Browse DevOps News (308)

sbaynes describes how Microsoft combines AI agents, testing, static analysis, and formal verification to transform large codebases. The article covers Windows toolchain migration, C/C++ modernization into Rust, and specification-driven validation, explaining how small expert teams review shared knowledge and system properties rather than every generated change.

Mariyaali introduces preview support for Fabric Data Warehouse in workspace monitoring. Completed distributed queries flow into a workspace-scoped KQL database, where administrators can compare performance, investigate failures, and build dashboards. Shared query identifiers connect workspace telemetry to Query Insights for deeper investigation within the affected warehouse.

Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.

Josef Sin explains what Azure DevOps users should check following the PHP2Shell disclosures. Azure DevOps Services and Server do not use PHP to handle customer requests, but pipeline workloads, agent hosts, containers, and deployed applications may require runtime patches. The guidance distinguishes Microsoft-managed updates from fixes customers must apply themselves.

Jason Chlus and Mads Kristensen explain how Visual Studio 2026 version 18.11 supports standalone Markdown investigation notes and restores unfinished work through the opt-in Hot Exit preview. The walkthrough covers creating notes without a project, enabling session preservation, and understanding why restored edits are not a substitute for saving files.

Allison announces an updated GitHub app for Microsoft Teams that combines GitHub notifications with GitHub Copilot-powered actions, letting teams respond to issue and pull request updates by mentioning @GitHub to investigate, fix bugs, run tests, and open pull requests from within Teams.

Allison explains a GitHub Enterprise Managed Users (EMU) incident where SCIM deprovisioning incorrectly deleted accounts instead of suspending and obfuscating them, how to confirm impact via audit logs, and what GitHub changed to restore records and prevent recurrence.

Microsoft Security Research, Mahesh Mandava, Srinivasan Govindarajan, Sagar Patil and Suriyaraj Natarajan break down the LiteLLM 1.107.0 supply-chain compromise, showing how Python startup hooks enabled credential theft without importing LiteLLM, what data was targeted, and how to investigate and recover using Microsoft Defender detections and hunting queries.

Allison announces new GitHub public monitoring capabilities for handling leaked secrets at enterprise scale, including alert triage workflows, continuous token validity checks, and integrations via a REST API and enterprise webhooks for incident response pipelines.

Allison announces general availability of enterprise-level installations for GitHub Apps, expanding API and permission coverage so enterprises can migrate more automation away from classic PATs and manage governance, security, and admin settings through GitHub Apps.

Allison summarizes the September 2026 update for GitHub Copilot in Visual Studio 2026, including PR exploration via the Git agent, preview BYOM support (with a breaking change to the new Agent harness), and a new flow to fix NuGet Audit vulnerabilities directly from the Error List.

Allison announces new GitHub Actions blob storage hosts that are now included in the GitHub meta API, with guidance for organizations that use network allowlists to avoid interruptions to job summaries and logs.

Allison announces a public preview feature for GitHub Enterprise Cloud with data residency that expands secret scanning to public commits on github.com, while keeping alert delivery and data handling within the customer’s residency region via verified domain matching.

Allison announces two GitHub pull request review improvements: a saved whitespace visibility preference that persists across pull requests, and a split-view change where new and deleted files use the full width to reduce wrapping and improve readability.

Niels Laute announces PowerToys 0.102 and walks through the headline changes, including new mouse utilities, a quick-access shelf for Command Palette, ZoomIt snip dictation, and new command-line tools that make it easier to script and automate PowerToys features from the terminal.

QixiaoWang introduces the Fabric Notebook Toolkit (FNTK) preview, a CLI that lets coding agents interact with live Microsoft Fabric notebooks—reading and editing cells, running code, and pulling outputs and Spark diagnostics—so iterative debugging and validation can happen directly from an agent-driven terminal workflow.

Allison announces a public preview in GitHub CLI v2.103.0 that lets you opt in to expiring, auto-refreshing OAuth credentials, reducing the risk of long-lived leaked tokens. The post explains how to enable the feature, how it behaves with Git over HTTPS, and what to watch for in scripts that cache tokens.

Eleanor White explains how GitHub is moving its Git storage to Azure, focusing on the last ultra-busy repositories blocked by cross-region latency. The post breaks down per-reference write quorums and a “virtual replica” design that makes Azure Blob Storage part of the durability path so reads and writes can scale independently.

Laura Jiang announces Agentic Autofix for GitHub Advanced Security in Azure DevOps, which generates proposed fixes for both code scanning alerts and vulnerable dependencies. The update uses repository context plus custom instructions/skills to better match team standards, and adds triage signals like EPSS and dependency scope to help prioritize what to fix first.

