Browse All Posts (131)

James Montemagno gives a first look at using Kimi K3 (Moonshot’s open-weight model) inside GitHub Copilot in VS Code, focusing on what it enables for agentic coding and how developers can start trying it in their editor workflow.

GitHub hosts a “Rubber Duck Thursdays” coworking session focused on coding together, answering questions, and sharing updates about the GitHub platform and open source.

Walker Chabbott announces that the open-weight Kimi K3 model is now generally available in GitHub Copilot, including where it can be selected, how it’s billed under usage-based pricing, and what Copilot Business/Enterprise admins need to do to enable it.

Amaury Levé explains how Microsoft.Testing.Platform (MTP) reporting helps teams move from a failing CI build to actionable evidence, with inline annotations in GitHub Actions and Azure DevOps, Azure DevOps-only history-based flaky/regression triage, crash-resilient TRX output, and multiple report formats for both humans and automation.

mk_sunitha introduces scheduled User Data Functions in Microsoft Fabric (Preview), showing how teams can run custom, parameterized business logic on a recurring cadence using the Fabric job scheduler, and then monitor outcomes and failures from the Fabric Monitoring Hub.

Ankit Kumar Honey explains how GitHub expanded Dependabot malware advisories from npm to eight package ecosystems by ingesting OpenSSF’s malicious-packages data into the GitHub Advisory Database, including the validation, normalization, deduplication, and safety controls used to keep auto-published advisories resilient.

Visual Studio Code highlights the SynthWave theme extension for VS Code, showing how to give the editor a retro “glow” look and pointing to the extension link for installation.

Strahinja Rodic explains the Azure SQL Managed Instance free offer and demonstrates how to create a free instance in the Azure portal, connect to it, restore a database, monitor the included credits, and upgrade to a paid tier when the offer expires.

Sameen Karim demonstrates GitHub’s stacked pull requests workflow, showing how to split large feature branches into smaller PR layers, work with stacks from the GitHub CLI using the gh-stack extension, and merge an entire stack efficiently while using Copilot to help generate tests.

Dan Hellem announces a small Azure Boards update that shows pull request annotations directly on work item cards, so teams can see code review activity and PR status without leaving the Kanban board or opening individual work items.

Eric van Wijk introduces the new Azure DevOps service connection, which lets pipelines authenticate to Azure DevOps using a Microsoft Entra workload identity (service principal or managed identity) instead of PATs or build session tokens, and shows where and how to use it across YAML, tasks, and scripts.

Fokko at Work demos selected new features in Visual Studio Code 1.132 that affect day-to-day Copilot Chat and editor workflows, including tracking session activity from the chat input, starting side chats with /btw, terminal output reflow, and dictation onboarding/customization, with notes on enterprise policy and plan-based availability.

GitHub takes a closer look at stacked pull requests and how they affect day-to-day developer workflow, especially around review, iteration, and landing changes safely.

Jatin Garg explains how to choose between Microsoft Foundry and PyRIT for AI red teaming, framing the decision around whether you’re testing a model in a managed Foundry/Azure OpenAI surface or attacking a full RAG/agent application with custom endpoints and orchestration.

Dona Mukherjee announces a public preview of Confidential Virtual Machines on Azure Local, explaining how hardware-backed memory encryption and attestation can protect data-in-use on customer-managed edge infrastructure, including how Azure Attestation and Azure Key Vault enable secure key release for sensitive workloads.

EldertGrootenboer explains why some .NET Framework WCF Relay listeners start failing against Azure Relay after TLS 1.0/1.1 retirement, and outlines practical fixes ranging from app config changes to code updates and machine-wide registry settings.

Bruno Capuano, Pranav Senthilnathan, and Tarek Mahmoud Sayed walk through MCP C# SDK 2.0 and what its stateless-first approach means for building .NET AI agents, including standardized HTTP support, multi round-trip requests, and compatibility considerations, plus an overview of Microsoft Foundry Hosted Agents for scalable AI solutions.

Visual Studio Code shares a quick tip on using IntelliSense in the integrated terminal to speed up command-line work and reduce typos while you’re working inside VS Code.

Scirqueira explains how to choose a medallion architecture pattern in Microsoft Fabric Data Warehouse by focusing on how much Spark you actually need, then mapping Bronze/Silver/Gold layers to either an all-in-one warehouse approach or a Lakehouse + Warehouse hybrid.

Mine Starks demonstrates the Quantum Development Kit (QDK) learning experience in VS Code, showing how guided lessons and hands-on Q# exercises are paired with GitHub Copilot assistance to help developers learn quantum computing fundamentals and progress into algorithms like Grover’s and Shor’s.

amitmishra introduces the public preview of Azure Private Link over IPv6 and provides a practical setup guide for reaching Azure PaaS services via IPv6 private endpoints, including native Azure and on-premises connectivity over ExpressRoute, plus DNS and validation steps.

