Browse DevOps News (317)

Microsoft Security Research analyzes a malicious Claude Code-branded extension distributed through Cursor’s marketplace, detailing its attempted SSH backdoor and cross-platform persistence. The article provides Microsoft Defender detections, hunting queries, and remediation steps, explaining why removing the extension alone does not eliminate unauthorized keys and startup artifacts.

Kristen Womack reviews October’s Azure Developer CLI releases, covering deployment previews, Container Apps express support, environment value removal, and extension-aware pipelines. The recap also explains stable extension APIs, breaking Go API changes, reliability fixes, and new templates for deploying semantic search and streaming AI applications to Azure.

spurthikommajos introduces preview support for variable libraries in Microsoft Fabric Eventstream. Connection and item references let teams reuse eventstream definitions across development, staging, and production, while each workspace supplies its own resource values. The article explains configuration steps, deployment prerequisites, and how references remain intact through Git integration and deployment pipelines.

Allison details three additional IP ranges for GitHub webhook deliveries, now included in the Meta API. Teams using static network allowlists need to add the prefixes to avoid rejecting deliveries. Allowlists kept current through the Meta API require no changes, and the additions apply across all github.com plans.

Salim Chawro introduces Hardware Audit Logging for Azure Cloud HSM, which records supported management operations directly from the hardware. Signed audit data and certificates enable independent verification, while Azure Monitor Log Analytics delivery supports investigations and monitoring. The feature is rolling out across public regions and is automatically enabled on new resources where available.

Microsoft Threat Intelligence examines how North Korean threat actors use AI to accelerate reconnaissance, identity deception, malware development, and operational scaling. The report distinguishes observed activity from suspected AI use, explains why operations remain human-directed, and provides Microsoft Defender detections and practical guidance for protecting identities, endpoints, and software repositories.

The Visual Studio Code Team outlines changes in VS Code 1.145 Insiders, including improved worktree cleanup, experimental previews of web apps on remote agent hosts, and new agent-session controls. The updates also address keyboard accessibility for MCP authentication prompts and add symbol breadcrumbs for unsaved files.

Satya Nadella outlines GitHub updates announced at Universe, including Copilot Fusion performance and cost claims, a unified Copilot harness in Foundry, and Copilot Projects for coordinating multiple agents across repositories. The post also notes plans to expand GitHub capacity and strengthen its architecture.

Lynn Dai introduces Trusted Publishing for Visual Studio Marketplace, enabling extension releases from GitHub Actions and Azure Pipelines without long-lived personal access tokens. The article explains federated identity setup, GitHub policy activation, Azure Pipelines service connections, and how to migrate existing publishing workflows while verifying access before removing stored secrets.

Jeff Hollan, Viswajeeet Balaji, and Anthony Chu introduce the Microsoft Copilot harness public preview in Foundry Agent Service and generally available resilience for hosted agents. They demonstrate reusable skills and declarative deployment, explain recovery responsibilities and preview limitations, and outline consumption-based runtime billing beginning December 1, 2026.

Jay Parikh outlines GitHub’s Universe 2026 announcements, including multi-repository Copilot projects, model orchestration, deeper code review, and enterprise access billed through AI credits. He also describes GitHub’s infrastructure expansion, redesigned Git architecture, and ongoing migration to a multi-region Azure deployment.

GitHub Staff examines the 2026 Octoverse findings on repository activity, agent-started pull requests, and changing model choices. The report connects growing use of coding agents with shifts in review workflows, GitHub Actions usage, and language participation, while explaining the telemetry’s limitations and announcing general availability of GitHub Copilot Fusion.

Allison introduces the GitHub security extension, now in public preview for the GitHub Copilot app. Developers can browse code scanning alerts, ask Copilot to explain or fix them locally, and review changes before opening pull requests. The announcement also covers permissions, AI credit usage, and supported GitHub environments.

Allison introduces GitHub intelligence, a context layer combining persistent Copilot memories, opt-in dreaming, and cross-repository code search. Copilot Memory is generally available on paid plans, while dreaming enters public preview with controls for personal and repository context, pull-request review of instruction changes, and AI-credit costs.

Allison introduces shared Copilot Automations, which let teams maintain repository-owned AI workflows for bug reproduction, pull request screenshots, and incident investigation. The rollout adds shared visibility, editing permissions, repository-owner billing, and workflows that keep running when their creator leaves, with an administrator policy required for organization-owned repositories.

Allison outlines GitHub Copilot updates in VS Code, including cloud session continuity, persistent local and remote agents, and mobile controls. The releases also cover parallel model comparisons, experimental desktop interaction, custom clients through Agent Host Protocol, and preview marketplaces and connectors with enterprise policy controls.

Allison announces general availability of GitHub Agentic Workflows, which compiles natural-language Markdown into GitHub Actions workflows powered by coding agents. The release adds runner support, model routing, and stronger isolation, with read-only defaults and validated outputs. The default GitHub Copilot CLI engine requires a Copilot license.

Allison introduces Dependabot reachability analysis, now in public preview for JavaScript and TypeScript on GitHub Enterprise Cloud. Using CodeQL and managed GitHub Actions workflows, it identifies call paths to vulnerable dependency functions and adds verdicts to alerts, helping teams prioritize remediation without automatically dismissing vulnerabilities.

