Browse GitHub Copilot News (201)

Allison announces general availability of assisted permissions in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. A language model evaluates command, file-path, and URL requests, automatically allowing those classified as clearly safe. Enterprise administrators can control available permission modes and set defaults for new sessions.

Allison announces GPT-6.1 Terra’s general availability in GitHub Copilot for everyday agentic coding and terminal tasks. The model uses provider list pricing under usage-based billing, with gradual rollout across supported clients. Business and Enterprise administrators can control access through model policies and default enablement settings.

Cynthia Zanoni and Pooja Yarabothu explain how Microsoft’s PostgreSQL extension brings database exploration, SQL editing, and troubleshooting into VS Code. They show how GitHub Copilot can help interpret schemas and query plans, while emphasizing result verification and careful review of performance recommendations before making changes.

Ben Steenhoek and Ulugbek Abdullaev explain how configurable eagerness lets paid GitHub Copilot subscribers adjust inline suggestions in VS Code. They describe the low, medium, and high modes, the training approach behind them, reward-hacking mitigations, and experimental results showing how suggestion frequency and size change.

Allison announces an update to the GitHub Copilot usage metrics API that adds a new totals_by_client breakdown, letting enterprises and organizations see request, session, and token usage coming from tools outside the IDE (like OpenCode, Copilot CLI, VS Code, and JetBrains).

Allison announces an updated GitHub app for Microsoft Teams that combines GitHub notifications with GitHub Copilot-powered actions, letting teams respond to issue and pull request updates by mentioning @GitHub to investigate, fix bugs, run tests, and open pull requests from within Teams.

Microsoft Security Research, Mahesh Mandava, Srinivasan Govindarajan, Sagar Patil and Suriyaraj Natarajan break down the LiteLLM 1.107.0 supply-chain compromise, showing how Python startup hooks enabled credential theft without importing LiteLLM, what data was targeted, and how to investigate and recover using Microsoft Defender detections and hunting queries.

Allison summarizes the September 2026 update for GitHub Copilot in Visual Studio 2026, including PR exploration via the Git agent, preview BYOM support (with a breaking change to the new Agent harness), and a new flow to fix NuGet Audit vulnerabilities directly from the Error List.

Allison announces an update to the Copilot usage metrics API that reports configured names for custom skills, custom agents, MCP servers, slash commands, and plugins (instead of grouping them as “other/custom”), making it easier for admins to track adoption and usage trends across an organization.

Allison announces general availability of a global default policy for GitHub Copilot features on Copilot Business and Copilot Enterprise, explaining how unconfigured settings will be enforced during the rollout and where admins can review and override defaults.

Allison announces a new “Industry comparison” view in the GitHub Copilot impact dashboard, letting opted-in enterprises benchmark agentic adoption and leverage against aggregated peer data, with controls for policy-based participation, daily refresh, and data residency boundaries.

QixiaoWang introduces the Fabric Notebook Toolkit (FNTK) preview, a CLI that lets coding agents interact with live Microsoft Fabric notebooks—reading and editing cells, running code, and pulling outputs and Spark diagnostics—so iterative debugging and validation can happen directly from an agent-driven terminal workflow.

Julien Dubois shares practical stories from three Java Champions using GitHub Copilot in real projects, focusing on agentic workflows, verification gates, and staying accountable for what ships—from large content migrations to debugging tricky concurrency issues on Raspberry Pi.

Waldek Mastykarz tests whether swapping a real GitHub repo for a local bare git remote changes AI coding agent behavior during evals, focusing on a rebase scenario where the agent must decide whether to push without being asked.

Allison announces generally available REST API endpoints for retrieving and updating GitHub Copilot model policies across enterprises, organizations, teams, and enterprise apps, making it easier to centrally control which Copilot models are available at each scope.

Allison announces that several AI models have been deprecated across GitHub Copilot experiences as of October 19, 2026, and lists the supported replacement models. The post also calls out what Copilot Enterprise admins may need to change in model policies so alternatives show up in Copilot Chat.

Kayla Cinnamon explains how to move an existing GitHub Copilot app agent session into VS Code so you can review the diff, keep the full conversation context, make manual edits, run tests locally, and push updates back to the same pull request.

Gerald Versluis explains why existing .NET MAUI apps can crash right after the splash screen when built with Xcode 27, and walks through migrating to UIKit’s scene lifecycle—either manually or by using the .NET MAUI CLI “maui-xcode27-migration” agent skill with GitHub Copilot CLI.

Bruno Capuano shows how to use Bring Your Own Model (BYOK) with the GitHub Copilot SDK in a small .NET 10 console app, routing inference to Microsoft Foundry or Azure OpenAI while keeping the Copilot runtime. The walkthrough covers ProviderConfig, endpoint normalization, and Entra ID vs API-key authentication.

Allison announces updates to GitHub Copilot in Slack and Microsoft Teams, including multi-repo support in a single conversation plus improvements to mentions, repository switching, Slack thread context, and overall reliability.

