TAG
#copilot
Stories connected through a shared idea, actor, technology or theme.
GitHub makes agentic autofix for code-scanning alerts generally availableThe feature explores relevant files, iterates on proposed fixes, and validates remediation by rerunning CodeQL before creating a draft pull request. It is available to GitHub Code Security and Advanced Security customers on Enterprise Cloud, with AI Credits and Actions-minute usage.→GitHub Copilot CLI adds agent-scoped hooks and safer autopilot handlingThe release adds agent-scoped declarative hooks, inline image rendering and more robust sandbox settings. It also changes unattended autopilot behavior so a pre-tool hook asking for approval is denied instead of leaving an invisible permission prompt.→Market Logic makes DeepSights MCP generally availableMarket Logic announced general availability of its DeepSights MCP integration. The connection lets enterprise assistants and automated workflows retrieve cited, customer-curated market evidence from the DeepSights platform.→GitHub Copilot CLI adds GPT-6.1 Sol and tighter session controlsThe release lets users restrict GitHub authentication to approved MCP origins and grant path access for individual sessions. Permission prompts remain actionable after resuming sessions, while compaction now returns a summary even when instructions request terse output.→Microsoft adds Claude Opus 5.5 and GPT-6 Sol to Copilot model choiceThe update expands Copilot’s model-selection layer beyond Microsoft and OpenAI offerings. It follows same-day releases of both models and gives enterprise users another route to access competing frontier systems within Microsoft’s product ecosystem.→GitHub Copilot CLI lets custom agents inherit repository instructionsCopilot CLI 1.0.86-1 lets custom agents opt into AGENTS.md, copilot-instructions.md and CLAUDE.md through the `include-custom-instructions: true` frontmatter setting. The release also preserves marketplace plugins and skills when active sessions resume after reload and improves sandbox and background-shell status reporting.→GitHub Copilot Auto adds explicit cost-and-quality tiersThe tiers change how Copilot weighs cost, quality and response time while retaining per-prompt model selection. The feature is rolling out in Visual Studio Code, Copilot CLI and the Copilot app.→GitHub makes the billing organisation the authority for Copilot model accessModel availability is now determined only by the organisation paying for the user's Copilot usage. GitHub said users whose access comes entirely through an enterprise are unaffected.→GitHub Copilot CLI 1.0.82 tightens worktree and approval flowsVersion 1.0.82 fixes a failure triggered when users typed during /worktree or /move preparation. It also expands plan approval cards and reports specific authentication failures instead of showing only a generic login prompt.→VS Code 1.135 turns the Agents window into a cross-agent workspaceVS Code 1.135 can show recent Copilot or Claude agent sessions created in other applications and let users continue them in VS Code. It also introduces experimental Rubber Duck second opinions, a default single-pane Agents layout and per-model input, cached-input and output token details.→GitHub Agentic Workflows tightens safe outputs and reproducibilitygh-aw v0.87.4 makes compilation fail when safe-output step-output tokens cannot resolve, adds pinned Agent Plugins, and supports per-engine model overrides and custom providers. It also stops `GH_TOKEN` persisting in repo-memory clone `.git/config` and derives conclusion-job write permission from resolved safe-output configuration.→GitHub's Copilot Cloud Agent status visibility degraded for hoursGitHub's status page said Copilot Cloud Agent tasks were still completing, but newly started tasks did not show ongoing progress and session output was delayed by about an hour. GitHub reported gradual recovery during the window and marked the incident resolved at 00:37 UTC on 21 August.→GitHub brings enterprise-managed Copilot settings to JetBrainsAdministrators can govern plugin and marketplace use, MCP server access, OpenTelemetry configuration, and permission modes. The controls can disable bypass or autopilot behaviour and restrict which plugins, marketplaces, and MCP servers developers may use.→Visual Studio Code 1.134 makes agent sessions easier to manageThe release lets the same agent session connect to multiple VS Code windows through the Agent Host Protocol and aligns its Copilot agent with Copilot CLI and other Copilot products. It also adds side-by-side chat groups, a prompt timeline with file-change counts, full-text conversation search, and local HTML preview in the integrated browser.→Researchers show how Copilot can be induced to expose connected dataThe CoSnitch research found that repeatedly challenging Microsoft Copilot about an attack could reveal undocumented autorun and prompt-parameter behaviour. A crafted URL could then execute a malicious prompt in an authenticated session, potentially exposing connected application data or altering Copilot memory.→GitHub outage disrupted repository downloads and CopilotGitHub opened the incident at 13:40:03 UTC after failures affected GitHub.com services, with repository-content downloads later reported at roughly a 50% error rate. The status page continued to record Copilot authentication failures and residual impact during the window.→Wiz discloses an autonomous attack agent exploiting a Copilot-checked Snowflake PRWiz reported that its Red Agent used an issue-title injection to execute commands and obtain Snowflake Jira credentials from a public repository. The disclosure says Copilot Autofix co-authored the merged change and marked it clear, while Wiz clarified that it cannot establish whether the code change itself was AI-assisted.→