Content by techhub (426)

This week's .NET roundup centers on making agent and MCP workloads reliable in the real world, from durable long-running tasks on Azure App Service to the stateless-first direction in MCP C# SDK 2.0. On the security and supply chain front, NuGet.org is capping API key lifetimes (pushing teams toward OIDC-based Trusted Publishing), while ASP.NET Core in .NET 11 preview expands automatic CSRF defenses using Fetch Metadata headers. We also cover practical developer experience updates, including richer CI test reporting in Microsoft.Testing.Platform, Blazor performance and lifecycle tweaks in .NET 11 Preview 7, and a concrete local AI sample for live speech-to-text with Foundry Local.

This week's AI roundup focuses on agents becoming easier to package, safer to run, and simpler to govern across tools and teams. MCP took a practical step forward with a standardized plugin format, a stateless-first MCP C# SDK 2.0, and a hosted Azure DevOps Remote MCP Server that reduces self-managed plumbing. On Azure, the conversation shifted from demos to production patterns: durable task orchestration, approval gates, built-in OpenTelemetry traces, and Kubernetes trust boundaries for multi-agent safety. GitHub Copilot updates leaned into the operations layer with model lifecycle changes, MCP allowlists, automation triggers, and cost and usage reporting that admins can actually act on.

This week's DevOps roundup focuses on keeping pull request review scalable as teams ship larger, AI-assisted changes. GitHub's stacked pull requests (public preview) introduce a practical way to split big diffs into reviewable layers across the UI, mobile, and the GitHub CLI, while new organization-level PR limits give maintainers a simpler way to manage contributor backlog. GitHub also adjusted Code Quality so it no longer auto-requests Copilot review, pushing teams to make automation and approval gates an explicit policy choice.

This week's Azure roundup focuses on what it takes to run AI agents reliably in production: durable execution, clear guardrails, and better day-2 visibility. Highlights include a durable pattern for MCP Tasks on App Service, built-in OpenTelemetry tracing for Functions Agents, and an approval-gated operations assistant architecture that keeps humans in control of write actions. We also cover Kubernetes isolation with Kars, broader model choice through Azure AI Foundry (including Fireworks AI GA), and practical guidance on evaluation and red teaming with Foundry and PyRIT.

This week in machine learning, Microsoft Fabric focused on making data and events easier to reuse across analytics and ML pipelines, from OneLake mirroring previews (Azure Monitor Log Analytics and AWS Glue-cataloged Iceberg) to more end-to-end streaming options with Change Event Streaming, Eventhouse, and clearer event architecture guidance. On the operations side, Fabric added practical safeguards and runbook improvements with Item Recovery becoming the default, a new VNet gateway evaluation engine preview, and scheduled User Data Functions for managed recurring logic. We also got concrete agent-building guidance with Microsoft IQ MCP endpoints across web, work, Fabric, and Foundry, and Microsoft Research released PRISM2 pathology foundation model weights on Hugging Face for research and benchmarking.

This week in Security, the focus shifted from building agent guardrails to operating them safely in real enterprise environments, with clear patterns around least privilege, approval gates, and centrally enforced allowlists. On the developer platform side, identity-first CI/CD continued to replace long-lived secrets, from Azure DevOps workload identity authentication to NuGet.org moving API keys to a 30-day lifetime and pushing OIDC trusted publishing. Supply chain defenses broadened with expanded Dependabot malware advisories and fresh threat intel on an npm worm that abuses preinstall hooks to steal credentials. Hybrid and SOC operations rounded out the week with Azure Local confidential compute and SIEM integrations, plus case studies on macOS evasion tactics and Defender-driven ransomware containment.

This week's GitHub Copilot updates were about making agent workflows portable, governable, and easier to operate. MCP and the Agent Plugins 1.0 spec continued to solidify a shared integration layer, while Azure DevOps added a hosted, Entra ID-authenticated Remote MCP Server that reduces local setup. On the operations side, Kimi K3 reached GA, September model deprecations got a clear timeline, and billing and ROI reporting moved further into first-party GitHub dashboards. Rounding it out, enterprise controls (MCP allow/deny lists, team-specialized managed settings, and third-party agent usage reporting) and day-to-day UX tweaks (review effort levels, comment-triggered automations, and better session visibility in VS Code) made Copilot feel more predictable in real team workflows.

