Browse All DevOps Content (755)

Allison announces npm publish-time malware scanning and explains how it can delay package availability, when publishes may be held or blocked, and how maintainers can declare dual-use security functionality using new package metadata and a required DISCLOSURE file.

Chris Noring explains how to investigate unexpected GitHub Copilot Enterprise AI-credit spend and then control it using GitHub Billing guardrails. The post walks through identifying the SKU driving costs, attributing usage to organizations and cost centers, and applying budgets, alerts, and per-user limits without breaking productive workflows.

Mark Downie introduces the Visual Studio July update, centered on a new Agent (Preview) in Copilot Chat built on the GitHub Copilot SDK. The post also covers built-in .NET and Azure skills, org-level Copilot custom instructions, attaching Git branches as chat context, and improved MSVC toolset discovery for reproducible C++ builds.

Greg Ose summarizes the security changes GitHub and npm shipped over recent months to break common supply chain attack paths, focusing on preventing workflow compromise, reducing credential exposure, slowing malicious propagation, and improving incident response options for enterprises.

Alex Pysanets announces the general availability of Commit Search in Azure DevOps, a new way to find commits by searching commit message text across projects and repositories, with filters for project, repo, author, and branch plus sorting by time or relevance.

Allison announces an update to Dependabot malware alerts: GitHub Advisory Database now ingests malware advisories from the OpenSSF malicious-packages repository, expanding detection coverage across more ecosystems and surfacing matches as Dependabot alerts in your repos and orgs.

Visual Studio Code shows the different ways to split the integrated terminal, making it easier to work with multiple shells or tasks side-by-side while staying inside the editor.

Allison announces a new GitHub Actions protection that automatically holds certain workflow runs flagged as potentially malicious until a collaborator with write access reviews and approves them via an authenticated web session.

tonimontez explains how to govern GitHub Copilot’s usage-based spend using GitHub’s native budget controls first, then adds an Azure API Management gateway in front of an Azure AI Foundry (Azure OpenAI) deployment for real-time, token-granular quotas and per-developer telemetry.

Visual Studio Code shows how the new Migration feature in VS Code turns existing prompts into reusable skills, focusing on a faster way to organize and reuse prompt-driven workflows inside the editor.

Burke Holland shares a practical GitHub Copilot “harness” workflow for building features end-to-end: pick a Copilot surface, enable more autonomy safely, prototype and plan in the same session, implement with Autopilot, then iterate and run a Rubber Duck review to catch blind spots.

Allison announces that enterprise managed settings now apply to the GitHub Copilot app and Copilot cloud agent, letting enterprise owners enforce a single managed-settings.json policy across more Copilot clients, including controls for plugins, marketplaces, and approval-prompt bypass behavior.

Yuliia Kovalova and Jan Krivanek introduce the MSBuild Binlog Analyzer for VS Code, a preview extension that uses GitHub Copilot Chat plus an MCP server to explain build failures, pinpoint performance bottlenecks, compare builds, and spot regressions directly from MSBuild .binlog files.

vladvino announces the public preview of the AI Gateway tier for Azure API Management, focused on publishing and governing AI models and MCP servers. The post explains the new portal experience, policy-card governance (rate limits, quotas, Content Safety, fallback), and OpenTelemetry token metrics to destinations like Application Insights.

Christopher Harrison introduces the GitHub Copilot app and shows how it supports real-world development workflows with project-scoped agent sessions, Quick Chat for parallel threads, interactive canvases for visual iteration, and Agent Merge to help move pull requests through CI and review.

Kumar Kaushal demonstrates a transitional Azure networking pattern for phased migrations where an application is hard-coded to a legacy private IP. The lab uses Private Link Service Direct Connect plus a Private Endpoint and a site-to-site VPN so Azure-hosted tiers can keep calling the same on-premises address during the interim phase.

Lee Stott explains why the Model Context Protocol (MCP) is becoming the standard way AI agents connect to tools and data, then shows minimal runnable MCP server examples in Python and TypeScript plus practical guidance for VS Code hosting, security, and production operations.

This week's DevOps roundup connects day-2 guardrails, agentic workflows, and stricter pull request gates. Azure Policy for Kubernetes moves validation closer to the API server with VAP and CEL, while GitHub and VS Code keep pushing Copilot agents earlier into issues, PR creation, and even mobile-first CI triage. On the reliability side, GitHub Code Quality and Dependabot's default cooldown add more predictable merge-time checks, and Azure deep dives on large-scale migrations and hybrid Logic Apps highlight rollout and rollback patterns that hold up under real traffic.

GitHub highlights an open-source project that turns World Cup 2026 match event data into interactive 3D “data portraits,” focusing on how the visualization is built and delivered in the browser.

