Showing category results for Azure & Cloud

Apr 24, 2026
Post comments count0
Post likes count0

Axios npm Supply Chain Compromise – Guidance for Azure Pipelines Customers

Josef Sin

On March 31, 2026, malicious versions of the widely used JavaScript HTTP client library Axios were briefly published to the npm registry as part of a supply chain attack. The affected versions — 1.14.1 and 0.30.4 — included a hidden malicious dependency that executed during installation and connected to attacker-controlled command-and-cont...

SecurityAzure & CloudCI/CD
Apr 21, 2026
Post comments count3
Post likes count4

Azure DevOps MCP Server April Update

Dan Hellem

This update brings a set of improvements and changes across both local and remote Azure DevOps MCP Servers. Here’s a summary of what’s changed. Query work items with WIQL We’ve introduced a new tool that enables users to construct and run work item WIQL queries. For our remote MCP, to ensure reliability and performance, access to this tool is c...

Azure & Cloud
Apr 15, 2026
Post comments count3
Post likes count1

One-click security scanning and org-wide alert triage come to Advanced Security

Laura Jiang

We're shipping two major capabilities that change how security teams enable and act on application security in Azure DevOps: CodeQL default setup makes it possible to enable code scanning across your organization without configuring a single pipeline, and a new combined alerts experience in Security Overview gives security administrators a single p...

Azure & CloudDevOpsSecurity
Apr 1, 2026
Post comments count0
Post likes count8

Improving the Markdown Editor for Work Items

Dan Hellem

We introduced the Markdown editor in July 2025 to bring Markdown support to large text fields in work items. Since then, we’ve received valuable customer feedback highlighting challenges with the editing experience, particularly when switching in and out of edit mode. Many users found the current interaction model confusing and, at times, disrupti...

Azure & Cloud
Mar 19, 2026
Post comments count0
Post likes count6

Remote MCP Server preview in Microsoft Foundry

Dan Hellem

Earlier this week we release the public preview for our Azure DevOps MCP Server. Today we are excited to let you know that the Azure DevOps MCP Server is now available to use in Microsoft Foundry. For those who are new to Foundry, Microsoft Foundry is a unified platform for building and managing AI powered applications and agents at scale. It brin...

Azure & Cloud
Mar 18, 2026
Post comments count2
Post likes count2

Authentication Tokens Are Not a Data Contract

Angel Wong

Authentication tokens exist to answer one question: is this caller authorized to do this? They are not intended to be a stable data interface, a schema you can depend on, or an input into application logic. If your application decodes tokens and reads claims from them, this is an important heads-up. Token Claims Were Never Guaranteed Although t...

Azure & CloudDevOpsSecurity
Mar 17, 2026
Post comments count15
Post likes count1

Azure DevOps Remote MCP Server (public preview)

Dan Hellem

When we released the local Azure DevOps MCP Server, it gave customers a way to connect Azure DevOps data with tools like Visual Studio and Visual Studio Code through GitHub Copilot Chat. The next step was to make this experience easier to get started with and to enable it for services that support only remote MCP servers. The Remote MCP Server is ...

Azure & Cloud
Feb 27, 2026
Post comments count0
Post likes count1

Updates to Team Calendar extension

Dan Hellem

We are excited to release a new update to the Team Calendar extension. This update includes a series of visual refinements across the extension, introducing a more consistent design language, smoother transitions when expanding and collapsing sections, improved contrast for better readability, an updated color palette aligned with Azure DevOps, an...

Azure & Cloud
Feb 18, 2026
Post comments count2
Post likes count0

TFVC Remove Existing Obsolete Policies ASAP

Dan Hellem

In April 2025, we announced the deprecation schedule for legacy TFVC check-in policies. This change was required due to limitations in how those policies were previously implemented and stored. The old policies have been marked as obsolete, and you can replace them by selecting the equivalent updated policy. We are currently in Phase II of this tr...

Azure & Cloud
Feb 16, 2026
Post comments count0
Post likes count6

Condensed views on Kanban and Sprint boards

Dan Hellem

One of the challenges teams face when working with large boards or displaying multiple fields on work item cards is limited screen space. This became even more noticeable with the rollout of the New Boards hub, which introduced additional spacing and padding for improved readability. While this enhances clarity, it can also reduce the number of car...

Azure & Cloud