Qinen Zhu
50aa6a87b5
chore: upgrade microsoft-foundry plugin to 1.0.4
...
Update the external plugin catalog to the 1.0.4 source commit and regenerate the marketplace output.
2026-07-24 17:43:06 +08:00
Ayan Gupta
dae77f2413
Merge pull request #2407 from tharr916/bugfix/correct-pinned-version
...
Fix Node.js setup action version in skill quality report workflow
2026-07-23 11:35:19 -07:00
Ayan Gupta
d16aff2372
Merge pull request #2349 from johnpapa/fix-ai-ready-marketplace
...
Fix ai-ready marketplace ref
2026-07-23 11:22:51 -07:00
Ayan Gupta
fa5489328c
Merge branch 'main' into fix-ai-ready-marketplace
2026-07-23 11:22:02 -07:00
Himanshu bamoria
4803e46b1a
feat: add competitor-ad-intelligence and ad-campaign-analyzer skills ( #2314 )
2026-07-23 10:51:27 -07:00
NeilChen
233d902c2f
feat(skills): add Agent Skill Stack ( #2350 )
...
Co-authored-by: neilchen2000-pixel <283394672+neilchen2000-pixel@users.noreply.github.com >
2026-07-23 10:51:21 -07:00
Muhammad Ubaid Raza
f08f426454
[gem-team] 1.86 ( #2356 )
...
* chore: standardize agent documentation markdown, fix formatting, add MANDATORY clauses, and update output formats across agents
* chore: Update gem-team plugin version to 1.84.0 and refine concurrency language in agent execution steps
* Bump gem-team plugin version to 1.86.0 and update README
* Bump gem-team plugin version to 1.87.0 and update README
2026-07-23 10:51:13 -07:00
John Haugabook
ae8ada62bd
Extension backrooms ( #2348 )
...
* new extension backrooms-canvas
* new extension backrooms-canvas
* Apply suggestions from code review
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* update according to code review
update according to code review
* Apply suggestions from code review
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* apply code review, change backviews to backrooms
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-07-23 10:51:06 -07:00
Alex Yang [MSFT]
c0869f6231
Improve connector reload authentication UX ( #2370 )
...
Keep Azure tokens in memory and preserve linked namespace context across extension reloads.
Co-authored-by: Alex Yang (DevDiv) <yangalex@microsoft.com >
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-23 10:51:00 -07:00
Florian Vogt
26a363779a
deps(external.json): Update UI5 plugins to v0.1.7 ( #2377 )
2026-07-23 10:50:53 -07:00
Samuel Bushi
ebbaa19dda
Add UIZZE anti-ui-slop plugin ( #2390 )
2026-07-23 10:50:47 -07:00
Antonio Villanueva
62274dcd31
Update upgrade-agent plugin to 1.1.247 ( #2394 )
...
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
Copilot-Session: 2cb17f2d-aff4-472b-89a2-83d9d16bb65e
2026-07-23 10:50:38 -07:00
Tim Mulholland
7351f9f692
Fix external-plugin quality gates for tag-name locators ( #2397 ) ( #2399 )
...
runVersionMatchGate and runCanvasStructureGate read locator content with git show/cat-file. For a tag-name locator, `git fetch origin <tag>` only updates FETCH_HEAD and never creates refs/tags/<tag>, so `git show <tag>:...` died with 'invalid object name' and produced a false infra_error.
Read the primary locator via HEAD (already checked out during clone) and non-primary locators via FETCH_HEAD after fetching, instead of the bare locator. This handles SHAs, short tag names, and fully-qualified tag refs uniformly without classifying the locator.
Adds regression coverage for the tag-locator path in both gates.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-23 10:50:31 -07:00
Jonas Tüchler
03fb5fc96e
Add the WebMCPify agent skill 🤖 🤖 🤖 ( #2400 )
...
* feat(skills): add webmcpify skill
* style(skills): quote webmcpify description
2026-07-23 10:50:25 -07:00
qinezh
44f3f0d06a
Rename foundry-agent-canvas plugin to microsoft-foundry ( #2405 )
...
