Browse All Posts (129)

Visual Studio Code highlights a small celebratory interaction: hitting Done cues confetti. This short focuses on a visual detail in the coding environment rather than a broader technical walkthrough.

Allison announces general availability of assisted permissions in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. A language model evaluates command, file-path, and URL requests, automatically allowing those classified as clearly safe. Enterprise administrators can control available permission modes and set defaults for new sessions.

Alper explains how Microsoft Fabric’s preview React visualization libraries support analytics apps built with AI coding agents. Using Vega-Lite specifications and shared data, theming, and interaction contracts, the components provide reusable charts and grids with formatting, scrolling, tooltips, and consistent styling rather than requiring each app to recreate these behaviors.

Louis Erbkamm shares how Arnis converts real-world geographic coordinates into playable Minecraft worlds using OpenStreetMap data. The video explores the project's international contributor community and how its sole maintainer uses GitHub Copilot to triage bug reports, review pull requests, and keep the project moving.

Allison announces GPT-6.1 Terra’s general availability in GitHub Copilot for everyday agentic coding and terminal tasks. The model uses provider list pricing under usage-based billing, with gradual rollout across supported clients. Business and Enterprise administrators can control access through model policies and default enablement settings.

sbaynes describes how Microsoft combines AI agents, testing, static analysis, and formal verification to transform large codebases. The article covers Windows toolchain migration, C/C++ modernization into Rust, and specification-driven validation, explaining how small expert teams review shared knowledge and system properties rather than every generated change.

sbaynes describes using the Microsoft Discovery app to adapt insect-monitoring systems for the Asian citrus psyllid, a pest that spreads citrus greening disease. The case study covers grounded AI agents, experimental design, permitting, and synthetic biometric data for preliminary edge classifiers, with scientists reviewing decisions throughout the workflow.

Rena Liu introduces Azure AI Speech LLM 09-2026, adding 25 languages and faster multilingual transcription. The announcement covers recognition improvements, locale selection, phrase lists, and REST API configuration, with automatic service-side deployment requiring no customer action.

Mariyaali introduces preview support for Fabric Data Warehouse in workspace monitoring. Completed distributed queries flow into a workspace-scoped KQL database, where administrators can compare performance, investigate failures, and build dashboards. Shared query identifiers connect workspace telemetry to Query Insights for deeper investigation within the affected warehouse.

Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.

Visual Studio Code demonstrates a PostgreSQL performance troubleshooting workflow, tracing an application slowdown from initial signals to database workload and query evidence. The episode covers Azure Advisor guidance, controlled actions, result verification, and a Database Agent experience that brings issue context and recommendations together while retaining review and approval.

Visual Studio Code demonstrates how the PostgreSQL extension and GitHub Copilot help you explore an unfamiliar database. The episode covers inspecting schemas, tables, views, and functions, visualizing relationships, asking context-aware questions in Copilot Chat, and checking answers against the database to understand its data model.

Visual Studio Code demonstrates a PostgreSQL workflow combining the PostgreSQL extension’s IntelliSense and database context with GitHub Copilot. The video covers drafting, explaining, analyzing, and improving SQL queries, then running them, inspecting results, and exporting data without leaving the editor, while keeping developers in control of the final queries.

Visual Studio Code demonstrates how to bring PostgreSQL workflows into the editor using Microsoft’s PostgreSQL extension. Learn to install the extension, connect to a PostgreSQL database on Azure with Microsoft Entra ID, save connection profiles, and explore database objects without switching tools.

Josef Sin explains what Azure DevOps users should check following the PHP2Shell disclosures. Azure DevOps Services and Server do not use PHP to handle customer requests, but pipeline workloads, agent hosts, containers, and deployed applications may require runtime patches. The guidance distinguishes Microsoft-managed updates from fixes customers must apply themselves.

Jason Chlus and Mads Kristensen explain how Visual Studio 2026 version 18.11 supports standalone Markdown investigation notes and restores unfinished work through the opt-in Hot Exit preview. The walkthrough covers creating notes without a project, enabling session preservation, and understanding why restored edits are not a substitute for saving files.

