Browse All DevOps Content (644)

Allison announces Dependabot version update support for Agent Package Manager, helping keep AI agent skills, prompts, and instructions current through pull requests. The update handles supported Git dependencies and existing lockfiles, is available across all GitHub plans, and covers version updates rather than security updates.

Richard Lander explains how NuGet packages can carry version-matched agent skills alongside library binaries. He demonstrates tools for discovering and copying those skills into repositories, compares package delivery with Git-based approaches, and discusses model evaluation, token costs, and the security implications of agents consuming package documentation.

Yun Jung Choi explains how six specialized Azure plugins extend AI-agent workflows for AKS troubleshooting, cost analysis, Advisor recommendations, graph queries, Azure Local, and Foundry IQ knowledge bases. The guide includes example prompts, installation commands for supported clients, and approval requirements for resource changes and disruptive operations.

Alex Perrault explores how Arnis turns OpenStreetMap data into Minecraft worlds and how its sole maintainer, Louis Erbkamm, uses GitHub Copilot to investigate bugs and review contributions. Copilot sub-agents help examine sensitive parts of the codebase and suggest corner cases for regression testing.

Allison describes a new GitHub REST API endpoint that looks up a resource’s cost center without listing and scanning every cost center. The endpoint accepts a resource type and name, returns the cost center’s ID and name, and limits access according to enterprise billing permissions.

Allison outlines CodeQL 2.27.3 updates for GitHub code scanning, including Python 3.15 support, JSON data extensions, and improved analysis across languages. The release also adds an opt-in threat model for LLM-generated data and introduces GitHub Actions control flow changes that may require updates to custom queries.

Allison announces that Dependabot now supports Python 3.15, allowing projects to upgrade while continuing to receive dependency updates. Support is available to all github.com users and will also be included in GitHub Enterprise Server 3.24.

Wiliam_Rosa explains how to configure environment variables for Azure Databricks serverless jobs using the Jobs API. The walkthrough covers task-level selection, inline and file-based precedence, secret references, and configuration limits, including why best-effort log redaction still requires care when handling credentials.

Emanuele Bartolesi recaps GitHub Universe 2026 through its two keynotes, connecting Copilot’s multi-repository workflows with review, security, and Git infrastructure changes. His practical takeaways focus on verification gates, contributor guardrails, shared planning, and keeping human judgment central as teams adopt coding agents.

kinfey explains how Meridian 24 separates managed AI research and editing from deterministic audio production and publication. The implementation uses Microsoft Copilot Harness, Foundry and durable Blob storage to produce bilingual bulletins, with evidence checks, recovery checkpoints, identity permissions and measured audio timing rather than relying on a single prompt.

Allison explains how GitHub Desktop 3.6.10 and later use short-lived, automatically refreshing authentication tokens for eligible accounts. The gradual rollout reduces leaked-token exposure without manual renewal for Git operations or API requests. Existing sessions remain signed in, but existing tokens are not automatically migrated, and GitHub Enterprise Server is excluded.

AsithaDeSilva explains how a prototype Azure SRE Agent workflow connects billing data, resource inventory, and optimization recommendations to investigate spending changes. The walkthrough covers reusable skills, report setup, scoped access, and validation, with practical guardrails for distinguishing projections from actual costs and cleanup candidates from resources approved for deletion.

Khalid Abuhakmeh shows how to avoid unnecessary static-site builds by checking post publication dates in a scheduled GitHub Actions workflow. The guide uses sparse checkout and awk, preserves manual deployments, and explains scheduling reliability trade-offs and adaptations for different static-site generators and hosting providers.

sbaynes shares how Microsoft's Copilot Cowork team used coding agents, written specifications, automated reviews, and human checkpoints to build and migrate a live service. The article explains practical controls for parallel development, security boundaries, trustworthy tests, and a Python-to-Rust migration, including measured gains and remaining limitations.

