Commit Graph

2108 Commits

Author SHA1 Message Date
github-actions[bot] c08dd8837a docs: update Learning Hub for Copilot CLI v1.0.72-v1.0.75 changes
- Add Claude Opus 5 (v1.0.75) and gemini-3.6-flash (v1.0.74) to the
  model selection guide in building-custom-agents.md
- Document agentStop hook stop_hook_active flag and 8-consecutive-block
  loop-prevention behavior (v1.0.72) in automating-with-hooks.md
- Add Open Plugin Spec v1 and mcp.json support note (v1.0.74) in
  installing-and-using-plugins.md
- Document /model plan command for per-mode model selection (v1.0.74)
  in copilot-configuration-basics.md

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-07-26 21:04:00 +00:00
Matt Soucoup aa280f28b1 Merge pull request #2425 from github/automation/external-plugin-approve-2424-connector-namespaces
[external-plugin] Add connector-namespaces
2026-07-24 13:06:10 -07:00
github-actions[bot] e11b6ed67b Add external plugin connector-namespaces 2026-07-24 18:25:36 +00:00
Ayan Gupta a3bee6f71d Merge pull request #2418 from qinezh/codex/upgrade-microsoft-foundry-1.0.4
Upgrade microsoft-foundry plugin to 1.0.4
2026-07-24 08:50:37 -07:00
Ayan Gupta 3bda5d4367 Merge branch 'main' into codex/upgrade-microsoft-foundry-1.0.4 2026-07-24 08:50:05 -07:00
Matt Soucoup 684ba6b5c1 Merge pull request #2404 from alexyaang/alexyaang-external-plugin-connector-namespaces
Remove local connector plugin to enable external migration
2026-07-24 08:08:05 -07:00
Qinen Zhu 50aa6a87b5 chore: upgrade microsoft-foundry plugin to 1.0.4
Update the external plugin catalog to the 1.0.4 source commit and regenerate the marketplace output.
2026-07-24 17:43:06 +08:00
Alex Yang (DevDiv) e7ce4a918e Remove local connector namespaces extension
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-23 15:18:46 -07:00
Ayan Gupta dae77f2413 Merge pull request #2407 from tharr916/bugfix/correct-pinned-version
Fix Node.js setup action version in skill quality report workflow
2026-07-23 11:35:19 -07:00
Ayan Gupta d16aff2372 Merge pull request #2349 from johnpapa/fix-ai-ready-marketplace
Fix ai-ready marketplace ref
2026-07-23 11:22:51 -07:00
Ayan Gupta fa5489328c Merge branch 'main' into fix-ai-ready-marketplace 2026-07-23 11:22:02 -07:00
Himanshu bamoria 4803e46b1a feat: add competitor-ad-intelligence and ad-campaign-analyzer skills (#2314) 2026-07-23 10:51:27 -07:00
NeilChen 233d902c2f feat(skills): add Agent Skill Stack (#2350)
Co-authored-by: neilchen2000-pixel <283394672+neilchen2000-pixel@users.noreply.github.com>
2026-07-23 10:51:21 -07:00
Muhammad Ubaid Raza f08f426454 [gem-team] 1.86 (#2356)
* chore: standardize agent documentation markdown, fix formatting, add MANDATORY clauses, and update output formats across agents

* chore: Update gem-team plugin version to 1.84.0 and refine concurrency language in agent execution steps

* Bump gem-team plugin version to 1.86.0 and update README

* Bump gem-team plugin version to 1.87.0 and update README
2026-07-23 10:51:13 -07:00
John Haugabook ae8ada62bd Extension backrooms (#2348)
* new extension backrooms-canvas

* new extension backrooms-canvas

* Apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* update according to code review

update according to code review

* Apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* apply code review, change backviews to backrooms

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-07-23 10:51:06 -07:00
Alex Yang [MSFT] c0869f6231 Improve connector reload authentication UX (#2370)
Keep Azure tokens in memory and preserve linked namespace context across extension reloads.

