Browse All DevOps Content (643)

Microsoft Security Research analyzes a malicious Claude Code-branded extension distributed through Cursor’s marketplace, detailing its attempted SSH backdoor and cross-platform persistence. The article provides Microsoft Defender detections, hunting queries, and remediation steps, explaining why removing the extension alone does not eliminate unauthorized keys and startup artifacts.

Kristen Womack reviews October’s Azure Developer CLI releases, covering deployment previews, Container Apps express support, environment value removal, and extension-aware pipelines. The recap also explains stable extension APIs, breaking Go API changes, reliability fixes, and new templates for deploying semantic search and streaming AI applications to Azure.

yunishussein explains how Azure Advisor identifies disconnected Azure Arc-enabled servers before their agent credentials expire. The guide covers heartbeat and certificate thresholds, recommended recovery actions, and ways to review affected machines through the Azure portal or query recommendations across subscriptions with Azure Resource Graph.

Visual Studio Code demonstrates how to use IntelliSense and GitHub Copilot to write, explain, and improve PostgreSQL queries without switching tools. The workflow also covers running queries and validating their results directly in the editor.

Maggie Appleton, Martin Woodward, and Jocelyn Velarde close GitHub Universe 2026 with open-source perspectives and coding demos. The session explores learning with GitHub Copilot, scaling projects with AI agents, and collaborative AI planning, alongside creative experiments that highlight the craft of coding and building together.

GitHub puts attendees at GitHub Universe 2026 on the spot with three Git trivia questions. The video tests knowledge of repository forks, git blame, and blob objects, offering a quick check of familiarity with version control commands and the internal objects Git uses to store content.

spurthikommajos introduces preview support for variable libraries in Microsoft Fabric Eventstream. Connection and item references let teams reuse eventstream definitions across development, staging, and production, while each workspace supplies its own resource values. The article explains configuration steps, deployment prerequisites, and how references remain intact through Git integration and deployment pipelines.

Allison details three additional IP ranges for GitHub webhook deliveries, now included in the Meta API. Teams using static network allowlists need to add the prefixes to avoid rejecting deliveries. Allowlists kept current through the Meta API require no changes, and the additions apply across all github.com plans.

Patrick LeBlanc joins Anna Hoffman to demonstrate Database Agents in Microsoft Fabric, which detect SQL performance problems before they affect users. The episode covers Database Hub, configuration requirements, issue detection, and SQL Server Management Studio integration, alongside a longer-term vision for agents that learn from DBA interactions.

Salim Chawro introduces Hardware Audit Logging for Azure Cloud HSM, which records supported management operations directly from the hardware. Signed audit data and certificates enable independent verification, while Azure Monitor Log Analytics delivery supports investigations and monitoring. The feature is rolling out across public regions and is automatically enabled on new resources where available.

Microsoft Threat Intelligence examines how North Korean threat actors use AI to accelerate reconnaissance, identity deception, malware development, and operational scaling. The report distinguishes observed activity from suspected AI use, explains why operations remain human-directed, and provides Microsoft Defender detections and practical guidance for protecting identities, endpoints, and software repositories.

GitHub recaps the opening keynote at GitHub Universe 2026, covering a dedicated Copilot app, third-party connectors, and multi-model orchestration through Copilot Fusion. The video also highlights multi-repository agent workflows with Copilot Projects, cloud sandboxes, Code Review Max, code scanning, and architectural upgrades to Git.

John Edward compares Azure Bicep and ARM templates, explaining their shared deployment engine and differences in syntax, validation, dependencies, and reuse. Practical Azure CLI examples show how to compile templates, preview changes, and deploy resources, while migration guidance helps teams decide when to adopt Bicep or retain existing JSON workflows.

GitHub recaps the GitHub Universe 2026 opening keynote, highlighting the new GitHub Copilot app, multi-model orchestration through Copilot Fusion, and autonomous task management in Copilot Projects. The video also covers Code Review Max for catching critical bugs and GitHub’s work to rebuild the core infrastructure underneath Git.

vinilv explains how to upgrade Azure CycleCloud Slurm node OS images without recreating the entire VM Scale Set. The walkthrough separates cluster configuration, scale-set models, and instance state, then covers draining nodes, applying updates, validating HPC dependencies, rolling back failures, and aligning CycleCloud configuration while acknowledging node downtime and capacity limitations.

April Leonard, Jay Parikh, Cassidy Williams, Burke Holland, and Damian Brady present GitHub Universe 2026’s opening keynote. The session covers GitHub Copilot updates, autonomous agent workflows, agent-powered quality and security, and changes to GitHub’s core infrastructure, with live demonstrations of developer tools and capabilities.

The Visual Studio Code Team outlines changes in VS Code 1.145 Insiders, including improved worktree cleanup, experimental previews of web apps on remote agent hosts, and new agent-session controls. The updates also address keyboard accessibility for MCP authentication prompts and add symbol breadcrumbs for unsaved files.

Satya Nadella outlines GitHub updates announced at Universe, including Copilot Fusion performance and cost claims, a unified Copilot harness in Foundry, and Copilot Projects for coordinating multiple agents across repositories. The post also notes plans to expand GitHub capacity and strengthen its architecture.

John Edward explains why hotpatch-enabled Windows Server 2022 systems will require restarts for November and December 2026 security updates. The article outlines affected devices, the planned January baseline update, and practical steps for scheduling maintenance, coordinating failover, and verifying successful installation without changing hotpatch enrollment.

Lynn Dai introduces Trusted Publishing for Visual Studio Marketplace, enabling extension releases from GitHub Actions and Azure Pipelines without long-lived personal access tokens. The article explains federated identity setup, GitHub policy activation, Azure Pipelines service connections, and how to migrate existing publishing workflows while verifying access before removing stored secrets.

