Microsoft
Developer Blogs
Get the latest information, insights, and news from Microsoft.
Highlights
Find any commit in seconds: Commit Search comes to Azure DevOps
Tell your model when to think harder
Building agent teams with Agent Framework, GitHub Copilot CLI and Squad
Latest posts
Test reporting in Microsoft.Testing.Platform: from red build to root cause
Microsoft.Testing.Platform brings failures into GitHub Actions and Azure DevOps, uses pipeline history to separate regressions from flakes, and preserves usable reports when a test host crashes.
Announcing the preview of the Work IQ Developer Tools
Software is shifting from apps built for people to agents that can reason over context and act on someone's behalf. Microsoft 365 Copilot put that shift in front of hundreds of millions of users, and Work IQ gave agents a production-ready intelligence layer to build on. What's been missing is the path in between: getting from an idea to a production agent running in front of customers. Today we're announcing the developer preview of Work IQ Developer Tools (WIQD), the agentic experience for Microsoft 365 Copilot extensibility that takes any plugin (skills, connectors, declarative agents) from an empty folder t...
Pull request annotations on work item cards
It's now easier to track development progress without leaving your Kanban board. Azure Boards now displays pull request annotations directly on work item cards, making it easy to see at a glance when work is actively moving through code review. With pull request status visible directly on the board, your team can quickly understand the state of development without opening a work item or switching to Azure Repos. Whether you're in a stand-up, planning your next sprint, or simply reviewing the board, you can immediately identify which work items have active pull requests. If you prefer a cleaner board, you can ...
You can now use the Azure DevOps Service Connection instead of a PAT or Build Session token
We're excited to announce the Azure DevOps service connection, a new way to access Azure DevOps from your pipelines using a Microsoft Entra workload identity (a service principal or managed identity) instead of a Personal Access Token (PAT) or session token. This post walks through what it is, how to set it up, and the many places you can use it, including several capabilities we've added based on your feedback. Why use an Azure DevOps service connection? Using an Azure DevOps service connection improves the security of your pipelines in several ways: Because the connection authenticates as a Microsoft ...
Creating a fake agile wrapper that is technically agile but is not useful outside its home apartment, part 3
Forcing an object into the global interface table.
Azure DevOps Remote MCP Server is generally available
Today, we're excited to announce the general availability of the Azure DevOps MCP Server 🎉 The Azure DevOps MCP Server gives AI assistants secure, contextual access to your Azure DevOps projects so they can help you plan, build, and ship software more effectively. With the Azure DevOps remote MCP Server, you can get started without installing or hosting anything yourself. Simply connect your AI assistant directly to the Azure DevOps hosted endpoint by using streamable HTTP transport and start working with your projects in minutes. Getting Started Getting started in simple. Depending on the tools that you are u...
Beyond Chat: live Speech-to-Text with Foundry Local and C#
Build a live speech-to-text app in C# with Foundry Local, a compact Nemotron model, and local model lifecycle management.
Build Production-Ready Agents with the GitHub Copilot Harness and Agent Framework
Developers increasingly want to build agents that can reason about code, modify files, execute commands, interact with developer tools, and work across entire repositories. While GitHub Copilot already provides a powerful coding harness for these scenarios, developers often need additional capabilities such as observability, middleware, approval workflows, enterprise governance, and integration with broader agent ecosystems. The GitHub Copilot integration in Microsoft Agent Framework brings these worlds together. You can now use GitHub Copilot's agentic harness as the execution engine for your agents while conti...
Remove Is Not Uninstall
Just as https://devblogs.microsoft.com/insidemsix/there-is-no-install-its-stage-and-register/ explained that Install is not truly an installation operation in MSIX, Remove is similarly not an uninstall operation. This can be surprising - sometimes even alarming - to developers coming from traditional installer technologies such as MSI, where uninstalling software typically implies: In MSIX, that model simply does not exist. Remove = Deregister + (Maybe) Destage From MSIX Deployment's perspective, a package lifecycle consists of four fundamental operations: There's a symmetry here. Stage and Reg...
Build Azure Skills Faster with Cloud Academy, a Visual Studio Subscriber Benefit
If you've been looking for a practical way to build Azure skills, Cloud Academy (a QA company) gives Visual Studio subscribers hands-on learning that fits into busy schedules. Whether you're new to Azure, expanding your cloud expertise, working towards certifications or preparing for more advanced projects, this benefit helps you learn by doing. What you'll find in Cloud Academy The Cloud Academy benefit gives Visual Studio subscribers a flexible learning experience that adapts to different learning styles and schedules, providing: With the Cloud Academy benef...
