Back to updates

2025-11 - 24

2025 (12)

November (12)

azure: [Launched] Generally Available: Azure Database for PostgreSQL – Flexible Server availability zones expansion in Japan West

Azure Updates

2025-11-07

Azure Database for PostgreSQL – Flexible Server is now generally available in all three availability zones in Japan West, allowing deployments that improve availability and resiliency.

security: ​​Whisper Leak: A novel side-channel attack on remote language models

Microsoft Security Blog

2025-11-07

Microsoft disclosed a new side-channel attack called "Whisper Leak" that enables attackers to infer conversation topics from interactions with remote language models even when communications are encrypted. The finding was published on the Microsoft Security Blog.

github: Removing notifications for @mentions in commit messages

GitHub

2025-11-07

GitHub is removing notifications that come from @mentions inside commit messages to reduce spam and help users focus on important notifications. Previously, mentioning a user or team in a commit message would generate a notification; that behavior is being removed.

github: Actions pull_request_target and environment branch protections changes

GitHub

2025-11-07

GitHub will change how Actions' pull_request_target and environment branch protection rules are evaluated for pull-request-related events, effective 2025-12-08, to reduce security-critical exposures.

github: GraphQL Explorer removal from API documentation on November 7, 2025

GitHub

2025-11-07

On November 7, 2025 GitHub retired the GraphQL Explorer from its API documentation. The change, following a prior announcement, affects a small number of users who used the Explorer to experiment with the GitHub GraphQL API.

github: Pull request “Files changed” public preview and merge experience – November 6 updates

GitHub

2025-11-07

GitHub updated the public preview of the new pull request 'Files changed' page (Nov 6). Highlights include the ability to apply suggested changes in batch, new options to collapse parts of the page for easier navigation, and improvements to the merge experience.

github: New releases for GitHub Actions – November 2025

GitHub

2025-11-06

GitHub increased limits for reusable workflows in GitHub Actions (November 2025): workflows can now nest up to 10 reusable workflows and a single workflow run can call up to 50 workflows in total.

github: Improved onboarding flow for GitHub Projects

GitHub

2025-11-06

GitHub updated the Projects onboarding flow to help users start faster by adding options to connect and import items from a repository and to set a default repository for new issues.

azure: [Launched] Generally Available: Ultra Disk’s new flexible provisioning model

Azure Updates

2025-11-06

Azure Ultra Disk is now generally available with a new flexible provisioning model that lets you configure capacity, IOPS and throughput (MBPS) more independently so you can better tailor and optimize disk performance for your workloads.

security: New IDC research highlights a major cloud security shift

Microsoft Security Blog

2025-11-06

IDC research urges CISOs to adopt AI-powered, integrated cloud security platforms—such as CNAPP, XDR, and SIEM—to lower risk, reduce complexity, and improve resilience, according to a Microsoft Security Blog post.

k8s: Gateway API 1.4: New Features

Kubernetes Official Blog

2025-11-06

Gateway API v1.4.0 (released Oct 6, 2025) advances Kubernetes service networking with three features promoted to Standard (BackendTLSPolicy, supportedFeatures in GatewayClass status, and named rule fields for Routes) and several experimental additions (Mesh/XMesh, default Gateways, and an ExternalAuth filter for HTTPRoute). The release also adds per-port TLS/client-certificate configuration to address connection coalescing security, introduces a couple of breaking validation changes, improves CI/docs, and is usable on Kubernetes >=1.26.

azure: [Launched] Generally Available: Object Replication Metrics

Azure Updates

2025-11-06

Azure Blob Storage object replication metrics for pending operations and pending bytes are now generally available in all regions, enabling customers to monitor replication status and act on delays.