GitHub Copilot, AI Accelerators, and Secure Cloud: The Latest in Platform and Developer Tools
Welcome to this week’s technical news roundup, with updated tools and platform features built around AI, cloud, and developer productivity. GitHub Copilot adds new agent-driven workflows, SDKs, and command-line features, while Microsoft’s Maia 200 accelerator offers more options for AI workloads on Azure. Cloud platform changes include data engineering improvements, operational changes, and advances in secure identity. You will find practical guides, resources for implementing agent protocols, and hands-on strategies for building modern applications and workflows.
This Week’s Overview
- GitHub Copilot
- Copilot Model and IDE Integration Updates
- GitHub Copilot CLI: Automation, Model Switching, and Agent Protocols
- GitHub Copilot SDK and Agent Framework
- GitHub Copilot Agent Ecosystem and Extension Mechanisms
- Copilot for Cloud, DevOps, and App Deployment
- Copilot Metrics, Compliance, and API Evolution
- Other GitHub Copilot News
- AI
- Maia 200 AI Accelerator: Launch, Architecture, and Developer Impact
- Model Context Protocol, Agent UIs, and Agentic Workflows in VS Code
- Microsoft Agent Framework, Multi-Agent Orchestration, and UI Integration
- .NET AI Integration and Stateful Conversational Patterns
- Agentic Systems, Platform Governance, and Responsible Integration
- Other AI News
- ML
- Reliability and Diagnostics in Production-Scale Reinforcement Learning
- Local-First Agentic Automation and Multi-Agent Orchestration
- Streamlined Model Evaluation and Selection with Microsoft Foundry
- Data Engineering and Platform Operations with Microsoft Fabric
- Multimodal Reinforcement Learning Advances in Medical Imaging
- Azure
- Microsoft Fabric Platform: Advancements Across Data, Security, and Integration
- Microsoft Fabric Community, Certification, and Identity Governance
- Azure Kubernetes and Traffic Management: Automation, Migration, and Multi-Region Patterns
- Azure Developer Tooling and SDK Updates
- Azure Cloud Infrastructure and AI Hardware
- Updates in Azure High Availability, Security, Monitoring, and Developer Operations
- Developer Troubleshooting and Migration Resources
- Other Azure News
- Coding
- DevOps
- Security
- AI-Assisted Detection Engineering and Supply Chain Protection
- Static Analysis: CodeQL 2.24.0 Expands Language Coverage and Security Capabilities
- Fabric Data Security: Outbound Access Protection and Workspace-Level Firewalls
- Identity Security: Passkey-Based Authentication with Entra ID
- Other Security News
GitHub Copilot
GitHub Copilot continues to grow as an AI-powered development platform by adding automation options, agent-based workflows, and support for enterprise integrations. This week, the platform introduced additional SDKs, updates to the CLI, new agent features, and targeted resources for developers and architects. Key releases include expanded support for the GPT-5.2-Codex model, agent protocol integration in the CLI, improvements in SDK orchestration, and new resources for validating Copilot-powered tools at scale. Building on last week’s coverage of agentic workflows, Copilot is now more tightly integrated across developer tools and automation workflows.
Copilot Model and IDE Integration Updates
GPT-5.2-Codex is now live in Copilot for multiple IDEs, including Visual Studio, JetBrains, Xcode, Eclipse, VS Code, GitHub.com, and GitHub Mobile. This change adds more AI coding options, builds on last week’s CLI model selection features, and enables subscribers across all business tiers to use a chat-based model picker for agent, ask, and edit modes. Make sure you meet the minimum version requirements, and check your Copilot settings for rollouts. The updates improve code review, conversational interactions, and AI-generated code in multi-language, multi-project environments. Expanding organizational context support, the rollout provides more relevant code suggestions for distributed teams.