This week in Azure, the focus shifted from AI prototypes to production agentic apps, with GPT-5.6 now GA in Microsoft Foundry, stronger Agent Service hosting and observability, and practical IDE support in the Foundry Toolkit for VS Code. FinOps and governance got more actionable too, as MCP toolsets exposed cost and pricing data to agents, and APIM patterns tightened real-time enforcement for BYOK and token controls. On the platform side, Azure API Management introduced an AI Gateway tier in preview, Azure Monitor logs moved closer to Fabric and OneLake via zero-copy style previews, and Terraform AzureRM provider 5.0 GA landed with upgrade-impacting changes. The thread running through everything is clearer operational controls (identity, telemetry, policy, and budgets) that help teams ship AI and cloud workloads with fewer surprises.

This week's DevOps roundup is anchored in supply chain hardening, with npm adding publish-time malware scanning, dual-use metadata requirements, and tighter 2FA enforcement that will change how automated releases behave. GitHub followed up with new guardrails in Actions and Dependabot, including approvals for suspicious workflow runs and broader malware advisory coverage to slow down common abuse paths. On the delivery side, stacked pull requests moved into public preview (and into the Copilot app), while Copilot governance expanded with MCP connections, enterprise managed settings, and clearer cost controls. We also cover practical platform work: Terraform AzureRM 5.0 GA, policy-driven Log Analytics retention, Azure APIM AI Gateway preview, and tooling updates that make agents easier to debug and safer to operate.

This week's ML roundup focuses on turning ML work into repeatable, production-friendly systems. Microsoft outlined an API-driven GeoAI pipeline for generating GIS-ready vector layers from Earth observation imagery using the MARS model, while Microsoft Research shared Echoverse, a set of stateful synthetic environments with database-grounded verifiers to make computer-use agent training and evaluation more reliable. On the data platform side, Fabric and OneLake updates emphasized zero-copy access to telemetry and open table formats, stronger governance and outbound controls, and more operable real-time and Spark foundations that feed analytics and ML workflows.

This week's Security roundup links attacker tradecraft with platform-side guardrails, starting with Microsoft's CaptiveCrunch reporting on Midnight Blizzard targeting travelers through captive portals and device code authentication abuse. On the supply chain front, npm and GitHub tightened automation paths with restrictions on bypass-2FA tokens, publish-time malware scanning, expanded malware advisories for Dependabot, and workflow runs that can be held for approval in public repos. Microsoft and Azure updates rounded out the week with identity and AI protections (including agentic SecOps and expanded external AI red teaming), plus concrete governance controls across Azure Policy, Fabric encryption, and data egress boundaries.

This week's GitHub Copilot roundup focuses on model churn and tighter governance: Gemini deprecations forced admin action, while new default enablement and team-targeted model policies changed how access evolves over time. GitHub Models retired, pushing model operations toward Microsoft Foundry while Copilot stays the developer-facing layer for chat, agents, and review. On the product side, Grok 4.5 and MAI-Code-1-Flash add new tradeoffs around context, latency, and token efficiency, and client updates across VS Code, Visual Studio, JetBrains, and the Copilot app make agent workflows easier to run at scale. We also cover the practical side of adoption, including expanded usage rollups, budget enforcement that can actually stop overages, and managed settings that extend to the Copilot app, cloud agent, and remote control.

This week's .NET roundup centers on MCP becoming a practical foundation for agent tooling, with the MCP C# SDK v2.0 and new Agent Framework hooks that let agents discover skills at runtime with clearer safety boundaries. Visual Studio and VS Code also pushed further into agent-driven workflows, from a Copilot Chat Agent preview to an MCP-backed MSBuild binlog analyzer that can explain failures and performance bottlenecks. On the engineering side, the focus shifted to reliable automation (a unit-test agent that validates tests end-to-end and traced multi-agent orchestration with OpenTelemetry) plus a solid web security refresher on Fetch Metadata headers for defense-in-depth CSRF protection.

