2026-04 - 7

2026 (12)

April (12)

dotnet: Your Migration’s Source of Truth: The Modernization Assessment

.NET

2026-04-07

The post introduces GitHub Copilot Modernization and focuses on the assessment report as the source of truth for cloud modernization work. It frames the report as part of the migration process and positions it as the primary reference for modernization planning.

azure: [Launched] Generally Available: Disable HTTP proxy in AKS

Azure Updates

2026-04-07

Azure Kubernetes Service now supports disabling HTTP proxy settings in an existing cluster. This helps administrators remove or change proxy configuration as network requirements evolve without needing disruptive cluster changes.

azure: [Launched] Generally Available: Azure Functions now supports MCP resource triggers

Azure Updates

2026-04-07

Azure Functions now generally supports MCP resource triggers for MCP servers hosted on Functions. This lets developers expose resources directly, in addition to tools.

azure: [Launched] Generally Available: Pod CIDR expansion in AKS

Azure Updates

2026-04-07

Azure Kubernetes Service (AKS) now supports generally available Pod CIDR expansion for overlay-based clusters. This lets teams increase the pod IP range when clusters run out of addresses, avoiding cluster rebuilds.

dotnet: ASP.NET Core 2.3 end of support announcement

.NET

2026-04-07

ASP.NET Core 2.3 will reach end of support on April 7, 2027. Microsoft says users should plan to upgrade applications to a currently supported .NET version.

github: Prioritize security alerts with runtime context from Dynatrace

GitHub

2026-04-07

GitHub Advanced Security alerts can now be prioritized using runtime context from Dynatrace, including deployed artifacts and runtime risk in Kubernetes environments. This adds environment-aware signal to help rank alerts.

github: Copilot CLI now supports BYOK and local models

GitHub

2026-04-07

GitHub Copilot CLI now supports connecting your own model provider (BYOK) or using fully local models instead of GitHub-hosted model routing. The change gives CLI users more control over where models run and which providers they use.

github: Dependabot alerts are now assignable to AI agents for remediation

GitHub

2026-04-07

Dependabot alerts can now be assigned to AI coding agents for remediation, including Copilot, Claude, and Codex. This is intended for vulnerabilities that require code changes beyond a simple dependency version update.

github: Dependabot version updates now support the Nix ecosystem

GitHub

2026-04-07

Dependabot version updates now support the Nix ecosystem via Nix flakes. You can add `nix` as a package ecosystem in `dependabot.yml` and Dependabot will monitor `flake.lock` inputs and open pull requests when updates are available.

security: SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

Microsoft Security Blog

2026-04-07

Microsoft says Forest Blizzard, a threat actor linked to the Russian military, is compromising insecure home and small-office routers and changing their settings to support malicious infrastructure. The activity includes DNS hijacking and adversary-in-the-middle attacks.

github: Code scanning: Batch apply security alert suggestions on pull requests

GitHub

2026-04-07

GitHub code scanning alerts on pull requests can now be fixed in bulk from the Files changed tab. The update lets users apply multiple security alert suggestions at once instead of handling them individually.

github: npm trusted publishing now supports CircleCI

GitHub

2026-04-07

npm trusted publishing now supports CircleCI as an OIDC provider for publishing packages to npm. Maintainers can authenticate from CircleCI workflows without stored credentials, alongside existing support for GitHub Actions and GitLab CI/CD.