# copilot-cli changelog

> Brings the power of Copilot coding agent directly to your terminal

- Vendor: GitHub
- Category: AI
- Official site: https://docs.github.com/en/copilot/concepts/agents/about-copilot-cli
- Tracked by: What's New (https://whatsnew.fyi/product/copilot-cli)
- Harvested from: GitHub (github/copilot-cli)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

## Releases

### v1.0.78-3 — 1.0.78-3

- Date: 2026-08-03
- Version: v1.0.78-3
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.78-3
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.78-3
- Labels: Pre-release

- **added** — Add the experimental /new-worktree command to create a new worktree and start a new conversation in it
- **changed** — Interactive shell shortcut now launches on Enter and shows an inline hint when "$" is armed
- **fixed** — Copilot login now defaults to the browser flow for local desktop subprocesses without a TTY, including IDE integrations, while remote and headless environments continue using device code

**Added**
- Add the experimental /new-worktree command to create a new worktree and start a new conversation in it

**Improved**
- Interactive shell shortcut now launches on Enter and shows an inline hint when "$" is armed

**Fixed**
- Copilot login now defaults to the browser flow for local desktop subprocesses without a TTY, including IDE integrations, while remote and headless environments continue using device code

### v1.0.78-2 — 1.0.78-2

- Date: 2026-08-01
- Version: v1.0.78-2
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.78-2
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.78-2
- Labels: Pre-release

- **changed** — Split-view sidebar close confirmation now reads 'x again to close' (or 'x again to exit CLI' on the last session) instead of 'x close' to clarify that a second press closes the view
- **fixed** — Extension slash commands run their handler exactly once per invocation when several extensions are loaded
- **fixed** — Inline images no longer render with their first row repeated down the whole picture after the timeline scrolls
- **fixed** — A run whose prompt is piped over stdin now treats its sessionEnd hook the same way -p does: the hook fires once per completed agent turn with reason 'complete' or 'error' if the turn failed, instead of once at shutdown with 'user_exit'

**Improved**
- Split-view sidebar: the red close confirmation now reads `x again to close` (or `x again to exit CLI` on the last session) instead of `x close`, so a second press is clearly what closes

**Fixed**
- Extension slash commands run their handler exactly once per invocation when several extensions are loaded
- Inline images no longer render with their first row repeated down the whole picture after the timeline scrolls
- A run whose prompt is piped over stdin now treats its `sessionEnd` hook the same way `-p` does: the hook fires once per completed agent turn with `reason` `complete` (or `error` if the turn failed), instead of once at shutdown with `user_exit`. As with `-p`, a piped run that exits before completing a turn fires no `sessionEnd` hook

### v1.0.78-0 — 1.0.78-0

- Date: 2026-07-31
- Version: v1.0.78-0
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.78-0
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.78-0
- Labels: Pre-release

- **added** — Add /permissions to switch between approval modes
- **added** — ACP mode supports closing sessions with the closeSession request
- **changed** — New sandbox setting allowDevToolCaches (on by default) grants sandboxed builds access to toolchain caches, registries, and installs so builds work without extra setup
- **changed** — Honor explicit GitHub MCP toolset/tool config by keeping gh-overlap tools and stopping steering to the gh CLI when opted in
- **changed** — Warn on startup about unknown top-level keys in user settings.json instead of silently ignoring them
- **changed** — Shell completion for --model now suggests auto and supported model names
- **changed** — Render long session transcripts progressively to keep scrolling responsive
- **changed** — Resuming a long session is dramatically faster and lighter on memory because its history is now read once at startup in parallel across CPU cores instead of being re-read for every check
- **fixed** — Ctrl+Q now enqueues the highlighted mid-text skill completion instead of the partial token
- **fixed** — Switching sessions no longer restarts MCP servers or rebuilds hook state, so a turn running in another session is never halted with a stale-hook error
- **fixed** — Refresh deferred MCP tools after OAuth authentication
- **removed** — The /allow-all auto safety-judge model is no longer user-configurable; the judge model is now selected automatically

**Added**
- Add /permissions to switch between approval modes.
- ACP mode supports closing sessions with the closeSession request.

