Repository navigation
Sync plugin files from GitHub-Copilot-for-Azure (run 38554045553) - #475
Merged
JasonYeMSFT (JasonYeMSFT) merged 1 commit intoOct 14, 2026
Merged
Conversation
ghcp4a-bot
Bot
requested a review
from Govind Kamtamneni (thegovind)
as a code owner
October 14, 2026 11:05
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The Windows migration workflow contains credential-output risks and several correctness inconsistencies that can misreport migration state or fail during execution.
6 open findings
Suppress app-settings output to prevent credential exposure · New Correct inaccurate source event-processing status · New Fail fast when package download fails · New Allow expected Easy Auth provider redirects · New Require sufficient permissions for role-assignment creation · New Resolve conflicting storage-selection policies · New
What changed in this PR
Syncs updated Azure and Foundry skills from the upstream GitHub Copilot for Azure repository.
Changes:
- Adds Managed Harness Agent and Windows Functions-to-Flex workflows.
- Refactors Foundry IQ helpers and unsupported-scenario routing.
- Updates quota handling, telemetry reporters, changelogs, and plugin versions.
| File | Description |
|---|---|
.github/plugins/foundry-iq-skills/skills/foundry-iq/troubleshooting/diagnose.md |
Adds unsupported-scenario handoff guidance. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/SKILL.md |
Updates routing and skill version. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/intent-routing.md |
Clarifies multi-source handoff. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/references/blob-readiness-recheck.md |
Corrects helper reference. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/knowledge-bases/create.md |
Routes unsupported creation scenarios. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/search_intake.py |
Uses extracted Search read helpers. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/prompt_cleanup.py |
Uses shared Prompt read utilities. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/model-discovery-scopes.md |
Corrects embedding helper reference. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/hosted_connect.py |
Centralizes project validation. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_cu_mi.py |
Reuses Search read helpers. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/file_cu_canary.py |
Uses extracted inventory/config helpers. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_source_readback.py |
Adds shared readback validation. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_search_read.py |
Adds shared Search read utilities. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_prompt_read.py |
Adds Prompt project/SDK utilities. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_private_json.py |
Adds private JSON evidence reader. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_initial_prompt.py |
Uses shared Prompt validation. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_embedding.py |
Adds shared embedding validation. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_document_limits.py |
Adjusts Windows ctypes import. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_common.py |
Adds shared model definition builder. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_cleanup_receipts.py |
Uses shared read/evidence helpers. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_cleanup_dependencies.py |
Uses shared Search and Prompt utilities. |
.github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_bootstrap_io.py |
Improves descriptor cleanup handling. |
.github/plugins/foundry-iq-skills/hooks/scripts/track-telemetry.sh |
Updates telemetry reporter. |
.github/plugins/foundry-iq-skills/hooks/scripts/track-telemetry.ps1 |
Updates telemetry reporter. |
.github/plugins/foundry-iq-skills/CHANGELOG.md |
Records synced releases. |
.github/plugins/foundry-iq-skills/.plugin/plugin.json |
Bumps plugin version. |
.github/plugins/foundry-iq-skills/.cursor-plugin/plugin.json |
Bumps Cursor plugin version. |
.github/plugins/foundry-iq-skills/.claude-plugin/plugin.json |
Bumps Claude plugin version. |
.github/plugins/azure-skills/skills/microsoft-foundry/SKILL.md |
Adds Managed Harness routing. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/invoke/invoke.md |
Adds Managed Harness invocation. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/deploy/deploy.md |
Adds Managed Harness deployment. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-work-iq.md |
Documents Work IQ. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-web-search.md |
Documents Web Search. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-openapi.md |
Documents OpenAPI tools. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-mcp.md |
Documents MCP tools. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-github-copilot-toolset.md |
