GitHub Advanced Security for Azure DevOps now uses the Copilot coding agent to propose pull-request fixes for dependency vulnerabilities and third-party scanning findings, following repo instructions and skills in .github or .agents. It also adds EPSS exploit-likelihood percentiles and dev-versus-runtime dependency labels to triage, and you still review and merge every fix yourself.
Announced Oct 23, geelark cli (install with npm install g geelark cli@latest ) manages cloud phones, browser profiles, proxies, and billing from the terminal, and geelark cli mcp exposes the same commands as tools for Codex, Claude, and Cursor. It authenticates with a bearer token from the GeeLark client, so the agent gets whatever that token can do (repo)…
Shipped Oct 23, the new submit feedback tool lets an agent send bug reports, friction reports, and feature requests to the Vercel team with structured context like the tool, task, expected and actual behavior. It requires sign in and only sends when you ask your agent to share feedback…
Announced Oct 23, the server at <OIM URL /OpsHubWS/mcp lets Claude Code, Claude Desktop, VS Code with Copilot, Cline, and Continue check integration health, build Jira/ServiceNow/Azure DevOps mappings, and retry failed records under the user's own OIM permissions. Delete operations are blocked, MCP changes are tagged in audit logs, and it needs the Professional or Ultimate edition plus a local account or API key, since LDAP and SAML users can't sign in (docs)…
A new AI Quick Start page (announced Oct 23) points Copilot CLI, VS Code, Claude Code, Cursor, and any remote HTTP MCP client at https://ai.orchardcore.net , giving agents tools to search and read the .NET CMS framework's documentation instead of guessing module names and APIs. In Claude Code it's one command: claude mcp add transport http orchardcore https://ai.orchardcore.net (This week in Orchard)…
Announced Oct 22, agents can search Interchange's docs and call any API method in its sandbox to open, fund, and trade accounts, under a Docs Only, Read Only, or Read & Write key you approve in your browser. Each call swaps the agent's token for a 60 second one recorded on the action, and the command tool never retries on its own, so a timeout can't turn into a second trade…
Spotted something we missed? Start a thread.