GitHub Copilot CLI: Automation, Model Switching, and Agent Protocols
The Copilot CLI continues to improve for terminal automation. Following last week’s introduction of “Plan” mode, this week adds seamless switching between 14 AI models—including Claude Opus 4.5 and GPT-5.2 Codex—directly in the CLI. This gives finer-grained control over model selection and reasoning for code changes and analysis tasks. Voice dictation speeds up command input, and installation is now easier with Homebrew and Winget for Windows and macOS.
A public preview of the Agent Client Protocol (ACP) brings standardized integration for Copilot CLI with other tools, IDEs, and CI/CD pipelines, making Copilot automation easier to embed. New tutorials and demos show practical CLI use for onboarding, code review, debugging, and accessibility workflows. Enhanced command approval, permissions, and automation based on context further improve secure development.
- What’s New in the GitHub Copilot CLI?
- Switching Models in GitHub Copilot CLI: Demo by @shanselman
- ACP Protocol Support Now Available in GitHub Copilot CLI
- Power Agentic Workflows in Your Terminal with GitHub Copilot CLI
- How a Designer Built an ASCII Animation Tool with GitHub Copilot
- Engineering Accessibility and Animation for GitHub Copilot CLI’s ASCII Banner
GitHub Copilot SDK and Agent Framework
The Copilot SDK and agent features have been enhanced, continuing last week’s focus on cross-language SDKs, agentic workflows, and integrations for Node.js, Python, Go, and .NET. The SDK works with the Microsoft Agent Framework so you can use Copilot, Azure OpenAI, and other models together. This improves modular workflows with features for session management, streaming, and permissions.
Guides cover tasks like image extraction, agent memory for update tracking, multi-model routing, and hybrid AI that combines Foundry Local SLMs for private data with cloud LLMs for richer content. The tutorials support rapid prototyping and stronger automation for teams using AI at scale.
- Building a Color Palette App Using GitHub Copilot SDK
- Building Agents with GitHub Copilot SDK: A Practical Guide to Automated Tech Update Tracking
- Hybrid AI with GitHub Copilot SDK: Automating README to PowerPoint Generation Using Microsoft Foundry Local
- Build AI Agents with GitHub Copilot SDK and Microsoft Agent Framework
- Integrating GitHub Copilot SDK: Live Coding on Rubber Duck Thursdays
GitHub Copilot Agent Ecosystem and Extension Mechanisms
Copilot now offers an Agents tab in repositories for centralized task management, giving teams a single point to view, switch, and track coding agent activity in the desktop, browser, or terminal interface. This update builds on recent efforts for team-based agent infusions and smoother modular integration.
Comparisons between Custom Agents, Agent Skills, and MCP Tools help guide users in building the right automation mix for their workflows. Updates to the GitHub MCP Server add features including OAuth filtering, Copilot integration with pull requests, and project tracking. These build on recent work in credential management and platform tools. Also, unit test agent profiles for Logic Apps and Data Maps extend cloud-based test automation.
- Introducing the Agents Tab for Copilot Coding Agents in GitHub Repositories
- Comparing Custom Agents, Skills, and MCP Tools in GitHub Copilot
- GitHub MCP Server: New Tools for Project Management, OAuth Filtering, and Copilot Integration
- Introducing Unit Test Agent Profiles for Logic Apps & Data Maps
Copilot for Cloud, DevOps, and App Deployment
Copilot continues to play a bigger part in DevOps by adding more features for CI/CD pipeline automation, cloud migration, and app deployment. The Copilot Agent Skill for Azure Static Web Apps simplifies deployment for JavaScript frameworks, automating configuration checks and troubleshooting. This adds to previous updates supporting Java, Spring, and cloud modernization tasks. Integration with GitHub Actions and Copilot Chat now provides real-time troubleshooting and error resolution for teams adopting or migrating cloud resources.
Copilot Metrics, Compliance, and API Evolution
This week brings public preview dashboards and reporting APIs for Copilot Enterprise Cloud customers with specific data residency requirements. New reporting capabilities help organizations monitor adoption, activity, and features for compliance and data governance. As legacy Copilot metrics APIs are being replaced with more detailed endpoints, users will need to migrate to maintain up-to-date analytics.