Co-authored-by: Alex Yang (DevDiv) <yangalex@microsoft.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-23 10:51:00 -07:00
Florian Vogt 26a363779a deps(external.json): Update UI5 plugins to v0.1.7 (#2377) 2026-07-23 10:50:53 -07:00
Samuel Bushi ebbaa19dda Add UIZZE anti-ui-slop plugin (#2390) 2026-07-23 10:50:47 -07:00
Antonio Villanueva 62274dcd31 Update upgrade-agent plugin to 1.1.247 (#2394)
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 2cb17f2d-aff4-472b-89a2-83d9d16bb65e
2026-07-23 10:50:38 -07:00
Tim Mulholland 7351f9f692 Fix external-plugin quality gates for tag-name locators (#2397) (#2399)
runVersionMatchGate and runCanvasStructureGate read locator content with git show/cat-file. For a tag-name locator, `git fetch origin <tag>` only updates FETCH_HEAD and never creates refs/tags/<tag>, so `git show <tag>:...` died with 'invalid object name' and produced a false infra_error.

Read the primary locator via HEAD (already checked out during clone) and non-primary locators via FETCH_HEAD after fetching, instead of the bare locator. This handles SHAs, short tag names, and fully-qualified tag refs uniformly without classifying the locator.

Adds regression coverage for the tag-locator path in both gates.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-23 10:50:31 -07:00
Jonas Tüchler 03fb5fc96e Add the WebMCPify agent skill 🤖🤖🤖 (#2400)
* feat(skills): add webmcpify skill

* style(skills): quote webmcpify description
2026-07-23 10:50:25 -07:00
qinezh 44f3f0d06a Rename foundry-agent-canvas plugin to microsoft-foundry (#2405)
Update external plugin registration: rename identity and source.path to
microsoft-foundry, bump version to 1.0.3, refresh description and source.sha,
and regenerate marketplace.json.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 68571581-f9d1-4b01-a5d7-0a49c4a6b3b5
2026-07-23 10:50:19 -07:00
dependabot[bot] 912fa2a95c chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates (#2409)
Bumps the npm_and_yarn group with 1 update in the / directory: [fast-uri](https://github.com/fastify/fast-uri).
Bumps the npm_and_yarn group with 4 updates in the /website directory: [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro), [dompurify](https://github.com/cure53/DOMPurify), [sharp](https://github.com/lovell/sharp) and [svgo](https://github.com/svg/svgo).


Updates `fast-uri` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4)

Updates `astro` from 7.0.3 to 7.1.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro)

Updates `dompurify` from 3.4.11 to 3.4.12
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.11...3.4.12)

Updates `sharp` from 0.34.5 to 0.35.3
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](https://github.com/lovell/sharp/compare/v0.34.5...v0.35.3)