Creating a fake agile wrapper that is technically agile but is not useful outside its home apartment, part 2
Using a reference stored in the global interface table.
Building an operations assistant on Azure that waits for approval before it acts
Grounding an assistant in runbooks is the easy half. The interesting engineering is in the boundary between what a model proposes and what an authenticated person actually authorizes. An operations assistant stops being a demo the moment it can act. Answering "which runbook covers this alert" is a search problem. Opening an incident from that same conversation is a control-plane problem, and that is where a helpful prototype quietly turns into something you would not want on call. I built a deliberately narrow reference app to sit on that boundary and see what breaks. It runs on Azure Container Apps, retrie...
Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
NuGet API key durations will be reduced to 30 days starting August 17th. This change will significantly strengthen the integrity of the NuGet supply chain.
Creating a fake agile wrapper that is technically agile but is not useful outside its home apartment, part 1
Looking for a COM reference that is between strong and weak.
From generated code to trusted code with a unit-test agent
Meet the open-source polyglot testing agent that learns from a repository, writes unit tests, and checks that they build and pass.
Making an agile version of a Windows Runtime delegate in C++/WinRT, part 10
What failure of the context callback means.
A deep dive into Power Pages Enhanced Authorization
Dataverse Native Authorization Model for Power Pages How mapped identities, security roles, and record filters move external-user authorization closer to the data. We’re introducing a major update to the Power Pages security model: authorization for external users is now enforced natively in Dataverse. Customers can opt in to this feature as they transition to the new model. This architecture moves Power Pages authorization closer to the data by translating Power Pages concepts into Dataverse-native security constructs. Instead of relying on Power Pages at runtime to reconstruct authorization for every request...
Introducing WPA MCP: Early Preview of AI-assisted trace analysis in Windows Performance Analyzer
Windows Performance Analyzer (WPA) is one of the most powerful tools available for understanding system performance on Windows. It helps engineers investigate Event Tracing for Windows (ETW) traces across CPU, memory, disk, networking, scheduling, input, and many other areas of the operating system. That power also comes with complexity. A single trace can contain a huge amount of data, and finding the right signal often requires knowing which WPA tables to open, which columns matter, how to filter the right time range, and how to connect multiple pieces of evidence into a root cause. We are working on WPA ...
Azure Developer CLI (azd) July 2026
This is the July round-up for the Azure Developer CLI (). Five releases shipped since the last post: 1.27.0, 1.27.1, 1.28.0, 1.28.1, and 1.29.0. Below is what's new, what changed, and what we fixed, with links to the pull requests if you want to dig in. Have feedback or questions? Join the release discussion on GitHub. Highlights: 🌐 Microsoft Foundry at the AI Engineer World's Fair In Pablo Castro's (Microsoft) "On AI and Knowledge" session at the AI Engineer World's Fair, the Microsoft Foundry team showed their command-line experience built on top of the extension platform. I...
Building agent teams with Agent Framework, GitHub Copilot CLI and Squad
Microsoft Agent Framework supports creating agents that use the GitHub Copilot SDK as their backend. GitHub Copilot agents provide access to powerful coding-oriented AI capabilities, including shell command execution, file operations, URL fetching, Model Context Protocol (MCP) server integration, and can be integrated into your existing development pipeline. We recently shipped this integration to v1.0 in C# and Python - fully supported and stable. Find out more here: MS Learn | Agent Framework | GitHub Copilot Agents and check out the samples here: .NET | Python A great example of using MAF and GitHub Copi...
Making an agile version of a Windows Runtime delegate in C++/WinRT, part 9
Maybe it doesn't matter.
Azure SDK Release (July 2026)
Azure SDK releases every month. In this post, you'll find this month's highlights and release notes.
Tell your model when to think harder
Not every question deserves the same amount of thought. Renaming a variable isn't the same as debugging a memory leak, and they don't need the same level of thinking. So why should your model treat them the same way every time? Starting in Visual Studio 18.9 Insiders 2, it doesn't have to. Supported models now come with a thinking effort control, so you can dial up the reasoning when a problem is genuinely hard and dial it back down when it isn't. It's a small knob with a big payoff: better-matched answers, and more control over how many credits you spend getting them. A dial, not a switch Thinking effort is...
Making an agile version of a Windows Runtime delegate in C++/WinRT, part 8
Exceptions hiding in lambda captures.
Announcing v2.0 of the official MCP C# SDK
MCP C# SDK v2.0 implements the 2026-07-28 specification with a stateless-first protocol, standardized HTTP headers, and Multi Round-Trip Requests for interactive tools, all while staying backward compatible.
