Copilot CLI

Added Add copilot instruction list and copilot lsp list , replacing copilot plugins list --kind instruction and --kind lsp Add --json to copilot plugin list , copilot plugin marketplace list and copilot plugin marketplace browse Add enable and disable to copilot plugin , copilot mcp and copilot skill , replacing copilot plugins enable/disable --plugin|--mcp|--skill Fixed Show when sandboxing is only enabled for the current session in /sandbox status and settings. Interactive --yolo startup remains available before authentication when no managed policy evidence is present Indexed search shows w...

Fixed /copy includes task completion messages when available OAuth-authenticated MCP servers connect reliably during session startup

New Vim mode is now available to everyone. Turn it on with /vim or by setting editorMode to vim for modal editing in the composer, with the current mode shown while you type. Improved On supported Windows sandbox policies, interactive shell commands now record blocked accesses. One approved escalation retries with file and process restrictions recording instead of blocking while network policy remains active, then falls back to the disclosed full bypass only if still blocked Speed up startup when resuming an existing local session by its exact UUID with --resume Fixed ctrl+h no longer deletes ...

2026-09-04 Show running Copilot sessions in the Windows 11 taskbar with live hover status cards Add Client ID Metadata Document (CIMD) support for MCP OAuth sign-in Custom agents can list several models in model , tried in order until one is available to you, and model-policy: required keeps model changes on that list Adding support for claude-fable-5.1 Add Recent, Created, Name, and classic None sorting to the split Sessions sidebar, with the selected order saved across restarts Enterprise admins can pin sign-in to approved GitHub organizations with the forceLoginOrgs managed setting Add auto...

Added Managed sandbox sessions can now be disabled for the rest of the session from an approved bypass prompt. Fixed A PowerShell write the sandbox blocks offers to run the command outside the sandbox When you have more than one GitHub account in your credential store, a sandboxed gh command now acts as the account gh is logged in as instead of an arbitrary one. The /rubber-duck command is hidden after a model refresh removes its compatible critic Sandboxed runs now use relocated developer-tool caches from env vars and tool config files On Windows, a sandboxed command that runs git without nam...

Added Add support for GPT-6 Astra

Added Show running Copilot sessions in the Windows 11 taskbar with live hover status cards Improved On macOS and Linux, sandboxed commands can no longer reach services running on your machine. On macOS this also blocks a server the command itself starts on 127.0.0.1, so test suites that bind a local port will fail; turn on Allow local network in /sandbox to reach localhost again. Linux sandboxing now needs slirp4netns, nsenter, iptables, ip6tables, iptables-restore and ip6tables-restore on PATH. Install them if sandboxed commands start failing to launch. Fixed A session lock that is re-entered...

Added Add Client ID Metadata Document (CIMD) support for MCP OAuth sign-in Improved CLI starts without the interrupted-session restore prompt by default. Resuming large sessions keeps the input prompt responsive sooner. Fixed Sandboxed file tools now read the same developer-tool paths as sandboxed shell commands, including token-bearing registry config such as ~/.npmrc; set sandbox.allowDevToolAccess to false to turn these grants off Stopping a timed-out shell command now lets queued messages run and sessions return to idle A follow-up prompt typed while autopilot is running no longer disappea...

Added Custom agents can list several models in model , tried in order until one is available to you, and model-policy: required keeps model changes on that list Adding support for claude-fable-5.1 Improved Linux sandboxes now restrict network egress to the configured proxy; proxy mode requires slirp4netns, util-linux 2.35+, iptables, and /dev/net/tun access

Fixes and changes

Added Add Recent, Created, Name, and classic None sorting to the split Sessions sidebar, with the selected order saved across restarts Enterprise admins can pin sign-in to approved GitHub organizations with the forceLoginOrgs managed setting Improved /mcp config and the MCP add/edit/authenticate forms now open in the plugins dashboard instead of a separate MCP manager, so closing a form returns to the server list. File path autocomplete stays fast in large repositories Plugin list commands and /plugin now show bundled built-in plugins. Improve sandboxed Bazel and Bazelisk runs by granting requ...

Added Add automatic HTTPS proxy mTLS client certificate support for model and web requests Detect the herdr terminal multiplexer instead of mistaking it for tmux, so the Kitty keyboard protocol, color scheme following, terminal progress, /copy and notifications work in herdr panes Improved Improve /sandbox policy by grouping path grants by source and showing detected developer tools Fixed The newest line of output stays visible above the input box instead of hiding behind it, except while a prompt is pinned to the top of the transcript Exporting a resumed session with --share or --share-gist w...

New The plugins dashboard is available to everyone: run /plugin , /mcp , or /skills . Set PLUGINS_DASHBOARD=false to opt out of it and the copilot plugins command. Improved x is now the delete key everywhere: /sandbox config, /settings, /mcp, the sessions dialog and the diff comments summary move off d Auto mode now adapts model selection as your task evolves during a conversation /plugin now flags installed plugins and marketplaces that have a newer version upstream, and offers an Update action to pull it Show your last prompt as the inferred objective in the Autopilot status panel When --no-...

