Agent Breaking Changes_

← Copilot CLI

Copilot CLI 1.0.100

2026-10-19 · official notes

Summary

• Add --disable-client-telemetry flag to turn off client telemetry uploads from the CLI
• Add --trust-folder for one-off prompt-mode sessions started with -p or piped stdin
• Install verified Skills and plugins from GitHub install links via copilot plugin install "ghapp://air/install?..."

Full notes

2026-10-19

- Add --disable-client-telemetry flag to turn off client telemetry uploads from the CLI
- Add --trust-folder for one-off prompt-mode sessions started with -p or piped stdin
- Install verified Skills and plugins from GitHub install links via copilot plugin install "ghapp://air/install?..."
- Open /share without arguments to view a full-screen action menu for sharing the current session
- Sandbox host-rule traffic now honors HTTPS_PROXY and HTTP_PROXY when no sandbox proxy is configured
- Voice dictation no longer inserts language markers like <en-US> into transcript text
- Managed plugins update activation in existing sessions when managed policy changes
- Sessions no longer stall for minutes when an MCP server hangs while loading tools.
- Gemini tool calls no longer fail when array parameters define enum values
- Gemini chats no longer fail after earlier tool results contain no readable content.
- Sandboxed shell commands now explain credential-proxy certificate trust failures and can offer an approved rerun outside the sandbox.
- Keep saved /diff review comments when reopening an unchanged diff in the same session, with an explicit discard action.
- Plugin enable, disable, update, and uninstall actions now route reliably after plugin inventory refreshes.
- Reasoning-only max-token responses no longer loop indefinitely and now end with a clear error when no progress is made
- Show a clear warning and keep the active model display in sync when a saved model is automatically replaced on resume.
- Sandboxed commands on Linux start more reliably without intermittent loopback setup failures
- Back from MCP resource details stays on the list during live metadata refreshes
- Native chats can start and finish while optional managed plugin downloads continue in the background.
- Double Ctrl+C exits immediately even when the CLI UI is busy
- Catalog search reports proxy authentication requirements for CONNECT proxy challenges
- HydraFusion keeps a pass expanded while its review runs, passes that were not kept stay expandable until you switch sessions or resume, and passes from an aborted turn say whether they were kept
- Managed account policy and bypass-mode warnings stay accurate after switching accounts, even when a policy cache miss happens.
- Avoid false context exhaustion and rollover refusal when tool definitions are deferred
- Custom agents that declare the documented `search`, `web` or `todo` tool aliases, or name `github-mcp-server/web_search`, now receive the matching tools
- CLI help and version flags exit reliably after printing their output
- Enterprise-managed ask permissions in Assisted mode now allow safe actions without unnecessary confirmation prompts.
- Keep your selected Microsoft Entra account pinned during sign-in and token renewal
- Up from sessions sidebar header actions wraps to the last visible session
- Plan, autopilot, and shell mode badges stay visible while startup components load and the agent works. The badge replaces the mode suffix that used to trail the activity text (`Working - plan`), and the startup `Loading:` row now truncates its diagnostics to keep the status row on one line
- Sandboxed commands can write package and build caches when developer tool access is enabled.
- Windows CLI Git commands now recover from thread-access-denied startup failures.
- A skill `allowed-tools` rule keeps commas inside its arguments instead of being split apart. Where a list's structure is ambiguous, its unscoped rules now prompt instead of being granted.
- MCP resource dashboard stays interactive while inventory adapters refresh
- Retry image-bearing Responses requests with smaller payload limits when providers reject oversized bodies
- Complete usage reporting no longer shows partial status or phantom unattributed spend after resume when billing data is complete.
- Assisted permissions send nested PowerShell and bash -c commands that only expand plain-data environment variables, single-quoted PowerShell, and PowerShell variable and alias statements to the permission judge instead of requiring unnecessary manual approval
- Path-specific instruction files in the repository root .github/instructions are now applied automatically when the agent reads or edits a matching file
- Start git, shell commands, and MCP servers on Windows when process snapshot thread enumeration fails
- Use the unified Sessions browser by default for /sessions, /session, and /resume.
- Session browsing now caps account discovery at 500 records and respects Retry-After hints for automatic refresh timing.
- Prompt to update the sandbox proxy certificate authority when masked hosts change
- Show a clear notice when administrator-managed settings override your selected model
- Enable semantic code search by default for online sessions.
- Improve /login for Microsoft Entra by letting you choose a cached account or explicitly sign in with a different account
- Sandboxed git on github.com can use your configured GITHUB_TOKEN from credentials.envVars
- /sandbox can keep sandboxing enabled for the current session without enabling it globally
- Trusted repository plugins install and update automatically before chat runs.
- Rename the built-in browser plugin to browser-use and keep existing browser plugin preferences working after upgrade
- Sandbox allows local network access by default so commands can reach localhost and private-network services.