Browse All DevOps Content (711)

Allison announces an update to GitHub’s dependency graph license detection that prioritizes canonical package registries (like npmjs.org and PyPI) to improve license coverage across dependency insights, SBOMs, GitHub Advanced Security license compliance, and dependency review.

Allison announces a GitHub UI improvement that lets maintainers block or unblock users directly from pull request and issue comments in personal-account repositories, helping reduce spam and unwanted activity without leaving the conversation thread.

Gregg Cochran shares lessons from Session 4 of the GitHub Secure Open Source Fund, where 50 projects used GitHub security tooling, expert guidance, and AI-assisted workflows to make measurable security improvements—covering incident response, supply chain risks, and how maintainers can use tools like GitHub Copilot for triage and remediation.

Tom Kerkhove introduces external dependency telemetry in Azure Application Insights for Azure API Management policies, aimed at helping platform operators pinpoint where request time is spent when policies fan out, retry, or perform downstream work that’s otherwise hard to see in standard request telemetry.

Rory Preddy demonstrates how to debug a Spring Boot Java application in Visual Studio Code by tracing a browser request through the service layer, pausing at breakpoints, inspecting variables, and using the Spring Boot Dashboard to review endpoints, health, and heap memory.

Fokko at Work explains how the Visual Studio Code Agents Window works and how it uses Git worktrees to let you run multiple coding agent sessions (including GitHub Copilot, OpenAI Codex, and Claude Code) in the same repo or across multiple repos without clobbering local changes.

Jakub Oleksy summarizes GitHub’s July 2026 reliability work and eight major incidents, including outages affecting GitHub Actions, APIs, and authentication. The report shares root causes (DNS automation, certificate expiry, Vitess vschema changes, Redis maintenance issues) and the mitigations GitHub is rolling out while accelerating more production traffic onto Azure.

Allison announces an organization-level Rule insights dashboard in public preview, giving teams an aggregated view of how GitHub repository rulesets are evaluated and enforced across all repos, with filtering and CSV export to support governance, compliance reporting, and incident/audit reviews.

Andrea Griffiths shares practical patterns from AutoGPT maintainer Nicholas Tindle for handling AI-generated pull requests without drowning maintainers, using repo-scoped instruction files and hard gates that push agents to follow your project’s rules.

Rory Preddy shows how to go from a folder of Java files to a running Spring Boot web app inside Visual Studio Code, including setting up the Java and Spring Boot tooling, building with Maven, running from the Spring Boot Dashboard, and testing a simple end-to-end workflow.

The Visual Studio Code Team shares incremental updates in the VS Code 1.134 Insiders changelog, including improvements to Voice Mode onboarding and chat UX, new editor association behavior for opening HTML in the integrated browser, and early support for running Codex sessions via the agent host with external model providers.

Kristen Womack announces general availability of the Azure Developer CLI (azd) extension framework and explains how platform and product teams can package repeatable Azure workflows as installable CLI extensions, including lifecycle hooks, provider integrations, version constraints, and MCP tool exposure for agent and developer-tool scenarios.

varghesejoji shares a hands-on walkthrough and reference implementation that wires Azure Monitor SLIs/SLOs, Azure Monitor health models, and the Azure SRE Agent into an end-to-end reliability flow, from OpenTelemetry telemetry and Prometheus alerts to incident investigation and proposed remediation.

Gloridel Morales announces the August 11, 2026 patch releases for Azure DevOps Server, with direct download links for the patched versions and a quick command you can run on the server to verify the patch is installed.

Chris Noring explains a practical workflow for investigating and controlling rising GitHub AI spend by combining the GitHub admin UI (Metered usage, Budgets and alerts) with the Billing Usage API to build repeatable, company-specific spend reports such as per-user rankings within a cost center.

Allison highlights what’s new in the GitHub Enterprise Server (GHES) 3.22 release candidate, including Copilot CLI support for disconnected environments, Enterprise Teams GA, improvements to secret scanning workflows, and more granular repository ruleset controls for reviews and bypass permissions.

Allison announces a GitHub Copilot for JetBrains release that adds persistent Copilot Memory, brings Ollama support as a BYOK model provider, and expands enterprise controls. The update also improves Codex/agent workflows, streamlines Copilot CLI setup from IDE terminals, and includes a set of UX and reliability fixes.

Allison announces a GitHub repository governance update that lets you convert classic branch protection rules into repository rulesets from the repository settings UI, preserving key protections like required reviews, status checks, and push restrictions while moving to the newer ruleset-based policy model.

Natalie Guevara explains how “agentic” workflows change day-to-day development: developers don’t just write code, they design the delivery system around it. The article outlines a practical GitHub-centered flow where Copilot-driven agent work is triggered by repo events and validated through CI, reviews, and branch protections.