Documents Copilot toolset. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-file-search.md |
Documents File Search. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-fabric-iq.md |
Documents Fabric IQ. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-code-interpreter.md |
Documents Code Interpreter. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-azure-ai-search.md |
Documents Azure AI Search. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/tool-a2a.md |
Documents A2A tools. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/tools/managed-harness-agent/agent-tools.md |
Indexes supported tools. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/managed-harness-agent-skill-attach.md |
Documents skill attachment. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/managed-harness-agent.md |
Adds authoring reference. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-prompt.md |
Separates ordinary Prompt workflow. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-managed-harness.md |
Adds Managed Harness workflow. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-hosted.md |
Clarifies agent-type routing. |
.github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/azd-guidance/references/azd-ai-cli.md |
Documents Managed Harness manifests. |
.github/plugins/azure-skills/skills/azure-upgrade/SKILL.md |
Adds Windows Flex migration routing. |
.github/plugins/azure-skills/skills/azure-upgrade/references/workflow-details.md |
Updates status artifact handling. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/progress-tracking.md |
Adds migration progress model. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/validation-and-cutover.md |
Adds validation and cutover. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/site-and-identity.md |
Adds configuration and identity migration. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/networking-and-storage.md |
Adds networking migration. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/discovery-and-assessment.md |
Adds candidate assessment. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/deployment-package.md |
Adds package retrieval. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/configuration-inventory.md |
Adds configuration inventory. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/code-deployment.md |
Adds deployment and rollback handling. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/cleanup-and-rollback.md |
Adds outcome-gated cleanup. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/built-in-authentication.md |
Adds Easy Auth migration. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/app-creation.md |
Adds target app creation. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/access-key-strategy.md |
Adds key strategy selection. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation/access-key-copy.md |
Adds key-copy procedure. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/automation.md |
Defines ordered automation units. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/windows/assessment.md |
Adds Windows assessment template. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/workflow.md |
Updates Linux limitations and cleanup. |
.github/plugins/azure-skills/skills/azure-upgrade/references/services/functions/consumption-to-flex/linux/assessment.md |
Updates assessment and artifact policy. |
.github/plugins/azure-skills/skills/azure-upgrade/references/global-rules.md |
Adds scoped artifact policy. |
.github/plugins/azure-skills/skills/azure-quotas/SKILL.md |
Bumps skill version. |
.github/plugins/azure-skills/skills/azure-quotas/scripts/check-quota.sh |
Safely passes quota JSON. |
.github/plugins/azure-skills/hooks/scripts/track-telemetry.sh |
Updates telemetry reporter. |
.github/plugins/azure-skills/hooks/scripts/track-telemetry.ps1 |
Updates telemetry reporter. |
.github/plugins/azure-skills/CHANGELOG.md |
Records synced Azure releases. |
.github/plugins/azure-skills/.plugin/plugin.json |
Bumps Azure plugin version. |
.github/plugins/azure-skills/.cursor-plugin/plugin.json |
Bumps Cursor plugin version. |
.github/plugins/azure-skills/.claude-plugin/plugin.json |
Bumps Claude plugin version. |
.github/plugins/azure-local-skills/hooks/scripts/track-telemetry.sh |
Updates telemetry reporter. |
.github/plugins/azure-local-skills/hooks/scripts/track-telemetry.ps1 |
Updates telemetry reporter. |
.github/plugins/azure-local-skills/CHANGELOG.md |
Records telemetry release. |
.github/plugins/azure-local-skills/.plugin/plugin.json |
Bumps plugin version. |
.github/plugins/azure-local-skills/.cursor-plugin/plugin.json |
Bumps Cursor plugin version. |
.github/plugins/azure-local-skills/.claude-plugin/plugin.json |
Bumps Claude plugin version. |
.github/plugins/azure-kusto-graph-skills/hooks/scripts/track-telemetry.sh |
Updates telemetry reporter. |
