Browse All DevOps Content (594)

Allison announces an update to GitHub Advanced Security that lets enterprise admins enforce security configurations across organizations, preventing org and repo admins from overriding enterprise-level settings and helping security and compliance teams apply consistent policies at scale.

Allison announces a public preview feature where GitHub Copilot suggests allowed values while admins define repository custom properties, helping organizations build consistent governance metadata that can be used to scope rulesets across large fleets of repositories.

Sharon Xu announces Foundry Dev Pack, an all-in-one installer that sets up a Microsoft Foundry development environment across the terminal, VS Code, and coding agents, including Azure CLI/azd tooling and starter workflows for creating hosted agents.

stevenbucher announces public preview support for versioning custom Azure Policy definitions and initiatives, including how to create new versions, pin assignments to major/minor versions, and validate which version is effective via REST API, portal, CLI, and PowerShell.

Mayuri Gupta announces the public preview of Azure Red Hat OpenShift hosted control planes, explaining how the control plane can run as a Microsoft-managed service while worker nodes stay in the customer subscription. The post covers operational benefits, Azure integrations (identity, monitoring, IaC), security controls, supported regions, and preview pricing.

Allison announces that GitHub has completed the planned shutdown of SHA-1 support in HTTPS for github.com and partner CDNs, with notes on which GitHub Enterprise offerings are affected and where to find the earlier deprecation details.

GitHub shows how to hand off an active GitHub Copilot app session into VS Code so you can keep working in your editor without losing context, including the task plan, conversation history, diffs, and an isolated git worktree, then push changes back to a pull request.

Thomas Maurer explains how Adaptive Apps and the open-source Radius control plane help teams engineer, test, and prove application portability across Azure, Azure Local, and other Kubernetes environments by separating app intent from environment-specific implementations.

GitHub shares three practical workflow changes to reduce review fatigue and keep pull request backlogs under control when teams adopt AI coding tools, focusing on better prompt inputs, smaller changes via stacked PRs, and shifting reviews toward assessment rather than line-by-line editing.

Wuyi Weng explains how Azure SRE Agent can use an Azure Managed Grafana dashboard (via the MCP endpoint) as executable context to investigate GitHub Copilot telemetry in Application Insights, turning panel queries, variables, and descriptions into fast, accurate triage and per-session diagnoses.

GitHub introduces CVE Lite CLI, a local dependency vulnerability scanner for JavaScript and TypeScript projects, highlighting how it classifies direct vs transitive issues, validates fix versions with OSV, and outputs exact upgrade commands across npm, pnpm, Yarn, and Bun.

This week in DevOps, the focus shifted toward running fleets and pipelines with tighter guardrails and less manual work. Azure Arc pushed more hybrid and edge day-2 operations into the portal, while Azure Compute and Azure Copilot targeted faster VM startup paths and more structured troubleshooting inside RBAC boundaries. On the delivery side, GitHub and npm added policy-first controls around pull requests, caches, and account recovery, and Copilot moved deeper into review and remediation workflows with clearer model and sandbox governance options. We will walk through what changed, where it reduces operational toil, and what teams should validate before rolling these updates across environments.

Allison announces a small GitHub profile update: profiles now display the highest tier earned for multi-level achievements, so your Achievements panel reflects your latest progress rather than the first tier you earned.

Allison announces improvements to GitHub Copilot code review, including automatic resolution of addressed review comments, smarter commit message suggestions when applying Copilot fixes, and deeper review analysis using Copilot SDK shell tools plus an ensemble approach for Lite reviews.

jordanselig explains a new public preview capability in Azure Managed Connectors: sending trigger events directly to Azure App Service apps. The post covers how the App Service destination is configured, how managed-identity callbacks are authenticated with App Service built-in auth (Easy Auth), and includes an end-to-end sample with Bicep and Azure Developer CLI.

Tomoko Tanaka shows how her team turned event marketing runbooks into “ops as code” using GitHub Issues, GitHub Actions, and GitHub Copilot. The post breaks down the repo patterns (issue forms, labels, skills in Markdown, and a DRY_RUN switch) that automate setup, daily screening, and post-event reporting with guardrails.

John Savill shares a quick Azure Weekly Update covering recent platform changes and previews, including VM ephemeral OS disk caching, Azure Functions Flex Consumption custom TLS, user delegation SAS updates, AZD extension framework work, Azure Load Testing Playwright expansion, and new Copilot-related items.

Visual Studio Code shows how to connect your own Azure-hosted AI models to GitHub Copilot in VS Code using Bring Your Own Key (BYOK), so teams can control which models are available in Copilot and pick the right model for different coding tasks.

Allison summarizes the September 7 weekly GitHub Copilot releases, including Jira integration in the Copilot app, Project HydraFusion model orchestration in Copilot CLI, new agent automations and voice mode updates in VS Code, and expanded enterprise sandbox controls for Copilot in JetBrains.