**Improved**
- New sandbox setting `allowDevToolCaches` (on by default): grants sandboxed builds access to toolchain caches, registries, and installs so builds work without extra setup. Set false to opt out.
- Honor explicit GitHub MCP toolset/tool config: keep gh-overlap tools and stop steering to the gh CLI when you opt in
- Warn on startup about unknown top-level keys in user settings.json (e.g. a misspelled setting) instead of silently ignoring them
- Shell completion for --model now suggests auto and supported model names
- Render long session transcripts progressively to keep scrolling responsive
- Resuming a long session is dramatically faster and far lighter on memory, because its history is now read once at startup (in parallel, across CPU cores) instead of being re-read in full for every check the CLI runs before it can paint. In our benchmark a 230MB, 74k-event transcript came back in well under a second instead of about ten, at roughly a quarter of the peak memory; the exact gain depends on your machine's core count and disk

**Fixed**
- Ctrl+Q now enqueues the highlighted mid-text skill completion instead of the partial token
- Switching sessions no longer restarts MCP servers or rebuilds hook state, so a turn running in another session is never halted with a stale-hook error
- Refresh deferred MCP tools after OAuth authentication

**Removed**
- The /allow-all auto safety-judge model is no longer user-configurable; the judge model is now selected automatically.

### v1.0.77 — 1.0.77

- Date: 2026-07-30
- Version: v1.0.77
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.77
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.77

- **changed** — Unconditional autopilot approval now disables sandbox for the current session when bypass is allowed
- **added** — Ctrl+G opens your editor to edit ask_user freeform answers without closing the prompt
- **added** — Add a browser-based (web) OAuth login flow, now the default for copilot login on local interactive terminals (device code remains the default on remote/headless terminals), with --web-flow/--device-code flags to force a mode or pick one in the interactive /login command
- **added** — Support enforcing managed sandbox policy via macOS and Windows native MDM settings
- **changed** — Allow reasoning effort to be omitted so the server can select the default

2026-07-30

- Unconditional autopilot approval now disables sandbox for the current session when bypass is allowed
- Ctrl+G opens your editor to edit ask_user freeform answers without closing the prompt
- Add a browser-based (web) OAuth login flow, now the default for `copilot login` on local interactive terminals (device code remains the default on remote/headless terminals). Use `--web-flow`/`--device-code` to force a mode, or pick one in the interactive `/login` command
- Support enforcing managed sandbox policy via macOS and Windows native MDM settings
- Allow reasoning effort to be omitted so the server can select the default

### v1.0.77-0 — 1.0.77-0

- Date: 2026-07-30
- Version: v1.0.77-0
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.77-0
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.77-0
- Labels: Pre-release

- **added** — Add a browser-based (web) OAuth login flow as the default for `copilot login` on local interactive terminals, with device code remaining the default on remote/headless terminals, and add `--web-flow`/`--device-code` flags to force a mode or pick one in the interactive `/login` command
- **added** — Support enforcing managed sandbox policy via macOS and Windows native MDM settings
- **changed** — Allow reasoning effort to be omitted so the server can select the default

**Added**
- Add a browser-based (web) OAuth login flow, now the default for `copilot login` on local interactive terminals (device code remains the default on remote/headless terminals). Use `--web-flow`/`--device-code` to force a mode, or pick one in the interactive `/login` command
- Support enforcing managed sandbox policy via macOS and Windows native MDM settings

**Improved**
- Allow reasoning effort to be omitted so the server can select the default

### v1.0.76 — 1.0.76

- Date: 2026-07-30
- Version: v1.0.76
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.76
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.76

