Browse All Posts (152)

This week's .NET roundup connects two practical threads: testing under real deployment constraints and building agent-style workflows you can run in production. MSTest 4.4 brings Native AOT test publishing so you can catch trimming and reflection issues earlier, while new .NET agent building blocks (Copilot SDK, lightweight harnesses, and MCP servers on Azure Functions) push tool calling and orchestration toward repeatable, auditable runs. On the day-to-day side, Visual Studio 2026 and VS Code updates focus on reducing context mistakes (scoped settings, worktrees, clearer Copilot context), and ecosystem updates like CodeQL 2.26.4 and Azure SDK releases highlight where CI and dependencies can shift under your feet.

This week's AI roundup is about taking agentic systems from demos to production: GPT-6 Astra is now generally available in Microsoft Foundry and selectable in GitHub Copilot, while Copilot's roadmap shifts from choosing a single model to orchestrating multiple models at runtime. On the platform side, the focus is operational engineering (context control, durable memory, and observability) so agents stay predictable in cost and behavior as they run longer and use tools. Security guidance adds a reality check on egress control, attestation, and text normalization, and Copilot features like PR approvals and content exclusions raise the stakes for governance, identity, and auditability across IDE, CLI, and app workflows.

This week in Machine Learning, the focus shifts from prototypes to production guardrails, with Fabric data agents now generally available in Copilot Studio and new preview work on advanced DAX generation for semantic models. Fabric governance tightened with workspace outbound access controls, tenant-wide networking policy auditing, and connection recency signals that help reduce stale and single-owner risk. On data movement and interoperability, teams get clearer paths for private connectivity (Snowflake, Eventstream) and a GA transition from ODBC to ADBC that is worth validating early, while platform operations mature through capacity telemetry in Real-Time Hub and new CI/CD guidance to standardize deployments.

Welcome to this week's Azure roundup, where the story centers on making AI agents and hybrid fleets operable, governable, and cost-aware. GPT-6 Astra reached general availability in Microsoft Foundry with production-ready deployment and governance options, while multiple guides dug into context engineering, egress lockdown, and secure agent infrastructure patterns for Kubernetes and edge. On the platform side, Azure Firewall explicit proxy went GA, Azure Arc shipped GA improvements for Arc-enabled Kubernetes certificates and Azure Virtual Desktop Hybrid, and API Management advanced GitOps workflows plus preview spend controls and OTLP telemetry for AI gateways.

This week in the Weekly GitHub Copilot Roundup, the model lineup expanded (GPT-6 Astra GA, plus Gemini 3.8 Flash and Claude Fable 5.1) while deprecations and policy updates made it clear that model choice is now an admin and billing decision as much as a developer preference. At the same time, Project HydraFusion signaled a shift from picking one model to routing work across multiple models, with early experiments showing how orchestration can balance quality, latency, and spend. Governance also tightened across agent workflows, with content exclusions reaching the Copilot app and CLI, clearer identity constraints for cloud agents in Actions, and new budget expiration controls. On the workflow side, VS Code kept making agent sessions more reviewable, and Copilot code review entered a new phase with optional approvals that can satisfy branch protection rules if you choose to enable them.

This week in DevOps, the theme is clear: reduce friction while tightening control across collaboration, CI/CD, and governance. GitHub CLI takes a step toward fully terminal-first workflows (including inline media), while enterprise teams get practical tooling for live GHES-to-cloud migrations, runner lifecycle planning, and more precise token permissions. Supply-chain hardening continues with npm OIDC improvements, CodeQL updates for pipeline security, and concrete guidance for trusting third-party Actions, and on the ops side, agents and Azure governance move closer to production patterns with clearer boundaries, auditable workflows, and more "as code" outputs.

This week in Security, the throughline is pushing enforcement into identity, networking, and auditable runtime controls as AI agents move from demos to deployable systems. GPT-6 Astra reached GA in Microsoft Foundry with enterprise deployment choices (throughput, region, residency) and governance hooks like Entra ID, RBAC, private networking, and monitoring that mirror how you secure other workloads. Guidance also sharpened around end-to-end agent hardening (egress containment, mediated tool use, Kubernetes policy layers, and OpenTelemetry-based evidence), while supply chain and CI/CD updates tightened provenance with key rotations, stronger OIDC-based publishing, and improved scanning and Actions permissions. Threat reports rounded out the week with practical detections for phishing evasion, helpdesk impersonation via Teams, and counterfeit installers, reinforcing the need for normalization, monitoring, and response-ready telemetry.