Gloridel Morales announces the September 2026 patch release for Azure DevOps Server, including the Patch 8 download link, release notes, and a quick command to verify whether the patch is installed on your server.

Kayla Cinnamon explains how to review agent-generated changes inside the GitHub Copilot app using three built-in panels: a diff view for inspecting edits, a terminal for running project commands, and a browser preview for validating UI changes before creating a pull request.

Allison announces a public preview of a refreshed repository-level pull request listing page on GitHub, focused on making it faster to find and act on PRs with improved filtering, advanced search, and a more compact, information-dense layout.

Brendan Burns explains why Microsoft was named a Leader in the 2026 Gartner Magic Quadrant for Container Management, and uses the announcement to outline how AKS, Azure Container Apps, Azure Arc, and Fleet Manager are positioned for AI, hybrid, and edge container operations at scale.

Allison announces a public preview that adds GitHub REST API endpoints for enabling and managing GitHub code scanning’s AI Scan for pull requests at both the organization and repository level, making it easier to roll out AI-powered security detections across selected repos without manual UI configuration.

GitHub spotlights the open source project DocumentDB as part of its Open Source Friday series, focusing on the project and its place in the broader open source ecosystem.

Allison announces GitHub Actions cache-mode, a generally available workflow/job setting that lets teams apply least-privilege access to the Actions cache and reduce cache poisoning risk by controlling whether jobs can restore and/or save caches.

Steve Sweetman explains how to govern AI agent spend in Microsoft Foundry by combining request-path token limits, observability (traces, monitoring, evaluations), and finance-grade budgets, then tying those signals to ROI so teams can decide what to optimize, scale, or retire.

mnshnth announces that workload orchestration for Azure Arc is now available in the Azure portal, focusing on a portal-first onboarding flow that lets teams deploy a pre-packaged app to an Azure Arc-enabled Kubernetes cluster in minutes and then scale the same approach across distributed sites.

kchoi announces a public preview feature in Azure Arc Site Manager that centralizes monitoring and management of Azure Local workloads across multiple sites, including Azure Local virtual machines and Kubernetes clusters, with bulk actions plus grouping, filtering, and search to speed up day-to-day operations.

Allison announces that the GitHub Actions Xcode 27 runner image now runs on macOS 27 (public preview), enabling Apple app validation against the latest macOS version while keeping the same workflow runner labels.

Juan Montes profiles Kinaxis’ Maestro platform and how it uses Azure (including AKS, Databricks, Azure OpenAI, Cosmos DB, and Azure AI Content Safety) to run large-scale supply chain scenario modeling, forecasting, and agentic AI experiences. The piece also touches on Kinaxis’ internal use of GitHub Copilot for an agentic, PR-driven development workflow.

GitHub shows how to use the new attach flag in the GitHub CLI to add images directly to pull requests and issues, making it easier to share screenshots and other visual context during reviews and issue triage.

Microsoft Developer demonstrates how to build modern Model Context Protocol (MCP) servers in VS Code, moving beyond simple local tool calls to more production-ready agent integrations with notifications, elicitation, stateless HTTP, and plugin-based distribution.

Jakub Oleksy’s August 2026 GitHub availability report breaks down five production incidents across GitHub Actions, authentication, and Copilot services, including what failed, how GitHub mitigated impact, and what reliability work is planned next (capacity, autoscaling, retries, and regional failover).

Nick Brady rounds up July and August 2026 updates for Microsoft Foundry, including GA for Hosted Agents, Voice Live integration, and Toolboxes, plus Model Router pool/region changes and new model releases. It also calls out SDK migrations (Python/JS/Java/.NET) and runtime requirement bumps you should test before upgrading.

Allison announces a new npm security protection: after signing in with a recovery code, any npm account is placed under a 72-hour security hold that blocks publishing and other sensitive write actions while still allowing sign-in and package installs.

Allison announces CodeQL 2.27.0, highlighting native Linux ARM64 support, improvements to GitHub code scanning default setup, and multiple query and framework-modeling updates that improve vulnerability detection across C#, Java/Kotlin, C/C++, and Rust projects.

Microsoft Security Research and Lior Leizerovich introduce the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework for understanding and prioritizing threats against cloud-hosted web apps and serverless platforms, with practical examples spanning identities, deployment pipelines, managed runtimes, and connected cloud resources.

Allison announces expanded self-serve trial eligibility for GitHub Advanced Security on GitHub Enterprise Cloud, allowing more enterprises to evaluate GitHub Code Security and GitHub Secret Protection before purchasing.

Allison announces a new GitHub repository ruleset option that can block pull requests from merging when they introduce unresolved secret scanning alerts, adding an extra enforcement layer beyond push protection.