DevOps, Git, and Agile updates from the team building Azure DevOps
![Jimson Chalissery [MSFT]](https://devblogs.microsoft.com/devops/wp-content/uploads/sites/6/2019/01/jimson-150x150.jpg){kind=avatar}
March 18, 2020Mar 18, 202003/18/20With the release of OpenSSH 8.2 last month, connections to SSH servers using SHA-1 was disabled by default in the OpenSSH client. We understand that this move helps improve the security of SSH connections, by encouraging all users to adopt the SHA-2 class of algorithms,
March 6, 2020Mar 6, 202003/6/20Unlike previously announced, we will not temporarily or permanently disable TLS 1.0 and TLS 1.1 in Azure DevOps Services until further notice.
February 27, 2020Feb 27, 202002/27/20UPDATE: Based on customers' feedback, we have decided to postpone this change. We will not disable TLS 1.0/1.1 support for Azure DevOps Services until further notice.
November 6, 2019Nov 6, 201911/6/19New preview capabilities for Azure Pipelines let you define artifact policies that are enforced before deploying to critical environments such as production. You will be able to define custom policies that are evaluated against all the deployable artifacts in a given pipeline run and block the deployment if the artifacts don't comply.
June 26, 2019Jun 26, 201906/26/19Auditing for Azure DevOps is now available for all organizations as a Public Preview! A new way to monitor activities and changes throughout Azure DevOps organizations.
May 31, 2019May 31, 201905/31/19Azure DevOps is currently investing in enhancing its routing structure. As a result of this enhancement, our IP address space will be changing. If you're currently using firewall rules to allow traffic to Azure DevOps, please be sure to update these rules to account for our new IP ranges.
September 27, 2018Sep 27, 201809/27/18Azure DevOps now supports AzureAD (AAD) users accessing organizations that are backed by Microsoft accounts (MSA). For administrators, this means that if your organization uses MSAs for corporate users, new employees can use their AAD credentials for access instead of creating a new MSA identity.
September 13, 2018Sep 13, 201809/13/18Basic authorization is now enabled on the communication between the TFS and Search services to make it more secure.
August 21, 2018Aug 21, 201808/21/18Static Application Security Testing (SAST) is a critical DevSecOps practice. As engineering organizations accelerate continuous delivery to impressive levels, it’s important to ensure that continuous security validation keeps up. To do so most effectively requires a multi-dimensional application of static analysis tools. The more customizable the tool, the better you can shape it to your actual security risk.
August 8, 2018Aug 8, 201808/8/18On the 24th of July 2018, we notified some customers via e-mail and on this blog about a planned action that we would start taking in relation to the malicious ESLint NPM package incident. This action is now underway.