Package Integrity and Enforcement
A recent conversation started (as many interesting conversations do) with a simple question: "Why is MSIX secure?" MSIX includes multiple layers of protection designed to defend against both accidental damage and malicious tampering. But as with all good security solutions, it's not the individual elements so much as their interlocking design that makes the whole stronger than the sum of its parts. MSIX was designed around several core facets, integrated in sometimes novel ways. A packaged process can be trusted to a higher degree than most applications because Windows maintains a verifiable chain of trust fr...
Visual Studio July Update — Meet the New Agent, Powered by the GitHub Copilot SDK
There's a new Agent (Preview) in Copilot Chat, built on the same GitHub Copilot SDK that powers the GitHub Copilot CLI, that gets more done with less back-and-forth.
Find any commit in seconds: Commit Search comes to Azure DevOps
Great code has a long memory. The fix you shipped last quarter, the refactor that touched a dozen files, the one-line change that explained why something works the way it does — it's all there in your commit history. The hard part has always been finding it. Today, we're excited to announce that Commit Search is entering general availability (GA) in Azure DevOps. This is a capability our team has been building and refining for quite some time — through design, a private preview with early customers, and a careful, staged rollout — and we couldn't be happier to bring it to everyone. Why we built Commit Search C...
Making an agile version of a Windows Runtime delegate in C++/WinRT, part 7
Further explorations into exception safety.
Refactor your database with SQL projects in VS Code
SQL database projects are a fundamental tool for keeping your database in source control, tracking changes and collaborating on quickly evolving database needs. Not to be forgotten, their superpower is being able to dynamically generate deployment scripts that match the declared state and the exact environment you're deploying to. SQL project development becomes more challenging when a database needs serious changes, where the requirements of the system have evolved to the point of having to rename tables and move objects between schemas. In plain T-SQL, we can rename a table or column without having to co...
Discover Agent Skills from MCP servers in .NET
Your agents can now discover and load Agent Skills directly from a Model Context Protocol (MCP) server. Instead of shipping every skill inside your application or copying skill folders into each deployment, you point an agent at an MCP server and it pulls the skills it needs on demand. A central team can publish skills once, and every agent across your organization picks them up without a redeploy. This is available today in .NET through the package. For makers, this removes a distribution problem: you author a skill in one place and serve it to many agents. For enterprise leaders, it means domain expertise –...
Query Performance Tuning in Azure DocumentDB: A Practical Guide
Writing a query that works is easy. Writing a query that scales is a different story. As collections grow to millions of documents, queries that returned results in milliseconds during development start taking seconds or timing out entirely. The root cause is almost always the same: the database is doing far more work than it needs to. In this post, we’ll take a single, realistic query and walk through the full optimization process: running explain() to understand what’s happening under the hood, building indexes step by step, and applying the ESR rule to design a compound index that eliminates wasted scans and...
Analyze MSBuild Binary Logs with Copilot in VS Code
Meet the MSBuild Binlog Analyzer for VS Code - a Copilot-powered way to read MSBuild binary logs, explain and fix build failures with one click, compare builds, and catch regressions, backed by the Microsoft.AITools.BinlogMcp MCP server.
A new way to bring native Windows APIs to JavaScript – introducing dynamic API projections for Node.js
Electron and Node.js make it straightforward to build Windows desktop apps in JavaScript. Calling Windows Runtime APIs has been less straightforward: features such as on-device AI often required a C++ or C# bridge, manual translation of WinRT types and asynchronous behavior, and wrapper code for every exposed API. That meant another language and toolchain to build, test, and keep compatible with Electron. We're making a dynamic Windows Runtime API (WinRT) projection for Node.js available in public preview. It lets an Electron app or plain Node.js process call supported Windows Runtime APIs directly fro...
Making an agile version of a Windows Runtime delegate in C++/WinRT, part 6
Exception-safety, the invisible bug.
Java OpenJDK July 2026 Patch & Security Update
Hello Java customers! We are happy to announce the latest July 2026 patch & security update release for the Microsoft Build of OpenJDK. Check our release notes page for details on fixes and enhancements or download and install the binaries today. The source code of our builds are now available on GitHub for further inspection: Microsoft Build of OpenJDK specific updates OpenJDK 25 OpenJDK 21 OpenJDK 17 OpenJDK 11 Summary of Upstream Updates OpenJDK Vulnerability Advisory July 2026 OpenJDK 25 OpenJDK 21 ...