GitHub updates Visual Studio Copilot with pull-request agent and NuGet fixes

GitHub has detailed its September 2026 Copilot update for Visual Studio 2026, highlighting pull-request exploration, bring-your-own-model support, and an assisted workflow for fixing vulnerable NuGet packages. The company published the update on October 22 and points users to the Visual Studio Insiders channel for the latest features.

The Git agent can inspect a pull request from Copilot Chat when a developer attaches the pull request from the Git Repository window. GitHub says the resulting summary includes navigable links to comments and files, and the workflow requires connecting a Git provider's MCP server, with GitHub and Azure DevOps supported.

Bring Your Own Model remains in preview and can use models available through GitHub Copilot or a team's own deployments, including when a developer is not signed in to GitHub. The company says the feature now requires the new Agent (Preview) based on its Copilot SDK harness; the older Ask and Agent modes no longer support it, and previously configured Ollama models must be added again after updating.

For dependency security, NuGet Audit warnings in Visual Studio's Error List now offer an action that opens Copilot Chat in agent mode to request a package fix through the NuGet MCP server. GitHub says that workflow requires a Copilot sign-in and the NuGet MCP server enabled, while the September update is available across its listed Copilot plans, including Free and Enterprise.