This week's AI roundup centers on turning fast-moving model and agent ecosystems into something you can run in production: governed, observable, and cost-controlled. GitHub retired GitHub Models while Copilot continued rotating available models, pushing enterprises to tighten policy management, managed settings, and usage reporting. At the same time, MCP gained more standardized building blocks (including the MCP C# SDK v2.0 and broader IDE integrations), and Azure added more runtime control points through API Management's AI Gateway tier and new cost-management toolsets for agents.

Welcome to this week's GitHub Copilot roundup, where the story is less about a single assistant and more about a platform you can tune, govern, and measure. The model picker keeps expanding (Claude Opus 5 and Gemini 3.6 Flash), while cloud agents show up in more places like Linear, GitHub Mobile (for failed Actions checks), and GitHub Issues with new automation controls. On the operations side, Copilot adds clearer AI Credits visibility, cost center pools, and an impact dashboard, and GitHub Code Quality reaches GA with Copilot Autofix bringing fix suggestions directly into PR workflows.

This week's Security roundup tracks a clear shift toward platform-enforced guardrails for both AI-assisted development and cloud operations. GitHub and Azure shipped changes that make controls more explicit and easier to standardize, from stateless MCP support and model selection safeguards in Copilot to Kubernetes-native admission policy, DDoS tuning, and tighter data plane access rules. On the supply chain side, Dependabot's default cooldown and GitHub Code Quality's PR gating aim to reduce risky churn while catching issues earlier. Threat reporting also reinforces that defenders need coverage beyond email as Teams-based lures and vishing keep growing, while incident response becomes more packaged through new insurer-aligned options.

This week's Weekly AI Roundup is about AI features that are starting to look like real workflow infrastructure: more Copilot model choices (Claude Opus 5 and Gemini 3.6 Flash), more places to run coding agents, and clearer controls for approvals, auditability, and spend. Copilot's ticket-to-PR story got deeper with Linear GA, mobile-triggered agent fixes for failed CI checks, and new agent automation controls in GitHub Issues, while GitHub Code Quality reached GA with enforceable gates and Autofix in PRs. On the platform side, MCP moved toward a stateless spec and stronger governance patterns (including Azure API Management and OBO identity), and Microsoft pushed more of the "ship and operate" stack with Agent Framework releases, Foundry Toolboxes, and an observability agent for day-two operations.

This week's ML roundup focuses on the practical path from research ideas to systems you can ship. Microsoft open-sourced ML Video Codec (MLVC) with code, weights, and tooling for real-time deployment on commodity NPUs, while Fabric and SQL updates show clearer patterns for streaming fresh signals into ML enrichment and feature updates. On the platform side, OneLake and Lakehouse improvements reduce friction around query iteration, cross-platform table access, and tighter inbound controls. We close with lessons on scaling large training runs across AMD and NVIDIA via Foundry Managed Compute and a look at Microsoft IQ as a governance-first way to feed agents the right context.

This week's DevOps roundup connects day-2 guardrails, agentic workflows, and stricter pull request gates. Azure Policy for Kubernetes moves validation closer to the API server with VAP and CEL, while GitHub and VS Code keep pushing Copilot agents earlier into issues, PR creation, and even mobile-first CI triage. On the reliability side, GitHub Code Quality and Dependabot's default cooldown add more predictable merge-time checks, and Azure deep dives on large-scale migrations and hybrid Logic Apps highlight rollout and rollback patterns that hold up under real traffic.

Welcome to this week's Weekly Azure Roundup, where the theme is tightening the path from prototype to production across governance, security, and operations. AKS governance takes a Kubernetes-native step forward with CEL and Validating Admission Policy support, while networking and protection updates add practical controls like IPv6 for VPN Gateway and custom DDoS policy tuning. On the platform side, Azure Functions runtime updates and a large-scale migration case study highlight what it takes to keep serverless estates current under live load, and the agent stack continues to fill in with Foundry design tooling, delegated auth, a released Agent Framework runtime, and GA observability in Azure Monitor. We also cover new AI model options, expanding HPC capacity, and data streaming and network controls across Azure SQL and Fabric, plus hybrid updates spanning Azure Local storage and Logic Apps Hybrid on self-managed Kubernetes.