- Copilot Usage Metrics in GitHub Enterprise Cloud with Data Residency: Public Preview
- Legacy GitHub Copilot Metrics APIs to Sunset in 2026
Other GitHub Copilot News
Best practices for Copilot usage continue to be highlighted, focusing on using Copilot Chat, building effective trust models, and validating outputs in real workflows. This aligns with Copilot’s documented approach to onboarding and code review.
Copilot’s integration into SQL Server Migration Assistant for Oracle offers new AI-powered support for large codebase migrations, supporting ongoing modernization efforts detailed last week for Java and Spring environments.
Community workshops and demos remain a central channel for hands-on learning. These resources illustrate how to use SDKs and CLI integrations, write effective prompts, and modernize applications with Copilot.
- Trust, but Verify: Building Confidence in GitHub Copilot Output
- Accelerating Oracle to SQL Server Migrations with AI and Copilot in SSMA
- Modernizing Applications with GitHub Copilot: Workshop Overview
AI
This week’s AI updates include new hardware, integration tools, and workflow enhancements, with a focus on agent protocols, orchestration, and stateful AI in developer tooling. Microsoft’s Maia 200 accelerator expands Azure’s AI hardware portfolio, and developers gain unified .NET AI integration tools, updated model orchestration, and sustainability practices.
Maia 200 AI Accelerator: Launch, Architecture, and Developer Impact
Microsoft introduced the Maia 200, a new AI inference accelerator built for large Azure workloads. It offers roughly 30% better inference per dollar and clusters scale up to 6,144 chips. Key features include 140B transistors at TSMC 3nm, FP4/FP8/FP6 tensor cores, 216GB HBM3e at 7TB/s, and liquid cooling.
Maia SDK previews provide Triton compiler integration, PyTorch support, NPL programming, a simulator, and tools for model migration. Azure-native orchestration, monitoring, and benchmarking are also included. The Maia 200 sees active use in Microsoft’s infrastructure, powering large model deployments and supporting external frameworks and OpenAI models.
Resources for SDKs and model tuning support various inference requirements, and developers can now prepare for more optimized AI environments on Azure.
- Maia 200: The AI Accelerator Built for Inference
- Deep Dive into the Maia 200 AI Inference Accelerator Architecture
- Introducing Maia 200: The AI Accelerator Built for Inference
- Microsoft Launches Maia 200 AI Accelerator on Azure for Enhanced Performance and Efficiency
Model Context Protocol, Agent UIs, and Agentic Workflows in VS Code
VS Code has added public preview support for Model Context Protocol (MCP) Apps, its first official extension supporting AI agents with interactive UI components in the chat panel. Integrations with partners such as Storybook enable richer, practical UIs for AI in the IDE.
This continues last week’s story on agent interoperability, now moving toward UI-driven agent flows inside VS Code. The Agent Sessions Day event showcased open source community extensions and AI-driven workflows that help streamline common development tasks.
- Giving Agents a Visual Voice: MCP Apps Support in VS Code
- VS Code Live: Agent Sessions Day – Exploring AI and Agentic Development
Microsoft Agent Framework, Multi-Agent Orchestration, and UI Integration
Multi-agent support has expanded in Microsoft Agent Framework (MAF). A practical guide explains integrating the Claude Agent SDK with MAF, enabling combined workflows using Claude, Azure OpenAI, and Copilot (in Python). Useful features like permissions, function registration, async orchestration, and session management are described, including agent reviewer flows.
Updates include open event-driven protocol support via AG-UI, allowing Python/FastAPI/Azure OpenAI to handle streaming, observable workflows, and interoperable interfaces across agent architectures.