Fixed An MCP server blocked by an enterprise policy now shows as blocked in /mcp instead of spinning as pending forever

Added Windows: remote MCP servers protected by Microsoft Entra ID can now sign in through the OS authentication broker (WAM), usually with no prompt at all. Other platforms, --device-code , and machines without the broker library keep the existing browser flow. Fixed Repeatedly resuming the same session no longer crashes while telemetry is being replaced

Added Hooks can now receive the current OpenTelemetry trace context and emit correlated spans: inputs gain traceparent (plus tracestate when the span has vendor state); command hooks also get env vars. Fixed Hook lifecycle events ( hook.start / hook.end ) from hooks inside a subagent are now recorded on that subagent's session and re-emitted on its parent, instead of being dropped on an internal session. Removed Removed the PLUGINS_DASHBOARD opt-out and the legacy skills picker it kept alive. /skills , bare /mcp , and /mcp show (with no server name) always open the dashboard; /mcp config still...

Improved Resume large sessions faster by showing recent history first while older messages load. Fixed Repeated read_agent calls now consistently return the full turn history unless since_turn is provided

Fixes and changes

Fixed Show the specific authentication failure (such as 401 Bad credentials) instead of only the /login prompt

Fixed A message typed while /worktree or /move is preparing the worktree no longer breaks the switch into it Ctrl+E expands the plan approval card to show the full plan again

2026-08-29 A message typed while /worktree or /move is preparing the worktree no longer breaks the switch into it Ctrl+E expands the plan approval card to show the full plan again Show the specific authentication failure (such as 401 Bad credentials) instead of only the /login prompt

Fixes and changes

2026-08-14 Update model configurations

Improved Update model configurations

Added Add --enable-mcp-server to re-enable MCP servers disabled in settings for the current run A session shared with another CLI now says so: in --ahp mode a row for a session you have joined leads with 2 clients (or more) when somebody else is attached to it, in both the Sessions tab and the sidebar, and /ahp status reports the same number. Presence is announced on attach and refreshed on a heartbeat, so a client that joins shows up at once and one that goes away stops being counted /ahp cloud <environment-id> puts a Mission Control environment in the Sessions tab's source picker along...

2026-08-10 The /sandbox configuration dialog shows where sandbox settings are stored in settings.json Add support for enterprise allow-auto-only policy so /allow-all auto works while full allow-all remains blocked. Allow enterprise-managed sandbox policy to enforce a proxy URL while credentials remain user-controlled A tool directory inside your workspace that is on PATH (.venv/bin, node_modules/.bin, an in-repo GOPATH) no longer turns that part of the workspace read-only in the sandbox The /sandbox configuration dialog groups the git, gh, and (on macOS) keychain settings under a new Auth tab,...

Added Add support for enterprise allow-auto-only policy so /allow-all auto works while full allow-all remains blocked. Allow enterprise-managed sandbox policy to enforce a proxy URL while credentials remain user-controlled Improved The /sandbox configuration dialog groups the git, gh, and (on macOS) keychain settings under a new Auth tab, and the settings keys moved from sandbox.gitAuth / sandbox.ghAuth to sandbox.auth.git / sandbox.auth.gh . There is no migration: the old keys are ignored in settings files, and SDK requests that still send them are rejected as invalid rather than ignored Adde...

Improved The /sandbox configuration dialog shows where sandbox settings are stored in settings.json

Added Agent Plugins spec plugins can now ship extensions under a com.github.copilot/extensions/ directory Add support for the kimi-k3 model Combine --plan with --mode autopilot to plan first and then implement without waiting for approval Improved Ask user multi-select prompts include an Other option for free-text answers Improve teleported subagent /tasks navigation with nested tree browsing, current/all and finished-task filters, and a live timeline you can steer Fixed The /app command now opens the current session in the GitHub Copilot desktop app instead of landing on Home with the wrong f...

Fixed A rare internal delay no longer prints a diagnostic warning on top of the interactive UI A failed session-history load no longer leaves the timeline permanently empty: the failure was silently discarded, so the transcript stayed blank for the rest of the session with nothing logged. It is now retried, and reported in the transcript and the log if it still fails Resuming a long session no longer collapses the timeline's scroll range while history renders in the background: entries that had not finished rendering were published as if they did not exist, so the scrollbar and scroll position...

Improved Use /worktree new to start a new session in a new worktree

Pre-release 1.0.79-4

Added Manage multiple concurrent sessions from the Sessions tab and sidebar Improved Prompt pinning is off by default; set pinnedPrompts to true to enable it. Fixed Sandboxed wrapper builds (make and friends) get the dev tool caches their recipes need, based on the build manifests in the working directory

Improved Pin the current prompt one row higher, in the row the tab bar already reserves, so it keeps the shape of the prompt it copies while costing the timeline one row less Leave the pinned prompt off by default on terminals under 30 rows, where it would crowd the output; set pinnedPrompts explicitly to override at any size Fixed A sandbox that cannot start an MCP server now fails in seconds instead of stalling the session, and sandbox startup failures for both MCP and language servers now say the sandbox was at fault and how to fix or opt out of it Login links are clickable during web and d...