- **added** — Add enable/disable controls in /plugins for plugins, instructions, agents, LSP servers, and hooks
- **added** — Add support for the grok-4.5 model
- **added** — Add a directable queue manager (staff) to reorder, edit, remove, repeat, and immediately send queued messages
- **added** — New Sessions sidebar for managing multiple concurrent sessions: switch between them, spawn new ones, and see their status at a glance with experimental mode
- **added** — Add /limits predict to suggest a session AI-credit limit from similar sessions
- **added** — Add configurable timed refreshes for custom status-line commands
- **changed** — Sandbox denied paths are enforced for relative and symlinked entries on macOS and Linux
- **changed** — Unsent prompt text now stays with the session it was typed for instead of following you to the session you switch to
- **changed** — Resuming a session now restores its autopilot or plan mode instead of reverting to interactive
- **changed** — URL permission prompts now keep their sandbox-bypass warning and the model's reason when a host integration rebuilds the prompt
- **changed** — When an update is auto-downloaded, the notification suggests /restart and drops the warning color
- **changed** — /diff scrolls and syntax-highlights large multi-file diffs faster
- **changed** — Split-view sidebar: hover-to-focus is now off by default, the active session card is accented by default, and the closed-state open sidebar hint always renders in the neutral hint color
- **changed** — web_fetch now follows HTTP redirects instead of failing, asking permission for the redirect target when it is on a different origin
- **changed** — Enterprise administrators can enforce a restrictive sandbox floor with managed settings that tighten the user's sandbox policy
- **changed** — The /instructions picker now respects --no-custom-instructions
- **changed** — Render inline images in Rio terminals that support Kitty graphics
- **changed** — Voice mode pauses playing media before recording and resumes it afterward on macOS and Windows
- **changed** — Changing the mouse setting mid-session now takes effect immediately from both /settings mouse on|off and the /settings dialog
- **changed** — web_fetch routes through the configured sandbox proxy when outbound is allowed, and denies egress when network.allowOutbound is false
- **fixed** — Sessions no longer fail every turn with Holder terminated during creation after a subagent finishes
- **fixed** — A userPromptSubmitted hook returning a non-string value for modifiedPrompt, modifiedTransformedPrompt, or a handled responseContent no longer corrupts the session

2026-07-29

- Add enable/disable controls in /plugins for plugins, instructions, agents, LSP servers, and hooks
- Add support for the grok-4.5 model
- Sandbox denied paths are enforced for relative and symlinked entries on macOS and Linux (Windows cannot deny per path)
- Unsent prompt text now stays with the session it was typed for (for the rest of the CLI session) instead of following you to the session you switch to
- Resuming a session now restores its autopilot or plan mode instead of reverting to interactive, so the autopilot-only `task_complete` tool stays available and the mode matches the session you left
- URL permission prompts now keep their sandbox-bypass warning and the model's reason when a host integration rebuilds the prompt, so an elevated fetch is no longer shown as an ordinary one
- When an update is auto-downloaded, the notification suggests /restart and drops the warning color
- /diff scrolls and syntax-highlights large multi-file diffs faster
- Split-view sidebar: hover-to-focus is now off by default (opt in with `sidebar.hoverFocus`), the active session card is accented by default (opt out with `sidebar.accentActiveSession`), and the closed-state `open sidebar` hint always renders in the neutral hint color
- `web_fetch` now follows HTTP redirects instead of failing, asking permission for the redirect target when it is on a different origin and showing where the redirect came from
- Add a directable queue manager (staff) to reorder, edit, remove, repeat, and immediately send queued messages
- New Sessions sidebar for managing multiple concurrent sessions: switch between them, spawn new ones, and see their status at a glance. Turn it on with experimental mode (`/experimental on`).
- Enterprise administrators can enforce a restrictive sandbox floor: managed settings tighten (but never loosen) the user's sandbox policy, and the `/sandbox` dialog surfaces the org-configured managed values with locked fields and managed filesystem paths so admins can confirm what is enforced.
- Sessions no longer fail every turn with "Holder terminated during creation" after a subagent finishes
- Startup tips only suggest /init in repositories that don't already have Copilot instructions
- A `userPromptSubmitted` hook returning a non-string value for `modifiedPrompt`, `modifiedTransformedPrompt`, or a handled `responseContent` no longer corrupts the session; the value is ignored, a type-only warning naming the field is logged, an empty-string replacement is rejected instead of blanking the model-facing content, a hook that sets `handled` without a usable `responseContent` is now diagnosed instead of silently falling through to the model, and a `null` `additionalContext` is treated as absent instead of being injected as the literal text `null`; hook output is also bounded at 10 MiB per invocation, so an HTTP or command hook returning an unbounded response can no longer exhaust memory or leave an oversized session behind
- Show recent shell output for large commands that write to a file
- The /instructions picker now respects --no-custom-instructions.
- Render inline images in Rio terminals that support Kitty graphics
- Sandboxed searches now offer an immediate bypass prompt and avoid duplicate bypass prompts.
- Voice mode pauses playing media before recording and resumes it afterward, where supported (macOS and Windows)
- Show the number of active scheduled prompts in the footer
- Add /limits predict to suggest a session AI-credit limit from similar sessions.
- Add configurable timed refreshes for custom status-line commands
- Queued messages list no longer shows a blank row or inflated count, and Ctrl+C removes your own newest queued message
- Changing the `mouse` setting mid-session now takes effect immediately, from both `/settings mouse on|off` and the `/settings` dialog, instead of being saved but ignored until the CLI restarted
- web_fetch routes through the configured sandbox proxy when outbound is allowed, and denies e