John Savill examines why AI agents fail beyond the model itself, covering unclear goals, bad context, tool misfires, reasoning errors and lost state. He also discusses hijacking, excessive privileges, limited visibility and an improvement loop for understanding and addressing failures.

Welcome to this week's Azure roundup, covering sovereign AI infrastructure, new monitoring capabilities, and upgrade planning. Azure Local announcements expand options for local inference and disconnected operations, while generally available registry and Azure Monitor metrics help teams investigate traffic, throttling, storage usage, and telemetry growth. We review the December retirement of Foundry workflows and the September 2027 Java support deadline for App Service and Functions, then explore agent development, database modernization, and private connectivity, distinguishing available features from previews and planned releases.

Welcome to this week's DevOps roundup, where the LiteLLM compromise puts dependency incident response alongside GitHub's package firewall preview and Agentic Autofix announcement. Azure Container Registry's generally available traffic metrics and sovereign infrastructure updates give teams more options for monitoring and controlling deployments, while Java support deadlines and Foundry workflow retirement call for migration planning. We also cover GitHub automation credentials, security scanning compatibility, and coding-agent workflows that keep validation and human review in the delivery process.

Welcome to this week's Security roundup, where .NET out-of-band patches and the LiteLLM and ConnectWise supply chain investigations put deployment checks, environment rebuilding, and application identity reviews first. GitHub adds package filtering, credential lifecycle options, and secret exposure response tools, while upcoming agent-assisted fixes and CodeQL compatibility changes require planning. We then look at Microsoft's AI agent containment controls and Azure's sovereign and confidential computing updates, distinguishing available protections from preview capabilities.

Welcome to this week's GitHub Copilot roundup, covering generally available model policy APIs, six model deprecations, and the rollout of global feature defaults. Visual Studio and Microsoft Teams updates give developers new ways to start agent tasks, while expanded usage reporting helps administrators understand client activity and customizations. We then cover model routing and custom endpoints, issue-to-pull-request workflows, and application walkthroughs that pair agent-assisted development with testing, credential protection, and human review.

Hidde de Smet's Blog compares Bicep and Terraform for Azure, focusing on resource ownership rather than syntax preferences. The guide explains deletion behavior, deployment previews, ARM API coverage, module defaults, and existing-resource adoption, then outlines a disposable pilot for testing each tool against your team's infrastructure requirements.

Welcome to this week's AI roundup, covering Azure Local's sovereign AI announcements, the LiteLLM supply chain compromise, and Microsoft's controls for agent identity and permissions. Foundry's browser automation tool reaches general availability, while upcoming Foundry workflow and Fabric integration retirements give teams migration deadlines to plan around. We also examine agent development, retrieval, and evaluation examples, alongside research that pairs AI assistance with human oversight and explicit verification, distinguishing available capabilities from previews and planned releases.

Welcome to this week's .NET roundup, led by out-of-band security fixes that require deployment action even for applications updated earlier in October. We cover GitHub Copilot's Visual Studio agent workflows and model configuration changes, then review the steps needed to prepare .NET MAUI apps for Xcode 27. Practical guides on .NET 11 validation localization and binary serialization with Compact Binary Object Notation (CBOR) round out the coverage, alongside community sessions on AI data ingestion and Blazor components.

Welcome to this week's ML roundup, covering confidential virtual machines on Azure Local, GPU-accelerated Fabric queries, and updates to Fabric's data and coding agents. We examine the upcoming query-generation rollout and November 6 Foundry integration migration deadline, then explore interactive visualizations, retrieval grounded in business data, and GPU memory profiling. Research reports highlight human-directed agents and explicit verification, while data-platform updates bring practical considerations for schemas, migrations, transactions, and governance, with availability and limitations distinguished throughout.

