From 4d49ac626119bdcd72eada96c253bd123e2ab882 Mon Sep 17 00:00:00 2001
From: docs-bot <77750099+docs-bot@users.noreply.github.com>
Date: Fri, 19 Sep 2025 01:21:20 -0700
Subject: [PATCH 1/8] Sync secret scanning data (#57607)

Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com>
---
 src/secret-scanning/data/public-docs.yml | 12 ++++++++++++
 src/secret-scanning/lib/config.json      |  4 ++--
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/src/secret-scanning/data/public-docs.yml b/src/secret-scanning/data/public-docs.yml
index a387fd9e6ed8..82ce01c5d3cf 100644
--- a/src/secret-scanning/data/public-docs.yml
+++ b/src/secret-scanning/data/public-docs.yml
@@ -2596,6 +2596,18 @@
   hasValidityCheck: false
   base64Supported: false
   isduplicate: false
+- provider: GitHub Secret Scanning
+  supportedSecret: GitHub Secret Scanning Base64 Encoded
+  secretType: secret_scanning_sample_token_base64
+  versions:
+    fpt: '*'
+    ghec: '*'
+  isPublic: true
+  isPrivateWithGhas: true
+  hasPushProtection: true
+  hasValidityCheck: false
+  base64Supported: true
+  isduplicate: false
 - provider: GitLab
   supportedSecret: GitLab Access Token
   secretType: gitlab_access_token
diff --git a/src/secret-scanning/lib/config.json b/src/secret-scanning/lib/config.json
index d53a08e3e745..e70fe4278f3f 100644
--- a/src/secret-scanning/lib/config.json
+++ b/src/secret-scanning/lib/config.json
@@ -1,5 +1,5 @@
 {
-  "sha": "c2f94b9a9bda7803187d77455f96a0c736990cce",
-  "blob-sha": "63b65e44f5127683fdf67aa7ba30d1fdbf3fcf42",
+  "sha": "6f51847d21cd182d23abf96192e3dd9aa82efc99",
+  "blob-sha": "37e88f0909a3c7ae988942376b553a5a064cbd2f",
   "targetFilename": "code-security/secret-scanning/introduction/supported-secret-scanning-patterns"
 }
\ No newline at end of file

From ce8e1990b1d92a4580d5762249a7ae6bc698b09b Mon Sep 17 00:00:00 2001
From: hubwriter <hubwriter@github.com>
Date: Fri, 19 Sep 2025 11:48:56 +0100
Subject: [PATCH 2/8] Update onCreateCommand to set npm registry and install
 Copilot

---
 .devcontainer/devcontainer.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 6a42a1d9790d..44c2b043a46a 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -59,7 +59,12 @@
   },
 
   // Lifecycle commands
-  "onCreateCommand": "npm ci",
+  "onCreateCommand": [
+    "npm set \"//npm.pkg.github.com/:_authToken=$GITHUB_TOKEN\"",
+    "npm set \"@github:registry=https://npm.pkg.github.com/\"",
+    "npm install -g @github/copilot",
+    "npm ci"
+  ],
   "postStartCommand": "nohup bash -c 'npm start &'",
   // Set the port to be public
   "postAttachCommand": "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\"",

From 1fe999a22de24cbc78b3891c4eae8e33dcf24aa0 Mon Sep 17 00:00:00 2001
From: hubwriter <hubwriter@github.com>
Date: Fri, 19 Sep 2025 11:55:35 +0100
Subject: [PATCH 3/8] Refactor devcontainer lifecycle commands

---
 .devcontainer/devcontainer.json | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 44c2b043a46a..b086317e296a 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -59,16 +59,16 @@
   },
 
   // Lifecycle commands
-  "onCreateCommand": [
+  "onCreateCommand": "npm ci",
+  "postStartCommand": "nohup bash -c 'npm start &'",
+  // Set the port to be public
+  "postAttachCommand": [
     "npm set \"//npm.pkg.github.com/:_authToken=$GITHUB_TOKEN\"",
     "npm set \"@github:registry=https://npm.pkg.github.com/\"",
     "npm install -g @github/copilot",
-    "npm ci"
+    "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\""
   ],
-  "postStartCommand": "nohup bash -c 'npm start &'",
-  // Set the port to be public
-  "postAttachCommand": "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\"",
-
+  
   // Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
   "remoteUser": "node",
 

From 275d7bffe0d12f435edd366336275235435e39b9 Mon Sep 17 00:00:00 2001
From: hubwriter <hubwriter@github.com>
Date: Fri, 19 Sep 2025 12:03:27 +0100
Subject: [PATCH 4/8] Fix npm set commands in devcontainer configuration

---
 .devcontainer/devcontainer.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index b086317e296a..eb36aa4c69be 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -63,8 +63,8 @@
   "postStartCommand": "nohup bash -c 'npm start &'",
   // Set the port to be public
   "postAttachCommand": [
-    "npm set \"//npm.pkg.github.com/:_authToken=$GITHUB_TOKEN\"",
-    "npm set \"@github:registry=https://npm.pkg.github.com/\"",
+    "npm set //npm.pkg.github.com/:_authToken=$GITHUB_TOKEN",
+    "npm set @github:registry=https://npm.pkg.github.com/",
     "npm install -g @github/copilot",
     "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\""
   ],

