GitHub Copilot CLI 1.0.100

Rename the built-in browser plugin to browser-use and keep existing browser plugin preferences working after upgrade

Add --disable-client-telemetry flag to turn off client telemetry uploads from the CLI

Add --trust-folder for one-off prompt-mode sessions started with -p or piped stdin

Install verified Skills and plugins from GitHub install links via copilot plugin install "ghapp://air/install?..."

Sandbox host-rule traffic now honors HTTPS_PROXY and HTTP_PROXY when no sandbox proxy is configured

Managed plugins update activation in existing sessions when managed policy changes

Sandboxed shell commands now explain credential-proxy certificate trust failures and can offer an approved rerun outside the sandbox.

Native chats can start and finish while optional managed plugin downloads continue in the background.

Double Ctrl+C exits immediately even when the CLI UI is busy

Custom agents that declare the documented `search`, `web` or `todo` tool aliases, or name `github-mcp-server/web_search`, now receive the matching tools

Enterprise-managed ask permissions in Assisted mode now allow safe actions without unnecessary confirmation prompts.

Plan, autopilot, and shell mode badges stay visible while startup components load and the agent works. The badge replaces the mode suffix that used to trail the activity text (`Working - plan`), and the startup `Loading:` row now truncates its diagnostics to keep the status row on one line

Sandboxed commands can write package and build caches when developer tool access is enabled.

Assisted permissions send nested PowerShell and bash -c commands that only expand plain-data environment variables, single-quoted PowerShell, and PowerShell variable and alias statements to the permission judge instead of requiring unnecessary manual approval

Path-specific instruction files in the repository root .github/instructions are now applied automatically when the agent reads or edits a matching file

Use the unified Sessions browser by default for /sessions, /session, and /resume.

Enable semantic code search by default for online sessions.

Improve /login for Microsoft Entra by letting you choose a cached account or explicitly sign in with a different account

Sandboxed git on github.com can use your configured GITHUB_TOKEN from credentials.envVars

/sandbox can keep sandboxing enabled for the current session without enabling it globally

Trusted repository plugins install and update automatically before chat runs.

Sandbox allows local network access by default so commands can reach localhost and private-network services.

Open /share without arguments to view a full-screen action menu for sharing the current session

Keep saved /diff review comments when reopening an unchanged diff in the same session, with an explicit discard action.

Show a clear warning and keep the active model display in sync when a saved model is automatically replaced on resume.

Catalog search reports proxy authentication requirements for CONNECT proxy challenges

HydraFusion keeps a pass expanded while its review runs, passes that were not kept stay expandable until you switch sessions or resume, and passes from an aborted turn say whether they were kept

MCP resource dashboard stays interactive while inventory adapters refresh

Session browsing now caps account discovery at 500 records and respects Retry-After hints for automatic refresh timing.

Prompt to update the sandbox proxy certificate authority when masked hosts change

Show a clear notice when administrator-managed settings override your selected model

Sessions no longer stall for minutes when an MCP server hangs while loading tools.

Gemini tool calls no longer fail when array parameters define enum values

Gemini chats no longer fail after earlier tool results contain no readable content.

Reasoning-only max-token responses no longer loop indefinitely and now end with a clear error when no progress is made

Sandboxed commands on Linux start more reliably without intermittent loopback setup failures

Avoid false context exhaustion and rollover refusal when tool definitions are deferred

Windows CLI Git commands now recover from thread-access-denied startup failures.

A skill `allowed-tools` rule keeps commas inside its arguments instead of being split apart. Where a list's structure is ambiguous, its unscoped rules now prompt instead of being granted.

Retry image-bearing Responses requests with smaller payload limits when providers reject oversized bodies

Start git, shell commands, and MCP servers on Windows when process snapshot thread enumeration fails

Voice dictation no longer inserts language markers like <en-US> into transcript text

Plugin enable, disable, update, and uninstall actions now route reliably after plugin inventory refreshes.

Back from MCP resource details stays on the list during live metadata refreshes

Managed account policy and bypass-mode warnings stay accurate after switching accounts, even when a policy cache miss happens.

CLI help and version flags exit reliably after printing their output

Keep your selected Microsoft Entra account pinned during sign-in and token renewal

Up from sessions sidebar header actions wraps to the last visible session

Complete usage reporting no longer shows partial status or phantom unattributed spend after resume when billing data is complete.