GitHub shares that Microsoft Comic Chat, a classic IRC client from 1996, has been open-sourced on GitHub, including original source snapshots and experiments to modernize it for current Windows versions.

Reynald Adolphe and members of the VS Code and GitHub Copilot teams recap the past month’s updates, with live demos of notable Visual Studio Code improvements and GitHub Copilot changes, plus a chance for viewers to ask questions in chat.

GitHub’s The Download rounds up developer news including TypeScript 7’s new native Go compiler, VS Code 1.129’s dedicated agent host runtime, Kimi K3’s 2.8T-parameter model, and Microsoft open-sourcing the 1996 Comic Chat IRC client, plus a few other notable open-source and ecosystem updates.

Fokko at Work walks through what’s new for GitHub Copilot in Visual Studio Code 1.130, focusing on assisted tool approvals, Agents window improvements, and chat updates, with notes on how enterprise policies and plan differences can affect feature availability.

carlottacaste shares a short walkthrough of the Foundry Toolkit for Visual Studio Code and a companion VS Code Learn course, focused on keeping model selection, prompt iteration, and agent development inside VS Code, with links to a full video playlist and a featured setup episode.

Kayla Cinnamon gives a quick tour of the redesigned editor panel inside the Agents window in VS Code 1.129, showing how the updated layout supports agent-driven workflows and keeps code editing and AI-assisted interactions in one place.

Allison announces general availability of Copilot cloud agent for Linear, letting teams assign Linear issues to Copilot to produce draft pull requests, run work in an ephemeral environment backed by GitHub Actions, and report progress back into Linear with configurable models, branches, and custom agents.

Allison announces that GitHub MCP Server already supports the upcoming stateless MCP specification, outlining protocol changes (like removing sessions and initialize) and what GitHub changed internally to stay compatible while improving scalability and verification.

AbodeSaafan explains how the Azure Logic Apps team migrated roughly 60,000 per-customer Azure Functions apps from the end-of-life v1/v2 runtime to Functions v4 (isolated worker) under live load, using shadow traffic, strict parity checks, and a progressive rollout with fast rollback and careful retirement of the old fleet.

Allison announces a GitHub Mobile improvement that lets you use the Copilot cloud coding agent to investigate and fix failing GitHub Actions checks directly from a pull request, creating a follow-up PR for you to review and merge.

stevenbucher explains how Azure Policy for Kubernetes can now enforce policies using Kubernetes Validating Admission Policy (VAP) with CEL, via Gatekeeper’s integration. The post contrasts the older webhook/Rego flow with in-process validation, then walks through packaging a CEL constraint template into an Azure Policy definition and rolling it out across AKS clusters.

Allison announces a public preview update for GitHub Projects and GitHub Issues: multi-select fields, allowing a single field to store multiple values and enabling filtering, grouping, and searching across project views.

GitHub hosts a “Rubber Duck Thursdays” coworking session where viewers can hang out with the team, ask questions, and hear what’s new in the GitHub ecosystem.

Carlin Cherry explains why Dependabot now applies a default three-day cooldown before opening non-security version update pull requests, aiming to reduce exposure to fast-moving supply chain attacks where malicious package releases are discovered and removed within hours.

Allison announces a public preview for GitHub Issues agent automation controls, adding approvals, confidence ratings, and rationale so teams can review or auto-apply agent-driven changes like labeling, assigning, and closing issues.

GitHub shows how to tailor the GitHub Copilot for Jira integration so teams can reach draft pull requests faster, using ticket-level and space-level instructions to set defaults like target repo and branch naming, and to route specific work (such as API refactors) to custom agents.

James demonstrates how the GitHub MCP Server connects GitHub Copilot to GitHub workflows inside VS Code, enabling natural-language issue management, pull request creation, and code review without switching tools.

Visual Studio Code shares a short clip highlighting a GitHub Copilot-related “did you know?” tip in VS Code, framed as a quick GitHub “hacking” moment for developers.

GitHub experiments with building a personal assistant using the GitHub CLI, focusing on how to wire up workflows and try out GitHub features from the command line.

junjieli introduces the Foundry Agent Canvas (public preview), a GitHub Copilot App extension that lets developers discover resources, scaffold and configure a Foundry hosted agent, test it locally with an embedded Agent Inspector, and deploy it to Foundry Agent Service using azd-driven workflows.

anandgmenon walks through running Azure Logic Apps Hybrid on a self-managed RKE2 Kubernetes cluster, including how to provide an ingress IP with MetalLB, connect the cluster to Azure Arc, install the Container Apps extension, and fix the RKE2-specific DNS and inotify issues that can break deployments.