Azure DevOps Blog

16 articles

Retirement of Global Personal Access Tokens in Azure DevOps

by Angel Wong

<p>In the new year, we’ll be retiring the Global Personal Access Token (PAT) type in Azure DevOps. Global PATs allow users to authenticate across all accessible organizations. While this can feel convenient, a single credential with broad reach creates a concentrated security risk — especially as a user’s access footprint grows. This level of privilege [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/retirement-of-global-personal-access-tokens-in-azure-devops/">Retirement of Global Personal Access Tokens in Azure DevOps</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Announcing Azure DevOps Server General Availability

by Gloridel Morales

<p>We’re thrilled to announce that Azure DevOps Server is now generally available (GA)! This release marks the transition from the Release Candidate (RC) phase to full production readiness, delivering enterprise-grade DevOps capabilities for organizations that prefer self-hosted solutions. You can upgrade directly from Azure DevOps Server RC or any supported version of Team Foundation Server [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/announcing-azure-devops-server-general-availability/">Announcing Azure DevOps Server General Availability</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Azure DevOps and GitHub Repositories — Next Steps in the Path to Agentic AI

by Rajesh Ramamurthy

<p>In May, we talked about the evolution of GitHub Copilot from a coding assistant into an AI powered peer programmer. Since then, GitHub has taken a major step forward &#8211; becoming an open platform for agentic development, where Agent HQ enables developers to orchestrate any agent, anytime, anywhere. Agent HQ provides observability, governance, and security controls [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/azure-devops-and-github-repositories-next-steps-in-the-path-to-agentic-ai/">Azure DevOps and GitHub Repositories — Next Steps in the Path to Agentic AI</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

November Patches for Azure DevOps Server

by Gloridel Morales

<p>Today we are releasing patches that impact our self-hosted product, Azure DevOps Server. We strongly encourage and recommend that all customers use the latest, most secure release of Azure DevOps Server. You can download the latest version of the product, Azure DevOps Server 2022.2 from the Azure DevOps Server download page. Azure DevOps Server 2022.2 [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/november-patches-for-azure-devops-server-2/">November Patches for Azure DevOps Server</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Azure Developer CLI: Azure Container Apps Dev-to-Prod Deployment with Layered Infrastructure

by PuiChee (PC) Chan

<p>This post walks through how to implement &#8220;build once, deploy everywhere&#8221; patterns using Azure Container Apps with the new azd publish and layered infrastructure features in Azure Developer CLI v1.20.0. You&#8217;ll learn how to deploy the same containerized application across multiple environments with proper separation of concerns. This is the third installment in our Azure [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/azure-developer-cli-azure-container-apps-dev-to-prod-deployment-with-layered-infrastructure/">Azure Developer CLI: Azure Container Apps Dev-to-Prod Deployment with Layered Infrastructure</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Upcoming Updates for Azure Pipelines Agents Images

by Shubham Agarwal, Eric van Wijk

<p>To ensure our hosted agents in Azure Pipelines are operating in the most secure and up-to-date environments, we continuously update the supported images and phase out older ones. In October 2024, we announced support for Ubuntu-24.04. Soon, we plan to update the ubuntu-latest image to map to Ubuntu-24.04. Additionally, MacOS 15 Sequoia and Windows 2025 [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/upcoming-updates-for-azure-pipelines-agents-images/">Upcoming Updates for Azure Pipelines Agents Images</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Azure DevOps OAuth Client Secrets Now Shown Only Once

by Angel Wong

<p>We’re making an important change to how Azure DevOps displays OAuth client secrets to align with industry best practices and improve our overall security posture. Starting September, newly generated client secrets will be shown only once at the time of creation. After that, they will no longer be retrievable via the UI or API. This [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/azure-devops-oauth-client-secrets-now-shown-only-once/">Azure DevOps OAuth Client Secrets Now Shown Only Once</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Announcing the new Azure DevOps Server RC Release

by Gloridel Morales

<p>We’re excited to announce the release candidate (RC) of Azure DevOps Server, bringing new features previously available in our hosted version. You can  download Azure DevOps Server RC today. A direct upgrade to Azure DevOps Server RC is supported from any version of Team Foundation Server, including Team Foundation Server 2015 and newer. Note: October [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/announcing-the-new-azure-devops-server-rc-release/">Announcing the new Azure DevOps Server RC Release</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Azure Developer CLI: From Dev to Prod with Azure DevOps Pipelines

