Browse All DevOps Content (760)

Allison announces a security change for npm: granular access tokens configured to bypass 2FA can no longer perform sensitive account, org, and package-management actions without an interactive 2FA challenge, and automated publishing should move to trusted or staged publishing.

Alexander Neubeck explains how GitHub sped up Unicode case folding for code search by removing early-exit branches, enabling SIMD vectorization, and using byte-space arithmetic to avoid UTF-8 decode/encode work. The post also covers allocation-avoidance techniques and a compact lookup-table design for fast “does this fold?” checks.

Amaury Levé introduces an open-source polyglot unit-test generation agent that learns a repo’s conventions, writes tests, and validates they build and run in the project’s normal test workflow. The post explains the agent’s research/plan/execute/check loop, shows benchmark results versus stock Copilot, and includes setup commands for Copilot CLI and VS Code.

TomClaes explains how to govern Azure Log Analytics retention across many workspaces by keeping workspace defaults low, setting per-table interactive retention, and using long-term retention only where needed. The post includes an Azure Policy-based, DeployIfNotExists solution with auditing, drift detection, and automated remediation.

junjieli summarizes the July 2026 releases (1.6.3–1.6.6) of the Foundry Toolkit for VS Code, focusing on a flatter, tabbed workspace, inline tool wiring, deeper agent debugging via event-level inspection, and a new Agent Optimization preview that supports measured compare-and-deploy tuning for hosted agents.

HimanshuYadav explains how to transfer a live GitLab project to a new group without accidentally “resetting” Terraform state or breaking pipelines, focusing on what changes during a namespace move (variables, runners, identity mappings) and how to validate and roll back safely.

Kristen Womack’s July 2026 roundup for Azure Developer CLI (azd) summarizes releases 1.27.0 through 1.29.0, including new extension install options, a full tool uninstall workflow, Azure AI Foundry resource modeling in azure.yaml, container deployments to Azure App Service, and CI-friendly non-interactive behavior plus a breaking flag rename.

GitHub announces stacked pull requests and points to the official docs, focusing on how the feature helps teams review and manage a series of dependent changes more clearly.

GitHub shares a lofi-focused coding stream themed around keeping pull requests small and using stacked PRs, aimed at helping developers stay in a steady flow while working in their terminal and reviewing and merging changes.

Allison announces a GitHub Actions update that lets workflows reference actions and reusable workflows in the same repository using a new $/ prefix, avoiding an explicit checkout and keeping internal references aligned with the exact commit being executed.

Cassidy Williams shows how she used the GitHub Copilot app to modernize an old React codebase by splitting work into stacked sessions and stacked pull requests, keeping changes reviewable while iterating on plans, branching strategy, and dependency upgrades.

GitHub hosts a Rubber Duck Thursdays session focused on Stacked PRs, covering how the feature fits into pull request workflows and what it changes for day-to-day code review and collaboration.

GitHub announces stacked pull requests and explains how they help teams break large changes into smaller, reviewable layers that can be merged one-by-one or all at once.

Allison announces GitHub stacked pull requests in public preview, a workflow for breaking large changes into an ordered series of smaller PRs that can be reviewed independently and merged together, while still respecting existing checks, reviews, and branch protections.

Gwyneth Peña-Siguenza demonstrates how to debug a real Python API in VS Code, covering breakpoints, stepping, variable inspection, watch expressions, and the call stack, plus how GitHub Copilot can help you understand failures and fix bugs faster.

Fokko at Work demos selected new features in Visual Studio Code 1.131 that relate to GitHub Copilot, including subagents session information in the Agents window and dictation mode, with notes on how enterprise policies and pricing plans can affect feature availability.

Allison summarizes the July 2026 GitHub Copilot updates in Visual Studio Code (v1.127–v1.131), focusing on the Agents window workflow, multi-chat sessions, model and chat controls (including Copilot Vision and BYOK), plus editor, terminal, browser, and accessibility improvements.

Allison announces general availability for Copilot code review support for agent skills and MCP server connections, enabling teams to bring internal standards and external context into reviews. The update includes attribution on generated comments and outlines where to configure MCP servers and store tokens in repository settings.

hetvip introduces a community template collection that lets teams keep their existing workflow orchestrator (like Airflow, Temporal, or Argo) while using Azure Container Apps Jobs as the execution layer for containerized tasks, including guidance on identity, RBAC, retries, and fan-out patterns.

stevenjma announces the general availability of Terraform AzureRM provider 5.0 and explains the key breaking changes, including new defaults for Resource Provider registration, opt-in Azure preflight validation during terraform plan, and removal of deprecated resources and properties.

