Browse All Posts (113)

Allison announces CodeQL 2.27.2, detailing new and improved analysis across C/C++, Go, Rust, and JavaScript/TypeScript, plus notable query updates for C# and GitHub Actions. The post also calls out a macOS 27/Xcode 27 limitation for traced analysis and a breaking change in the Go control-flow graph library.

Bruno Capuano and Daniel Roth introduce the Blazor AI Components and show how they enable agentic experiences in .NET apps beyond basic chat, including structured streaming responses, tool invocation, approval gates, and multi-step workflows coordinated through shared state.

Erik Ejlskov Jensen shows how his open-source T-SQL static analysis rules and tooling can help enforce database design standards, including live feedback while writing SQL and using rule enforcement to guide AI-assisted database and EF Core model generation.

Thomas Maurer announces two NVIDIA GTC Berlin sessions covering Microsoft Sovereign Cloud updates and how to run Sovereign AI from Azure to the edge using Azure Local and Foundry Local, with an emphasis on control, compliance, resilience, and security requirements.

GitHub shares a short documentary-style look at what a 48-hour hackathon is actually like, from idea formation and rapid prototyping to learning through trial and error. It also touches on how tools like GitHub Copilot can help participants turn rough concepts into working applications under tight time constraints.

John Savill runs through the Azure Weekly Update for 9th October 2026, covering a set of platform changes and retirements across AKS, App Service, developer environments, networking/WAF, API Management, PostgreSQL, SQL Server, and Fabric/OneLake, plus a security-focused note on Always Encrypted with Intel SGX enclaves.

Waldek Mastykarz introduces the AX Practitioner Playbook, a practical method for evaluating how AI coding agents use your SDKs, docs, CLIs, and MCP tools, diagnosing why they fail, and validating fixes before shipping changes that improve agent behavior.

John Edward explains Microsoft’s Windows Update certificate rotation planned for 2027, including the two expiration deadlines and which Windows client and server versions need specific security updates to avoid losing access to Windows Update. It also outlines practical inventory, compliance, and recovery steps for IT teams.

David Williams-Young introduces the Quantum Development Kit (QDK) for Chemistry, an open-source Microsoft Quantum library aimed at connecting chemistry domain researchers with quantum algorithm developers. He explains what the library is for, how it fits into a typical workflow, and what to do next to start building chemistry-focused quantum applications.

Wiliam_Rosa breaks down Databricks’ LTAP Direct Writes (beta) for Azure Databricks Lakebase Postgres, explaining how it shifts bulk-load work off the primary to avoid impacting live OLTP traffic. The post covers the architecture, key mechanics (sandboxed Postgres, COPY FREEZE, WAL handoff), and shows CLI/SDK examples for creating and monitoring Synced Tables.

Waldek Mastykarz introduces the Agent Experience (AX) Practitioner Playbook, a practical method for evaluating how AI coding agents use your SDKs, docs, tools, and extensions—and for tracing failures back to their root causes so you can ship fixes to the sources agents rely on.

Fokko at Work demos what’s new in Visual Studio Code 1.141, focusing on workflow and UI updates plus several GitHub Copilot improvements, including continuing external Copilot sessions, sandboxing in the Copilot agent host, persistent chat progress, and visibility into discovered MCP servers.

Alex-wdy explains how Azure CLI 2.91.0 adds preview support for native broker-based authentication on macOS, improving enterprise sign-in security and SSO. The post also covers the Homebrew Formula-to-Cask packaging change and provides step-by-step commands to enable, verify, and roll back the new sign-in flow.

Rafia Aqil lays out a practical, end-to-end troubleshooting approach for slow Oracle-to-Power BI refresh and query performance, covering provider choice, FetchSize, query folding, Import vs DirectQuery trade-offs, gateway considerations, and when to shift to Microsoft Fabric Mirroring and OneLake for a different analytics architecture.

Patrick Nikoletich explains how GitHub Copilot agent sessions can move between devices using GitHub’s shared agent runtime, the Copilot SDK, and the Agent Host Protocol, including a live demo that hosts an agent on a home Linux machine and connects to it from the Copilot CLI.

Microsoft Security Research explains why post-quantum readiness needs to cover authentication as well as encryption, and why organizations should start testing their certificate ecosystems now. The article outlines common PKI dependencies, operational risks from larger certificates and chains, and how Microsoft’s PQC TLS Pilot Program supports controlled interoperability testing.

Gareth Bland explains why AI agent costs can scale much faster than the work being done, and how context caching helps control token spend as agents take more turns.

Allison announces new admin controls for GitHub Copilot code review, including organization-level billing options to avoid consuming individual member quotas and policy settings that restrict who can trigger Copilot review requests when external/personal licenses are involved.

Tsuyoshi Ushio introduces Dynamic Workflows for Azure Functions Hosted Skills, a preview feature that lets an LLM generate a typed DAG plan once and then run it durably via Durable Functions. The post explains the runtime model, safety checks, and when this approach reduces token usage and latency for event-driven apps.

