Browse All Posts (149)

Allison explains GitHub’s upcoming policy to pause Dependabot alerts on most repositories inactive for a year. Starting December 8, 2026, existing alerts will be archived and can be restored through a push or repository settings. Enforced security configurations and certain enterprise policies keep alerts enabled regardless of activity.

Nick Chapsas introduces labeled break and continue, a new feature in C# 15. He discusses this additional way to use labels alongside the language’s long-standing goto statement, explaining why he finds the feature both useful and unusual.

Martin Woodward explains how the GitHub Universe badge evolved from an e-ink prototype into a portable computer capable of running Doom. The discussion covers Pimoroni prototypes, RP2040-powered color screens, battery safety challenges, and an accelerometer that rotates the display when attendees look down at their badges.

Adrian Twarog walks through Microsoft Foundry from first login to a published AI agent, covering model deployment, playground testing, scoped MCP connections, and Azure SDK calls. He also discusses the process with Microsoft’s Adam Bogobowicz, including how centralized model, credit, and spending visibility helps teams prepare for production.

Learn Microsoft AI explains background agents in Microsoft Agent Framework, covering autonomous execution and tasks that run behind the scenes. The video introduces how to run AI agents in the background, manage long-running tasks, and understand practical scenarios for these workflows.

Khalid Abuhakmeh provides a beginner-friendly C# reference targeting .NET 10 and C# 14. Short examples cover everyday syntax, collections, records, pattern matching, LINQ, asynchronous I/O, and null handling, with additional guidance on project structure, command-line tools, IDE choices, and debugging.

Dimitri_Furman explains how new Azure SQL Database version store read metrics help diagnose rising CPU usage when query plans remain unchanged. The article covers counters in STATISTICS IO, DMVs, extended events, and query plan XML, with a SQL example and details on current tooling limitations.

NickGreenfield announces general availability of the Durable Task extension for Microsoft Agent Framework, which preserves agent sessions and workflow progress across interruptions. C# and Python examples show conversation recovery, graph-based orchestration, human approvals, and hosting in Azure Functions or self-hosted applications, with execution visibility through the Durable Task Scheduler dashboard.

Yechan Bae and FORGE Lab examine Rust standard-library soundness bugs that can cause undefined behavior even in safe code. Their AI-assisted research identifies misplaced trust in panic behavior, user-provided implementations, and operating-system state, while explaining fixes, open issues, and why soundness bugs do not automatically imply exploitable vulnerabilities.

Joe Filcik explains how Azure Content Understanding’s preview agentic mode uses document-specific tools to combine evidence, inspect charts, and validate calculations. Through three examples and configuration guidance, he shows when additional reasoning can improve extraction accuracy and when standard mode remains the faster, lower-cost choice.

j_folberth explains how to deploy and promote Microsoft Foundry Toolboxes independently of the agents that consume them. The guide combines GitHub Actions, Bicep outputs, and Azure Developer CLI environments, covering immutable versions, rollback limitations, project permissions, and runtime verification before promoting shared tools.

richyen examines why an indexed query slowed after migration to Azure Database for PostgreSQL. Counting distinct heap pages revealed that parallel loading had scattered related rows. The article explains how to diagnose physical layout differences, reorganize data, and compare performance while accounting for cache effects and maintenance constraints.

amar_badal introduces Claude Fable 5.2 and Mythos 5.2 in Microsoft Foundry for extended technical workflows, security engineering, and scientific research. The announcement covers Fable deployment options and token pricing, restricted Mythos access, and safeguards that affect blocked requests and data retention.

Scirqueira and coauthor Artur Vieira explain how to secure Bronze, Silver, and Gold layers in Microsoft Fabric Data Warehouse. Their guidance covers workspace boundaries, granular SQL permissions, row-level and column-level security, masking limitations, and governance practices that keep curated analytics accessible without exposing raw sensitive data.

stevenbucher explains how scoped enforcement actions in Azure Policy for AKS separate compliance reporting from admission-time enforcement. The article compares Gatekeeper and Validating Admission Policy enforcement points, outlines assignment constraints, and provides JSON examples for choosing where policies audit, deny, or warn.

Olivia Guzzardo McVicker, Nhu Do, Cynthia Zanoni, and Connor Peet demonstrate major updates to Visual Studio Code and GitHub Copilot from the past month. This release recap covers recent changes to the editor and its AI coding assistant through demonstrations.

Fokko at Work demonstrates selected GitHub Copilot features in Visual Studio Code 1.144 and 1.145, including model orchestration with Fusion, image generation, computer use, and custom agent workflows. The video also covers editing and customization improvements, with availability potentially restricted by enterprise policies or pricing plans.