John Edward outlines the generally available GitHub app for Microsoft Teams, including Copilot task tracking, multi-repository work, and MCP connections. He also explains onboarding and administrator requirements, showing how teams can turn conversations into issues and pull requests while retaining human review of AI-generated changes.

WSilveira collects November’s Azure Logic Apps product and community updates, including a local CLI preview, AI agent orchestration, pricing allowances, and hybrid storage benchmarks. The newsletter also points developers to secure Foundry integrations, C# workflow tooling, Fabric real-time analytics, deployment walkthroughs, and BizTalk migration guidance.

Allison explains how GitHub’s code security and secret risk assessments now distinguish findings in protected and unprotected repositories. The update helps organization admins and security managers identify gaps in security coverage, with availability in GitHub Enterprise Cloud and GitHub Team and planned secret assessment support in Enterprise Server 3.24.

Allison outlines GitHub Actions’ upcoming default block on pull_request_target events in public repositories, with enforcement moved to December 2, 2026. Two November brownouts will help maintainers identify affected workflows. The update explains how to review blocked runs and explicitly permit workflows while accounting for risks to repository secrets.

Visual Studio Code shows how to move between the editor and Agents Window without losing context. This short focuses on navigating between coding and AI agent interactions within the development environment.

Samantha_Fernandez introduces Azure portal support for AKS flex nodes in preview, covering pool creation, supported host onboarding, and Kubernetes workload placement. The walkthrough explains how to connect user-managed compute across regions, on-premises, or at the edge, while retaining responsibility for host security, connectivity, and preview requirements.

GitHub Agentic Workflows is now generally available, turning natural-language Markdown into GitHub Actions workflows with read-only default permissions, sandboxing, and validated outputs. Copilot Fusion and paid-plan Copilot Memory also reached general availability, while agent sessions can now continue across editor, CLI, web, and mobile clients, giving teams more persistent context and continuity across repositories. Azure Arc Automatic Agent Upgrade reached general availability, Azure Developer CLI added deployment previews and extension-aware pipeline generation, and Azure DevOps Server 26H2 RC opened a supported path for upgrade testing. Marketplace Trusted Publishing lets extension publishers replace long-lived tokens with temporary or federated credentials, while PHP2Shell guidance makes clear that customers must patch PHP installed by pipeline steps or bundled in custom images. The week's releases pair broader agent automation with explicit permissions, release validation, and

GitHub walks through the GitHub Universe 2026 badge’s built-in games, apps, and custom digital profiles. The video also shows how to use GitHub Copilot for setup help when adding community games from Ashley Wolf’s repository, including installing the classic Microsoft 3D Maze screen saver on the badge hardware.

ibrahimbaig explains how to build repository-scoped, ephemeral GitHub Actions runners using Azure Container Apps Jobs and KEDA. The guide covers private Key Vault access, GitHub App authentication, separate OIDC deployment identities, lifecycle validation, and the cold-start trade-offs of installing tools at runtime rather than using pre-baked images.

Carlin Cherry explains how reachability analysis follows call paths to determine whether an application can invoke vulnerable dependency code flagged by Dependabot. The short introduces reachability as one signal for prioritizing vulnerabilities, alongside severity, EPSS, and production context, rather than a standalone basis for deciding what to fix.

John Edward explains an upcoming Microsoft Graph change that makes Threads the default layout for newly created Teams channels when layoutType is omitted. The article shows how developers can preserve Posts through explicit API configuration and outlines checks for scripts, provisioning applications, and third-party integrations before the November rollout.

Microsoft Security Research analyzes a malicious Claude Code-branded extension distributed through Cursor’s marketplace, detailing its attempted SSH backdoor and cross-platform persistence. The article provides Microsoft Defender detections, hunting queries, and remediation steps, explaining why removing the extension alone does not eliminate unauthorized keys and startup artifacts.