Update external plugin registration: rename identity and source.path to
microsoft-foundry, bump version to 1.0.3, refresh description and source.sha,
and regenerate marketplace.json.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
Copilot-Session: 68571581-f9d1-4b01-a5d7-0a49c4a6b3b5
2026-07-23 10:50:19 -07:00
dependabot[bot]
912fa2a95c
chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates ( #2409 )
...
Bumps the npm_and_yarn group with 1 update in the / directory: [fast-uri](https://github.com/fastify/fast-uri ).
Bumps the npm_and_yarn group with 4 updates in the /website directory: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro ), [dompurify](https://github.com/cure53/DOMPurify ), [sharp](https://github.com/lovell/sharp ) and [svgo](https://github.com/svg/svgo ).
Updates `fast-uri` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/fastify/fast-uri/releases )
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4 )
Updates `astro` from 7.0.3 to 7.1.3
- [Release notes](https://github.com/withastro/astro/releases )
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md )
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro )
Updates `dompurify` from 3.4.11 to 3.4.12
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.12 )
Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases )
- [Commits](https://github.com/lovell/sharp/compare/v0.34.5...v0.35.3 )
Updates `svgo` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/svg/svgo/releases )
- [Commits](https://github.com/svg/svgo/compare/v4.0.1...v4.0.2 )
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.4
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: astro
dependency-version: 7.1.3
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: dompurify
dependency-version: 3.4.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: sharp
dependency-version: 0.35.3
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: svgo
dependency-version: 4.0.2
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-23 10:49:40 -07:00
Ayan Gupta
824277ce06
Merge pull request #2387 from maminihds/attester-verify-packages
...
Add attester package-verification instruction and import-check hook 🤖 🤖 🤖
2026-07-23 10:42:32 -07:00
Ayan Gupta
e929ff0e03
Merge branch 'main' into attester-verify-packages
2026-07-23 10:38:39 -07:00
Ayan Gupta
20fcb65b1c
Merge pull request #2374 from BaiqingL/add-latchshot-page-capture-skill
...
Add Latchshot public-page capture skill 🤖 🤖 🤖
2026-07-23 10:38:25 -07:00
Ayan Gupta
019a9e043c
Merge branch 'main' into add-latchshot-page-capture-skill
2026-07-23 10:35:15 -07:00
Ayan Gupta
7385040e75
Merge pull request #2389 from samuelbushi/codex/clarify-uizze-catalogue
...
Clarify the UIZZE catalogue in anti-ui-slop 🤖 🤖 🤖
2026-07-23 09:48:29 -07:00
Ayan Gupta
24e6bc92df
Merge branch 'main' into codex/clarify-uizze-catalogue
2026-07-23 09:45:37 -07:00
Ayan Gupta
500c26a5d1
Merge pull request #2368 from github/dependabot/npm_and_yarn/npm_and_yarn-9d5d00edeb
...
chore(deps): bump js-yaml from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory
2026-07-23 09:45:25 -07:00
Timothy Harrington
4ec36c7dbf
Fix Node.js setup action version in skill quality report workflow
2026-07-23 11:56:04 -04:00
Samuel Bushi
e39595bc42
Clarify UIZZE catalogue in anti-ui-slop skill
2026-07-22 09:35:05 +02:00
Mostafa Amini
1336ec4777
Add attester package-verification instruction and import-check hook
...
The instruction tells Copilot to verify PyPI/npm package and symbol names
against the attester.dev existence oracle (free keyless tier, 25 calls/day
per client IP) before installing or importing, catching hallucinated
dependency names (5.2-21.7% of LLM suggestions per USENIX Security 2025).
The preToolUse hook enforces the same check on code the agent writes:
stdlib-only script, blocks only on a confident oracle negative, fails open
on quota or network trouble, caches answers on disk. README tables
regenerated with npm start.
2026-07-22 01:23:34 -04:00
Matt Soucoup
786bdcfc65
Merge pull request #2372 from qinezh/main
...
Update foundry-agent-canvas version to 1.0.2
2026-07-21 17:03:56 -07:00
Baiqing Lyu
aaa0f880bc
feat: add Latchshot page capture skill
2026-07-21 08:16:46 +00:00
Qinen Zhu
5b89246595
Update foundry-agent-canvas version to 1.0.2
2026-07-21 13:17:37 +08:00
Matt Soucoup
ecf0f5a9f4
Merge pull request #2364 from alexyaang/alexyaang-interactive-connector-sign-in
...