- Integrating Claude Agent SDK with Microsoft Agent Framework for Advanced AI Agents
- Building Interactive Agent UIs with AG-UI and Microsoft Agent Framework
.NET AI Integration and Stateful Conversational Patterns
“.NET AI Essentials” introduces the Microsoft.Extensions.AI (MEAI) library, which provides a unified interface for OpenAI, Azure OpenAI, and OllamaSharp, supporting adapters, output parsing, streaming, and multi-modal requests. Dependency injection and middleware are built in. This “building blocks” design helps you bring standard, provider-agnostic AI features into .NET apps, closely linked with Semantic Kernel and Aspire.
Detailed guides show how to move from stateless to stateful AI interactions within .NET, including examples for managing stateful assistants that adapt over multiple sessions.
- .NET AI Essentials: Unified Building Blocks for Intelligent Apps
- Beyond the Prompt: Designing Stateful AI Experiences in .NET
Agentic Systems, Platform Governance, and Responsible Integration
Microsoft is focusing on balancing intelligence and trust across enterprise agent architectures (Agent 365, Foundry IQ, Fabric, and 365 Copilot). The strategy emphasizes unified observability, governance, and workflow integrations for secure, responsible deployment at scale.
Building from last week’s discussion of workflow specs and sector adoption, the story now includes examples from healthcare, manufacturing, and finance. Supporting tools like Agent Factory and Copilot integration improve deployment, governance, and automation.
Other AI News
On AI-powered robotics, Microsoft Cozy AI Kitchen explores moving from scripted robots to generative systems by using action tokens and natural language for more adaptive machines. Integration with Azure AI and Teams shows how to build collaborative robotics.
Last week’s coverage of physical AI continues with guides and case studies on real-world agentic applications.
-
[Inside the Future of AI‑Powered Robotics with Tim Chung Cozy AI Kitchen](/2026-01-27-Inside-the-Future-of-AIPowered-Robotics-with-Tim-Chung-Cozy-AI-Kitchen.html)
A step-by-step guide to building a free AI-powered inventory manager uses Azure Cognitive Services and .NET to help automate grocery tracking, showing accessible paths for AI automation.
Sustainability is addressed this week in a practical guide for aligning AI with environmental goals. Concrete tips cover moving workloads to energy-efficient infrastructure, optimizing processes, and selecting AI models that match business and sustainability needs. Case studies demonstrate cost and energy reductions.
ML
This week’s ML updates cover new ways to diagnose RL workflows, agent orchestration patterns, more structured evaluation methods, and enhancements for data engineering with Microsoft Fabric. Advancements are also noted for medical imaging and multimodal RL solutions.
Reliability and Diagnostics in Production-Scale Reinforcement Learning
Microsoft engineering teams released guidance on troubleshooting RL agent instability in production. Traditional aggregate metrics often miss rare errors, so this week’s article presents slice-aware diagnostics to flag drift and instability at the per-token level (using log-ratio percentiles and CDF drift analysis). Agent “tail growth” signals increase risk and needs mitigation.
Open-source Post-Training Toolkit features include TRL integration, a CLI, and distributed monitoring for RL systems, enabling more detailed RL debugging in production.
Local-First Agentic Automation and Multi-Agent Orchestration
Local-first, privacy-focused agent pipelines are growing in use. This week’s hands-on guide covers a podcast automation workflow using the Agent Framework, edge-based SLMs (Ollama), and local speech for on-premise orchestration. Modular design examples show search, review, and script generation using real-time observability with DevUI. Complete code and hardware tips are included.
Streamlined Model Evaluation and Selection with Microsoft Foundry
Model evaluation is now easier using Microsoft Foundry and GitHub Copilot. The step-by-step guide describes forming datasets, running repeatable benchmarks with metrics like F1/METEOR, and analyzing results using the Python SDK and Jupyter. Debugging and documentation guidance are provided, along with pointers to Foundry and Azure AI model leaderboard resources.
Data Engineering and Platform Operations with Microsoft Fabric
Fabric introduces workspace-level surge protection, minimizing the risk of resource spikes by limiting job concurrency and allowing exemptions for important workloads. This complements last week’s resource management changes for better cost control.