This week in .NET, Microsoft Agent Framework hit a more practical stride with a batteries-included runtime (Harness) and Declarative Workflows 1.0 that moves multi-agent orchestration into YAML you can review and change without rewriting core code. On the web stack, .NET 11 Preview 6 focused on safer defaults and sharper APIs, including async validation for minimal APIs, automatic CSRF protection, and OpenAPI updates that help keep server and client contracts aligned. We also saw VS Code refine the in-editor agent experience and more hands-on guidance for building MCP servers in .NET, with sampling and logging patterns that improve repeatability and observability. Rounding things out, hybrid integration stayed in focus with a detailed walkthrough for running Azure Logic Apps Hybrid on a self-managed Kubernetes setup.

This week's Weekly .NET Roundup centers on two tracks: staying current with July 2026 servicing updates (including CVE fixes, containers, and known issues) and getting early signal from .NET 11 Preview 6. Mobile teams have a clear action item with .NET MAUI moving to CoreCLR-only on Android, iOS, and Mac Catalyst, while Visual Studio continues to expand Copilot workflows with built-in Agent Skills, model selection, and new extension governance options. We also cover practical modernization and agent operations patterns, from a structured ASP.NET-to-.NET 10 course to OpenTelemetry-instrumented local agents, plus a Durable Functions approach for long-running MCP tools on Azure Functions.

This week, GitHub Copilot got easier to measure and easier to govern, with expanded usage metrics (including Copilot app activity) and new repository-level reporting that links adoption to where work ships. Security workflows tightened as AI detections land directly in pull requests, agentic autofix can open draft remediation PRs with validation reruns, and the Copilot app adds an on-demand /security-review check. On the tooling side, Visual Studio and JetBrains pushed multi-model choice, endpoint control, and safer integrations (including MCP trust and BYOK endpoints), while Copilot code review became more configurable and even usable from GitHub Mobile for quick fixes.

This week's Security roundup connects active threat intel with the platform controls teams can use to reduce exposure. Microsoft detailed ACR Stealer intrusion chains and ShinyHunters-linked OAuth abuse against Salesforce, while a real @asyncapi npm compromise showed how CI misconfigurations and trusted publishing can turn PRs into malware delivery. On the platform side, GitHub shipped more in-PR security signals (AI detections, agentic autofix, and Copilot security review) plus safer supply-chain defaults like Dependabot cooldowns and stronger secret scanning automation. Rounding it out, Entra ID moves to passkeys by default and new guidance focuses on governing AI agents and tool access with least privilege, gateways, and auditable authorization.

This week's DevOps roundup centers on tightening the software supply chain and pulling security and AI tooling into the same governed, review-first workflows teams already use. We cover the AsyncAPI npm compromise and the concrete CI/CD misconfiguration pattern behind it, plus new GitHub guardrails in Dependabot and secret scanning that help reduce exposure. On the platform side, Azure content focused on repeatable operating models for Kubernetes and AI, with practical updates in edge programmability and storage metrics. We also look at how enterprises can measure, control, and test AI agents like production software, from PR-visible detections and agentic autofix to load testing, deterministic evaluation, and AI gateway enforcement.

This week's AI roundup centers on a clear operational shift: centralize access, authorization, and auditability as agents move from demos into real systems. Azure API Management and Foundry's AI Gateway control plane show how teams can enforce token limits, routing, and telemetry, while MCP's enterprise-managed authorization patterns tighten end-to-end tool access using Entra ID and App Service auth. On the engineering side, stable Agent Skills for Python, long-running MCP tools on Azure Functions, and richer MCP outputs push agent tooling toward repeatable, debuggable workflows. Copilot and security updates round it out with repo-level usage metrics, more configurable code review, AI-powered code scanning detections, and agentic autofix that make cost, policy, and least-privilege design part of everyday development.

This week focused on making ML systems easier to run in production, from securing outbound AI calls in SQL Server 2025 to tightening governance and cost visibility across OneLake. Fabric updates added storage tiering and reporting, plus clearer architecture patterns for building an AI-ready data foundation. On the real-time side, Eventstreams matured with stronger connectors, event-time processing, and practical CDC-to-action reference flows, while new guidance covered context-aware AI layers and safer automation patterns for calling Fabric REST APIs.

