Newly generated OAuth client secrets will be shown only at time of creation

With this release we are changing how Azure DevOps displays OAuth client secrets. Now, newly generated client secrets will be shown only once at the time of creation. This means that they will no longer be retrievable via the UI or API. This change will reduce the risk of accidental exposure and encourages secure storage practices.

Check out the release notes for details.

GitHub Advanced Security for Azure DevOps

• New SARIF processing completed service hook event

General

• OAuth client secrets now shown only once

Boards

• Dynamic checklist support in work item Markdown fields

Repos

• Improved navigation for pull request threads and discussions

Testing

• Associate automated tests to test cases

GitHub Advanced Security for Azure DevOps

New SARIF processing completed service hook event

Via the service hooks experience, you can now be notified via service hooks once SARIF processing for Advanced Security build tasks has been complete for your organization or select repositories.

General

OAuth client secrets now shown only once

As part of our ongoing commitment to security and industry best practices, Azure DevOps will now be enforcing one-time visibility for OAuth client secrets. Starting with this release, newly generated client secrets will be displayed only once at the time of creation and will no longer be retrievable via the UI or API.

This change includes the retirement of the Get Registration Secret API. Users are encouraged to securely store secrets immediately upon generation using tools such as Azure Key Vault. For secret rotation, Azure DevOps supports overlapping secrets to ensure continuity and minimize downtime. This update will go into effect starting September 2, 2025. Learn more in our blog post.

Boards

Dynamic checklist support in work item Markdown fields

Markdown fields in work items now support interactive checklists. Quickly check or uncheck items without leaving the field, just like in pull request descriptions. This feature is automatically available in any large text field or comment with Markdown enabled.

Repos

Improved navigation for pull request threads and discussions

We introduced new keyboard shortcuts that allows navigate through pull request discussions and threads:

• Move to the previous discussion - ctrl+alt+w
• Move to the next discussion - ctrl+alt+s
• Collapse selected thread - ctrl+alt+c
• Expand selected thread - ctrl+alt+e

More information about available keyboard shortcuts n Azure DevOps can be found in official documentation: Keyboard shortcuts for web portal and Team Explorer.

Testing

Associate automated tests to test cases

Previously, support was introduced for associating automated tests written in various languages with test cases directly from pipelines. This capability has now been extended to allow initiating the association directly from within the test case itself.

Next steps

How to provide feedback

We would love to hear what you think about these features. Use the help menu to report a problem or provide a suggestion.

You can also get advice and your questions answered by the community on Stack Overflow.