerovich introduce the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework for understanding and prioritizing threats against cloud-hosted web apps and serverless platforms, with practical examples spanning identities, deployment pipelines, managed runtimes, and connected cloud resources.
willchap describes a practical framework for evaluating scientific AI systems—execution, optimization, and exploration—using three RF engineering design challenges. The post shows how Microsoft Discovery orchestrates agentic workflows that combine analytical reasoning with HFSS simulations, while surfacing assumptions, trade-offs, and decision points for human guidance.
Allison announces generally available enterprise managed permissions for GitHub Copilot agent operations, letting admins centrally decide which actions are blocked, require human approval, or run without prompting across supported Copilot clients.
ellievail announces general availability of user-bound user delegation SAS for Azure Storage, which restricts a user delegation SAS token so it can only be used by a specific Microsoft Entra ID identity. The post explains how it works with RBAC, cross-tenant scenarios, and how to generate and share tokens safely.
Microsoft Developer demonstrates how to build a no-code AI agent in the Azure AI Foundry Portal: create a Foundry project, deploy a model, connect an MCP server for a cupcake store scenario, then validate the agent using tracing, token usage metrics, and evaluations.
Sudha Mahajan explains how Azure Migrate Network Planning adds network-aware discovery and assessment to VMware lift-and-shift migrations, helping teams capture dependencies, translate source constructs into Azure networking recommendations, surface readiness issues, and include network costs and security intent in the migration business case.
Mark Russinovich, Eric Henry and Sai Vaidhyanathan lay out a practical way to decide when an Azure workload should use two availability zones versus three, focusing on component-by-component requirements like capacity after a zone loss, durability targets, and quorum-based behavior rather than defaulting to “three zones everywhere.”
Microsoft Security Research and co-authors document an intrusion pattern where passkey-themed helpdesk lures lead to identity compromise, MFA persistence, Microsoft Graph reconnaissance, and large-scale data collection from SharePoint, OneDrive, and Exchange Online, with practical hunting queries and mitigation guidance for defenders.
Allison announces expanded self-serve trial eligibility for GitHub Advanced Security on GitHub Enterprise Cloud, allowing more enterprises to evaluate GitHub Code Security and GitHub Secret Protection before purchasing.
Allison announces a new GitHub repository ruleset option that can block pull requests from merging when they introduce unresolved secret scanning alerts, adding an extra enforcement layer beyond push protection.
viveksingla announces the general availability of Ephemeral OS Disk full caching for Azure VMs and VM Scale Sets, explaining how caching the entire OS image on local storage improves OS disk read reliability and latency, and showing how to enable it via Azure CLI and ARM templates.
Marco Casalaina breaks down Foundry IQ, Fabric IQ, Work IQ, and Web IQ, explaining them as grounding capabilities that give AI agents the right context. He maps each “IQ” to the underlying data source (knowledge bases, OneLake, Microsoft 365 apps, and the public web) and what it enables.
MinseokSong walks through a reference implementation that uses Microsoft Foundry and an Azure Function to classify incoming support emails, then uses Power Automate to validate the AI recommendation against a SharePoint allow-list, require human approval, and create an Outlook draft (without sending).
GitHub demonstrates how to use the GitHub CLI’s new --attach flag to upload screenshots and videos directly to issues, pull requests, and comments. The walkthrough shows an automated Playwright-based workflow that captures failure evidence and attaches before-and-after media to support bug reports and PR reviews.
christinchen announces the general availability of Azure Copilot’s Troubleshooting Agent, a built-in experience in the Azure portal that helps teams investigate and resolve operational issues faster by combining resource context, supported diagnostics, and recommended actions—while keeping customers in control through identity and RBAC.
The Visual Studio Code Team shares the VS Code 1.138 Insiders changelog, focusing on Agent Host and Agents window improvements like shareable session links, side-by-side agent sessions, repo-first context attachment for issues/PRs, voice mode session awareness, and agent-session cleanup controls.
nschachter announces a Microsoft Fabric preview that adds table-level discovery to OneLake Catalog search, including Global Search and the OneLake Catalog Search API. The post explains how permission trimming works, what object-level security excludes, and which tenant setting admins should review before the late-September rollout.
Allison announces agentic autofix for GitHub Code Quality, letting teams select up to 25 findings and assign them to GitHub Copilot in one action. Copilot applies fixes on a branch, validates the changes, and opens a pull request for review, with usage governed by existing enterprise policy and AI credits.
Waldek Mastykarz explains how to pick a “minimal viable model” for AI coding work by running your own evals instead of defaulting to the most expensive option. Using GitHub Copilot Chat in VS Code, he compares model quality scores and per-run costs across real upgrade scenarios to show why “smarter” can be worse value.
Allison announces updates to GitHub Copilot for JetBrains, including enterprise-managed sandbox policies, cross-file cursor jumps for next edit suggestions, global project context in chat, and enterprise policy diagnostics. The release also adds a preview integration that connects Copilot CLI terminal sessions to IDE context and improves reliability across MCP and agent sessions.
MarkRussinovich lays out a practical decision framework for choosing between two availability zones, three zones, or service-managed zone redundancy in Azure, focused on meeting single-zone failure objectives while balancing capacity, durability, and operational complexity.
bharadwajr explains how the Azure team built GEM (Great Experiences Matter), an AI-enabled “feedback-to-fix” loop that aggregates customer feedback at scale, turns it into prioritized insights, and creates actionable Azure DevOps work items with an auditable evidence trail and human review.
Jon Galloway, Daniel Roth, Mads Torgersen, Chet Husk, and Drew Noakes host a .NET Unboxed release party focused on .NET 11 Release Candidate 1, highlighting favorite features and what developers should pay attention to as .NET 11 approaches release.
Allison announces GitHub Enterprise Server (GHES) 3.22 general availability, highlighting updates for enterprise administration and collaboration, including Copilot CLI support for disconnected environments, enterprise teams, improvements to repository rulesets and required reviewers, and UI enhancements for issues and pull requests.
sbaynes announces codename MDASH, Microsoft’s multi-model agentic code-scanning system now deployed in Azure Government, aimed at finding and validating exploitable vulnerabilities across software supply chains with fewer false positives and more actionable results for security teams.
.NET Team announces .NET 11 Release Candidate 1, highlighting runtime, SDK, MSBuild, NuGet, and language updates, plus ASP.NET Core, .NET MAUI, and Windows Forms improvements. The post links to detailed release notes and includes download and tooling guidance for trying RC1 in production.