Topi Nuotos explains why his team replaced a shared Excel tracker with a Microsoft Fabric App, and how Fabric Apps adds an application layer on top of Fabric for building data-driven web apps with preconfigured infrastructure.

Authorised Territory demonstrates how to build an AI agent with the .NET Microsoft Agent Framework using a local Ollama model, then evaluate the agent locally with built-in checks to confirm response quality and that required tools were actually invoked.

GitHub explains why newer, larger AI models don’t automatically make better code reviewers, highlighting benchmark results where highly formatted, verbose reviews can still miss fundamental bugs.

Cameron Tomisser shares a weekly Microsoft developer news roundup covering the Azure Developer CLI extension framework reaching GA, new CI/CD options to connect to Azure Cosmos DB without storing secrets, and progress on making agent security more production-ready.

GitHub shows how to attach images and videos to pull requests, issue comments, and issues directly from the terminal using the GitHub CLI. It highlights the new --attach flag, including how to provide a file path plus alt text so screenshots and recordings stay accessible in GitHub discussions.

John Savill runs through the Azure Weekly Update for 4th September 2026, covering a set of platform changes across compute, AKS, networking, monitoring, security, and Azure AI Foundry, with quick pointers to what’s new and where the updates land in the Azure stack.

Allison’s weekly Copilot changelog highlights new model options (Claude Fable 5.1 and Gemini 3.8 Flash), stronger content protection via honored content exclusions in Copilot app/CLI, and VS Code 1.136 updates aimed at managing agent sessions and getting pull requests ready to merge.

Visual Studio Code highlights Emmet, a built-in VS Code feature that speeds up writing HTML (and related markup) using short abbreviations and expansions.

Shayak Lahiri explains why Edge AI shifts security responsibility into customer-owned infrastructure, and outlines practical patterns for protecting model weights, credentials, and data. The post focuses on gating sensitive asset release using runtime attestation and artifact provenance, plus deterministic mediation to constrain what models can do.

Allison announces general availability of OpenAI’s GPT-6 Astra in GitHub Copilot, highlighting its strength on long-horizon, agentic coding tasks, how it’s billed under usage-based pricing, and where developers and admins can enable and select the model across supported IDEs and clients.

carlottacaste introduces “Inside Microsoft Foundry: Quickstart”, a video series focused on the practical work of building and shipping AI agents with Microsoft Foundry and the Microsoft Agent Framework, including model selection, grounding in your own data, tracing, evaluation, and moving from prototype to production.

Justin Bettencourt’s August 2026 Azure SDK roundup highlights new and updated client libraries across .NET, Java, JavaScript/TypeScript, Python, Go, and more, including Document Translation 2.0.0, Azure Storage Blobs 12.30.0-beta.1, and the first stable release of Azure AI Discovery.

sbaynes shares a short update on HydraFusion in GitHub Copilot, highlighting a shift from picking a single model to orchestrating multiple models that plan, build, critique, and complete coding tasks, with a claim of up to 67% lower cost for comparable outcomes.

Jesse Houwing shares a practical checklist for deciding whether a third-party GitHub Action is safe to run in your CI environment, focusing on maintenance signals, dependency hygiene, release integrity, and governance. He also explains why pinning what you run matters, and compares SHA pinning, immutable releases, and action lock files.

Jesse Houwing explains why GitHub Copilot cloud agent sessions can’t be spawned from GitHub Actions using GITHUB_TOKEN, and how GitHub’s accountability model (identity, billing, and auditability) shapes what “agentic workflows” can do today. He then lays out practical orchestration patterns that work, with concrete YAML examples.

Allison announces a new GitHub REST API endpoint that lets you track repository star growth over time while keeping stargazer identities private, aimed at helping maintainers and tool builders update integrations affected by earlier access restrictions.

GitHub introduces Project HydraFusion and shares benchmark results claiming higher verified task quality and lower estimated cost versus Claude Opus 5 on Terminal-Bench 2.1. The short also points developers to try HydraFusion as a selectable model via the /experimental feature in GitHub Copilot CLI.