Kristen Womack reviews October’s Azure Developer CLI releases, covering deployment previews, Container Apps express support, environment value removal, and extension-aware pipelines. The recap also explains stable extension APIs, breaking Go API changes, reliability fixes, and new templates for deploying semantic search and streaming AI applications to Azure.

yunishussein explains how Azure Advisor identifies disconnected Azure Arc-enabled servers before their agent credentials expire. The guide covers heartbeat and certificate thresholds, recommended recovery actions, and ways to review affected machines through the Azure portal or query recommendations across subscriptions with Azure Resource Graph.

Visual Studio Code demonstrates how to use IntelliSense and GitHub Copilot to write, explain, and improve PostgreSQL queries without switching tools. The workflow also covers running queries and validating their results directly in the editor.

Maggie Appleton, Martin Woodward, and Jocelyn Velarde close GitHub Universe 2026 with open-source perspectives and coding demos. The session explores learning with GitHub Copilot, scaling projects with AI agents, and collaborative AI planning, alongside creative experiments that highlight the craft of coding and building together.

GitHub puts attendees at GitHub Universe 2026 on the spot with three Git trivia questions. The video tests knowledge of repository forks, git blame, and blob objects, offering a quick check of familiarity with version control commands and the internal objects Git uses to store content.

spurthikommajos introduces preview support for variable libraries in Microsoft Fabric Eventstream. Connection and item references let teams reuse eventstream definitions across development, staging, and production, while each workspace supplies its own resource values. The article explains configuration steps, deployment prerequisites, and how references remain intact through Git integration and deployment pipelines.

Allison details three additional IP ranges for GitHub webhook deliveries, now included in the Meta API. Teams using static network allowlists need to add the prefixes to avoid rejecting deliveries. Allowlists kept current through the Meta API require no changes, and the additions apply across all github.com plans.

Patrick LeBlanc joins Anna Hoffman to demonstrate Database Agents in Microsoft Fabric, which detect SQL performance problems before they affect users. The episode covers Database Hub, configuration requirements, issue detection, and SQL Server Management Studio integration, alongside a longer-term vision for agents that learn from DBA interactions.

Salim Chawro introduces Hardware Audit Logging for Azure Cloud HSM, which records supported management operations directly from the hardware. Signed audit data and certificates enable independent verification, while Azure Monitor Log Analytics delivery supports investigations and monitoring. The feature is rolling out across public regions and is automatically enabled on new resources where available.

Microsoft Threat Intelligence examines how North Korean threat actors use AI to accelerate reconnaissance, identity deception, malware development, and operational scaling. The report distinguishes observed activity from suspected AI use, explains why operations remain human-directed, and provides Microsoft Defender detections and practical guidance for protecting identities, endpoints, and software repositories.

GitHub recaps the opening keynote at GitHub Universe 2026, covering a dedicated Copilot app, third-party connectors, and multi-model orchestration through Copilot Fusion. The video also highlights multi-repository agent workflows with Copilot Projects, cloud sandboxes, Code Review Max, code scanning, and architectural upgrades to Git.

John Edward compares Azure Bicep and ARM templates, explaining their shared deployment engine and differences in syntax, validation, dependencies, and reuse. Practical Azure CLI examples show how to compile templates, preview changes, and deploy resources, while migration guidance helps teams decide when to adopt Bicep or retain existing JSON workflows.

GitHub recaps the GitHub Universe 2026 opening keynote, highlighting the new GitHub Copilot app, multi-model orchestration through Copilot Fusion, and autonomous task management in Copilot Projects. The video also covers Code Review Max for catching critical bugs and GitHub’s work to rebuild the core infrastructure underneath Git.

vinilv explains how to upgrade Azure CycleCloud Slurm node OS images without recreating the entire VM Scale Set. The walkthrough separates cluster configuration, scale-set models, and instance state, then covers draining nodes, applying updates, validating HPC dependencies, rolling back failures, and aligning CycleCloud configuration while acknowledging node downtime and capacity limitations.