The new “Get Data with Cloud Connection” feature in Fabric Notebooks streamlines secure connections to cloud sources and provides code snippets, making developer workflows faster.
On-premises Data Gateway (January 2026 release) improves connectivity between CSV, Fabric, and Power BI, syncing with Power BI Desktop for easier data pipelines.
A new guide explains robust real-time pipelines in Fabric, including strategies for data validation, lag monitoring, network planning, logging, and clear ownership—all aimed at reducing pipeline downtime in complex environments.
- Workspace-Level Surge Protection in Microsoft Fabric (Preview)
- Fabric Connection inside Notebook (Preview)
- On-premises Data Gateway January 2026 Release Overview
- Building a Reliable Real-Time Data Pipeline with Microsoft Fabric
Multimodal Reinforcement Learning Advances in Medical Imaging
The GigaTIME project applies multimodal RL to radiology/pathology report writing, fusing text and image data for clearer, patient-specific documentation generation. Insights cover modeling, simulation, and automation, with actionable examples drawn from Microsoft’s latest research.
Azure
Azure’s recent changes introduce enhancements in data engineering, platform automation, developer tooling, high-availability infrastructure, cloud hardware, and troubleshooting resources.
Microsoft Fabric Platform: Advancements Across Data, Security, and Integration
The latest Fabric feature summary brings new data engineering and governance updates. AI-based semantic model summaries make OneLake Catalog navigation easier, while new organizational structures and configuration features improve overall governance. GitHub integration now supports explicit data residency and branch-based commits. A preview of the Fabric Python SDK streamlines programmatic workspace management.
Security improvements include new role APIs, item-level controls, and immutable logs for compliance. The Lakehouse engine now supports Spark session sharing for better concurrency, while VS Code notebooks gain multi-workspace sync and secure connections. Materialized Lake Views now support create/replace, and Data Warehouse automation gets improved stats, result caching, and more flexible statements. Real-Time Intelligence adds in-VNet streaming, MQTT v3, weather APIs, and Copilot-powered KQL. Data Factory introduces incremental copy and hybrid data connectors.
These changes enhance developer workflows, automation, security, and compliance—supporting both low-code and code-first teams.
Microsoft Fabric Community, Certification, and Identity Governance
The Fabric Influencers Spotlight (Jan) provides best practices and sample workflows, such as building surrogate keys for Data Warehouses, Power BI modeling techniques, write-back patterns, and integration guides. Applied ML concepts, security models for OneLake, and streaming operations round out the guides. Updates also highlight new certifications and architecture resources.
Workspace identity quotas are now easier to manage. Admins can raise the default cap and adjust limits via the portal or REST API, making large deployments and governance more streamlined.
- Fabric Influencers Spotlight January 2026
- Managing Fabric Identities Limits: Tenant Control and Governance
Azure Kubernetes and Traffic Management: Automation, Migration, and Multi-Region Patterns
A new AKS multi-region architecture proof-of-concept demonstrates integrating External DNS with Azure Traffic Manager. Service annotations in AKS allow DNS endpoint profiles to be managed automatically. This supports blue-green, weighted, or failover routing—improving automation for global cloud workloads.
Migration guides for deprecated AKS Ingress NGINX controllers are now available. Moving to Gateway API and Application Gateway for Containers is recommended as support for NGINX ends in March 2026. The steps emphasize manifest inventory, YAML conversion, and phased rollout for compliance.
- Integrating External DNS with Azure Traffic Manager for Kubernetes Multi-Region Deployments
- From Ingress to Gateway API: Migrating Kubernetes Edge in Azure with Application Gateway for Containers
Azure Developer Tooling and SDK Updates
The Azure Developer CLI (azd) January 2026 release enhances configuration and performance processes. New improvements include streamlined config commands, multi-tenant authentication, credential checks, and container build fallback scenarios. Infrastructure tools like Bicep and Terraform are now auto-detected, and file-based caching increases speed for deployment workflows. Deprecated login commands and App Service integrations have been removed. A growing catalog of community templates and SDKs in .NET, Go, Java, and Python support more scenarios, including experimental AI Foundry and new model support in Azure AI Search.
