John Haugabook
ae8ada62bd
Extension backrooms ( #2348 )
...
* new extension backrooms-canvas
* new extension backrooms-canvas
* Apply suggestions from code review
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* update according to code review
update according to code review
* Apply suggestions from code review
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
* apply code review, change backviews to backrooms
* Potential fix for pull request finding
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
---------
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-07-23 10:51:06 -07:00
Alex Yang [MSFT]
c0869f6231
Improve connector reload authentication UX ( #2370 )
...
Keep Azure tokens in memory and preserve linked namespace context across extension reloads.
Co-authored-by: Alex Yang (DevDiv) <yangalex@microsoft.com >
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-23 10:51:00 -07:00
Florian Vogt
26a363779a
deps(external.json): Update UI5 plugins to v0.1.7 ( #2377 )
2026-07-23 10:50:53 -07:00
Samuel Bushi
ebbaa19dda
Add UIZZE anti-ui-slop plugin ( #2390 )
2026-07-23 10:50:47 -07:00
Antonio Villanueva
62274dcd31
Update upgrade-agent plugin to 1.1.247 ( #2394 )
...
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
Copilot-Session: 2cb17f2d-aff4-472b-89a2-83d9d16bb65e
2026-07-23 10:50:38 -07:00
Tim Mulholland
7351f9f692
Fix external-plugin quality gates for tag-name locators ( #2397 ) ( #2399 )
...
runVersionMatchGate and runCanvasStructureGate read locator content with git show/cat-file. For a tag-name locator, `git fetch origin <tag>` only updates FETCH_HEAD and never creates refs/tags/<tag>, so `git show <tag>:...` died with 'invalid object name' and produced a false infra_error.
Read the primary locator via HEAD (already checked out during clone) and non-primary locators via FETCH_HEAD after fetching, instead of the bare locator. This handles SHAs, short tag names, and fully-qualified tag refs uniformly without classifying the locator.
Adds regression coverage for the tag-locator path in both gates.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-23 10:50:31 -07:00
Jonas Tüchler
03fb5fc96e
Add the WebMCPify agent skill 🤖 🤖 🤖 ( #2400 )
...
* feat(skills): add webmcpify skill
* style(skills): quote webmcpify description
2026-07-23 10:50:25 -07:00
qinezh
44f3f0d06a
Rename foundry-agent-canvas plugin to microsoft-foundry ( #2405 )
...
Update external plugin registration: rename identity and source.path to
microsoft-foundry, bump version to 1.0.3, refresh description and source.sha,
and regenerate marketplace.json.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
Copilot-Session: 68571581-f9d1-4b01-a5d7-0a49c4a6b3b5
2026-07-23 10:50:19 -07:00
dependabot[bot]
912fa2a95c
chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates ( #2409 )
...
Bumps the npm_and_yarn group with 1 update in the / directory: [fast-uri](https://github.com/fastify/fast-uri ).
Bumps the npm_and_yarn group with 4 updates in the /website directory: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro ), [dompurify](https://github.com/cure53/DOMPurify ), [sharp](https://github.com/lovell/sharp ) and [svgo](https://github.com/svg/svgo ).
Updates `fast-uri` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/fastify/fast-uri/releases )
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4 )
Updates `astro` from 7.0.3 to 7.1.3
- [Release notes](https://github.com/withastro/astro/releases )
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md )
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro )
Updates `dompurify` from 3.4.11 to 3.4.12
- [Release notes](https://github.com/cure53/DOMPurify/releases )
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.12 )
Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases )
- [Commits](https://github.com/lovell/sharp/compare/v0.34.5...v0.35.3 )
Updates `svgo` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/svg/svgo/releases )
- [Commits](https://github.com/svg/svgo/compare/v4.0.1...v4.0.2 )
---
updated-dependencies:
- dependency-name: fast-uri
dependency-version: 3.1.4
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: astro
dependency-version: 7.1.3
dependency-type: direct:production
dependency-group: npm_and_yarn
- dependency-name: dompurify
dependency-version: 3.4.12
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: sharp
dependency-version: 0.35.3
dependency-type: indirect
dependency-group: npm_and_yarn
- dependency-name: svgo
dependency-version: 4.0.2
dependency-type: indirect
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-23 10:49:40 -07:00
Ayan Gupta
824277ce06
Merge pull request #2387 from maminihds/attester-verify-packages
...