Sosivara_msft outlines upcoming changes to SQL pools in Microsoft Fabric Data Warehouse, including a unified configuration model and removal of the customSQLPoolsEnabled API flag. Existing workspaces retain their active configurations, while new workspaces receive different compute defaults. API consumers should prepare client updates before the January 2027 rollout.

JanGoergen announces general availability of Real-Time Multichannel Speech-to-Text in Azure Speech. Developers can transcribe two audio channels independently in one session, identify each channel’s language, and retain channel metadata at single-channel pricing. The post includes Python configuration guidance, SDK requirements, and limitations for production workloads.

Allison announces Claude Fable 5.2 availability in GitHub Copilot for complex coding tasks. The update covers supported plans and tools, usage-based pricing, administrator enablement, and default retention of prompts and outputs, with temporary zero data retention access available to eligible enterprise customers.

Waldek Mastykarz examines how semantic version labels influence AI coding agents upgrading dependencies. Nearly 1,000 runs using GitHub Copilot CLI show that some models check patch releases less carefully than major releases, even with identical code. The findings support honest versioning and mandatory verification for every dependency update.

Beatris Mendez Gandica demonstrates how GitHub Copilot CLI hooks can turn an Octolamp into a physical agent-status indicator. The session connects lifecycle events to the WLED API, covers network fallbacks and hook race conditions, and shows how to adapt the approach for other devices.

Visual Studio Code demonstrates how to investigate PostgreSQL performance issues using performance dashboards and Azure Advisor recommendations. The video covers identifying problems, reviewing possible fixes, and verifying results from a VS Code workflow.

OlivierB123 tests moving a Python-based Microsoft Agent Framework research demo into a Foundry-managed Copilot harness. The experiment connects Fabric sales data, document retrieval and native web research while keeping authentication and downloads in application code, highlighting evidence-validation requirements and the limits of delegating orchestration to a managed runtime.

John Savill explains Conditional Access policy plans as a way to avoid repeating common attributes across policies. The overview compares them with regular Conditional Access policies, then covers policy plans, rules, and migration for readers working with Microsoft Entra access controls.

Martin Woodward explains how the GitHub Universe conference badge becomes a handheld gaming system. The clip covers its capacitive touch buttons and how repository instructions help GitHub Copilot work with MicroPython and serial connections to generate, test, and deploy an app directly to the badge from a single prompt.

Learn Microsoft AI explains hooks in Microsoft Copilot Studio, focusing on how they extend agent capabilities and customize behavior. The video covers when to use hooks, practical scenarios, and tips for building more flexible AI agent experiences.

Allison introduces public preview support for detecting secrets in GitHub Actions workflow logs. The update adds findings to repository secret scanning alerts and requires enterprise opt-in. It scans newly completed runs for provider patterns, with limitations including no historical backfill and no alert notifications during the preview.

@GitHub coding tasks are now generally available in Slack and Microsoft Teams, letting developers turn conversations into issues, code changes, and pull requests, with Teams Canvas providing shared task visibility. Copilot now supports local and isolated cloud tasks in JetBrains Air, while a public preview brings it into Xcode's built-in coding assistant starting with Xcode 27.3 beta. Code review gains REST and GraphQL configuration controls, multi-model balanced reviews, and outcome reporting, while usage reports add custom-model breakdowns, chat and agent adoption data, and indicators of missing telemetry. Together, these updates extend Copilot across team conversations and development tools while giving organizations more control over reviews and better visibility into usage and results.

Azure DevOps security guidance warns that patching Azure Pipelines requires checking embedded Node.js runners, cached versions, containers and deployed applications separately, and identifies .NET runtime fixes for the Brotli advisory. Microsoft added Agent Framework builder skills for .NET and Python, while NuGet-delivered skills let package authors bundle coding-agent instructions with dependencies, introducing package Markdown as another security consideration. C# 15 previews introduce closed hierarchies and union types, and Logic Apps Standard custom code now supports .NET 10, with existing .NET 8 projects requiring explicit configuration migration. Across these developments, installing an update or agent skill is only part of adoption: teams still need to verify deployed runtimes, assess instructions and test application behavior.