Updates `svgo` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/svg/svgo/releases)
- [Commits](https://github.com/svg/svgo/compare/v4.0.1...v4.0.2)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: astro
  dependency-version: 7.1.3
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: dompurify
  dependency-version: 3.4.12
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: sharp
  dependency-version: 0.35.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: svgo
  dependency-version: 4.0.2
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-23 10:49:40 -07:00
Ayan Gupta 824277ce06 Merge pull request #2387 from maminihds/attester-verify-packages
Add attester package-verification instruction and import-check hook 🤖🤖🤖
2026-07-23 10:42:32 -07:00
Ayan Gupta e929ff0e03 Merge branch 'main' into attester-verify-packages 2026-07-23 10:38:39 -07:00
Ayan Gupta 20fcb65b1c Merge pull request #2374 from BaiqingL/add-latchshot-page-capture-skill
Add Latchshot public-page capture skill 🤖🤖🤖
2026-07-23 10:38:25 -07:00
Ayan Gupta 019a9e043c Merge branch 'main' into add-latchshot-page-capture-skill 2026-07-23 10:35:15 -07:00
Ayan Gupta 7385040e75 Merge pull request #2389 from samuelbushi/codex/clarify-uizze-catalogue
Clarify the UIZZE catalogue in anti-ui-slop 🤖🤖🤖
2026-07-23 09:48:29 -07:00
Ayan Gupta 24e6bc92df Merge branch 'main' into codex/clarify-uizze-catalogue 2026-07-23 09:45:37 -07:00
Ayan Gupta 500c26a5d1 Merge pull request #2368 from github/dependabot/npm_and_yarn/npm_and_yarn-9d5d00edeb
chore(deps): bump js-yaml from 5.2.0 to 5.2.1 in the npm_and_yarn group across 1 directory
2026-07-23 09:45:25 -07:00
Timothy Harrington 4ec36c7dbf Fix Node.js setup action version in skill quality report workflow 2026-07-23 11:56:04 -04:00
Samuel Bushi e39595bc42 Clarify UIZZE catalogue in anti-ui-slop skill 2026-07-22 09:35:05 +02:00
Mostafa Amini 1336ec4777 Add attester package-verification instruction and import-check hook
The instruction tells Copilot to verify PyPI/npm package and symbol names
against the attester.dev existence oracle (free keyless tier, 25 calls/day
per client IP) before installing or importing, catching hallucinated
dependency names (5.2-21.7% of LLM suggestions per USENIX Security 2025).
The preToolUse hook enforces the same check on code the agent writes:
stdlib-only script, blocks only on a confident oracle negative, fails open
on quota or network trouble, caches answers on disk. README tables
regenerated with npm start.
2026-07-22 01:23:34 -04:00
Matt Soucoup 786bdcfc65 Merge pull request #2372 from qinezh/main
Update foundry-agent-canvas version to 1.0.2
2026-07-21 17:03:56 -07:00
Baiqing Lyu aaa0f880bc feat: add Latchshot page capture skill 2026-07-21 08:16:46 +00:00
Qinen Zhu 5b89246595 Update foundry-agent-canvas version to 1.0.2 2026-07-21 13:17:37 +08:00
Matt Soucoup ecf0f5a9f4 Merge pull request #2364 from alexyaang/alexyaang-interactive-connector-sign-in
Add persistent browser auth to connector canvas
2026-07-20 16:11:31 -07:00
Matt Soucoup 7de9e4f48c Merge branch 'main' into alexyaang-interactive-connector-sign-in 2026-07-20 16:06:11 -07:00
Alex Yang (DevDiv) ee5ab9a91f Harden sign-in cancellation behavior
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-20 15:22:39 -07:00
Alex Yang (DevDiv) b9705e9439 Fix concurrent token initialization
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-20 14:49:48 -07:00
dependabot[bot] fc347f3cf2 chore(deps): bump js-yaml in the npm_and_yarn group across 1 directory
Bumps the npm_and_yarn group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml).


Updates `js-yaml` from 5.2.0 to 5.2.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nodeca/js-yaml/compare/5.2.0...5.2.1)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-20 21:37:52 +00:00
Alex Yang (DevDiv) 463a876284 Harden persisted authentication recovery
Treat malformed authentication records as missing so browser sign-in can recover, preserve real file-read failures, and pin the Azure Identity persistence dependencies exactly.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-20 14:32:51 -07:00
Matt Soucoup ff8719ec3c Merge pull request #2363 from jennyf19/cairn-open-launch
the-workshop: desk cards open an in-place Copilot CLI (prefer a wrapper CLI when installed)
2026-07-20 14:28:39 -07:00
Matt Soucoup 88a03afd4f Merge branch 'main' into cairn-open-launch 2026-07-20 14:22:03 -07:00
Alex Yang (DevDiv) 59fc5616ec Address connector authentication review feedback
Keep terminal sign-in status retry-safe, preserve operational Azure Identity errors, retry transient legacy-cache cleanup, clarify secure persistence requirements, and fix the blocking spelling check.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
2026-07-20 14:18:50 -07:00
Ayan Gupta 227a92d43f Merge pull request #2306 from thesurenk/add-skill-copilot-java-helidon
Add Java-Helidon skill for Helidon 4 best practices
2026-07-20 14:13:08 -07:00
Ayan Gupta 381158412e Merge branch 'main' into add-skill-copilot-java-helidon 2026-07-20 14:12:18 -07:00
Ayan Gupta 54206dc7c8 Merge pull request #2300 from AugP/vcpkg-skill
Added vcpkg skill
2026-07-20 14:10:56 -07:00
Ayan Gupta 833fd80d09 Merge branch 'main' into vcpkg-skill 2026-07-20 14:08:51 -07:00
Ayan Gupta 4cdcaad004 Merge pull request #2362 from jennyf19/resync-workshop-ta-cairn
Fix the-workshop TA agent: cairn is a separate canvas, not bundled
2026-07-20 14:03:46 -07:00