Add attester package-verification instruction and import-check hook 🤖 🤖 🤖
2026-07-23 10:42:32 -07:00
Ayan Gupta
e929ff0e03
Merge branch 'main' into attester-verify-packages
2026-07-23 10:38:39 -07:00
Ayan Gupta
20fcb65b1c
Merge pull request #2374 from BaiqingL/add-latchshot-page-capture-skill
...
Add Latchshot public-page capture skill 🤖 🤖 🤖
2026-07-23 10:38:25 -07:00
Ayan Gupta
019a9e043c
Merge branch 'main' into add-latchshot-page-capture-skill
2026-07-23 10:35:15 -07:00
Ayan Gupta
7385040e75
Merge pull request #2389 from samuelbushi/codex/clarify-uizze-catalogue
...
Clarify the UIZZE catalogue in anti-ui-slop 🤖 🤖 🤖
2026-07-23 09:48:29 -07:00
Ayan Gupta
24e6bc92df
Merge branch 'main' into codex/clarify-uizze-catalogue
2026-07-23 09:45:37 -07:00
Ayan Gupta
500c26a5d1
Merge pull request #2368 from github/dependabot/npm_and_yarn/npm_and_yarn-9d5d00edeb
...
chore(deps): bump js-yaml from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory
2026-07-23 09:45:25 -07:00
Samuel Bushi
e39595bc42
Clarify UIZZE catalogue in anti-ui-slop skill
2026-07-22 09:35:05 +02:00
Mostafa Amini
1336ec4777
Add attester package-verification instruction and import-check hook
...
The instruction tells Copilot to verify PyPI/npm package and symbol names
against the attester.dev existence oracle (free keyless tier, 25 calls/day
per client IP) before installing or importing, catching hallucinated
dependency names (5.2-21.7% of LLM suggestions per USENIX Security 2025).
The preToolUse hook enforces the same check on code the agent writes:
stdlib-only script, blocks only on a confident oracle negative, fails open
on quota or network trouble, caches answers on disk. README tables
regenerated with npm start.
2026-07-22 01:23:34 -04:00
Matt Soucoup
786bdcfc65
Merge pull request #2372 from qinezh/main
...
Update foundry-agent-canvas version to 1.0.2
2026-07-21 17:03:56 -07:00
Baiqing Lyu
aaa0f880bc
feat: add Latchshot page capture skill
2026-07-21 08:16:46 +00:00
Qinen Zhu
5b89246595
Update foundry-agent-canvas version to 1.0.2
2026-07-21 13:17:37 +08:00
Matt Soucoup
ecf0f5a9f4
Merge pull request #2364 from alexyaang/alexyaang-interactive-connector-sign-in
...
Add persistent browser auth to connector canvas
2026-07-20 16:11:31 -07:00
Matt Soucoup
7de9e4f48c
Merge branch 'main' into alexyaang-interactive-connector-sign-in
2026-07-20 16:06:11 -07:00
Alex Yang (DevDiv)
ee5ab9a91f
Harden sign-in cancellation behavior
...
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 15:22:39 -07:00
Alex Yang (DevDiv)
b9705e9439
Fix concurrent token initialization
...
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 14:49:48 -07:00
dependabot[bot]
fc347f3cf2
chore(deps): bump js-yaml in the npm_and_yarn group across 1 directory
...
Bumps the npm_and_yarn group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml ).
Updates `js-yaml` from 5.2.0 to 5.2.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md )
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.0...5.2.1 )
---
updated-dependencies:
- dependency-name: js-yaml
dependency-version: 5.2.1
dependency-type: direct:production
dependency-group: npm_and_yarn
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-20 21:37:52 +00:00
Alex Yang (DevDiv)
463a876284
Harden persisted authentication recovery
...
