GoKawiilUpdated Microsoft has done a 180. Following backlash from developers, GitHub has removed Copilot's ability to stick ads - what it calls "tips" - into any pull request that invokes its name.
Australian developer Zach Manson noted on Monday that, after a coworker asked Copilot to correct a typo in one of his pull requests, he was surprised to find a message from Copilot in the PR pushing readers to adopt productivity app Raycast.
"Quickly spin up Copilot coding agents from anywhere on your macOS or Windows machine with Raycast," the note read with a lightning bolt emoji and link to install Raycast.
"Initially I thought there was some kind of training data poisoning or novel prompt injection and the Raycast team was doing some elaborate proof of concept marketing," Manson told The Register in an email.
But no: Take a look around GitHub and you'll see more than 11,400 PRs with the same tip in them, all seemingly added by Copilot. Take a look at the PRs' code itself and search for the block invoking Copilot to add a tip and you'll find plenty more examples of different tips being inserted by Copilot.
Manson told us that he's not surprised to see GitHub doing this with an AI model, but he said it's pretty offensive to see the Raycast ad inserted by Copilot into his own PR like he wrote it.
"I wasn't even aware that the GitHub Copilot Review integration had the ability to edit other users' descriptions and comments," Manson told us. "I can't think of a valid use case for that ability."
GitHub backs down
It was only Monday morning when Microsoft watchers at Neowin picked up Manson's report that Copilot was injecting what developers saw as ads into PRs, and, by the afternoon, GitHub had decided a recent change to Copilot may have gone a bit too far.
GitHub VP of developer relations Martin Woodward explained in a post on X later in the day Monday that Copilot inserting ads into PRs isn't actually new behavior - it's been doing so in the ones it creates for a while. Letting Copilot touch PRs it didn't create, but is mentioned in, on the other hand, is new behavior that hasn't really worked out.
... continue reading