Leah Tran introduces a new Visual Studio 2026 (18.11) Git workflow feature that lets you compare a historical commit directly against your current working tree, without checking out the old commit or switching branches, making it easier to inspect diffs that include uncommitted changes.

The Visual Studio Code Team shares the 1.144 Insiders changelog, including updates to the experimental session composer, richer Mermaid diagram controls in the Markdown editor, improved OAuth token isolation for MCP servers, and an early feature for comparing multiple models without opening a folder.

Allison announces a GitHub repository governance update that lets you convert all classic branch protection rules into repository rulesets in one action, making it easier to standardize and manage branch policies at scale across branches and organizations.

Allison summarizes recent improvements and bug fixes in GitHub secret scanning, including an upcoming audit log field change that may affect integrations, plus updates to token revocation support, webhook payloads, and several API and push-protection edge cases.

Allison announces an update to the Dependabot alerts REST API that adds a new version_requirement field, making it easier to retrieve the dependency version (or constraint) recorded for an alert without parsing lockfiles or issuing separate GraphQL queries.

Allison announces GitHub package firewall in public preview for GitHub Enterprise Cloud, a supply-chain security feature that inspects package metadata and downloads to block malicious dependencies before they reach CI/CD hosts or developer workstations.

Julien Dubois shares practical stories from three Java Champions using GitHub Copilot in real projects, focusing on agentic workflows, verification gates, and staying accountable for what ships—from large content migrations to debugging tricky concurrency issues on Raspberry Pi.

Waldek Mastykarz tests whether swapping a real GitHub repo for a local bare git remote changes AI coding agent behavior during evals, focusing on a rebase scenario where the agent must decide whether to push without being asked.

Allison announces expanded Dependabot support for newer package manager versions (npm 12, pnpm 11/12, and Bun 1.4), so teams can upgrade and continue receiving automated dependency update PRs across GitHub.com and GitHub Enterprise Server.

Kayla Cinnamon explains how to move an existing GitHub Copilot app agent session into VS Code so you can review the diff, keep the full conversation context, make manual edits, run tests locally, and push updates back to the same pull request.

Mads Kristensen introduces new Visual Studio 2026 (18.11) keyboard shortcuts for reordering document tabs and jumping to tabs by their visual position, plus UI improvements for tool window tab sizing and consistent tab/header height.

Allison explains a GitHub availability protection that can temporarily require authentication for some public-repo clones and fetches over HTTPS during unusual traffic, and outlines practical ways to make CI and automation more reliable using GitHub Actions tokens or GitHub App/PAT-based auth.

Allison explains how changes in macOS 27 and Xcode 27 break CodeQL’s traced extraction, which impacts CodeQL scanning for multiple compiled languages and blocks Swift 6.4 analysis. The post outlines what’s affected and the practical workflow changes needed to keep GitHub Actions scans running.

Allison announces general availability of GitHub’s open source license compliance for GitHub Enterprise Cloud, adding enterprise-wide license policies and PR checks to help teams prevent non-compliant dependencies from being merged.

Allison announces general availability of the Xcode 27 GitHub Actions runner image for building and testing Apple apps, including the new runner labels to target the Xcode 27 toolchain on Apple Silicon hosted runners.

Allison announces updates to GitHub Copilot in Slack and Microsoft Teams, including multi-repo support in a single conversation plus improvements to mentions, repository switching, Slack thread context, and overall reliability.

Nick Brady’s September 2026 roundup covers Microsoft Foundry updates across models, agents, observability, and tooling—highlighting GPT-6 family GA, Routines and Tool Search GA, Insights preview, Model Router preview controls, and Foundry Local 2.1 bring-your-own-model support with ONNX Runtime GenAI.

Allison announces a new GitHub Code Quality billing feature that lets organizations download a CSV report of license usage, including which active committers consumed licenses, which repositories they contributed to in the last 90 days, and whether committers are unique to a repo or org.

Martin Woodward explains how GitHub Copilot’s agentic workflows are shifting development from issuing commands to expressing intent, and why “ambient intelligence” needs strong context, clear boundaries, and developer control. He also shares a practical example: mapping Copilot actions to physical controls like the Logitech MX Keypad.

Greg Mohler explains how GitHub built “Evergreen”, a GitHub App that automates quarterly outside-collaborator access reviews and stale-repo archival using native GitHub features like Actions, issues, webhooks, and custom properties, with a fail-secure approach and an audit trail stored directly in git history.

Chet Husk introduces dotnetup, a public-preview toolchain manager that installs and updates user-local .NET SDKs and runtimes on macOS and Linux, with support for side-by-side stable, preview, and daily builds and predictable version pinning via global.json.