Treat malformed authentication records as missing so browser sign-in can recover, preserve real file-read failures, and pin the Azure Identity persistence dependencies exactly.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 14:32:51 -07:00
Matt Soucoup
ff8719ec3c
Merge pull request #2363 from jennyf19/cairn-open-launch
...
the-workshop: desk cards open an in-place Copilot CLI (prefer a wrapper CLI when installed)
2026-07-20 14:28:39 -07:00
Matt Soucoup
88a03afd4f
Merge branch 'main' into cairn-open-launch
2026-07-20 14:22:03 -07:00
Alex Yang (DevDiv)
59fc5616ec
Address connector authentication review feedback
...
Keep terminal sign-in status retry-safe, preserve operational Azure Identity errors, retry transient legacy-cache cleanup, clarify secure persistence requirements, and fix the blocking spelling check.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 14:18:50 -07:00
Ayan Gupta
227a92d43f
Merge pull request #2306 from thesurenk/add-skill-copilot-java-helidon
...
Add Java-Helidon skill for Helidon 4 best practices
2026-07-20 14:13:08 -07:00
Ayan Gupta
381158412e
Merge branch 'main' into add-skill-copilot-java-helidon
2026-07-20 14:12:18 -07:00
Ayan Gupta
54206dc7c8
Merge pull request #2300 from AugP/vcpkg-skill
...
Added vcpkg skill
2026-07-20 14:10:56 -07:00
Ayan Gupta
833fd80d09
Merge branch 'main' into vcpkg-skill
2026-07-20 14:08:51 -07:00
Ayan Gupta
4cdcaad004
Merge pull request #2362 from jennyf19/resync-workshop-ta-cairn
...
Fix the-workshop TA agent: cairn is a separate canvas, not bundled
2026-07-20 14:03:46 -07:00
Ayan Gupta
b7515153fc
Merge branch 'main' into resync-workshop-ta-cairn
2026-07-20 14:03:08 -07:00
Ayan Gupta
5e57b77276
Merge pull request #2357 from Simon-He95/add-markstream-install-skill
...
Add Markstream installation skill 🤖 🤖 🤖
2026-07-20 14:03:03 -07:00
Ayan Gupta
2d62fb8be0
Merge branch 'main' into add-markstream-install-skill
2026-07-20 14:02:20 -07:00
Ayan Gupta
1f11e68924
Merge pull request #2351 from samuelbushi/codex/add-uizze-anti-ui-slop
...
Add anti-ui-slop agent skill
2026-07-20 14:02:14 -07:00
Ayan Gupta
1ea1d7fa00
Merge pull request #2302 from github/all-contributors/add-thesurenk
...
add thesurenk as a contributor for doc
2026-07-20 14:01:29 -07:00
Ayan Gupta
d89e545872
Merge branch 'main' into resync-workshop-ta-cairn
2026-07-20 14:01:16 -07:00
Ayan Gupta
26e998bdb2
Merge branch 'main' into add-markstream-install-skill
2026-07-20 14:01:12 -07:00
Ayan Gupta
d4e1307cba
Merge branch 'main' into codex/add-uizze-anti-ui-slop
2026-07-20 14:01:08 -07:00
Ayan Gupta
aa9f268291
Merge branch 'main' into all-contributors/add-thesurenk
2026-07-20 14:00:23 -07:00
Ayan Gupta
cf3a17a8ab
Merge pull request #2326 from astandrik/feat/codebase-memory-mcp-skill
...
feat: add codebase-memory-mcp skill 🤖 🤖 🤖
2026-07-20 14:00:08 -07:00
Ayan Gupta
e8c20388f8
Merge pull request #2301 from thesurenk/learninghub-cookbook-add-community-sample
...
feat(cookbook): add Copilot SDK Java Examples to community samples.
2026-07-20 13:59:41 -07:00
Ayan Gupta
a48ea70a37
Merge branch 'main' into feat/codebase-memory-mcp-skill
2026-07-20 13:56:54 -07:00
Ayan Gupta
5861e848e5
Merge branch 'main' into all-contributors/add-thesurenk
2026-07-20 13:56:28 -07:00
Ayan Gupta
93a40e4d77
Merge branch 'main' into learninghub-cookbook-add-community-sample
2026-07-20 13:55:23 -07:00
Alex Yang (DevDiv)
abd06a1c22
Polish connector canvas public listing
...
Rewrite the extension documentation around the GitHub Copilot app experience, add official Connector Namespace guidance, and align marketplace metadata with the public-facing product description.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-07-20 13:32:23 -07:00