Skip to content

[pull] main from microsoft:main#1303

Merged
pull[bot] merged 59 commits into
code:mainfrom
microsoft:main
May 27, 2026
Merged

[pull] main from microsoft:main#1303
pull[bot] merged 59 commits into
code:mainfrom
microsoft:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 27, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

mrleemurray and others added 30 commits May 22, 2026 13:38
…or border color

Co-authored-by: Copilot <copilot@github.com>
… reflection

Co-authored-by: Copilot <copilot@github.com>
…n styles

Co-authored-by: Copilot <copilot@github.com>
…roved responsiveness

Co-authored-by: Copilot <copilot@github.com>
…iveness

Co-authored-by: Copilot <copilot@github.com>
Introduces MobileMultiDiffView with sticky per-file headers, fold/unfold via a chevron-only toggle target (click, tap, keyboard), and async per-file content loading; wires it into the mobile overlay/titlebar plumbing and adds a Vite playground entry for iteration.
…or components

Co-authored-by: Copilot <copilot@github.com>
…tor layout handling

Co-authored-by: Copilot <copilot@github.com>
…s in AI Customization Management Editor

Co-authored-by: Copilot <copilot@github.com>
…n integration in AI Customization Management Editor

Co-authored-by: Copilot <copilot@github.com>
…nsistency

Co-authored-by: Copilot <copilot@github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
…nsistency

Co-authored-by: Copilot <copilot@github.com>
…lity in AI Customization Management Editor

Co-authored-by: Copilot <copilot@github.com>
…modal-polish

Polish AI Customization modal editor styles
rebornix and others added 27 commits May 27, 2026 10:47
* feat: Implement utilityChatCompletion in CopilotApiService and add integration tests

* fix: Update comments and improve caching logic in CopilotApiService integration tests
…318513)

Bumps [tmp](https://github.com/raszi/node-tmp) from 0.2.4 to 0.2.6.
- [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md)
- [Commits](raszi/node-tmp@v0.2.4...v0.2.6)

---
updated-dependencies:
- dependency-name: tmp
  dependency-version: 0.2.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Fix browser pixel alignment

* clean

* clean
…ds using pwsh.exe (#318466)

* Exclude MXC SDK catalog manifests from Authenticode checks

* Exclude MXC executables from VersionInfo sanity check

* Exclude MXC bin from VersionInfo sanity check

* investigation

* fixing issue for pwsh execution

* fixing issue for pwsh execution
…model-picker

Enable 'Manage Models' action in Agent Host Model Picker
Co-authored-by: vritant24 <13074644+vritant24@users.noreply.github.com>
Update sign-in text to specify GitHub Copilot instead of generic AI features/development

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: eli-w-king <201316543+eli-w-king@users.noreply.github.com>
correcting the model family for tool search
Implements a 3-legged OAuth flow for enterprise-managed MCP servers where
VS Code routes per-resource authentication through a tenant-wide IdP via
ID-JAG (draft-ietf-oauth-identity-assertion-authz-grant) token exchange:

  1. User signs in once to the enterprise IdP (Auth Code + PKCE via the
     existing DynamicAuthProvider base class). The IdP id_token is stored
     in OS secret storage and survives window reload.
  2. The id_token is exchanged at the IdP for a resource-scoped ID-JAG
     assertion (RFC 8693 token exchange, subject_token_type=id_token,
     requested_token_type=id-jag, audience=<resource AS>).
  3. The ID-JAG is redeemed at the resource's authorization server
     (grant_type=urn:ietf:params:oauth:grant-type:jwt-bearer) for a
     resource-scoped access token.
  4. The resource access token is used to call the MCP server.

Surfaces:

- New 'mcp.enterpriseManagedAuth.idp' setting (issuer/clientId/clientSecret),
  delivered via policy (McpEnterpriseManagedAuthIdp). The setting is
  hidden from Settings UI (included: false) but readable/writable by hand
  for local dev. APPLICATION scope so it never syncs.

- New 'enterpriseManaged' flag on MCP HTTP server entries triggers the
  XAA flow instead of per-server Dynamic Client Registration.

- New proposed API 'authSessionAudience' adds optional 'audience' to
  AuthenticationProviderSessionOptions so the XAA provider can receive
  the resource AS URL through the standard session options shape.

- IAuthenticationService grows createOrGetXaaProvider(issuer): registers
  one XAA provider per IdP issuer (shared across enterprise MCP servers).

- Resource-AS client secrets (distinct from IdP client secrets) are stored
  in OS secret storage keyed by (resource indicator, resource client_id)
  and resolved through the existing 'Set Client Secret' codelens above
  oauth.clientId in mcp.json, with a prompt fallback for first run.

Silent re-mint on reload: getSessions reads the persisted IdP session
from base-class secret storage and silently runs legs 2-4 to produce a
resource token without prompting. Only escalates to createSession when
the resource AS needs interactive client-secret entry.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: eli-w-king <201316543+eli-w-king@users.noreply.github.com>
…stions-sentence

Change "Inline suggestions quota reached" to "Inline suggestions limit reached"
* More enterprise friendly wording

* word smith
… opt-in for other agent surfaces (#318625)

* Chronicle cost-tips: scope to VS Code chat sessions

* add test
…318609)

Remove leftover code from /tests test-generation codelens

The codelens feature for /tests test generation was removed in
c0eaa94, but related infrastructure remained as dead code:

- ITestGenInfoStorage was never populated (the deleted testGenAction.ts
  was the only writer), so TestFromTestInvocation and Test2Impl always
  took the 'undefined' branch.
- IParserService.getTreeSitterAST().getTestableNode/getTestableNodes
  and the underlying testGenParsing helpers + testableNodeQueries had
  no remaining callers.

Delete the storage service, the parser API, the tree-sitter queries,
and the related tests. The /tests slash command itself is preserved;
`_findLastTest` stays since testFromSrcInvocation.tsx still uses it.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* mobile thinking cleanup + icon fix

* address comments
* truncate and retry tool calls

* keep visibility of getEndpoint

* address code review comments

* fix ci errors

* address code review comments

* add testing

* address code review comments
…18627)

* Refactor browser WebContentsView layout into feature contribution

* feedback
@pull pull Bot locked and limited conversation to collaborators May 27, 2026
@pull pull Bot added the ⤵️ pull label May 27, 2026
@pull pull Bot merged commit dc97685 into code:main May 27, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.