持续追踪核心框架、最新模型规格与重要系统接口的更新迭代轨迹。
2026-10-27 Managed model "fusion" now starts sessions on Auto and applies fusionTier settings Interactive and SDK Autopilot sessions keep waiting for attached background tasks instead of stopping after COPILOT_TASK_WAIT_TIMEOUT_SECONDS; -p --autopilot still honors it When a saved Auto preference is no longer available, Auto falls back to its default preference instead of failing each turn Assisted Permissions are available without enabling experimental mode.
Fixes and changes
Fixes and changes
Improved Assisted Permissions are available without enabling experimental mode. Fixed When a saved Auto preference is no longer available, Auto falls back to its default preference instead of failing each turn
Fixes and changes
Fixed Managed model "fusion" now starts sessions on Auto and applies fusionTier settings Interactive and SDK Autopilot sessions keep waiting for attached background tasks instead of stopping after COPILOT_TASK_WAIT_TIMEOUT_SECONDS; -p --autopilot still honors it
2026-10-22 Clicking a completed response code block copies its original code when enabled. ACP sessions now honor saved sandbox settings and --sandbox/--no-sandbox flags, including on resume. Cloud replies keep full text when the CLI reconnects after a dropped connection Sessions browser shows a session's recorded title instead of a generic Session N fallback when available Model-specific default Responses verbosity now applies correctly for GPT-5 models unless session verbosity is explicitly set Allow dnx commands to use existing .NET and NuGet sandbox grants when developer-tool access is ena...
Added Clicking a completed response code block copies its original code when enabled. Improved Reuse cached local MCP tool snapshots across registered Git worktrees in one repository Improve remote launch options with clearer hosting/connection flags and retire legacy --remote/--no-remote startup flags Fixed ACP sessions now honor saved sandbox settings and --sandbox/--no-sandbox flags, including on resume. Cloud replies keep full text when the CLI reconnects after a dropped connection Sessions browser shows a session's recorded title instead of a generic Session N fallback when available Mode...
2026-10-21 Prompt mode now honors managed Auto model selection for -p and piped stdin runs Subagents honor custom and MCP tool approvals, avoiding duplicate permission prompts and allowing inherited workflows to run Plugin marketplaces accept git-subdir sources and long plugin descriptions Fish shell completion works when aliases include option aliases like --effort Chats no longer get blocked by organization plugin preparation while sending messages Long-running sandboxed commands continue running reliably past 10 seconds Replies cut off by a provider overload error retry with backoff and sho...
2026-10-20 Add native structured output for dynamic workflow subagents on supported models Add assistedApprovalInstructions setting to guide Assisted Permissions confirmation decisions Shell commands that create and then enter a directory now request path approval instead of being denied early. Headless and SDK sessions without an OAuth handler skip MCP connections when saved tokens require sign-in, while renewable grants still connect. macOS sandboxed commands can connect directly to localhost TCP services when local access is enabled and no host filters apply. Local models and loopback provi...
Improved Sandboxed network traffic now honors NO_PROXY and ALL_PROXY when inheriting host proxy settings Fixed Plugin marketplaces accept git-subdir sources and long plugin descriptions Fish shell completion works when aliases include option aliases like --effort Chats no longer get blocked by organization plugin preparation while sending messages Long-running sandboxed commands continue running reliably past 10 seconds Replies cut off by a provider overload error retry with backoff and show the provider's message and request ID
Fixed Prompt mode now honors managed Auto model selection for -p and piped stdin runs Subagents honor custom and MCP tool approvals, avoiding duplicate permission prompts and allowing inherited workflows to run
Improved Resuming a session shows the conversation sooner without waiting for placeholder environment setup Starting a session with sandboxed MCP servers now avoids unnecessary restarts and responds faster. Allow /config and /settings to set and unset showReasoning Permission approval prompts explain escalation causes and show a request-specific diagnosis command Fixed Shell commands that create and then enter a directory now request path approval instead of being denied early. Headless and SDK sessions without an OAuth handler skip MCP connections when saved tokens require sign-in, while rene...
Improved Prompt to update the sandbox proxy certificate authority when masked hosts change Fixed Managed plugins update activation in existing sessions when managed policy changes Sessions no longer stall for minutes when an MCP server hangs while loading tools. Gemini tool calls no longer fail when array parameters define enum values Gemini chats no longer fail after earlier tool results contain no readable content.
