Updates for release 1.103.1 (#60)

* Dev/seiyer/secret-scanning-update (#8751)

* Secret scanning added

* Fix wording in secret scanning section for clarity

* Edit pass

---------

Co-authored-by: Nick Trogh <1908215+ntrogh@users.noreply.github.com>

* Add GPT-5 updates

* Edit pass

* Edit pass

* Add note for OpenAI SDK (#8755)

* Add note for OpenAI SDK

* Update docs/intelligentapps/tracing.md

Co-authored-by: Nick Trogh <1908215+ntrogh@users.noreply.github.com>

---------

Co-authored-by: Nick Trogh <1908215+ntrogh@users.noreply.github.com>

* Update after review

---------

Co-authored-by: Sean <41308619+seaniyer@users.noreply.github.com>
Co-authored-by: Alex Wang <a1exwang@users.noreply.github.com>

Author: 3 people

docs/configure/extensions/extension-runtime-security.md

@@ -63,6 +63,8 @@ The Visual Studio Marketplace employs several mechanisms to protect you from mal
 
 * **Extension Signature Verification**: The Visual Studio Marketplace signs all extensions when they're published. VS Code checks this signature when you install an extension to verify the integrity and the source of the extension package.
 
+* **Secret Scanning**: The Marketplace automatically scans every newly published extension for secrets such as API keys or credentials (for example, Azure DevOps PAT tokens). If any secrets are detected, publishing is blocked to prevent potential security risks. The VSCE tool scans `.env` files during packaging and blocks publishing if secrets are found.
+
 Learn about these measures in the [Security and Trust in Visual Studio Marketplace blog post](https://devblogs.microsoft.com/blog/security-and-trust-in-visual-studio-marketplace).
 
 ## Report suspicious extensions

docs/intelligentapps/tracing.md

@@ -12,13 +12,14 @@ AI Toolkit hosts a local HTTP and gRPC server to collect trace data. The collect
 
 All frameworks or SDKs that support OTLP and follow [semantic conventions for generative AI systems](https://opentelemetry.io/docs/specs/semconv/gen-ai/) are supported. The following table contains common AI SDKs tested for compatibility.
 
-| | Azure AI Inference | Azure AI Foundry Agents Service | Anthropic | Gemini | LangChain | OpenAI SDK | OpenAI Agents SDK |
+| | Azure AI Inference | Azure AI Foundry Agents Service | Anthropic | Gemini | LangChain | OpenAI SDK <sub>3</sub> | OpenAI Agents SDK |
 |---|---|---|---|---|---|---|---|
 | **Python** | ✅ | ✅ | ✅ ([traceloop](https://github.com/traceloop/openllmetry))<sub>1,2</sub> | ✅  | ✅ ([LangSmith](https://github.com/langchain-ai/langsmith-sdk))<sub>1,2</sub> | ✅ ([opentelemetry-python-contrib](https://github.com/open-telemetry/opentelemetry-python-contrib))<sub>1</sub> | ✅ ([Logfire](https://github.com/pydantic/logfire))<sub>1,2</sub>  |
 | **TS/JS** | ✅ | ✅ | ✅ ([traceloop](https://github.com/traceloop/openllmetry))<sub>1,2</sub>| ❌ |✅ ([traceloop](https://github.com/traceloop/openllmetry))<sub>1,2</sub> |✅ ([traceloop](https://github.com/traceloop/openllmetry))<sub>1,2</sub>|❌|
 
 > 1. The SDKs in brackets are non-Microsoft tools that add OTLP support because the official SDKs do not support OTLP.
 > 1. These tools do not fully follow the OpenTelemetry rules for generative AI systems.
+> 1. For OpenAI SDK, only the [Chat Completions API](https://platform.openai.com/docs/api-reference/chat) is supported. The [Responses API](https://platform.openai.com/docs/api-reference/responses) is not supported yet.
 
 ## How to get started with tracing
 

release-notes/images/1_103/release-highlights.png

@@ -5,12 +5,14 @@ PageTitle: Visual Studio Code July 2025
 MetaDescription: Learn what is new in the Visual Studio Code July 2025 Release (1.103)
 MetaSocialImage: 1_103/release-highlights.png
 Date: 2025-08-07
-DownloadVersion: 1.103.0
+DownloadVersion: 1.103.1
 ---
 # July 2025 (version 1.103)
 
 _Release date: August 7, 2025_
 
+**Update 1.103.1**: The update adds [GPT-5 prompt improvements](#gpt-5-availability), support for [GPT-5 mini](#gpt-5-mini-availability), and addresses these [issues](https://github.com/microsoft/vscode/issues?q=is%3Aissue+is%3Aclosed+milestone%3A%22July+2025+Recovery+1%22+).
+
 <!-- DOWNLOAD_LINKS_PLACEHOLDER -->
 
 ---
@@ -73,9 +75,15 @@ Navigation End -->
 
 Starting today, GPT-5 is rolling out to all paid GitHub Copilot plans. GPT-5 is OpenAI's most capable model yet, bringing new advances in reasoning, coding, and chat. Learn more about the GPT-5 model availability in the [GitHub Changelog](https://github.blog/changelog/2025-08-07-openai-gpt-5-is-now-in-public-preview-for-github-copilot).
 
-Open the Chat view and choose GPT-5 from the model picker to start using it for your chat conversations in VS Code.
+Open the Chat view and choose GPT-5 from the model picker to start using it for your chat conversations in VS Code. Learn more about [using language models in VS Code](https://code.visualstudio.com/docs/copilot/language-models).
+
+**Update 1.103.1**: This update adds significant prompt improvements to further enhance the quality and performance of the model.
+
+### GPT 5 mini availability
+
+**Update 1.103.1**
 
-Learn more about [using language models in VS Code](https://code.visualstudio.com/docs/copilot/language-models).
+Starting from this release, GPT-5 mini is rolling out to all GitHub Copilot plans. GPT-5 mini is OpenAI's faster, more cost-efficient variant of GPT-5. Learn more about the GPT-5 mini model availability in the [GitHub Changelog](https://aka.ms/vscode-github-changelog-gpt5-mini).
 
 ### Chat checkpoints