From 02ce709c3a262c79e37d5b7202a7cc002e60ba1e Mon Sep 17 00:00:00 2001
From: hubwriter <hubwriter@github.com>
Date: Fri, 19 Sep 2025 12:07:37 +0100
Subject: [PATCH 5/8] Simplify postAttachCommand in devcontainer.json

---
 .devcontainer/devcontainer.json | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index eb36aa4c69be..418b37719a38 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -62,12 +62,7 @@
   "onCreateCommand": "npm ci",
   "postStartCommand": "nohup bash -c 'npm start &'",
   // Set the port to be public
-  "postAttachCommand": [
-    "npm set //npm.pkg.github.com/:_authToken=$GITHUB_TOKEN",
-    "npm set @github:registry=https://npm.pkg.github.com/",
-    "npm install -g @github/copilot",
-    "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\""
-  ],
+  "postAttachCommand": "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\"",
   
   // Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
   "remoteUser": "node",

From e9128fb4f3abf77e83f567cb941c77e6bc5819ba Mon Sep 17 00:00:00 2001
From: hubwriter <hubwriter@github.com>
Date: Fri, 19 Sep 2025 12:16:05 +0100
Subject: [PATCH 6/8] Update onCreateCommand to set npm config and install
 Copilot

---
 .devcontainer/devcontainer.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 418b37719a38..c89a5f5a3439 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -59,7 +59,12 @@
   },
 
   // Lifecycle commands
-  "onCreateCommand": "npm ci",
+  "onCreateCommand": [
+    "npm config set \"//npm.pkg.github.com/:_authToken=$GITHUB_TOKEN\"",
+    "npm config set \"@github:registry=https://npm.pkg.github.com/\"", 
+    "npm install -g @github/copilot",
+    "npm ci"
+  ],
   "postStartCommand": "nohup bash -c 'npm start &'",
   // Set the port to be public
   "postAttachCommand": "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\"",

From 87ad2520a5167eb9b26eccf618996a8e53258c0b Mon Sep 17 00:00:00 2001
From: hubwriter <hubwriter@github.com>
Date: Fri, 19 Sep 2025 12:29:59 +0100
Subject: [PATCH 7/8] Refactor onCreateCommand in devcontainer.json

---
 .devcontainer/devcontainer.json | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index c89a5f5a3439..418b37719a38 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -59,12 +59,7 @@
   },
 
   // Lifecycle commands
-  "onCreateCommand": [
-    "npm config set \"//npm.pkg.github.com/:_authToken=$GITHUB_TOKEN\"",
-    "npm config set \"@github:registry=https://npm.pkg.github.com/\"", 
-    "npm install -g @github/copilot",
-    "npm ci"
-  ],
+  "onCreateCommand": "npm ci",
   "postStartCommand": "nohup bash -c 'npm start &'",
   // Set the port to be public
   "postAttachCommand": "gh cs ports visibility 4000:public -c \"$CODESPACE_NAME\"",

From d02ff172db348b5c413d0eaff8a5d0c59acc17bc Mon Sep 17 00:00:00 2001
From: Felicity Chapman <felicitymay@github.com>
Date: Fri, 19 Sep 2025 12:45:33 +0100
Subject: [PATCH 8/8] Add new metrics from PRU Motion (#57605)

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---
 .../drive-downstream-impact/accelerate-pull-requests.md       | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/content/copilot/tutorials/roll-out-at-scale/drive-downstream-impact/accelerate-pull-requests.md b/content/copilot/tutorials/roll-out-at-scale/drive-downstream-impact/accelerate-pull-requests.md
index 7721eb54d089..172ee0a0bdb8 100644
--- a/content/copilot/tutorials/roll-out-at-scale/drive-downstream-impact/accelerate-pull-requests.md
+++ b/content/copilot/tutorials/roll-out-at-scale/drive-downstream-impact/accelerate-pull-requests.md
@@ -163,5 +163,7 @@ Developers **should not**:
 {% data reusables.copilot.measure-changes-intro %}
 
 * **Developer satisfaction**: Use developer surveys to measure satisfaction with engineering tooling.
-* **Pull requests merged per developer**: You can use GitHub's `pull request` webhook, ensuring `action` is `closed` and the `merged` property inside `pull request` object is `true`.
+* **Pull requests merged per developer**: You can use the `pull request` webhook, ensuring `action` is `closed` and the `merged` property inside `pull request` object is `true`.
 * **Pull requests lead time**: Measure the average length of time between PR creation and merge.
+* **Pull request defect escape rate**: Measure the rate of deployment problems caused by poorly reviewed PRs.
+* **Pull request review comment type**: Download PR review comments, categorize using AI-based topic classification, and track the comments made by human reviewers on design, scalability, and strategy.