Microsoft Developer highlights three updates: .NET 11 is ready for serious production validation, Python 3.15 defaults to a native Arm64 runtime on Windows on ARM, and browser automation in Microsoft Foundry is generally available. The video outlines what these changes mean for developers.

Microsoft Developer demonstrates how to protect an AI agent from malicious user input and instructions hidden in tool responses. The walkthrough configures Microsoft Foundry guardrails and Prompt Shields, replays both attacks, and uses traces to show where protections intervene before the agent acts.

Ben Steenhoek and Ulugbek Abdullaev explain how configurable eagerness lets paid GitHub Copilot subscribers adjust inline suggestions in VS Code. They describe the low, medium, and high modes, the training approach behind them, reward-hacking mitigations, and experimental results showing how suggestion frequency and size change.

Rahul Bhandari (MSFT) announces out-of-band security updates for .NET 8, 9, and 10, plus .NET 11 RC3. The release fixes Brotli decompression and Linux tarball ownership vulnerabilities, completes two earlier fixes, and explains how to update framework-dependent applications, self-contained deployments, containers, and source-build packages.

John Savill reviews this week's Azure and AI updates, including networking, backup, monitoring, storage, and identity changes. Topics include Traffic Manager integration with Azure DNS, keyless TLS, Cosmos DB key rotation, Azure Databricks private networking, and Copilot Studio agent identity.

cabarker explains Azure Container Registry's new Transactions and Data Transfer metrics, which expose registry operations, response types, regional activity, and outbound bytes. The article covers how sharding supports high-volume telemetry while preserving a single registry view, plus practical ways to investigate throttling, retry loops, and changing image traffic.

Allison announces an update to the GitHub Copilot usage metrics API that adds a new totals_by_client breakdown, letting enterprises and organizations see request, session, and token usage coming from tools outside the IDE (like OpenCode, Copilot CLI, VS Code, and JetBrains).

Visual Studio Code introduces a four-part video series focused on doing more PostgreSQL work directly inside VS Code, including connecting to databases, writing and optimizing SQL, using GitHub Copilot to understand database context, and troubleshooting performance, with Azure mentioned as the underlying platform for modern PostgreSQL workloads.

Allison announces an updated GitHub app for Microsoft Teams that combines GitHub notifications with GitHub Copilot-powered actions, letting teams respond to issue and pull request updates by mentioning @GitHub to investigate, fix bugs, run tests, and open pull requests from within Teams.

Microsoft Cloud outlines a “Physical AI” vision for industrial scenarios, describing how AI systems can perceive, reason, and act in the physical world across manufacturing, quality, and supply chains, and how organizations can move from simulation to real operations spanning edge and cloud.

Madhura Amlekar explains how to assess Azure managed services before refreshing virtual machines. The guidance covers component-by-component migration, application compatibility, deployment and recovery checks, shared security responsibilities, and reservation commitments, while recognizing that some workloads still need VM-level control and that PaaS is not always cheaper.

Allison explains a GitHub Enterprise Managed Users (EMU) incident where SCIM deprovisioning incorrectly deleted accounts instead of suspending and obfuscating them, how to confirm impact via audit logs, and what GitHub changed to restore records and prevent recurrence.

Microsoft Security Research, Mahesh Mandava, Srinivasan Govindarajan, Sagar Patil and Suriyaraj Natarajan break down the LiteLLM 1.107.0 supply-chain compromise, showing how Python startup hooks enabled credential theft without importing LiteLLM, what data was targeted, and how to investigate and recover using Microsoft Defender detections and hunting queries.

GitHub demonstrates a hands-on workflow for going from a GitHub issue prompt to a deployed AI agent inside the GitHub Copilot app, using Azure AI Foundry tooling to provision resources, deploy a model, validate grounding to reduce hallucinations, and ship a secure proxy plus a website chat widget.

Allison announces new GitHub public monitoring capabilities for handling leaked secrets at enterprise scale, including alert triage workflows, continuous token validity checks, and integrations via a REST API and enterprise webhooks for incident response pipelines.