Martin Woodward explains how GitHub Copilot’s agentic workflows are shifting development from issuing commands to expressing intent, and why “ambient intelligence” needs strong context, clear boundaries, and developer control. He also shares a practical example: mapping Copilot actions to physical controls like the Logitech MX Keypad.

Allison announces a November 16, 2026 deprecation of several AI models across GitHub Copilot experiences, and explains what admins and teams need to do to keep Copilot Chat, agent modes, and other Copilot features working with supported alternatives.

Allison announces general availability of agentic autofix for GitHub code scanning alerts, where Copilot explores the codebase, proposes and validates fixes with CodeQL, and opens a draft pull request. The post also covers where it can be used, required policies and permissions, and how billing works with AI Credits and Actions minutes.

Allison announces updates to HydraFusion in GitHub Copilot, including a refreshed frontier-model pool, improved Cascade and Critique orchestration workflows, and a new HydraFusion Max option for deeper reasoning on demanding tasks across VS Code, the Copilot app, and Copilot CLI.

Jakub Oleksy reports on GitHub’s September 2026 reliability work and incidents, including database pressure reductions, overload controls, added headroom for GitHub Actions, expanded failure containment for pull requests, and progress moving production workloads and traffic to Azure.

James Rempt shares takeaways from VSLive! San Diego on how experienced Visual Studio developers are adopting GitHub Copilot and other AI tools, while spending more time validating generated code and leaning on hands-on learning. The post also highlights how Visual Studio Subscription benefits support ongoing skill-building.

Allison announces general availability of the Gemini 4 Argon model in GitHub Copilot, including where developers can select it, which Copilot plans get access, and how admins can control availability via model policy and default model enablement settings.

mk_sunitha introduces Fabric App functions (preview), a TypeScript-based serverless capability for Fabric Apps that lets builders run secure server-side logic, use application authentication to access downstream resources, and manage secrets safely. The post also shows how to scaffold, debug, and deploy functions, including using GitHub Copilot in VS Code.

Allison announces updates to GitHub Copilot enterprise managed settings enforcement, including a startup policy freshness requirement and minimum client version enforcement for the sandbox managed setting key.

Allison announces new GitHub Copilot enterprise managed telemetry controls that let admins attribute Copilot activity to a specific user while keeping prompts, responses, and tool content disabled by default, with fine-grained OpenTelemetry capture settings across Copilot CLI, the Copilot app, and VS Code Agent Host sessions.

Christopher Harrison explains how to make GitHub Copilot more effective on a real codebase by storing project context in the repo. He covers repository and path-specific instructions, reusable “agent skills” for repeatable procedures, custom agents for broader work, and MCP servers (including Playwright) to connect Copilot to external tools.

Allison announces updates to GitHub Copilot for JetBrains, including enterprise-managed default agent models, a new “Fix” action from diagnostics that opens inline chat, and controls for MCP server startup. The release also improves chat navigation and account UX, boosts reliability, and drops support for JetBrains IDE 2025.1.

Allison summarizes the October 5 weekly GitHub Copilot releases, covering a new Claude Haiku 5.5 model option, generally available local sandboxing controls for agent sessions, Copilot app account separation for licensing vs repos, Copilot CLI local model discovery via Ollama, and new VS Code agent-session management features.

Allison announces new admin controls for GitHub Copilot code review, including organization-level billing options to avoid consuming individual member quotas and policy settings that restrict who can trigger Copilot review requests when external/personal licenses are involved.

sbaynes explains how GitHub Copilot is rolling out local, on-device AI coding on new Windows PCs, including automatic routing between local and cloud models, a new MAI Code 1.1 Flash local model build, and sandboxed tool execution using Microsoft Execution Containers (MXC).

Allison announces that Claude Haiku 5.5 is now generally available in GitHub Copilot, positioned as a lightweight model for fast, high-volume coding tasks like subagents, quick edits, and terminal workflows, with access controlled via Copilot plan entitlements and enterprise model policies.

Erin Havens shares GitHub data showing secret leaks are scaling with the volume of code being pushed, then explains how GitHub Secret Protection is using a fast ModernBERT-based classifier to improve push protection for unstructured secrets and reduce the human cost of remediation.

Allison announces a new fine-tuned GitHub model for context-aware leaked secret detection across secret scanning alerts, push protection, and GitHub Copilot /security-review. The post explains what’s changing, where it’s available (including GHES 3.23), and how AI Credits and budgets apply to the new opt-in checks.

Allison announces general availability of local sandboxing for GitHub Copilot, adding a secure execution boundary for agent-run tools and commands on developer machines across Copilot CLI, the Copilot app, and VS Code Agent Host sessions.

Allison announces an update to GitHub Copilot CLI that lets you discover and select supported local models from a running Ollama instance using the new /model picker, without restarting your session. The post also clarifies how adding local models relates to offline mode, telemetry, and remote providers.