Improved Use the unified Sessions browser by default for /sessions, /session, and /resume. Session browsing now caps account discovery at 500 records and respects Retry-After hints for automatic refresh timing. Fixed Sandbox host-rule traffic now honors HTTPS_PROXY and HTTP_PROXY when no sandbox proxy is configured Voice dictation no longer inserts language markers like into transcript text
2026-10-19 Add --disable-client-telemetry flag to turn off client telemetry uploads from the CLI Add --trust-folder for one-off prompt-mode sessions started with -p or piped stdin Install verified Skills and plugins from GitHub install links via copilot plugin install "ghapp://air/install?..." Open /share without arguments to view a full-screen action menu for sharing the current session Sandbox host-rule traffic now honors HTTPS_PROXY and HTTP_PROXY when no sandbox proxy is configured Voice dictation no longer inserts language markers like into transcript text Managed plugins update activatio...
Added Add native structured output for dynamic workflow subagents on supported models Add assistedApprovalInstructions setting to guide Assisted Permissions confirmation decisions Fixed Shared MCP auth errors point to your client's sign-in settings; CLI authentication warnings still show /mcp auth. Switching from GPT models to Gemini no longer fails when earlier turns include custom tool calls Google model requests now respect registry image limits to avoid image-count request failures The first prompt no longer hangs silently when no model is selected at startup; the CLI now asks you to pick ...
Added Add --disable-client-telemetry flag to turn off client telemetry uploads from the CLI Fixed Sandboxed shell commands now explain credential-proxy certificate trust failures and can offer an approved rerun outside the sandbox. Keep saved /diff review comments when reopening an unchanged diff in the same session, with an explicit discard action. Plugin enable, disable, update, and uninstall actions now route reliably after plugin inventory refreshes. Reasoning-only max-token responses no longer loop indefinitely and now end with a clear error when no progress is made Show a clear warning a...
Improved Show a clear notice when administrator-managed settings override your selected model Enable semantic code search by default for online sessions. Fixed Sandboxed commands on Linux start more reliably without intermittent loopback setup failures Back from MCP resource details stays on the list during live metadata refreshes Native chats can start and finish while optional managed plugin downloads continue in the background. Double Ctrl+C exits immediately even when the CLI UI is busy Catalog search reports proxy authentication requirements for CONNECT proxy challenges
Added Add --trust-folder for one-off prompt-mode sessions started with -p or piped stdin Install verified Skills and plugins from GitHub install links via copilot plugin install "ghapp://air/install?..." Improved Improve /login for Microsoft Entra by letting you choose a cached account or explicitly sign in with a different account Sandboxed git on github.com can use your configured GITHUB_TOKEN from credentials.envVars Fixed HydraFusion keeps a pass expanded while its review runs, passes that were not kept stay expandable until you switch sessions or resume, and passes from an aborted turn sa...
2026-10-14 Add support for Gemini 4 Argon Command hooks complete reliably even when child-exit signals are lost under Node MCP status and /mcp commands stay synced to the active session after split-view session switches Resuming a session now respects abandoned pending-permission work and continues only active permission requests. Keep ordinary characters typed while the input box is still coming up at startup, instead of dropping them Expand /ask answers with Ctrl+E, copy the entire answer with Ctrl+Y, and reopen the last usable completed answer in the session with /ask or /btw.
Added Open /share without arguments to view a full-screen action menu for sharing the current session Improved /sandbox can keep sandboxing enabled for the current session without enabling it globally Trusted repository plugins install and update automatically before chat runs. Rename the built-in browser plugin to browser-use and keep existing browser plugin preferences working after upgrade Sandbox allows local network access by default so commands can reach localhost and private-network services. Fixed Plan, autopilot, and shell mode badges stay visible while startup components load and the...
Improved Expand /ask answers with Ctrl+E, copy the entire answer with Ctrl+Y, and reopen the last usable completed answer in the session with /ask or /btw. Fixed Command hooks complete reliably even when child-exit signals are lost under Node
Fixed Remote plugin marketplace and plugin fetches retry once with your signed-in GitHub token after HTTPS auth fails. Streamed responses behind TLS-intercepting proxies complete when close_notify is omitted Fix parsing of GitHub SCP remotes with absolute paths so repository owner and name resolve correctly
2026-10-13 Add agent-scoped declarative hooks for custom agents Remote plugin marketplace and plugin fetches retry once with your signed-in GitHub token after HTTPS auth fails. Streamed responses behind TLS-intercepting proxies complete when close_notify is omitted Fix parsing of GitHub SCP remotes with absolute paths so repository owner and name resolve correctly Discover all custom agents even when repositories define more than 100 or nest agent files deeply. Autopilot denies a preToolUse hook's "ask" decision instead of stopping on a permission dialog nobody is watching Keep Windows taskbar...
Fixes and changes
Added Add support for Gemini 4 Argon Fixed MCP status and /mcp commands stay synced to the active session after split-view session switches Resuming a session now respects abandoned pending-permission work and continues only active permission requests. Keep ordinary characters typed while the input box is still coming up at startup, instead of dropping them
Fixed Discover all custom agents even when repositories define more than 100 or nest agent files deeply.