Ran Rosin summarizes why KuppingerCole named Microsoft a Leader in its 2026 CNAPP Leadership Compass, and what that says about where cloud security is heading: unified risk management across cloud infrastructure, identities, data, applications, and AI, with runtime-driven prioritization and SOC integration.

robece-msft explains how to choose between Business Events, Fabric Events, and Azure Events in Microsoft Fabric, focusing on how each “event pillar” fits different event-driven architecture needs and enterprise implementation patterns across the Fabric platform.

Microsoft Developer shares Shireesh Thota’s perspective on turning “data everywhere” into usable intelligence by bringing data together, adding context, and applying AI on top—framed as an architecture discussion rather than a single feature walkthrough.

Microsoft Security Research and Srinivasan Govindarajan break down how a macOS ClickFix infostealer campaign evolved from openly serving malicious lures to hiding them behind a server-side browser-fingerprinting gate, and they provide practical hunting pivots, IOCs, and Defender coverage to help defenders detect related activity.

GitHub shows how Dan, a senior corporate counsel, uses GitHub Copilot CLI to verify AI-generated analysis by grounding outputs in source documents. The video highlights a custom Copilot CLI skill (“Eyeball”) that embeds inline screenshots to help reviewers validate clauses and act on AI outputs with more confidence.

Dan Hellem announces the general availability of the Azure DevOps Remote MCP Server, explaining how AI assistants can securely connect to Azure DevOps via a hosted endpoint. The post covers the minimal mcp.json setup, Entra ID authentication requirements, current client support, and when to use the local MCP server instead.

The Visual Studio Code Team shares the 1.133 Insiders release notes, highlighting a change for extension authors: custom editor extensions can now set different default priorities for normal editing versus diff views, improving how custom editors behave when comparing files.

Lee Stott introduces Microsoft’s end-to-end agent platform (now GA) using the FibreOps reference implementation: build agents with the Microsoft Agent Framework and GitHub Copilot SDK, run them as hosted agents in Microsoft Foundry Agent Service, and distribute them to Teams and Microsoft 365 Copilot, with evaluation, routines, memory, and observability.

Authorised Territory demonstrates a .NET MCP server pattern where a tool call starts a background task and returns a task handle instead of an immediate result, while a .NET client polls the server every second until the final output is available.

Microsoft Security Research, Ravikant Tiwari, Sagar Patil and Suriyaraj Natarajan break down ChainDrop, a large-scale npm supply chain compromise that used a Bun-based, self-propagating worm to steal credentials from developer machines and CI/CD runners, then republish infected packages. The post includes mitigation steps, IOCs, and Defender XDR hunting queries.

WSilveira explains how the Logic Apps Standard extension for VS Code can use Managed Identity for connectors during local development, so the same connection setup works both on your machine and after deployment. The post covers required versions, the WORKFLOWS_AUTHENTICATION_METHOD setting, and connector-specific behavior and limitations.

GitHub introduces isomorphic-git on Open Source Friday, showing how a pure JavaScript implementation of Git can work with repositories in Node.js and in the browser without relying on the native Git CLI.

Bruno Capuano shows how to build a Windows-only C# console app that performs live speech-to-text locally using Foundry Local and a compact Nemotron streaming ASR model, including model lifecycle management (download/cache/load/unload) and real-time interim/final transcription via async streams.

Anshu Verma announces the general availability of Azure Virtual Network routing appliance and explains where it fits in large-scale Azure network designs, including hub-and-spoke growth, private connectivity patterns, IPv6/dual-stack adoption, and multi-region connectivity with Azure-native operations and monitoring.

Allison announces a new way to customize GitHub code scanning default setup using a repository property, enabling teams to apply a shared CodeQL configuration across one repo or an entire organization without maintaining per-repo GitHub Actions workflows.

MattH_OneLake announces preview mirroring features in Microsoft Fabric that let teams surface Azure Monitor (Log Analytics) tables and AWS Glue-cataloged Apache Iceberg tables in OneLake using a zero-copy, metadata-based approach for cross-domain and cross-cloud analytics.

Allison announces that the GitHub Copilot Billing Preview app has been retired and explains how to manage Copilot spend directly in GitHub billing settings, including viewing AI usage, setting budgets, and exporting or pulling raw usage data via reports and the billing API.

Victoria shares how she built an internal “Innovation Marketplace” for the GitHub legal team using GitHub Copilot CLI, from planning and tracking work in GitHub Issues to deploying with GitHub Actions and GitHub Pages.

Bria Ford shares how GitHub’s legal team used GitHub Copilot CLI to turn repetitive legal work into repeatable, repo-backed workflows—ranging from contract drafting style guides to DMCA code-analysis playbooks—while keeping human judgment central.