Agent Breaking Changes_

← Copilot CLI

Copilot CLI 1.0.99-0

2026-10-15 · official notes

Summary

• Open /share without arguments to view a full-screen action menu for sharing the current session
• /sandbox can keep sandboxing enabled for the current session without enabling it globally
• Trusted repository plugins install and update automatically before chat runs.

Full notes

**Added**
- Open /share without arguments to view a full-screen action menu for sharing the current session

**Improved**
- /sandbox can keep sandboxing enabled for the current session without enabling it globally
- Trusted repository plugins install and update automatically before chat runs.
- Rename the built-in browser plugin to browser-use and keep existing browser plugin preferences working after upgrade
- Sandbox allows local network access by default so commands can reach localhost and private-network services.

**Fixed**
- Plan, autopilot, and shell mode badges stay visible while startup components load and the agent works. The badge replaces the mode suffix that used to trail the activity text (`Working - plan`), and the startup `Loading:` row now truncates its diagnostics to keep the status row on one line
- Sandboxed commands can write package and build caches when developer tool access is enabled.
- Windows CLI Git commands now recover from thread-access-denied startup failures.
- A skill `allowed-tools` rule keeps commas inside its arguments instead of being split apart. Where a list's structure is ambiguous, its unscoped rules now prompt instead of being granted.
- MCP resource dashboard stays interactive while inventory adapters refresh
- Retry image-bearing Responses requests with smaller payload limits when providers reject oversized bodies
- Complete usage reporting no longer shows partial status or phantom unattributed spend after resume when billing data is complete.
- Assisted permissions send nested PowerShell and bash -c commands that only expand plain-data environment variables, single-quoted PowerShell, and PowerShell variable and alias statements to the permission judge instead of requiring unnecessary manual approval
- Path-specific instruction files in the repository root .github/instructions are now applied automatically when the agent reads or edits a matching file
- Start git, shell commands, and MCP servers on Windows when process snapshot thread enumeration fails