_[Truncated at 4000 characters — full notes: https://github.com/github/copilot-cli/releases/tag/v1.0.76]_

### v1.0.76-5 — 1.0.76-5

- Date: 2026-07-29
- Version: v1.0.76-5
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.76-5
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.76-5
- Labels: Pre-release

- **added** — Add enable/disable controls in /plugins for plugins, instructions, agents, LSP servers, and hooks
- **added** — Add support for the grok-4.5 model

**Added**
- Add enable/disable controls in /plugins for plugins, instructions, agents, LSP servers, and hooks
- Add support for the grok-4.5 model

### v1.0.76-4 — 1.0.76-4

- Date: 2026-07-29
- Version: v1.0.76-4
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.76-4
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.76-4
- Labels: Pre-release

- **fixed** — Sandbox denied paths are enforced for relative and symlinked entries on macOS and Linux

**Fixed**
- Sandbox denied paths are enforced for relative and symlinked entries on macOS and Linux (Windows cannot deny per path)

### v1.0.76-3 — 1.0.76-3

- Date: 2026-07-29
- Version: v1.0.76-3
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.76-3
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.76-3
- Labels: Pre-release

- **changed** — Auto-download update notification now suggests /restart and removes the warning color
- **changed** — /diff scrolls and syntax-highlights large multi-file diffs faster
- **changed** — Split-view sidebar hover-to-focus is now off by default, configurable with sidebar.hoverFocus
- **changed** — Split-view sidebar active session card is accented by default, configurable with sidebar.accentActiveSession
- **changed** — Split-view sidebar closed-state open sidebar hint always renders in neutral hint color
- **changed** — web_fetch now follows HTTP redirects instead of failing and asks permission for redirects to different origins
- **fixed** — Unsent prompt text now stays with the session it was typed for instead of following to other sessions
- **fixed** — Resuming a session now restores its autopilot or plan mode instead of reverting to interactive mode
- **fixed** — URL permission prompts now keep their sandbox-bypass warning and the model's reason when a host integration rebuilds the prompt

**Improved**
- When an update is auto-downloaded, the notification suggests /restart and drops the warning color
- /diff scrolls and syntax-highlights large multi-file diffs faster
- Split-view sidebar: hover-to-focus is now off by default (opt in with `sidebar.hoverFocus`), the active session card is accented by default (opt out with `sidebar.accentActiveSession`), and the closed-state `open sidebar` hint always renders in the neutral hint color
- `web_fetch` now follows HTTP redirects instead of failing, asking permission for the redirect target when it is on a different origin and showing where the redirect came from

