Browse DevOps News (303)

Allison announces improvements to GitHub Copilot code review, including automatic resolution of addressed review comments, smarter commit message suggestions when applying Copilot fixes, and deeper review analysis using Copilot SDK shell tools plus an ensemble approach for Lite reviews.

Tomoko Tanaka shows how her team turned event marketing runbooks into “ops as code” using GitHub Issues, GitHub Actions, and GitHub Copilot. The post breaks down the repo patterns (issue forms, labels, skills in Markdown, and a DRY_RUN switch) that automate setup, daily screening, and post-event reporting with guardrails.

Allison summarizes the September 7 weekly GitHub Copilot releases, including Jira integration in the Copilot app, Project HydraFusion model orchestration in Copilot CLI, new agent automations and voice mode updates in VS Code, and expanded enterprise sandbox controls for Copilot in JetBrains.

Gloridel Morales announces the September 2026 patch release for Azure DevOps Server, including the Patch 8 download link, release notes, and a quick command to verify whether the patch is installed on your server.

Kayla Cinnamon explains how to review agent-generated changes inside the GitHub Copilot app using three built-in panels: a diff view for inspecting edits, a terminal for running project commands, and a browser preview for validating UI changes before creating a pull request.

Allison announces a public preview of a refreshed repository-level pull request listing page on GitHub, focused on making it faster to find and act on PRs with improved filtering, advanced search, and a more compact, information-dense layout.

Brendan Burns explains why Microsoft was named a Leader in the 2026 Gartner Magic Quadrant for Container Management, and uses the announcement to outline how AKS, Azure Container Apps, Azure Arc, and Fleet Manager are positioned for AI, hybrid, and edge container operations at scale.

Allison announces a public preview that adds GitHub REST API endpoints for enabling and managing GitHub code scanning’s AI Scan for pull requests at both the organization and repository level, making it easier to roll out AI-powered security detections across selected repos without manual UI configuration.

Allison announces GitHub Actions cache-mode, a generally available workflow/job setting that lets teams apply least-privilege access to the Actions cache and reduce cache poisoning risk by controlling whether jobs can restore and/or save caches.

Steve Sweetman explains how to govern AI agent spend in Microsoft Foundry by combining request-path token limits, observability (traces, monitoring, evaluations), and finance-grade budgets, then tying those signals to ROI so teams can decide what to optimize, scale, or retire.

Allison announces that the GitHub Actions Xcode 27 runner image now runs on macOS 27 (public preview), enabling Apple app validation against the latest macOS version while keeping the same workflow runner labels.

Juan Montes profiles Kinaxis’ Maestro platform and how it uses Azure (including AKS, Databricks, Azure OpenAI, Cosmos DB, and Azure AI Content Safety) to run large-scale supply chain scenario modeling, forecasting, and agentic AI experiences. The piece also touches on Kinaxis’ internal use of GitHub Copilot for an agentic, PR-driven development workflow.

Jakub Oleksy’s August 2026 GitHub availability report breaks down five production incidents across GitHub Actions, authentication, and Copilot services, including what failed, how GitHub mitigated impact, and what reliability work is planned next (capacity, autoscaling, retries, and regional failover).

Nick Brady rounds up July and August 2026 updates for Microsoft Foundry, including GA for Hosted Agents, Voice Live integration, and Toolboxes, plus Model Router pool/region changes and new model releases. It also calls out SDK migrations (Python/JS/Java/.NET) and runtime requirement bumps you should test before upgrading.

Allison announces a new npm security protection: after signing in with a recovery code, any npm account is placed under a 72-hour security hold that blocks publishing and other sensitive write actions while still allowing sign-in and package installs.

Allison announces CodeQL 2.27.0, highlighting native Linux ARM64 support, improvements to GitHub code scanning default setup, and multiple query and framework-modeling updates that improve vulnerability detection across C#, Java/Kotlin, C/C++, and Rust projects.

Microsoft Security Research and Lior Leizerovich introduce the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework for understanding and prioritizing threats against cloud-hosted web apps and serverless platforms, with practical examples spanning identities, deployment pipelines, managed runtimes, and connected cloud resources.

Allison announces expanded self-serve trial eligibility for GitHub Advanced Security on GitHub Enterprise Cloud, allowing more enterprises to evaluate GitHub Code Security and GitHub Secret Protection before purchasing.

Allison announces a new GitHub repository ruleset option that can block pull requests from merging when they introduce unresolved secret scanning alerts, adding an extra enforcement layer beyond push protection.

The Visual Studio Code Team shares the VS Code 1.138 Insiders changelog, focusing on Agent Host and Agents window improvements like shareable session links, side-by-side agent sessions, repo-first context attachment for issues/PRs, voice mode session awareness, and agent-session cleanup controls.