Improved BREAKING: the sandbox setting allowDevToolCaches is renamed allowDevToolAccess , since it grants dev-tool config and registries too, not just caches. The old key is no longer read and is ignored silently, so an existing false opt-out reverts to the default (on). Rename it in settings.json and in any managed/MDM policy. Fixed Compute /context attribution against the Auto-resolved model so token totals are accurate for Free/Student users Disabling an extension no longer breaks elicitation, canvases, or tool permission prompts for other extensions A prompt stashed with ctrl+s now stays w...

Added Add the experimental /new-worktree command to create a new worktree and start a new conversation in it Improved Interactive shell shortcut now launches on Enter and shows an inline hint when "$" is armed Fixed Copilot login now defaults to the browser flow for local desktop subprocesses without a TTY, including IDE integrations, while remote and headless environments continue using device code

2026-08-03 Timeline headers show how long each tool call took, right-aligned and ticking live while it runs (for calls of at least 5 seconds). On by default — disable with /settings showToolDurations . First-party plugins automatically update to the latest version at session start Add the experimental /new-worktree command to create a new worktree and start a new conversation in it Copilot login now defaults to the browser flow for local desktop subprocesses without a TTY, including IDE integrations, while remote and headless environments continue using device code Interactive shell shortcut n...

Improved Split-view sidebar: the red close confirmation now reads x again to close (or x again to exit CLI on the last session) instead of x close , so a second press is clearly what closes Fixed Extension slash commands run their handler exactly once per invocation when several extensions are loaded Inline images no longer render with their first row repeated down the whole picture after the timeline scrolls A run whose prompt is piped over stdin now treats its sessionEnd hook the same way -p does: the hook fires once per completed agent turn with reason complete (or error if the turn failed)...

Added Add /permissions to switch between approval modes. ACP mode supports closing sessions with the closeSession request. Improved New sandbox setting allowDevToolCaches (on by default): grants sandboxed builds access to toolchain caches, registries, and installs so builds work without extra setup. Set false to opt out. Honor explicit GitHub MCP toolset/tool config: keep gh-overlap tools and stop steering to the gh CLI when you opt in Warn on startup about unknown top-level keys in user settings.json (e.g. a misspelled setting) instead of silently ignoring them Shell completion for --model no...

Fixed Sandbox denied paths are enforced for relative and symlinked entries on macOS and Linux (Windows cannot deny per path)

Added Add enable/disable controls in /plugins for plugins, instructions, agents, LSP servers, and hooks Add support for the grok-4.5 model

2026-07-29 Add enable/disable controls in /plugins for plugins, instructions, agents, LSP servers, and hooks Add support for the grok-4.5 model Sandbox denied paths are enforced for relative and symlinked entries on macOS and Linux (Windows cannot deny per path) Unsent prompt text now stays with the session it was typed for (for the rest of the CLI session) instead of following you to the session you switch to Resuming a session now restores its autopilot or plan mode instead of reverting to interactive, so the autopilot-only task_complete tool stays available and the mode matches the session ...

Improved When an update is auto-downloaded, the notification suggests /restart and drops the warning color /diff scrolls and syntax-highlights large multi-file diffs faster Split-view sidebar: hover-to-focus is now off by default (opt in with sidebar.hoverFocus ), the active session card is accented by default (opt out with sidebar.accentActiveSession ), and the closed-state open sidebar hint always renders in the neutral hint color web_fetch now follows HTTP redirects instead of failing, asking permission for the redirect target when it is on a different origin and showing where the redirect ...

Added Voice mode pauses playing media before recording and resumes it afterward, where supported (macOS and Windows) Show the number of active scheduled prompts in the footer Add /limits predict to suggest a session AI-credit limit from similar sessions. Add configurable timed refreshes for custom status-line commands Improved web_fetch routes through the configured sandbox proxy when outbound is allowed, and denies egress when network.allowOutbound is false (a proxy no longer overrides the user's outbound policy); when a proxied fetch fails it warns that curl/wget share the same proxy, and su...

Added Add a directable queue manager (staff) to reorder, edit, remove, repeat, and immediately send queued messages New Sessions sidebar for managing multiple concurrent sessions: switch between them, spawn new ones, and see their status at a glance. Turn it on with experimental mode ( /experimental on ). Enterprise administrators can enforce a restrictive sandbox floor: managed settings tighten (but never loosen) the user's sandbox policy, and the /sandbox dialog surfaces the org-configured managed values with locked fields and managed filesystem paths so admins can confirm what is enforced. ...

Added Add support for Open Plugin Spec v1 plugin manifests and mcp.json configuration Improved Subagent timelines identify whether prompts came from the main agent or another subagent Fixed IDE integration reconnects reliably when the CLI reloads MCP servers or changes directory Multi-turn subagent timelines show every prompt and response in the correct order after reopening /tasks