- Azure Developer CLI (azd) – January 2026: Configuration & Performance
- Azure SDK January 2026 Release Highlights
Azure Cloud Infrastructure and AI Hardware
Azure has released Da/Ea/Fasv7-series VMs with AMD’s 5th Gen EPYC “Turin” CPUs, offering up to 35% more CPU performance, 4.5 GHz burst speeds, and up to 160 vCPUs per VM. These updates add more compute, storage, and networking power with improved security features and integrated HSM. Documentation and region info are available for planning adoption.
A technical deep dive provides insight into Microsoft’s approach to building AI infrastructure from silicon through datacenter design, with a focus on reliability and future-readiness.
- Announcing General Availability of Azure Da/Ea/Fasv7-series VMs based on AMD ‘Turin’ processors
- Silicon to Systems: How Microsoft Engineers AI Infrastructure from the Ground Up
Updates in Azure High Availability, Security, Monitoring, and Developer Operations
Azure NetApp Files now has Elastic ZRS for replicating storage volumes synchronously across Availability Zones. This helps SAP, Kubernetes, and compliance workloads achieve higher availability with shared QoS and automated deployments.
The Azure Local LENS Workbook offers large-scale operational insight for fleet management (AKS, Azure Local). This update supports compliance planning and smoother fleet operations.
API Management gets new capabilities for customizing Retry-After headers, so developers can offer better try-again advice in API responses. This builds on recent support for troubleshooting and robust operation.
- Azure NetApp Files Elastic ZRS: Simplifying Multi-AZ File Storage High Availability
- Azure Local LENS Workbook: Proactive Operations for Large-Scale Azure Local Deployments
- Transforming Retry-After Headers in Azure APIM: A Step-by-Step Guide
Developer Troubleshooting and Migration Resources
Recent fixes and guides address issues such as persistent crashes for ServerDiscoveryService.exe in Azure Migrate (Windows Server 2022, .NET 8) and test discovery problems in Logic Apps’ VS Code test framework (from MSTest versioning). Practical troubleshooting steps are provided to help teams maintain smooth devops workflows.
- ServerDiscoveryService.exe Crash Bug in Azure Migrate Physical Server Discovery
- Fixing Disappearing Logic Apps Standard Test Framework Tests in VS Code
Other Azure News
Azure App Testing now requires a minimum of 10 users per engine and 10 minutes per load test. Review test configurations for cost efficiency.
A step-by-step tutorial walks through deploying MoltBot, an AI assistant, to Azure Container Apps. It covers secure devops, troubleshooting, and log setup—all foundational for secure cloud-based AI deployment.
Data Exposed previews SQL Server 2025 features like REST API endpoints, vector support, and new AI tools for search and analytics.
A video-based Azure training course shares introductory tips, resource optimization practices, labs, certification prep, and Copilot chat setup.
- Understanding Minimum Usage Charges in Azure App Testing Load Tests
- Deploying MoltBot: 24/7 Personal AI Assistant on Azure Container Apps
- REST APIs, Vectors, and AI in SQL Server 2025
- Learn Azure in 2026
Coding
Recent updates in coding focus on expanded language features, developer tools, and practical advice for .NET, C#, Visual Studio, and programming strategies. The emphasis is on maintainability, performance, and immediate modernization tips.
.NET and C# Development: Practical Instrumentation, Performance, and Language Features
Andrew Lock’s guide to System.Diagnostics.Metrics APIs teaches metrics, counters, and monitoring integration for ASP.NET Core (using dotnet-counters, Datadog, and OpenTelemetry). Steve Gordon’s tutorial connects benchmarking tools and practical performance gains, showing how to find memory allocation bottlenecks and differences in reporting tools. Nick Chapsas’ “100 Essential Tips” round up key best practices for C# devs and introduce Collection Expression Arguments for C# 15/.NET 11, bringing easier parameter handling. He also explores nuanced Boolean behavior. Sentry logging integration now improves observability and connects errors, traces, and logs in .NET and MAUI apps.