Add persistent browser auth to connector canvas
2026-07-20 16:11:31 -07:00
Matt Soucoup
7de9e4f48c
Merge branch 'main' into alexyaang-interactive-connector-sign-in
2026-07-20 16:06:11 -07:00
Alex Yang (DevDiv)
ee5ab9a91f
Harden sign-in cancellation behavior
...
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 15:22:39 -07:00
Alex Yang (DevDiv)
b9705e9439
Fix concurrent token initialization
...
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 14:49:48 -07:00
dependabot[bot]
fc347f3cf2
chore(deps): bump js-yaml in the npm_and_yarn group across 1 directory
...
Bumps the npm_and_yarn group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml ).
Updates `js-yaml` from 5.2.0 to 5.2.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.0...5.2.1 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 5.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-20 21:37:52 +00:00
Alex Yang (DevDiv)
463a876284
Harden persisted authentication recovery
...
Treat malformed authentication records as missing so browser sign-in can recover, preserve real file-read failures, and pin the Azure Identity persistence dependencies exactly.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 14:32:51 -07:00
Matt Soucoup
ff8719ec3c
Merge pull request #2363 from jennyf19/cairn-open-launch
...
the-workshop: desk cards open an in-place Copilot CLI (prefer a wrapper CLI when installed)
2026-07-20 14:28:39 -07:00
Matt Soucoup
88a03afd4f
Merge branch 'main' into cairn-open-launch
2026-07-20 14:22:03 -07:00
Alex Yang (DevDiv)
59fc5616ec
Address connector authentication review feedback
...
Keep terminal sign-in status retry-safe, preserve operational Azure Identity errors, retry transient legacy-cache cleanup, clarify secure persistence requirements, and fix the blocking spelling check.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 14:18:50 -07:00
Ayan Gupta
227a92d43f
Merge pull request #2306 from thesurenk/add-skill-copilot-java-helidon
...
Add Java-Helidon skill for Helidon 4 best practices
2026-07-20 14:13:08 -07:00
Ayan Gupta
381158412e
Merge branch 'main' into add-skill-copilot-java-helidon
2026-07-20 14:12:18 -07:00
Ayan Gupta
54206dc7c8
Merge pull request #2300 from AugP/vcpkg-skill
...
Added vcpkg skill
2026-07-20 14:10:56 -07:00
Ayan Gupta
833fd80d09
Merge branch 'main' into vcpkg-skill
2026-07-20 14:08:51 -07:00
Ayan Gupta
4cdcaad004
Merge pull request #2362 from jennyf19/resync-workshop-ta-cairn
...
Fix the-workshop TA agent: cairn is a separate canvas, not bundled
2026-07-20 14:03:46 -07:00
Ayan Gupta
b7515153fc
Merge branch 'main' into resync-workshop-ta-cairn
2026-07-20 14:03:08 -07:00
Ayan Gupta
5e57b77276
Merge pull request #2357 from Simon-He95/add-markstream-install-skill
...
Add Markstream installation skill 🤖 🤖 🤖
2026-07-20 14:03:03 -07:00
Ayan Gupta
2d62fb8be0
Merge branch 'main' into add-markstream-install-skill
2026-07-20 14:02:20 -07:00
Ayan Gupta
1f11e68924
Merge pull request #2351 from samuelbushi/codex/add-uizze-anti-ui-slop
...
Add anti-ui-slop agent skill
2026-07-20 14:02:14 -07:00
Ayan Gupta
1ea1d7fa00
Merge pull request #2302 from github/all-contributors/add-thesurenk
...
add thesurenk as a contributor for doc
2026-07-20 14:01:29 -07:00
Ayan Gupta
d89e545872
Merge branch 'main' into resync-workshop-ta-cairn
2026-07-20 14:01:16 -07:00
Ayan Gupta
26e998bdb2
Merge branch 'main' into add-markstream-install-skill
2026-07-20 14:01:12 -07:00