Jeff Hollan, Viswajeeet Balaji, and Anthony Chu introduce the Microsoft Copilot harness public preview in Foundry Agent Service and generally available resilience for hosted agents. They demonstrate reusable skills and declarative deployment, explain recovery responsibilities and preview limitations, and outline consumption-based runtime billing beginning December 1, 2026.

Visual Studio Code demonstrates Agent Bake Off by running six AI coding agents on the same Windows settings reorganization. The video compares results, tool use, context, and cost, then shows how judging and synthesis can combine the strongest ideas into a finished change, including when starting without an existing project.

Jay Parikh outlines GitHub’s Universe 2026 announcements, including multi-repository Copilot projects, model orchestration, deeper code review, and enterprise access billed through AI credits. He also describes GitHub’s infrastructure expansion, redesigned Git architecture, and ongoing migration to a multi-region Azure deployment.

GitHub Staff examines the 2026 Octoverse findings on repository activity, agent-started pull requests, and changing model choices. The report connects growing use of coding agents with shifts in review workflows, GitHub Actions usage, and language participation, while explaining the telemetry’s limitations and announcing general availability of GitHub Copilot Fusion.

WSilveira introduces the public preview of the Logic Apps Standard CLI extension, covering local workflow creation, connector discovery, validation, execution diagnostics, and packaging. An Outlook-to-Blob walkthrough explains managed-identity setup and preview limitations, while a GitHub Copilot skill provides procedures for agent-assisted development with explicit approval for cloud changes.

Allison introduces the GitHub security extension, now in public preview for the GitHub Copilot app. Developers can browse code scanning alerts, ask Copilot to explain or fix them locally, and review changes before opening pull requests. The announcement also covers permissions, AI credit usage, and supported GitHub environments.

Allison introduces GitHub intelligence, a context layer combining persistent Copilot memories, opt-in dreaming, and cross-repository code search. Copilot Memory is generally available on paid plans, while dreaming enters public preview with controls for personal and repository context, pull-request review of instruction changes, and AI-credit costs.

Allison introduces shared Copilot Automations, which let teams maintain repository-owned AI workflows for bug reproduction, pull request screenshots, and incident investigation. The rollout adds shared visibility, editing permissions, repository-owner billing, and workflows that keep running when their creator leaves, with an administrator policy required for organization-owned repositories.

Allison outlines GitHub Copilot updates in VS Code, including cloud session continuity, persistent local and remote agents, and mobile controls. The releases also cover parallel model comparisons, experimental desktop interaction, custom clients through Agent Host Protocol, and preview marketplaces and connectors with enterprise policy controls.

Allison announces general availability of GitHub Agentic Workflows, which compiles natural-language Markdown into GitHub Actions workflows powered by coding agents. The release adds runner support, model routing, and stronger isolation, with read-only defaults and validated outputs. The default GitHub Copilot CLI engine requires a Copilot license.

Allison introduces Dependabot reachability analysis, now in public preview for JavaScript and TypeScript on GitHub Enterprise Cloud. Using CodeQL and managed GitHub Actions workflows, it identifies call paths to vulnerable dependency functions and adds verdicts to alerts, helping teams prioritize remediation without automatically dismissing vulnerabilities.

Cassidy Williams and GPS welcome Martin Woodward to discuss how AI-generated pull requests affect open source maintainers and how contribution limits can help. They also explore the hackable GitHub Universe badge, including its hardware controls and GitHub Copilot-assisted MicroPython app deployments, alongside DevOps fundamentals and favorite open source projects.

yunishussein outlines the general availability of Automatic Agent Upgrade for Azure Arc-enabled servers. Microsoft manages enabled agents’ updates through regional batches during off-peak hours, while Azure Policy, command-line onboarding, and portal-generated scripts provide options for enabling upgrades across server environments.

Hailey Victory reviews how VS Code has evolved since GitHub Universe 2025, covering parallel agent sessions, shared cloud workflows, multiple harnesses and models, and project customization. The overview explains how developers can coordinate agent work across tools while retaining control over editing, debugging, access policies, and reviewing changes.

Gloridel Morales announces Azure DevOps Server 26H2 RC, bringing an updated Azure Boards interface, pipeline debugging improvements, and a new Test Run Hub. The release supports direct upgrades and a later upgrade to RTW, while Team Foundation Server 2017 extended support ends on January 12, 2027.

dotnet demonstrates how to build a StackChan robot's AI brain using a .NET backend orchestrated with Aspire. The session connects the backend to the physical desk robot, adds services and local observability, and brings the pieces together into an end-to-end interaction.

GitHub takes viewers inside Pimoroni’s factory to explore how the hackable GitHub Universe 2026 badge is manufactured. The video follows stencil printing, component placement, and solder reflow, and covers the handheld console’s capacitive touch controls, auto-flipping interface sensors, and custom firmware developed with GitHub Copilot.

Mark Downie outlines the October Visual Studio 2026 update, including comparisons between historical commits and working trees, bulk merge conflict resolution, and a refreshed GitHub Copilot Chat experience. The update also adds opt-in preservation of unsaved work, keyboard-based tab reordering, and searchable Fonts and Colors settings with inline previews.

Bruno Van Thournout's Blog explains how .NET 11 Runtime Async replaces compiler-generated state machines with runtime-managed suspension and resumption. The article covers opt-in configuration, cleaner live stack traces, allocation benchmarks, and compatibility checks, while highlighting slower exception paths and why the preview feature should stay out of production defaults.

Visual Studio Code shows how to work with PostgreSQL directly in the editor. The video covers connecting to a database, exploring its tables, and writing SQL without switching to a separate database tool.