GitHub Copilot CLI 1.0.100 was published on October 19, 2026 at 18:43 UTC in the github/copilot-cli releases. It adds a --disable-client-telemetry flag, a --trust-folder flag for one-off prompt-mode runs and plugin installs from GitHub install links, and it changes several defaults: the sandbox now allows local network access, semantic code search is on for online sessions, and /sessions, /session and /resume open the unified Sessions browser. Everything below comes from the release notes.

On this page

New flags and commands

  • --disable-client-telemetry turns off client telemetry uploads from the CLI.
  • --trust-folder applies to one-off prompt-mode sessions started with -p or piped stdin.
  • Plugin install links. Verified skills and plugins can be installed from GitHub install links with copilot plugin install "ghapp://air/install?...".
  • /share without arguments opens a full-screen action menu for sharing the current session.
  • /sandbox can keep sandboxing on for the current session without turning it on globally.
  • /login for Microsoft Entra lets you pick a cached account or sign in with a different one, and the selected Entra account stays pinned during sign-in and token renewal.

Changed defaults

Area What 1.0.100 does
Sandbox network Allows local network access by default, so commands can reach localhost and private-network services
Sandbox caches Sandboxed commands can write package and build caches when developer tool access is enabled
Sandbox proxy Host-rule traffic honors HTTPS_PROXY and HTTP_PROXY when no sandbox proxy is configured
Code search Semantic code search is enabled by default for online sessions
Sessions /sessions, /session and /resume use the unified Sessions browser
Plugins Trusted repository plugins install and update automatically before chat runs; the built-in browser plugin is renamed browser-use, and existing preferences carry over
Instructions Path-specific instruction files in the repository root .github/instructions apply automatically when the agent reads or edits a matching file

The sandbox change widens what a sandboxed command can reach on your machine and network. The same release lets sandboxed commands explain credential-proxy certificate trust failures and offer an approved rerun outside the sandbox, and prompts you to update the sandbox proxy certificate authority when masked hosts change. Sandboxed git on github.com can use a GITHUB_TOKEN configured in credentials.envVars.

Permissions and agents

  • Custom agents that declare the documented search, web or todo tool aliases, or name github-mcp-server/web_search, now get the matching tools. Custom agents are covered in GitHub Copilot custom agents.
  • A skill’s allowed-tools rule keeps commas inside its arguments instead of splitting them. Where a list’s structure is ambiguous, its unscoped rules now prompt instead of being granted.
  • In Assisted mode, enterprise-managed ask permissions allow safe actions without extra prompts, and nested PowerShell and bash -c commands that only expand plain-data variables go to the permission judge instead of requiring manual approval.
  • The CLI shows a clear notice when administrator-managed settings override your selected model, and a warning when a saved model is replaced on resume.

Fixes

  • Sessions no longer stall for minutes when an MCP server hangs while loading tools.
  • Responses that hit the token limit with reasoning only no longer loop; they end with a clear error when no progress is made.
  • Gemini tool calls no longer fail when array parameters define enum values, and Gemini chats no longer fail after tool results with no readable content.
  • Saved /diff review comments survive reopening an unchanged diff in the same session.
  • Double Ctrl+C exits immediately even when the UI is busy, and help and version flags exit after printing.
  • On Windows, Git, shell commands and MCP servers start when process snapshot thread enumeration fails, and CLI Git commands recover from thread-access-denied startup failures. On Linux, sandboxed commands start without intermittent loopback setup failures.
  • Image-bearing Responses requests retry with smaller payload limits when a provider rejects an oversized body, and usage reporting no longer shows phantom unattributed spend after resume.

Install or update

The Copilot CLI README gives these install commands for the stable channel; the prerelease channel has its own package names there. With npm:

npm install -g @github/copilot

With Homebrew on macOS and Linux, or WinGet on Windows:

brew install copilot-cli

winget install GitHub.Copilot

A pre-release, 1.0.101-0, followed later on October 19 with structured output for dynamic workflow subagents and an assistedApprovalInstructions setting. For setup and first steps, see GitHub Copilot CLI.