Stale info callout removed — updated July 12, 2026.
Overview
Microsoft’s open-source code editor; powers github.dev browser-based editing with full extension ecosystem. Dominant IDE for AI-assisted development workflows.
Recent Developments
- 2026-07-08: Version 1.128 — parallel-agent-sessions for Claude agent-host; Copilot browser tools GA (paid default); Copilot Vision for images/PDFs; OS keyboard shortcuts for Agents window (2026-07-12-vscode-1-128-official-release-notes)
- 2026-06-03: Version 1.123 — session-sync to GitHub, Chronicle commands (
/chronicle), Agents window side-by-side sessions, 1M-token context for Anthropic/OpenAI models, Research Agent preview (2026-06-03-vscode-1-123-agent-session-sync) - 2026-06-02: Unpatched zero-day disclosed by Ammar Askar — webview message-passing enables one-click GitHub OAuth token theft on github.dev
- Stolen tokens grant access to all victim repositories, not just opened repo
- No CVE assigned; mitigation: clear github.dev cookies/site data
Related
- github
- microsoft
- oauth
- supply-chain-attacks
- github-security
- parallel-agent-sessions
- github-copilot
- agentic-ai
- build-2026