This week's Azure roundup focuses on practical ways to put AI agents behind enterprise guardrails, with Azure API Management (APIM) emerging as the control point for identity, spend limits, routing, and observability. Azure AI Foundry now adds an AI Gateway control plane that can create or associate an APIM AI Gateway from the Foundry admin console, giving platform teams a clearer governance surface while keeping the data path and policies in APIM. The posts also show how to enforce per-consumer entitlements, emit per-model token metrics to Azure Monitor and Application Insights without changing client code, and layer Azure Front Door plus WAF for defense in depth. The theme running through all of it is moving from policy to proof, where continuous telemetry and audit-ready evidence become part of operating agent platforms at scale.

This week's Security roundup centers on making security controls easier to apply at scale, from production-grade guardrails for AI agents to stricter, more automatable supply chain defaults. GitHub and npm updates push publishing toward identity-based workflows (OIDC) and improve coordinated remediation with innersource advisories, while CodeQL and secret scanning add clearer triage and coverage for AI-era risks like system prompt injection. On the Microsoft side, Secure Future Initiative updates show how continuous control validation and crypto readiness (including post-quantum planning) are becoming measurable engineering work, and Azure expands key custody options with external key management for Managed HSM.

This week's AI roundup tracks a clear shift from demos to deployment: Microsoft Foundry and Azure shipped updates that treat agents like governed services, with tracing, evaluation, hosting, and regional data options built in. GitHub Copilot followed the same path, expanding app access and BYOK model switching while tightening enterprise controls for policy, telemetry (OpenTelemetry), and spend (budgets, cost centers, and billing UI). Across cloud operations and developer workflows, MCP keeps showing up as the bridge to real tools, and security teams are adapting with prompt-injection detection in CodeQL and Microsoft's multi-agent hardening work. We also round out the week with applied AI progress, including Aurora 1.5's ensemble weather forecasting and a practical case study on building safer real-time voice experiences.

This week in machine learning, Microsoft pushed both ends of the stack toward more operational AI: Aurora 1.5 adds hourly resolution, 22 variables, and ensemble uncertainty so weather model output looks more like a forecast product. On the data platform side, Fabric and SQL updates focused on making AI workloads practical to run at scale, with GPU-accelerated warehouse queries, controlled Spark runtime release channels, and more direct hooks for embeddings and agent context via MCP. We also saw governance move closer to runtime behavior, including sensitivity labels that can guide agent actions and clearer patterns for shipping Fabric Apps into production.

This week's DevOps roundup focuses on taking agents from experiments to production systems, with clearer governance, better telemetry, and practical cost controls. Microsoft Foundry and Azure operations updates push hosted agents, SRE workflows, and autonomous alert triage toward day-2 reliability, while resiliency guidance shifts from design-time checklists to continuous validation. On the developer platform side, GitHub shipped more structured workflow management (issue fields and PR dashboards), tighter policy controls (rulesets), and stronger supply-chain tooling (innersource advisories, secret scanning metadata, CodeQL updates, and npm v12 security changes). Across the board, the throughline is making automation auditable, repeatable, and predictable at scale.

Welcome to this week's Weekly Azure Roundup, where the theme is getting agentic systems and cloud operations closer to production reality. Microsoft Foundry and Agent Framework both shipped concrete building blocks (hosted agents, orchestration patterns 1.0, skills packaging, tracing, and cost controls) while Azure also leaned into "agent-ready" design workflows with Diagram Builder generating WAF checks, pricing estimates, and Bicep. On the platform side, resiliency work showed up from edge routing improvements in Azure Front Door to new operational agents in Azure Monitor and GA for Azure SRE Agent, with security and integration updates rounding out the week (external key management for Managed HSM, Service Bus network posture guidance, and Logic Apps features for legacy formats and hybrid deployments).

Welcome to this week's Weekly .NET Roundup, where the themes are clear: tighter security scanning and more practical, governed agent workflows. CodeQL 2.26.0 adds AI prompt injection detections and improves query accuracy across languages, which is relevant for .NET repos that mix C#, JavaScript/TypeScript, and GitHub Actions-heavy CI. On the productivity side, Copilot's new upgrade canvas, real-world cross-repo agent automation patterns, and Agent Framework updates (orchestration patterns and stable skills) show how teams are turning agents into repeatable workflows. We also cover VS Code Copilot governance details, Logic Apps Standard moving closer to Functions-style hosting for .NET, and the growing link between agent platforms (Foundry) and UI patterns in Blazor.