GitHub introduces Project HydraFusion, a research preview for GitHub Copilot that orchestrates multiple AI models at runtime to balance quality, cost, and latency. The video explains how routing strategies like single, cascade, and critique workflows can automatically choose an execution path per task to improve outcomes without manual model selection.

GitHub Staff introduces Project HydraFusion, a GitHub Copilot research preview that orchestrates multiple LLMs at runtime to balance quality, cost, and latency for coding tasks. The post explains HydraFusion’s execution patterns, operating principles for safe repo-level changes, and benchmark results across TerminalBench, DeepSWE, and an internal Copilot session benchmark.

devanshirastogi rounds up five recent Azure Firewall capabilities—some now generally available and others in public preview—covering explicit proxy support, IPv6 dual-stack filtering, HTTP header insertion, auto-learned SNAT routes via Azure Route Server, and higher-throughput IDPS with TLS inspection for Azure Firewall Premium.

Jesse Houwing explains how to stop GitHub Copilot agents from confidently inventing details about fast-moving tools by grounding them in a local clone of the real repository, then forcing answers to be backed by file-and-line citations from the source.

GitHub shares a quick “The Download” roundup covering a new GitHub CLI capability for attaching images and videos to pull requests, plus several AI-related updates including local coding-agent models, large-scale LLM releases, and benchmarks and analyses focused on AI code review and PR-writing language.

rgarofalo walks through a hands-on build that locks down Azure AI Foundry both inbound (Private Endpoint) and outbound (agent egress via network injection), including the DNS zones you must create, how to prove public access is actually blocked, and how to troubleshoot opaque agent tool-call failures like 424 errors.

Andrea Griffiths talks with Angela Wen about making a first open-source contribution on GitHub, from finding a good first issue through opening a draft pull request and getting CI checks green. They also cover practical expectations when working with maintainers and what “using Copilot responsibly” looks like in a real PR workflow.

Wes Steyn and Eduard van Valkenburg announce a preview integration that adds durable, cross-session memory to Microsoft Agent Framework agents using Azure Cosmos DB. They explain how the Cosmos-backed context provider participates in the agent lifecycle, and show a Python example that stores conversation turns, extracts memories in the background, and recalls them in later sessions.

James Montemagno and Matt Soucoup run a beginner-friendly livestream on the GitHub Copilot SDK for .NET, focusing on how to embed Copilot’s agent runtime into your own apps for multi-turn conversations, tool calling, streaming responses, and MCP-based extensibility.

sbaynes announces GPT-6 Astra rolling out via the Microsoft Foundry Limited Access Program, focusing on agentic, multi-step work (planning, tool use, and computer use across apps) and the enterprise controls needed to run it safely in production, including identity, networking, governance, and monitoring.

Christine Caggiano, Joshua Bradley, Steven Truitt, and William Chappell describe how Microsoft Discovery’s Discovery Engine adds CLIO (a self-adaptive “cognitive loop”) to improve agentic scientific problem-solving, and share benchmark results from Agent’s Last Exam showing higher scores and better consistency through multi-model, evidence-driven exploration.

Scirqueira shares practical operating rules for keeping a Microsoft Fabric Data Warehouse medallion architecture healthy in production, focusing on batch ingestion, rerunnable Silver transformations, consumption-ready Gold modeling, using Fabric DW defaults effectively, and monitoring performance and failures by layer.

Allison announces generally available updates to npm trusted publishing, including multiple OIDC configurations per package, staged approvals that wait for malware scanning to finish, and improved version history visibility for maintainers on npmjs.com.

Allison summarizes three GitHub Actions improvements: a new REST API to track runner version deprecation timelines, a least-privilege `vulnerability-alerts` permission for `GITHUB_TOKEN` to read Dependabot alerts, and new `job` context properties that help reusable workflows identify their source at runtime.

Fokko at Work recaps what’s new across Visual Studio Code 1.133–1.136 with a focus on GitHub Copilot features, showing practical demos like Agent Plugins support, prompt UX improvements, usage details per chat turn, and agent merge workflows.

Andre Terceros and Bodhisatva Gautam announce a preview of Workspace Outbound Access Protection (OAP) in Microsoft Fabric for Operations Agent and Fabric Maps, explaining how workspace admins can enforce a default-deny model for outbound connections, allow only approved endpoints, and get clearer visibility into blocked actions.