Allison announces agentic autofix for GitHub Code Quality, letting teams select up to 25 findings and assign them to GitHub Copilot in one action. Copilot applies fixes on a branch, validates the changes, and opens a pull request for review, with usage governed by existing enterprise policy and AI credits.

Waldek Mastykarz explains how to pick a “minimal viable model” for AI coding work by running your own evals instead of defaulting to the most expensive option. Using GitHub Copilot Chat in VS Code, he compares model quality scores and per-run costs across real upgrade scenarios to show why “smarter” can be worse value.

Allison announces updates to GitHub Copilot for JetBrains, including enterprise-managed sandbox policies, cross-file cursor jumps for next edit suggestions, global project context in chat, and enterprise policy diagnostics. The release also adds a preview integration that connects Copilot CLI terminal sessions to IDE context and improves reliability across MCP and agent sessions.

Allison announces GitHub Enterprise Server (GHES) 3.22 general availability, highlighting updates for enterprise administration and collaboration, including Copilot CLI support for disconnected environments, enterprise teams, improvements to repository rulesets and required reviewers, and UI enhancements for issues and pull requests.

Javier Lozano, Chris Sfanos, and Jon Galloway announce that the call for presenters is open for .NET Conf 2026 Community Days, with session proposals accepted from September 8 through October 6, 2026, and a separate volunteer opportunity for helping run the event.

davidwright walks through a practical, staged path for turning an Azure-hosted SaaS app into a transactable Azure Marketplace offer, using Git-Ape “skills” to generate version-controlled decision records for offer selection, multi-tenancy, landing zones, fulfillment/metering, security evidence, deployment blueprints, and Partner Center onboarding.

Allison’s weekly Copilot changelog highlights new model options (Claude Fable 5.1 and Gemini 3.8 Flash), stronger content protection via honored content exclusions in Copilot app/CLI, and VS Code 1.136 updates aimed at managing agent sessions and getting pull requests ready to merge.

Allison announces a redesigned GitHub support portal now hosted at help.github.com, bringing support, documentation, learning, community, and account resources into a single entry point with Copilot-powered search.

Allison announces a new GitHub REST API endpoint that lets you track repository star growth over time while keeping stargazer identities private, aimed at helping maintainers and tool builders update integrations affected by earlier access restrictions.

Allison announces generally available updates to npm trusted publishing, including multiple OIDC configurations per package, staged approvals that wait for malware scanning to finish, and improved version history visibility for maintainers on npmjs.com.

Allison summarizes three GitHub Actions improvements: a new REST API to track runner version deprecation timelines, a least-privilege `vulnerability-alerts` permission for `GITHUB_TOKEN` to read Dependabot alerts, and new `job` context properties that help reusable workflows identify their source at runtime.

Allison announces a required PGP signing key update for the GitHub CLI (gh) Linux APT and RPM repositories ahead of the September 5, 2026 key expiration, with guidance on who needs to update their setup and which installation methods are unaffected.

Amaury Levé explains how MSTest 4.4 uses source generation to make test projects publishable and runnable as Native AOT executables, so your tests exercise the same trimming and reflection constraints as the app you deploy.

Kayla Cinnamon explains how the GitHub Copilot app can run multiple agent sessions in parallel on the same project by isolating each session with its own Git worktree, so you can queue up tasks (like feature work, accessibility review, and tests) and review results as they complete.

Brent Halazon explains how Microsoft’s Physical Security Engineering Team used Azure Arc and Azure Virtual Desktop to standardize and scale hybrid operations across a global datacenter footprint, improving governance, observability, patching, and the operator experience without moving workloads fully into Azure.

Allison summarizes what’s new in CodeQL 2.26.4 for GitHub code scanning, including language support updates and query accuracy improvements that affect security detections across C#, Java/Kotlin, and GitHub Actions workflows.

Mads Kristensen shows how to give each Visual Studio solution its own color theme so multiple IDE instances are easier to tell apart. He also explains the new scoped settings model in Visual Studio 2026, where solution-level settings are stored in a JSON file you can optionally commit to source control for consistent team setup.

Allison announces general availability of Enterprise Live Migrations (ELM), a GitHub Enterprise feature for near-zero-downtime migrations from GitHub Enterprise Server to GitHub Enterprise Cloud with Data Residency, including cutover behavior, monorepo support, and CLI-based lifecycle management.

Allison announces a generally available GitHub billing update that lets admins set an expiration date on individual user budgets, so temporary budget overrides are removed automatically and users fall back to the next applicable budget.

Allison announces a public preview update to GitHub Copilot code review that adds approval assessments on pull requests and, when enabled by admins, allows Copilot to submit an approval that can count toward required-approvals rules.