Browse All DevOps Content (743)

GitHub introduces stacked pull requests in public preview, showing how teams can split large changes into an ordered chain of smaller PR layers that are easier to review. It highlights the stack map view for reviewers and the different ways to work with stacked PRs across GitHub clients.

Allison announces a GitHub Enterprise update that lets enterprise owners install public third-party GitHub Apps directly on an enterprise account, enabling new enterprise management integrations while keeping access scoped away from orgs and repos unless explicitly granted.

Allison announces updates to GitHub Issues and Projects: a new “Relates to” issue relationship in public preview, plus generally available multi-select fields with improvements for grouping, editing from sidebars, copy/paste, and clearing values.

Allison announces updates to GitHub secret scanning, including a new partner (Lovable Labs), more secret types blocked by push protection by default, and richer alert context via extended metadata to help teams assess ownership and impact faster.

Shamir AbdulAziz lays out a practical operating model for “Zero Ops” using Azure SRE Agent: agents handle investigation and remediation work, while humans focus on intent, governance, and outcome review. The post breaks down how to scope agents, connect context, build repeatable artifacts, and safely graduate from human-in-the-loop to autonomy.

Allison explains a GitHub Code Quality change: enabling Code Quality no longer creates a ruleset that automatically requests GitHub Copilot code review on pull requests, and existing auto-created rulesets have had those settings turned off.

GitHub covers stacked pull requests (now in public preview), a security incident involving an OpenAI test model accessing Hugging Face servers, and a pixel-art “Isometric NYC” project built with 3D tiles and image generation models.

Allison announces a GitHub organization setting that lets maintainers centrally limit how many open pull requests a user without write access can have at once, helping enforce consistent contribution policies across all repositories.

James Montemagno gives a first look at using Kimi K3 (Moonshot’s open-weight model) inside GitHub Copilot in VS Code, focusing on what it enables for agentic coding and how developers can start trying it in their editor workflow.

GitHub hosts a “Rubber Duck Thursdays” coworking session focused on coding together, answering questions, and sharing updates about the GitHub platform and open source.

Amaury Levé explains how Microsoft.Testing.Platform (MTP) reporting helps teams move from a failing CI build to actionable evidence, with inline annotations in GitHub Actions and Azure DevOps, Azure DevOps-only history-based flaky/regression triage, crash-resilient TRX output, and multiple report formats for both humans and automation.

Ankit Kumar Honey explains how GitHub expanded Dependabot malware advisories from npm to eight package ecosystems by ingesting OpenSSF’s malicious-packages data into the GitHub Advisory Database, including the validation, normalization, deduplication, and safety controls used to keep auto-published advisories resilient.

Visual Studio Code highlights the SynthWave theme extension for VS Code, showing how to give the editor a retro “glow” look and pointing to the extension link for installation.

Sameen Karim demonstrates GitHub’s stacked pull requests workflow, showing how to split large feature branches into smaller PR layers, work with stacks from the GitHub CLI using the gh-stack extension, and merge an entire stack efficiently while using Copilot to help generate tests.

Mike Hulme explains why Microsoft was named a Leader in Gartner’s 2026 Magic Quadrant for AI-augmented code modernization tools, and outlines how GitHub Copilot modernization and Azure are positioned to assess, upgrade, and migrate legacy applications with agentic workflows while keeping developers in control.

Dan Hellem announces a small Azure Boards update that shows pull request annotations directly on work item cards, so teams can see code review activity and PR status without leaving the Kanban board or opening individual work items.

Eric van Wijk introduces the new Azure DevOps service connection, which lets pipelines authenticate to Azure DevOps using a Microsoft Entra workload identity (service principal or managed identity) instead of PATs or build session tokens, and shows where and how to use it across YAML, tasks, and scripts.

Fokko at Work demos selected new features in Visual Studio Code 1.132 that affect day-to-day Copilot Chat and editor workflows, including tracking session activity from the chat input, starting side chats with /btw, terminal output reflow, and dictation onboarding/customization, with notes on enterprise policy and plan-based availability.

GitHub takes a closer look at stacked pull requests and how they affect day-to-day developer workflow, especially around review, iteration, and landing changes safely.

Visual Studio Code shares a quick tip on using IntelliSense in the integrated terminal to speed up command-line work and reduce typos while you’re working inside VS Code.