Bruno Borges explains how to reduce Dependabot pull request noise without slowing down vulnerability fixes, using Microsoft’s GCToolkit repo as an example. The post shows how to group version updates, move to a monthly cadence, cover all ecosystems you use, and tune the new default “cooldown” window for safer upgrades.

murray-kp rounds up the July 2026 Microsoft Fabric updates across CI/CD and Git integration, OneLake governance, Spark runtime and diagnostics, lakehouse and warehouse features, and Real-Time Intelligence improvements including Eventstream security and new connectors.

The Visual Studio Code Team shares the evolving release notes for VS Code 1.132 (Insiders), with links to the commit log and closed issues so developers can track what’s landing as features are added throughout the iteration.

Allison summarizes what’s new in CodeQL 2.26.1 for GitHub code scanning, including expanded framework modeling across Go, Java/Kotlin, and JavaScript/TypeScript, plus query updates that reduce false positives and improve detection for issues like SSRF, path injection, and hard-coded cryptographic values.

Lee Stott walks through an end-to-end, production-minded approach for taking a multi-agent system from local development into Microsoft Foundry Agent Service, then distributing it to users in Microsoft Teams. The guide focuses on identity, governance, observability, and repeatable deployment using the FibreOps reference implementation.

Allison announces npm publish-time malware scanning and explains how it can delay package availability, when publishes may be held or blocked, and how maintainers can declare dual-use security functionality using new package metadata and a required DISCLOSURE file.

Chris Noring explains how to investigate unexpected GitHub Copilot Enterprise AI-credit spend and then control it using GitHub Billing guardrails. The post walks through identifying the SKU driving costs, attributing usage to organizations and cost centers, and applying budgets, alerts, and per-user limits without breaking productive workflows.

Mark Downie introduces the Visual Studio July update, centered on a new Agent (Preview) in Copilot Chat built on the GitHub Copilot SDK. The post also covers built-in .NET and Azure skills, org-level Copilot custom instructions, attaching Git branches as chat context, and improved MSVC toolset discovery for reproducible C++ builds.

Greg Ose summarizes the security changes GitHub and npm shipped over recent months to break common supply chain attack paths, focusing on preventing workflow compromise, reducing credential exposure, slowing malicious propagation, and improving incident response options for enterprises.

Alex Pysanets announces the general availability of Commit Search in Azure DevOps, a new way to find commits by searching commit message text across projects and repositories, with filters for project, repo, author, and branch plus sorting by time or relevance.

Allison announces an update to Dependabot malware alerts: GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, expanding detection coverage across more ecosystems and surfacing matches as Dependabot alerts in your repos and orgs.

Visual Studio Code shows the different ways to split the integrated terminal, making it easier to work with multiple shells or tasks side-by-side while staying inside the editor.

Allison announces a new GitHub Actions protection that automatically holds certain workflow runs flagged as potentially malicious until a collaborator with write access reviews and approves them via an authenticated web session.

tonimontez explains how to govern GitHub Copilot’s usage-based spend using GitHub’s native budget controls first, then adds an Azure API Management gateway in front of an Azure AI Foundry (Azure OpenAI) deployment for real-time, token-granular quotas and per-developer telemetry.

Visual Studio Code shows how the new Migration feature in VS Code turns existing prompts into reusable skills, focusing on a faster way to organize and reuse prompt-driven workflows inside the editor.

Burke Holland shares a practical GitHub Copilot “harness” workflow for building features end-to-end: pick a Copilot surface, enable more autonomy safely, prototype and plan in the same session, implement with Autopilot, then iterate and run a Rubber Duck review to catch blind spots.

Allison announces that enterprise managed settings now apply to the GitHub Copilot app and Copilot cloud agent, letting enterprise owners enforce a single managed-settings.json policy across more Copilot clients, including controls for plugins, marketplaces, and approval-prompt bypass behavior.

Yuliia Kovalova and Jan Krivanek introduce the MSBuild Binlog Analyzer for VS Code, a preview extension that uses GitHub Copilot Chat plus an MCP server to explain build failures, pinpoint performance bottlenecks, compare builds, and spot regressions directly from MSBuild .binlog files.

vladvino announces the public preview of the AI Gateway tier for Azure API Management, focused on publishing and governing AI models and MCP servers. The post explains the new portal experience, policy-card governance (rate limits, quotas, Content Safety, fallback), and OpenTelemetry token metrics to destinations like Application Insights.

Christopher Harrison introduces the GitHub Copilot app and shows how it supports real-world development workflows with project-scoped agent sessions, Quick Chat for parallel threads, interactive canvases for visual iteration, and Agent Merge to help move pull requests through CI and review.