- Creating and Consuming Metrics with System.Diagnostics.Metrics APIs in .NET
- Application Performance Optimisation in .NET: Practical Techniques and Tools
- Solving .NET Memory Allocation Discrepancies: The Case of the Missing 18 Bytes
- 100 Essential Tips for Writing Better C# Code
- Introducing Collection Expression Arguments in C# 15 and .NET 11
- The Boolean Trick No C# Developer Knows About
- Integrating Sentry Logging with .NET Applications
Language Design, Tooling Philosophy, and AI in Programming
Insights from Anders Hejlsberg, the creator of C# and TypeScript, highlight the importance of fast feedback, backward compatibility, and open collaboration for large codebases. Interviews outline the migration of TypeScript to Go and discuss the benefits of Go’s garbage-collected architecture. Hejlsberg also notes AI can boost productivity but does not yet provide the determinism compilers require. TypeScript’s mission of adding opt-in static typing and better tooling to JavaScript is clarified.
- 7 Key Lessons from Anders Hejlsberg: Architect of C# and TypeScript
- TypeScript inventor Anders Hejlsberg: AI’s Role in Language Porting and Development Tools
- Anders Hejlsberg on the Origins of TypeScript and Fixing JavaScript
WebAssembly and Cross-Platform Coding: .NET, Uno, and Microsoft’s Vision
WebAssembly support is expanding, with improved AOT compilation for .NET 10 and multi-threaded workflows using Uno Platform. New surveys show faster browser loads (Chrome, Firefox, Safari), wider runtime adoption (Node.js, Wasmtime, Deno), and broader language support in Wasm 3.0.
Other Coding News
Visual Studio’s January 2026 update brings editor improvements (scrolling, clipboard, suggestions, Markdown preview), driving faster development. The ‘winapp’ CLI preview allows simplified access to modern Windows APIs for non-VS projects, lowering the barrier for Windows API adoption from cross-platform environments.
Microsoft will present at NDC London 2026, covering .NET 10, Copilot coding, and performance, and will offer guidance for effective modernization and productivity.
- Visual Studio January Update — Enhanced Editor Experience
- Microsoft Previews Winapp: Simplifying Access to Modern Windows APIs for Developers
- Join Microsoft at NDC London 2026 – Let’s Build the Future of .NET Together
DevOps
This week’s DevOps updates highlight actions for critical tool deprecation, new ARM CI/CD automation, and improvements in workflow editing and collaboration. Teams should plan for deprecations and migrations, update dependency management processes, and utilize workflow enhancements for compliance and incident response.
GitHub Platform Updates: Actions, Codespaces, and Dependency Management
GitHub is deprecating Dependabot pull request comment commands, and recommends managing PRs with the web UI, CLI, or REST APIs. Guides are provided for migrations.
Scheduled upgrades for Docker/Docker Compose in GitHub runners (Feb 9) may require updates to existing automation. Actions now include a case function for conditional logic, improved debug logs, and major editor workflow enhancements. Metadata support and validation are improved, and Arm64 runners are available for private Linux/Windows repos. Codespaces brings enterprise data residency options (public preview).
- Deprecation of GitHub Dependabot Pull Request Comment Commands
- Docker and Docker Compose Upgrades on GitHub Hosted Runners
- GitHub Actions: Enhanced Editing, Debugging, and New Case Function
- GitHub Actions: Linux and Windows arm64 Runners Now Supported in Private Repositories
- GitHub Codespaces Public Preview for Enterprise Cloud with Data Residency
Kubernetes Ingress Controller Deprecation and Migration
The Kubernetes community has announced the deprecation of the Ingress NGINX controller (support ends March 2026). Teams are encouraged to migrate early, exploring Gateway API, Envoy, Traefik, Cilium, or F5 NGINX as alternatives. Feature sets differ and automatic migration is unsupported. Extensive guidance is available for this transition.