Foundry expanded public-preview fine-tuning support to additional models, including reinforcement-only support for MAI-Code-1.1-Flash, and introduced Multi-LoRA Managed Compute so compatible adapters can share base-model weights and GPU capacity, with hourly hardware charges that include idle time. OneLake table APIs now support native Iceberg writes, while OneLake storage support for Azure Databricks and Eventhouse enforcement of OneLake permissions reached general availability, broadening interoperability without removing access controls. Fabric's preview IQ Share enables read-only cross-tenant sharing without copying data, and new endpoint discovery and remote Model Context Protocol tools help agents find and query Fabric data. Copilot can now generate editable Real-Time Dashboards in preview, though teams still need to validate generated queries and measures before operational use. Together, these updates connect model customization and agent workflows with governed data access, wh

Microsoft observed an AI agent turn exposed application credentials into Azure Key Vault data exfiltration in five minutes, underscoring the need to revoke or rotate leaked credentials rather than merely remove their public disclosure. GPT-6.1 Terra reached general availability in Microsoft Foundry with text and image inputs and up to one million input tokens, while Foundry's Azure Developer CLI extension reached version 1.0 for shared local and CI/CD deployment definitions. Azure SQL Database watcher will retire on April 30, 2027, with resource creation and editing blocked starting November 9, 2026, making replacement monitoring and cleanup of chargeable resources immediate planning tasks. Azure SQL also gained agent-free migration for Arc-registered SQL Server instances and a generally available Modern Query Editor, while Service Bus Premium added generally available Geo-Replication for partitioned namespaces and Azure Files previewed additional recovery options. Across these updates

Microsoft Foundry's Azure Developer CLI extension is generally available at version 1.0, letting teams reuse azure.yaml deployment definitions locally and in continuous integration and delivery pipelines, with remote builds that need no local container build. GitHub postponed default blocking of public-repository pull_request_target events to December 2, with November 9 and 16 brownouts giving maintainers an immediate reason to review workflows that can expose secrets to untrusted code. Azure SQL database watcher will block resource creation and configuration edits on November 9 ahead of retirement, while Database Hub adds public-preview alerts against managed telemetry without adding database query load. Azure Pipelines security guidance requires separate patch checks for selected Node.js tools, embedded agent runners, containers, and deployed applications, while Microsoft observed an agent-assisted attack reach Azure Key Vault data within five minutes of searching for exposed credent

Microsoft observed an AI agent progress from finding exposed GitHub secrets to exfiltrating Azure Key Vault data in five minutes, reinforcing the need to revoke compromised credentials and investigate their access across tenants. Microsoft Execution Containers reached general availability with least-privilege boundaries for agent processes, while Dynamic Permissions and Dynamic Conditional Access scope authority to tasks and can require human approval. GitHub postponed default blocking of public-repository pull_request_target workflows to December 2, and CodeQL updates expanded language support while introducing changes that custom-query maintainers should review. Runtime guidance warns that updating Azure Pipelines agents does not necessarily patch embedded runners, cached Node.js versions, containers, or deployed applications, while Windows telemetry exposes delays in security-update deployment. The week's recurring lesson is to verify enforcement across execution paths, identities,

GPT-6.1 Terra is generally available in Microsoft Foundry with text and image inputs and up to one million input tokens, while MAI-Image-2.6 adds generally available multi-reference editing and fal begins rolling out video models in public preview. Foundry's Azure Developer CLI extension reaches general availability at version 1.0, letting developers reuse azure.yaml for local development and CI/CD and deploy source through remote builds without building containers locally. Microsoft Execution Containers and Defender's local AI-agent discovery are now generally available, alongside a report showing an AI agent move from searching GitHub for exposed secrets to exfiltrating Azure Key Vault data in five minutes. Multi-LoRA serving previews let compatible adapters share deployment capacity, and direct SIP support connects Foundry voice agents to existing telephony without a customer-managed audio bridge. The week's deployment and security guidance emphasizes controls outside the model, inc

Rafia_Aqil walks through a Microsoft Fabric medallion architecture that turns SharePoint-hosted Excel files into analytics-ready customer data. The lab uses Dataflow Gen2 for ingestion and Spark notebooks for historical tracking, deduplication, standardization, and aggregation, preserving source lineage as records move through Bronze, Silver, and Gold layers.

Jenny Patchen presents how Levi Strauss & Co. built a software development lifecycle around seventeen specialized GitHub Copilot agents. The session covers enterprise architecture, MCP connections, automated reviews and testing, security checks, and deployment, with human approval gates retained throughout the process.

Martin Woodward discusses how GitHub Copilot can help developers restart hobby projects when boilerplate feels like a barrier. His examples include running local models on a Raspberry Pi and tracking license plates in his driveway, with advice to timebox experiments and prioritize getting something working over perfection.

Jiri Binko proposes an illustrative Azure architecture that separates AI recommendations from authorized actions and governed measurement. Using housing repairs as the scenario, he explains tool boundaries, durable execution, privacy controls, Fabric analytics, and staged pilots, while stressing that the pattern is not a verified production reference architecture.

Pierce Boggan, Burke Holland, James Montemagno, Julia Kasper, and Katie Savage build a shared project with GitHub Copilot using different tools and workflows. This GitHub Universe 2026 session covers AI agents, carrying context between tasks, and working beyond the editor while balancing speed, cost, and control.