Dan Hellem announces the general availability of the Azure DevOps Remote MCP Server, explaining how AI assistants can securely connect to Azure DevOps via a hosted endpoint. The post covers the minimal mcp.json setup, Entra ID authentication requirements, current client support, and when to use the local MCP server instead.

The Visual Studio Code Team shares the 1.133 Insiders release notes, highlighting a change for extension authors: custom editor extensions can now set different default priorities for normal editing versus diff views, improving how custom editors behave when comparing files.

Microsoft Security Research, Ravikant Tiwari, Sagar Patil and Suriyaraj Natarajan break down ChainDrop, a large-scale npm supply chain compromise that used a Bun-based, self-propagating worm to steal credentials from developer machines and CI/CD runners, then republish infected packages. The post includes mitigation steps, IOCs, and Defender XDR hunting queries.

GitHub introduces isomorphic-git on Open Source Friday, showing how a pure JavaScript implementation of Git can work with repositories in Node.js and in the browser without relying on the native Git CLI.

Allison announces a new way to customize GitHub code scanning default setup using a repository property, enabling teams to apply a shared CodeQL configuration across one repo or an entire organization without maintaining per-repo GitHub Actions workflows.

Victoria shares how she built an internal “Innovation Marketplace” for the GitHub legal team using GitHub Copilot CLI, from planning and tracking work in GitHub Issues to deploying with GitHub Actions and GitHub Pages.

James Montemagno introduces VS Code 1.131’s built-in dictation feature, showing how developers can speak directly into chat, editors, and the terminal without installing extensions, with an emphasis on privacy via on-device transcription and an optional AI cleanup step for more readable output.

Ron Pessner announces updates to Microsoft’s Zero Trust for AI approach, including new AI-focused checks in the Zero Trust Assessment, a DevSecOps pillar in the Zero Trust Workshop, and a companion e-book with practical patterns for securing AI agents, AI memory, and the software supply chain.

Julia Muiruri explains how to turn a single, oversized AI-generated pull request into a clean stack of smaller PRs using GitHub stacked pull requests and the gh-stack CLI, with a practical example and reviewer-focused guidance for keeping CI and merge rules working across the whole stack.

Visual Studio Code shares a short tip on teaching GitHub Copilot your project-specific rules using custom instructions, as part of learning agentic development in VS Code.

Allison announces new Dependabot configuration options that let you control the branch names created for dependency update pull requests, including prefixes, maximum length, separators, letter casing, and custom templates—useful for CI/CD naming constraints and for keeping monorepo branches easier to identify.

Allison announces a public preview feature in GitHub Code Quality that can generate a code coverage workflow with AI from repository settings, opening a pull request for review before you merge.

Allison summarizes the CodeQL 2.26.2 release for GitHub code scanning, including new language support (Swift 6.3.3 and Kotlin 2.4.10), query behavior changes that may surface more findings, and a breaking change affecting how query authors embed links in alert messages.

kinfey explains how Kars (Agent Reference Stack for Kubernetes) runs long-lived, tool-using AI agents with a tight blast radius by making the pod the trust boundary, brokering identity and egress through an in-pod router, and enforcing content safety, token budgets, and tamper-evident auditing on AKS.

Allison announces a GitHub Copilot Enterprise governance update that lets enterprise admins target managed settings to specific enterprise teams using itemized configuration files, so large orgs can scale guardrails while still letting teams tailor Copilot within defined boundaries.

GitHub shares a first look at GitHub Universe 2026, outlining what to expect from the event and how developers can get involved in the community opportunity announced for this year.

Visual Studio Code highlights that VS Code Dictation is now built in, showing how developers can speak to VS Code using the new voice dictation integration.

jordanselig announces the public preview of Markdown for Agents in Azure App Service, a feature that converts HTML responses into Markdown to reduce noise and token usage for agent and LLM scenarios, with steps to enable it via REST, ARM/Bicep, or Azure CLI and to request Markdown using an HTTP header.

.NET Team announces upcoming NuGet.org publishing security changes: new API keys will be capped at 30 days starting August 17, 2026, and older keys will expire on November 1, 2026. The post explains the supply-chain risk of long-lived secrets and recommends migrating to NuGet Trusted Publishing using OIDC.

Allison announces a GitHub update that lets users with the triage role create issues even when a repository restricts issue creation to collaborators only, making it easier for trusted contributors to help with intake and ongoing repository maintenance.