Harshada Hole introduces first-class Git submodule support in Visual Studio 18.9, showing how submodules now appear in the Git UI and how you can add, update, and remove them without switching to a terminal.

Jordan Selig explains what the dedicated Azure API Management AI Gateway tier changes (and doesn’t change) for AI agents hosted on Azure App Service, using a runnable Python/FastAPI sample that forces all model and MCP tool traffic through the gateway with policy, telemetry, and secret-handling patterns.

Jan Kalis (co-written with Nikoloz Buligini) introduces Azure Container Apps Sandboxes (Preview) as a hardware-isolated microVM environment for running AI agent workflows safely, with practical controls like snapshots, restricted egress, managed identities, and VNet integration, plus a real production example from Templafy.

GitHub shows how to use the GitHub Copilot app to automate recurring developer chores like daily Dependabot reviews and pull request triage, using scheduled or issue-triggered tasks driven by plain-English prompts and producing summaries you can act on.

GitHub shows how to use GitHub Copilot with the gh-stack skill to split large, agent-generated changes into smaller stacked pull requests, making review and merging easier. The video covers installing the gh-stack CLI extension, verifying the skill setup, prompting Copilot to generate a PR stack, and reviewing and merging the stack on GitHub.

Visual Studio Code shows how to convert existing prompts into reusable “skills” using the Migration feature in VS Code, so teams can standardize and reuse prompt-based workflows more easily.

Allison announces a GitHub notifications change: custom thread subscription settings are being removed, and existing custom subscriptions will be converted to “Subscribed,” which may increase notification volume for affected threads.

This week's DevOps roundup focuses on keeping pull request review scalable as teams ship larger, AI-assisted changes. GitHub's stacked pull requests (public preview) introduce a practical way to split big diffs into reviewable layers across the UI, mobile, and the GitHub CLI, while new organization-level PR limits give maintainers a simpler way to manage contributor backlog. GitHub also adjusted Code Quality so it no longer auto-requests Copilot review, pushing teams to make automation and approval gates an explicit policy choice.

TulikaC explains a new Azure portal workflow for deploying ZIP packages to Azure App Service for Linux via Deployment Center, including package preview, optional server-side build, and deployment progress/log visibility for quick tests or occasional manual deployments.

GitHub introduces stacked pull requests in public preview, showing how teams can split large changes into an ordered chain of smaller PR layers that are easier to review. It highlights the stack map view for reviewers and the different ways to work with stacked PRs across GitHub clients.

nuzhat-minhaz announces Grafana 13 support in Azure Managed Grafana, highlighting new dashboard authoring features, Git Sync for managing dashboards as code with Git workflows, and an important Prometheus change where Azure authentication moves to the Azure Monitor Managed Service for Prometheus plugin.

Allison announces a GitHub Enterprise update that lets enterprise owners install public third-party GitHub Apps directly on an enterprise account, enabling new enterprise management integrations while keeping access scoped away from orgs and repos unless explicitly granted.

Allison announces updates to GitHub Issues and Projects: a new “Relates to” issue relationship in public preview, plus generally available multi-select fields with improvements for grouping, editing from sidebars, copy/paste, and clearing values.

Allison announces updates to GitHub secret scanning, including a new partner (Lovable Labs), more secret types blocked by push protection by default, and richer alert context via extended metadata to help teams assess ownership and impact faster.

Shamir AbdulAziz lays out a practical operating model for “Zero Ops” using Azure SRE Agent: agents handle investigation and remediation work, while humans focus on intent, governance, and outcome review. The post breaks down how to scope agents, connect context, build repeatable artifacts, and safely graduate from human-in-the-loop to autonomy.

Allison explains a GitHub Code Quality change: enabling Code Quality no longer creates a ruleset that automatically requests GitHub Copilot code review on pull requests, and existing auto-created rulesets have had those settings turned off.

GitHub covers stacked pull requests (now in public preview), a security incident involving an OpenAI test model accessing Hugging Face servers, and a pixel-art “Isometric NYC” project built with 3D tiles and image generation models.

Allison announces a GitHub organization setting that lets maintainers centrally limit how many open pull requests a user without write access can have at once, helping enforce consistent contribution policies across all repositories.

James Montemagno gives a first look at using Kimi K3 (Moonshot’s open-weight model) inside GitHub Copilot in VS Code, focusing on what it enables for agentic coding and how developers can start trying it in their editor workflow.

GitHub hosts a “Rubber Duck Thursdays” coworking session focused on coding together, answering questions, and sharing updates about the GitHub platform and open source.

Amaury Levé explains how Microsoft.Testing.Platform (MTP) reporting helps teams move from a failing CI build to actionable evidence, with inline annotations in GitHub Actions and Azure DevOps, Azure DevOps-only history-based flaky/regression triage, crash-resilient TRX output, and multiple report formats for both humans and automation.