2026-10-12 Interactive sandbox settings suggest possible environment secrets and let you add masking hosts before saving. Make model IDs in /model and /config model case-insensitive and save canonical IDs Keep /allow-all available during startup while enterprise policy is still resolving /add-dir grants sandbox access to added directories for the current session /user list shows the authentication source for each signed-in account Show retry progress messages before recovered responses after transient model failures Model completions no longer show an authentication warning when an account-own...
Added Add agent-scoped declarative hooks for custom agents Improved Inline images render by default on supported terminals without enabling experimental mode. Use /settings inlineImages false to turn them off Fixed Autopilot denies a preToolUse hook's "ask" decision instead of stopping on a permission dialog nobody is watching Keep Windows taskbar agent icons grouped across CLI updates by using a stable icon path Keep saved settings such as dismissed prompts, trusted folders and sign-ins when one entry in config.json is invalid, instead of resetting them on every launch In /config, managed per...
Fixes and changes
Fixed Make model IDs in /model and /config model case-insensitive and save canonical IDs
2026-10-09 Use native Microsoft Entra broker authentication on macOS when available, with browser fallback. copilot config supports sandbox credential injectHosts keys, with key completion in Bash, Zsh, and Fish. --context now applies to new and resumed ACP sessions instead of silently using the default or previously saved context tier Managed plugin setup retries hourly or after policy changes instead of on every message failure
Improved Interactive sessions in git repositories reach the input prompt sooner Timeline now shows whether you, Assisted Permissions, policy, or unattended fallback made each permission decision. Fixed /add-dir grants sandbox access to added directories for the current session /user list shows the authentication source for each signed-in account Show retry progress messages before recovered responses after transient model failures Model completions no longer show an authentication warning when an account-owned catalog is unavailable while signed out
Added Interactive sandbox settings suggest possible environment secrets and let you add masking hosts before saving. Fixed Keep /allow-all available during startup while enterprise policy is still resolving
Added Use native Microsoft Entra broker authentication on macOS when available, with browser fallback.
Fixed copilot config supports sandbox credential injectHosts keys, with key completion in Bash, Zsh, and Fish.
Fixes and changes
Fixed MCP enable/disable now works before server discovery without starting MCP servers Assisted permissions send visible shell code to the permission judge instead of requiring unnecessary manual approval
Fixed copilot mcp add recovers cleanly after interrupted MCP config initialization
2026-10-08 Add Claude Haiku 5.5 to model selection and --model completions copilot mcp add recovers cleanly after interrupted MCP config initialization MCP enable/disable now works before server discovery without starting MCP servers Assisted permissions send visible shell code to the permission judge instead of requiring unnecessary manual approval Show a policy warning when startup bypass-permission flags are suppressed by managed settings Clicking a Sessions sidebar row now reliably switches sessions during split-view reconciliation Show update guidance when managed settings request a newer...
Improved Managed plugin setup retries hourly or after policy changes instead of on every message failure Fixed --context now applies to new and resumed ACP sessions instead of silently using the default or previously saved context tier
Fixes and changes
Added Add Claude Haiku 5.5 to model selection and --model completions Fixed Show a policy warning when startup bypass-permission flags are suppressed by managed settings
2026-10-07 Add enterprise permissions.limitTo to enforce managed domain boundaries for network requests Run safe /user commands immediately during active turns, reject unsafe remote commands during active turns without opening dialogs, and queue commands advertised by relay hosts Plugin skill commands stay available after reloading enabled plugins Sandbox local-network allowlists now include localhost and loopback hosts. GitHub.com Connector users can expand GitHub CLI permissions in place and retry connections without switching sign-in methods. Honor --context long_context at startup and show...
Improved Show update guidance when managed settings request a newer CLI version without blocking normal prompts Managed policy can disable Assisted Permissions and keep sessions in Manual Approval mode.
Fixed Clicking a Sessions sidebar row now reliably switches sessions during split-view reconciliation
Improved MCP server configuration changes apply between turns without restarting the session.
Improved Command sandboxing is available to all users via /sandbox and --sandbox. Fixed Run safe /user commands immediately during active turns, reject unsafe remote commands during active turns without opening dialogs, and queue commands advertised by relay hosts Plugin skill commands stay available after reloading enabled plugins Sandbox local-network allowlists now include localhost and loopback hosts.
Added Add enterprise permissions.limitTo to enforce managed domain boundaries for network requests Improved Model picker updates the recommended list to prioritize GPT-6.1 Sol, GPT-6 Astra/Luna, and Claude 5.5 models. Fixed GitHub.com Connector users can expand GitHub CLI permissions in place and retry connections without switching sign-in methods. Honor --context long_context at startup and show accurate context allowance in /context Connecting a Connector without the required GitHub scope now prompts to update your authorization instead of failing with an authentication error Removed Read us...