Automation, Observability, and SRE Agent Integration on Azure
This week, guides show how to link Dynatrace logs and Azure deployment data by using the Azure SRE Agent with Model Context Protocol. Subagents for log analysis can reduce incident response times, and the guide covers both configuration and extensibility for on-prem or remote management with tools like Grafana and Jira Cloud.
- Unifying Scattered Observability Data from Dynatrace and Azure for Self-Healing Deployments with SRE Agent
- How SRE Agent Bridges Grafana and Jira for Incident Automation on Azure
Evolving DevOps Workflows: Specification-Driven and Collaborative Development
A step-by-step approach for teams looking to transition to spec-driven, collaborative workflows is provided, including templates for team contracts, CI/CD validation, artifact traceability, and architecture discussions. The guide focuses on ensuring clarity, accountability, and robust DevOps for both monolith and distributed service patterns.
Other DevOps News
GitHub Issues now supports semantic search for more relevant results, with an opt-out option. The latest GitHub podcast covers review management and Model Context Protocol improvements, and the Innovation Graph now provides expanded data for open source adoption and research.
- Semantic Search Enhancement for GitHub Issues Now in Public Preview
- GitHub’s Year in Review: Accessibility, Model Context Protocol, and Developer Wins
- GitHub Innovation Graph: 2025 Recap and Future Plans
Security
The latest security updates focus on AI-powered detection, vulnerability scanning, CodeQL language expansion, new data security controls, and enhanced authentication from Microsoft Fabric and Entra ID.
AI-Assisted Detection Engineering and Supply Chain Protection
AI-powered detection now helps security analysts extract technical indicators from threat reports using Retrieval Augmented Generation and mitigation mapping to MITRE ATT&CK. Best practices stress deterministic prompts, structured output, and validation against golden datasets.
A vulnerability report for LangGrinch (CVE-2025-68664) in LangChain Core outlines the serialization injection risks, remediation, and how to detect and hunt for exploits using KQL and Defender for Cloud.
- Accelerating Threat Detection Engineering with AI-Assisted TTP Extraction
- Case Study: Securing AI Application Supply Chains
Static Analysis: CodeQL 2.24.0 Expands Language Coverage and Security Capabilities
CodeQL 2.24.0 adds support for .NET 10, C# 14, and Swift 6.2.2/6.2.3. It updates JavaScript/TypeScript, Python, Java/Kotlin, C/C++/Rust, and Axum detection. Security improvements target CSRF in ASP.NET Core, more injection sinks, and better taint tracking. The release also enhances false positive reduction for current frameworks.
This builds on last week’s update to CodeQL 2.23.9, reflecting the ongoing push to secure more languages and frameworks.
Fabric Data Security: Outbound Access Protection and Workspace-Level Firewalls
Microsoft Fabric introduces preview features for workspace outbound access protection and workspace-level IP firewalls. These controls let admins restrict outbound network flows and define IP rules per workspace, providing more options for data exfiltration prevention and compliance.
- Workspace Outbound Access Protection for Data Factory and OneLake Shortcuts (Preview)
- Introducing Workspace-Level IP Firewall Rules in Microsoft Fabric (Preview)
Identity Security: Passkey-Based Authentication with Entra ID
Entra ID now deploys passkey-based authentication, supporting synced and device-bound credentials for more secure access and easier administration.
Other Security News
A tutorial details how to set up two-factor authentication using TOTP codes via Azure Functions and Key Vault, guiding through secure setup, backend, and frontend for cloud-native 2FA.
A recent GitHub Podcast episode covers the Secure Open Source Fund, with maintainers sharing how funding drives security best practices, SBOM adoption, and workflow hardening. AI and Copilot are being used for advanced vulnerability detection in open source.