Hailey Victory reviews how VS Code has evolved since GitHub Universe 2025, covering parallel agent sessions, shared cloud workflows, multiple harnesses and models, and project customization. The overview explains how developers can coordinate agent work across tools while retaining control over editing, debugging, access policies, and reviewing changes.

Gloridel Morales announces Azure DevOps Server 26H2 RC, bringing an updated Azure Boards interface, pipeline debugging improvements, and a new Test Run Hub. The release supports direct upgrades and a later upgrade to RTW, while Team Foundation Server 2017 extended support ends on January 12, 2027.

Mark Downie outlines the October Visual Studio 2026 update, including comparisons between historical commits and working trees, bulk merge conflict resolution, and a refreshed GitHub Copilot Chat experience. The update also adds opt-in preservation of unsaved work, keyboard-based tab reordering, and searchable Fonts and Colors settings with inline previews.

goupadhy outlines the October 2026 on-premises data gateway release for Microsoft Fabric, including accessibility fixes, preserved Power Query settings, and improved diagnostics. The update also introduces preview administration APIs for tenant-wide connection control and provides guidance for testing releases and upgrading production gateway clusters safely.

sbaynes describes how Microsoft combines AI agents, testing, static analysis, and formal verification to transform large codebases. The article covers Windows toolchain migration, C/C++ modernization into Rust, and specification-driven validation, explaining how small expert teams review shared knowledge and system properties rather than every generated change.

Mariyaali introduces preview support for Fabric Data Warehouse in workspace monitoring. Completed distributed queries flow into a workspace-scoped KQL database, where administrators can compare performance, investigate failures, and build dashboards. Shared query identifiers connect workspace telemetry to Query Insights for deeper investigation within the affected warehouse.

Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.

Josef Sin explains what Azure DevOps users should check following the PHP2Shell disclosures. Azure DevOps Services and Server do not use PHP to handle customer requests, but pipeline workloads, agent hosts, containers, and deployed applications may require runtime patches. The guidance distinguishes Microsoft-managed updates from fixes customers must apply themselves.

Jason Chlus and Mads Kristensen explain how Visual Studio 2026 version 18.11 supports standalone Markdown investigation notes and restores unfinished work through the opt-in Hot Exit preview. The walkthrough covers creating notes without a project, enabling session preservation, and understanding why restored edits are not a substitute for saving files.

Allison announces an updated GitHub app for Microsoft Teams that combines GitHub notifications with GitHub Copilot-powered actions, letting teams respond to issue and pull request updates by mentioning @GitHub to investigate, fix bugs, run tests, and open pull requests from within Teams.

Allison explains a GitHub Enterprise Managed Users (EMU) incident where SCIM deprovisioning incorrectly deleted accounts instead of suspending and obfuscating them, how to confirm impact via audit logs, and what GitHub changed to restore records and prevent recurrence.

Microsoft Security Research, Mahesh Mandava, Srinivasan Govindarajan, Sagar Patil and Suriyaraj Natarajan break down the LiteLLM 1.107.0 supply-chain compromise, showing how Python startup hooks enabled credential theft without importing LiteLLM, what data was targeted, and how to investigate and recover using Microsoft Defender detections and hunting queries.

Allison announces new GitHub public monitoring capabilities for handling leaked secrets at enterprise scale, including alert triage workflows, continuous token validity checks, and integrations via a REST API and enterprise webhooks for incident response pipelines.

Allison announces general availability of enterprise-level installations for GitHub Apps, expanding API and permission coverage so enterprises can migrate more automation away from classic PATs and manage governance, security, and admin settings through GitHub Apps.

Allison summarizes the September 2026 update for GitHub Copilot in Visual Studio 2026, including PR exploration via the Git agent, preview BYOM support (with a breaking change to the new Agent harness), and a new flow to fix NuGet Audit vulnerabilities directly from the Error List.

Allison announces new GitHub Actions blob storage hosts that are now included in the GitHub meta API, with guidance for organizations that use network allowlists to avoid interruptions to job summaries and logs.

Allison announces a public preview feature for GitHub Enterprise Cloud with data residency that expands secret scanning to public commits on github.com, while keeping alert delivery and data handling within the customer’s residency region via verified domain matching.

Allison announces two GitHub pull request review improvements: a saved whitespace visibility preference that persists across pull requests, and a split-view change where new and deleted files use the full width to reduce wrapping and improve readability.

Niels Laute announces PowerToys 0.102 and walks through the headline changes, including new mouse utilities, a quick-access shelf for Command Palette, ZoomIt snip dictation, and new command-line tools that make it easier to script and automate PowerToys features from the terminal.

QixiaoWang introduces the Fabric Notebook Toolkit (FNTK) preview, a CLI that lets coding agents interact with live Microsoft Fabric notebooks—reading and editing cells, running code, and pulling outputs and Spark diagnostics—so iterative debugging and validation can happen directly from an agent-driven terminal workflow.

Allison announces a public preview in GitHub CLI v2.103.0 that lets you opt in to expiring, auto-refreshing OAuth credentials, reducing the risk of long-lived leaked tokens. The post explains how to enable the feature, how it behaves with Git over HTTPS, and what to watch for in scripts that cache tokens.

Eleanor White explains how GitHub is moving its Git storage to Azure, focusing on the last ultra-busy repositories blocked by cross-region latency. The post breaks down per-reference write quorums and a “virtual replica” design that makes Azure Blob Storage part of the durability path so reads and writes can scale independently.