by PuiChee (PC) Chan, Kristen Womack

<p>Building on our previous post about implementing dev-to-prod promotion with GitHub Actions, this follow-up demonstrates the same &#8220;build once, deploy everywhere&#8221; pattern using Azure DevOps Pipelines. You&#8217;ll learn how to leverage Azure DevOps YAML pipelines with Azure Developer CLI (azd). This approach ensures consistent, reliable deployments across environments. Environment-Specific Infrastructure The infrastructure approach is identical [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/azure-developer-cli-from-dev-to-prod-with-azure-devops-pipelines/">Azure Developer CLI: From Dev to Prod with Azure DevOps Pipelines</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Real-Time Security with Continuous Access Evaluation (CAE) comes to Azure DevOps

by Angel Wong

<p>Update (Oct 16): Continuous Access Evaluation (CAE) was temporarily paused as we addressed customer-reported issues. It will be reenabled for all customers by early November. We’re thrilled to announce that Continuous Access Evaluation (CAE) is now supported on Azure DevOps, bringing a new level of near real-time security enforcement to your development workflows. 🔐 What [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/real-time-security-with-continuous-access-evaluation-cae-comes-to-azure-devops/">Real-Time Security with Continuous Access Evaluation (CAE) comes to Azure DevOps</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Automate your open-source dependency scanning with Advanced Security

by Laura Jiang

<p>Any experiences that require additional setup is cumbersome, especially when there are multiple people needed. In GitHub Advanced Security for Azure DevOps, we&#8217;re working to make it easier to enable features and scale out enablement across your enterprise. You can now automatically inject the dependency scanning task into any pipeline run targeting your default branch. [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/automate-your-open-source-dependency-scanning-with-advanced-security/">Automate your open-source dependency scanning with Advanced Security</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Azure Boards integration with GitHub Copilot (Private Preview)

by Dan Hellem

<p>As of October 16, 2025, we are no longer accepting organization signups for the private preview. Our focus is now on completing the feature and preparing it for general availability in the coming weeks. Several months ago, GitHub introduced the public preview of its Copilot coding agent, a powerful new capability that allows you to [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/azure-boards-integration-with-github-copilot-private-preview/">Azure Boards integration with GitHub Copilot (Private Preview)</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

New Test Run Hub in Azure Test Plans

by Panagiotis Liaros

<p>Delivering high-quality software is a necessity and that’s why Azure Test Plans has introduced the all-new Test Run Hub, an enabler for teams who want to take control of their testing process and drive continuous improvement. What Makes the Test Run Hub a Must-Have? The Test Run Hub is designed to help teams track test [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/new-test-run-hub/">New Test Run Hub in Azure Test Plans</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Modernizing Authentication for Legacy Visual Studio Clients

by Angel Wong

<p>As part of our ongoing commitment to security and modernization, we’re updating outdated authentication mechanisms used by older versions of clients reliant on our older Visual Studio client libraries. For full details on all known impacted clients, refer to the official announcement we made in April 2024: End of Support for Microsoft products reliant on [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/modernizing-authentication-for-legacy-visual-studio-clients/">Modernizing Authentication for Legacy Visual Studio Clients</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Hunting Living Secrets: Secret Validity Checks Arrive in GitHub Advanced Security for Azure DevOps

by Michael Omokoh

<p>If you’ve ever waded through a swamp of secret scanning alerts wondering, “Which of these are actually dangerous right now?” — this enhancement is for you. Secret validity checks in GitHub Advanced Security for Azure DevOps (and the standalone Secret Protection experience) add a high‑signal field to each alert: Active (still usable), or Unknown (couldn’t [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/hunting-living-secrets-secret-validity-checks-arrive-in-github-advanced-security-for-azure-devops/">Hunting Living Secrets: Secret Validity Checks Arrive in GitHub Advanced Security for Azure DevOps</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →

Azure DevOps local MCP Server is generally available

by Dan Hellem

<p>Today we are excited to take our local MCP Server for Azure DevOps out of preview 🥳. Since the initial preview announcement, we&#8217;ve worked closely with early adopters and the community to incorporate feature suggestions and feedback. We’ve improved login and authorization, added and refined tooling, and introduced domains so users can scope active tools [&#8230;]</p> <p>The post <a href="https://devblogs.microsoft.com/devops/azure-devops-local-mcp-server-generally-available/">Azure DevOps local MCP Server is generally available</a> appeared first on <a href="https://devblogs.microsoft.com/devops">Azure DevOps Blog</a>.</p>

Read article →