Microsoft Developer explains how to debug an AI agent that’s slow or confidently wrong by turning on server-side tracing for an Azure AI Foundry project and inspecting each run step-by-step in Application Insights, including model calls, tool calls, tokens, and latency, then querying patterns with KQL.

Allison announces a GitHub change that lets users with the triage role (and higher) archive and unarchive pull requests, reducing friction for maintainers who delegate routine moderation work.

torreyt explains how noise reduction in Azure Deployment Stacks What-If makes change previews more trustworthy by filtering out false diffs caused by provider defaults and read-only/write-only properties, and shows how to run Stacks What-If via Azure CLI and Azure PowerShell.

Allison announces an accessibility improvement to GitHub timelines: screen readers can now navigate issue and pull request timelines as lists, with clearer announcements for structure, position, and newly loaded events across github.com and GitHub Enterprise Server.

Anna Hoffman recaps the key Microsoft SQL announcements shared at SQLCon/FabCon Barcelona 2026, covering hybrid and migration updates, Database Hub changes, Hyperscale improvements, SQL DB in Fabric updates, and developer-focused tooling and agent-related updates.

sbaynes explains how GitHub Copilot is rolling out local, on-device AI coding on new Windows PCs, including automatic routing between local and cloud models, a new MAI Code 1.1 Flash local model build, and sandboxed tool execution using Microsoft Execution Containers (MXC).

Allison announces a GitHub change that lets maintainers include draft pull requests when enforcing pull request limits, closing a loophole where users could open unlimited drafts. The update helps reduce repository clutter, notifications, and unnecessary CI runs caused by low-quality or spammy contributions.

tejabhutada explains practical ways to sync Jira Product Discovery ideas with Azure DevOps Epics, so approved roadmap items flow to engineering without manual re-entry and delivery status flows back to product. It breaks down what the Jira API can and can’t sync, plus the field, user, and state-mapping work that usually trips teams up.

Dan Hellem announces a new Azure DevOps Wiki editing experience built on Monaco Editor (the editor behind VS Code), highlighting Markdown-focused improvements like syntax highlighting, find/replace, better undo/redo, and autocomplete for work items, pull requests, people mentions, and wiki links.

Wiliam_Rosa explains Azure Databricks Lakeflow Jobs “Multiple Triggers” (beta), showing how to run a single job from several conditions (schedule, file arrival, table/model updates) and how to configure, monitor, and reason about concurrency and idempotency when triggers overlap.

gurjsing explains a common BYOK pitfall with Azure Key Vault and Azure Storage customer-managed keys: re-importing the same key material creates a new key version and won’t restore the original version identifier that dependent services may still require. The post lays out practical recovery, rotation, monitoring, and backup/restore guidance.

DivSwa announces public preview pricing and monthly free grants for Azure Logic Apps Automation, including what’s covered (managed environment, workflow runtime, retention, connectors, AI usage, knowledge storage, and isolated code execution) and how to track and keep eligibility for the free environment.

Allison announces that Claude Haiku 5.5 is now generally available in GitHub Copilot, positioned as a lightweight model for fast, high-volume coding tasks like subagents, quick edits, and terminal workflows, with access controlled via Copilot plan entitlements and enterprise model policies.

Chu Lahlou compares Azure Document Intelligence (ADI) and Azure Content Understanding (ACU) for real-world document processing, focusing on when to use purpose-trained document models versus generative, schema-driven extraction. The guide covers OCR/layout overlap, custom extraction trade-offs, RAG-ready output, multimodal analysis, and a practical evaluation checklist.

GitHub explains an upcoming GitHub Copilot feature that intelligently routes some requests to local, on-device models (including Ollama and Microsoft Foundry Local) to reduce cloud usage, enable offline workflows, and keep sensitive data on the machine.

Erin Havens shares GitHub data showing secret leaks are scaling with the volume of code being pushed, then explains how GitHub Secret Protection is using a fast ModernBERT-based classifier to improve push protection for unstructured secrets and reduce the human cost of remediation.

bobmital announces the general availability of Anyscale on Azure, a managed Ray runtime that runs on Azure Kubernetes Service in the customer’s subscription. The post explains the control-plane/data-plane split, Azure-native identity and governance integration, private connectivity options, and the kinds of AI/ML workloads teams can run end-to-end.

Allison announces a new fine-tuned GitHub model for context-aware leaked secret detection across secret scanning alerts, push protection, and GitHub Copilot /security-review. The post explains what’s changing, where it’s available (including GHES 3.23), and how AI Credits and budgets apply to the new opt-in checks.

Taesoo Kim shares what Microsoft Security’s FORGE Lab learned while scaling AI-assisted vulnerability research across Windows and major open-source projects, including how to turn agent-discovered bugs into reproducible evidence, validated fixes, and shipped security updates.

Allison announces general availability of local sandboxing for GitHub Copilot, adding a secure execution boundary for agent-run tools and commands on developer machines across Copilot CLI, the Copilot app, and VS Code Agent Host sessions.

Allison announces an update to GitHub Copilot CLI that lets you discover and select supported local models from a running Ollama instance using the new /model picker, without restarting your session. The post also clarifies how adding local models relates to offline mode, telemetry, and remote providers.