Welcome to this week's GitHub Copilot roundup, where the big theme is Copilot shifting from a single assistant into a platform you can govern. The Copilot desktop app is now available across all plans and adds Bring Your Own Key (BYOK), while the model picker expands with new OpenAI GPT-5.6 variants and Copilot's first open-weight option (Kimi K2.7 Code). On the admin side, managed settings via MDM, enterprise-managed OpenTelemetry export, and easier budgets in the billing UI make it more realistic to roll out agents at scale with clear policy, telemetry, and spend controls. Across IDEs and GitHub Mobile, agent workflows gain better status visibility, permissions, and repeatability, alongside engineering notes that show why benchmarking, A/B tests, and incident learnings matter when models and tools change.

Welcome to this week's Security roundup, where agent governance moved from design guidance to concrete tooling across Kubernetes, developer IDEs, and Microsoft Security. We look at kars and AGT patterns for isolating and auditing agent behavior, plus new mitigations for MCP risks like tool metadata poisoning and untrusted server connections. On the platform side, GitHub tightened CI and audit controls (read-only cache tokens, reduced PAT use, Copilot session streaming) and expanded secret scanning into a more operational model. We also cover integrity and egress controls in Azure and Fabric, and why resilience drills and a faster post-quantum timeline mean security planning needs to start earlier.

Welcome to this week's .NET Roundup. Microsoft set a clear planning deadline with .NET 8 and .NET 9 ending support on November 10, 2026, pushing teams to budget upgrade work toward .NET 10 and revisit TargetFramework and dependency constraints. On the AI tooling side, the focus shifted from chat-based demos to repeatable workflows: MCP-powered build diagnostics in GitHub Actions, practical auditing and OpenTelemetry for agent governance, and patterns for building tools (Functions, search) with safer data access. We also saw platform-focused updates like SkiaSharp 4 for .NET MAUI, a C# preview feature for closed class hierarchies, Azure Blob client-side integrity checks reaching GA, and a useful warning about ambiguous routes when inheriting ASP.NET Core controllers.

Welcome to this week's Azure roundup, where reliability and agentic workloads got more concrete across the platform. Chaos Studio moved closer to repeatable resilience testing with Workspaces and scenario reports tied to Azure Monitor, while Azure Monitor added Dynamic Thresholds for Prometheus and OpenTelemetry to catch anomalies without constant retuning. On the agent side, updates ranged from the kars runtime on AKS and MCP tooling patterns on Azure Functions to new security guidance on tool description poisoning, with a consistent message: automation only works in production when identity, governance, and auditability come first.

Welcome to this week's Weekly AI Roundup, where the common thread is taking agentic AI from demos to operations: more automation, more guardrails, and more ways to prove what happened. Azure pushed reliability toward standardized, automatable determinations with its internal "Brain" system and scenario-first Chaos Studio Workspaces that can plug into Copilot and MCP. GitHub Copilot news focused on enterprise governance and spend controls (managed-settings.json, credit pools, session limits, and audit-grade agent session streaming) alongside rapid model lineup changes and the approaching GitHub Models shutdown. Across MCP, Foundry, Fabric, and IDEs, the story is clear: tool use is expanding (browser automation, vision inputs, CI diagnostics), so security, provenance, and repeatable evaluation need to expand with it.

This week's ML roundup focuses on making Microsoft Fabric deployments more governable and production-ready, from delegated OneLake shortcuts that tighten zero-copy security across workspaces and tenants to new outbound access controls for Real-Time Intelligence (RTI). On the streaming side, Eventstream connectors picked up practical upgrades like private networking, Kafka and Service Bus support, and mTLS, while preview features point to broader CDC and IoT ingestion coverage. We also saw Fabric move further toward repeatable operations with a public data agent API, GA item recovery with REST restore, and an AI-assisted CLI path for migrating Synapse Spark and pipelines. Outside Fabric, SkillOpt and MCP-based SQL Server tooling both reinforce a shared lesson for agent builders: skills, tools, and permissions are the control plane that keeps agent behavior reliable and bounded.