.github/plugins/azure-kusto-graph-skills/hooks/scripts/track-telemetry.ps1 |
Updates telemetry reporter. |
.github/plugins/azure-kusto-graph-skills/CHANGELOG.md |
Records telemetry release. |
.github/plugins/azure-kusto-graph-skills/.plugin/plugin.json |
Bumps plugin version. |
.github/plugins/azure-kusto-graph-skills/.cursor-plugin/plugin.json |
Bumps Cursor plugin version. |
.github/plugins/azure-kusto-graph-skills/.claude-plugin/plugin.json |
Bumps Claude plugin version. |
.github/plugins/azure-cost/hooks/scripts/track-telemetry.sh |
Updates telemetry reporter. |
.github/plugins/azure-cost/hooks/scripts/track-telemetry.ps1 |
Updates telemetry reporter. |
.github/plugins/azure-cost/CHANGELOG.md |
Records telemetry release. |
.github/plugins/azure-cost/.plugin/plugin.json |
Bumps plugin version. |
.github/plugins/azure-cost/.cursor-plugin/plugin.json |
Bumps Cursor plugin version. |
.github/plugins/azure-cost/.claude-plugin/plugin.json |
Bumps Claude plugin version. |
.github/plugins/aks-skills/hooks/scripts/track-telemetry.sh |
Updates telemetry reporter. |
.github/plugins/aks-skills/hooks/scripts/track-telemetry.ps1 |
Updates telemetry reporter. |
.github/plugins/aks-skills/CHANGELOG.md |
Records telemetry release. |
.github/plugins/aks-skills/.plugin/plugin.json |
Bumps plugin version. |
.github/plugins/aks-skills/.cursor-plugin/plugin.json |
Bumps Cursor plugin version. |
.github/plugins/aks-skills/.claude-plugin/plugin.json |
Bumps Claude plugin version. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| Add the identity-based `AzureWebJobsStorage__*` settings pointing at `<STORAGE_NAME>`: | ||
|
|
||
| ```bash | ||
| az functionapp config appsettings set --name <NEW_APP_NAME> --resource-group <RESOURCE_GROUP> --settings "AzureWebJobsStorage__accountName=<STORAGE_NAME>" "AzureWebJobsStorage__credential=managedidentity" "AzureWebJobsStorage__blobServiceUri=https://<STORAGE_NAME>.blob.core.windows.net" "AzureWebJobsStorage__queueServiceUri=https://<STORAGE_NAME>.queue.core.windows.net" "AzureWebJobsStorage__tableServiceUri=https://<STORAGE_NAME>.table.core.windows.net" |
|
|
||
| > Code deployed. Continue to **Step 5a** to apply or confirm the selected access-key strategy before HTTP validation. If Step 4j disablement was approved, only HTTP endpoints are live; per-function cutover for non-HTTP functions happens in Step 6. If disablement was declined, report that non-HTTP functions are already active. | ||
| > | ||
| > The source app is still processing all events as before. Keep it running until cutover is complete; the Consumption plan only bills for actual usage. |
Comment on lines
+12
to
+23
| UPGRADE_DIR=<UPGRADE_DIR> | ||
| runFromPackage=$(az functionapp config appsettings list --name <APP_NAME> --resource-group <RESOURCE_GROUP> --query "[?name=='WEBSITE_RUN_FROM_PACKAGE'].value | [0]" -o tsv) | ||
| if [[ "$runFromPackage" =~ ^https:// ]]; then | ||
| curl --fail --location --silent --show-error --output "$UPGRADE_DIR/source-package.zip" "$runFromPackage" | ||
| echo "Downloaded the remote deployment package without displaying its URL." | ||
| elif [[ "$runFromPackage" == "1" ]]; then | ||
| echo "The package is stored in the app content share." | ||
| else | ||
| echo "The app is not configured for run-from-package." | ||
| fi | ||
| unset runFromPackage | ||
| ``` |
| curl -s -o /dev/null -w "%{http_code}\n" "https://<HOSTNAME>" | ||
| ``` | ||
|
|
||
| Expected: a 2xx, 401, or 404 (the host is up). If the response is `403 Ip Forbidden` and the target has an intentional deny-by-default policy, record the HTTP smoke test as deferred until it can run from an already allowed client. Confirm the app and functions through the ARM commands from Step 5; do not add or relax access rules automatically. |
|
|
||
| - User has an existing Azure Functions app on a Consumption or other plan running on Windows | ||
| - User has Azure CLI v2.77.0+ installed | ||
| - User has Owner or Contributor role in the target resource group |
Comment on lines
+39
to
+41
| > ⚠️ **Skill instruction**: Storage selection is always an explicit user decision. Before running 4a or 4b, use `ask_user` to choose **reuse source**, **create new**, or **use existing different**, even when the original request did not mention storage. Explain that reusing storage avoids another resource but shares runtime/deployment dependencies, while new storage provides isolation. Do not announce a default and proceed without a response. | ||
| > | ||
| > Bind `<STORAGE_NAME>` and `<STORAGE_RESOURCE_ID>` only after the user selects a mode. If the account is outside `<RESOURCE_GROUP>`, use its resource ID as the `--storage-account` argument in 4b. |
JasonYeMSFT (JasonYeMSFT)
approved these changes
Oct 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.



Automated sync of
plugin/from GitHub-Copilot-for-Azure at commitf20d82b44cc0c24148423a276632e60384ca1cba.