**Fixed**
- Unsent prompt text now stays with the session it was typed for (for the rest of the CLI session) instead of following you to the session you switch to
- Resuming a session now restores its autopilot or plan mode instead of reverting to interactive, so the autopilot-only `task_complete` tool stays available and the mode matches the session you left
- URL permission prompts now keep their sandbox-bypass warning and the model's reason when a host integration rebuilds the prompt, so an elevated fetch is no longer shown as an ordinary one

### v1.0.76-2 — 1.0.76-2

- Date: 2026-07-29
- Version: v1.0.76-2
- Original notes: https://github.com/github/copilot-cli/releases/tag/v1.0.76-2
- Permalink: https://whatsnew.fyi/product/copilot-cli/releases/v1.0.76-2
- Labels: Pre-release

- **added** — Add a directable queue manager (staff) to reorder, edit, remove, repeat, and immediately send queued messages
- **added** — New Sessions sidebar for managing multiple concurrent sessions: switch between them, spawn new ones, and see their status at a glance
- **added** — Enterprise administrators can enforce a restrictive sandbox floor with managed settings that tighten (but never loosen) the user's sandbox policy, and the /sandbox dialog surfaces the org-configured managed values with locked fields and managed filesystem paths
- **changed** — Sandboxed searches now offer an immediate bypass prompt and avoid duplicate bypass prompts
- **fixed** — Sessions no longer fail every turn with "Holder terminated during creation" after a subagent finishes
- **fixed** — Startup tips only suggest /init in repositories that don't already have Copilot instructions
- **fixed** — A userPromptSubmitted hook returning a non-string value for modifiedPrompt, modifiedTransformedPrompt, or a handled responseContent no longer corrupts the session; the value is ignored, a type-only warning naming the field is logged, an empty-string replacement is rejected instead of blanking the model-facing content, a hook that sets handled without a usable responseContent is now diagnosed instead of silently falling through to the model, and a null additionalContext is treated as absent instead of being injected as the literal text null; hook output is also bounded at 10 MiB per invocation
- **fixed** — Show recent shell output for large commands that write to a file
- **fixed** — The /instructions picker now respects --no-custom-instructions
- **fixed** — Render inline images in Rio terminals that support Kitty graphics

**Added**
- Add a directable queue manager (staff) to reorder, edit, remove, repeat, and immediately send queued messages
- New Sessions sidebar for managing multiple concurrent sessions: switch between them, spawn new ones, and see their status at a glance. Turn it on with experimental mode (`/experimental on`).
- Enterprise administrators can enforce a restrictive sandbox floor: managed settings tighten (but never loosen) the user's sandbox policy, and the `/sandbox` dialog surfaces the org-configured managed values with locked fields and managed filesystem paths so admins can confirm what is enforced.

**Improved**
- Sandboxed searches now offer an immediate bypass prompt and avoid duplicate bypass prompts.

**Fixed**
- Sessions no longer fail every turn with "Holder terminated during creation" after a subagent finishes
- Startup tips only suggest /init in repositories that don't already have Copilot instructions
- A `userPromptSubmitted` hook returning a non-string value for `modifiedPrompt`, `modifiedTransformedPrompt`, or a handled `responseContent` no longer corrupts the session; the value is ignored, a type-only warning naming the field is logged, an empty-string replacement is rejected instead of blanking the model-facing content, a hook that sets `handled` without a usable `responseContent` is now diagnosed instead of silently falling through to the model, and a `null` `additionalContext` is treated as absent instead of being injected as the literal text `null`; hook output is also bounded at 10 MiB per invocation, so an HTTP or command hook returning an unbounded response can no longer exhaust memory or leave an oversized session behind
- Show recent shell output for large commands that write to a file
- The /instructions picker now respects --no-custom-instructions.
- Render inline images in Rio terminals that support Kitty graphics