GitHub
2026-05-19
Eligible enterprise admins can start a GitHub Advanced Security trial directly from a Secret Protection or Code Security risk assessment. This lets them begin evaluating the products without leaving the assessment flow.
GitHub removed the `code_scanning_upload` field from the REST API `rate_limit` endpoint response as of May 19, 2026. The field no longer appears in the `resources` object.
Microsoft Security Blog
2026-05-18
Microsoft describes how Storm-2949 used stolen credentials to move from identity compromise to broad cloud data theft without malware. The incident highlights abuse of trusted systems and the difficulty of detecting activity that stays within normal cloud authentication flows.
GitHub Actions failures can now be handed to Copilot cloud agent with one click for Copilot Business and Copilot Enterprise subscribers. The new "Fix with Copilot" button starts an automated fix flow for failed jobs.
GitHub Copilot cloud agent now supports additional models, letting users choose fast, cost-efficient options for simpler tasks. The change expands the set of models available when delegating work to the cloud agent.
Copilot chat on the web now opens directly on the page you’re viewing, so you can ask questions in context with less switching between pages.
Azure Updates
Azure Monitor Application Insights auto-instrumentation for Azure Kubernetes Service (AKS) apps is now generally available. It lets you monitor applications without changing source code, using only a few configuration steps.
Auto activation for SaaS subscriptions is now generally available in Microsoft Marketplace. When enabled, the subscription and billing cycle start as soon as the purchase flow is completed.
Azure Front Door Standard and Premium now support WebSocket in general availability. The feature is enabled by default and does not require additional configuration.
.NET
In .NET 10, package pruning removes platform-provided packages from the dependency graph. With transitive auditing enabled by default, projects using the new defaults see about 70% fewer transitive vulnerability reports than with the previous defaults.
GitHub added a public preview REST API to get a repository’s Copilot cloud agent configuration. This lets you audit that configuration programmatically.
GitHub Copilot Spaces API is now generally available. It supports programmatic create, read, update, and delete operations for Spaces from external applications.