GitHub Copilot CLI 1.0.95: latest version, commands and gotchas

GitHub Copilot CLI 1.0.95 (2026-10-09 16:04 UTC)

• Use native Microsoft Entra broker authentication on macOS when available, with browser fallback. (source)
• copilot config supports sandbox credential injectHosts keys, with key completion in Bash, Zsh, and Fish. (source)
• --context now applies to new and resumed ACP sessions instead of silently using the default or previously saved context tier. (source)
• Managed plugin setup retries hourly or after policy changes instead of on every message failure. (source)

GitHub Copilot CLI 1.0.94 (2026-10-08 20:28 UTC)

• Add Claude Haiku 5.5 to model selection and --model completions. (source)
• copilot mcp add recovers cleanly after interrupted MCP config initialization. (source)
• MCP enable/disable now works before server discovery without starting MCP servers. (source)
• Assisted permissions send visible shell code to the permission judge instead of requiring manual approval. (source)
• Managed policy can disable Assisted Permissions and keep sessions in Manual Approval mode. (source)

GitHub Copilot CLI 1.0.93 (2026-10-07 14:06 UTC)

• Command sandboxing made generally available to all users via /sandbox and --sandbox. (source)
• Add enterprise permissions.limitTo to enforce managed domain boundaries for network requests. (source)
• Sandbox local-network allowlists now include localhost and loopback hosts. (source)
• Honor --context long_context at startup and show accurate context allowance in /context. (source)
• User settings are read strictly from ~/.copilot/settings.json; keys in ~/.copilot/config.json are ignored. (source)

GitHub Copilot CLI 1.0.92 (2026-10-05 19:42 UTC)

• Add copilot config subcommands to list, read, set, and remove settings. (source)
• Add pre-conversation Ctrl+E environment picker to switch between local and cloud runs. (source)
• Bounded timeout for legacy HTTP+SSE MCP connection message POST acknowledgements. (source)
• Sandboxed shells withhold ambient GITHUB_TOKEN unless explicitly configured. (source)
• copilot sandbox ca commands respect --config-dir and -C. (source)

GitHub Copilot CLI 1.0.91 (2026-10-01 17:25 UTC)

• Add copilot sandbox ca subcommands to check, create, trust, rotate, and remove proxy CA trust. (source)
• Sandboxed commands run on Windows versions without filesystem enumeration support. (source)
• Offer sandbox network bypass for Node/npm EACCES socket denials on Windows. (source)
• Statically analyzable read-only shell pipelines can enter execution-evidence review without manual prompt. (source)

GitHub Copilot CLI 1.0.94 → 1.0.95

0 commands added, 0 removed, 0 commands with flags added or removed; 0 help pages changed in any way.

Method: bin/tool-snapshot ran --help for every copilot subcommand of both versions in a throwaway Linux sandbox (51 and 51 help pages), then bin/tool-diff compared them. Hidden flags do not appear in --help.

• Consecutive releases across 1.0.94 and 1.0.95. No CLI subcommands or command-line flags changed in --help across all 51 help pages.
• 1.0.95 adds native Microsoft Entra broker authentication on macOS and expands copilot config shell completions for sandbox credential injectHosts keys.
• 1.0.95 fixes --context handling so the flag applies to new and resumed ACP sessions instead of falling back to default or previously saved context tiers.

GitHub Copilot CLI 1.0.90 → 1.0.95

8 commands added, 0 removed, 0 commands with flags added or removed; 11 help pages changed in any way.

Method: bin/tool-snapshot ran --help for every copilot subcommand of both versions in a throwaway Linux sandbox (43 and 51 help pages), then bin/tool-diff compared them. Hidden flags do not appear in --help.

Commands added:

• copilot config
• copilot sandbox
• copilot sandbox ca
• copilot sandbox ca create
• copilot sandbox ca remove
• copilot sandbox ca rotate
• copilot sandbox ca status
• copilot sandbox ca trust

• copilot config was added in 1.0.92 to read, set, list, and remove user and repository settings from the command line.
• copilot sandbox ca commands (create, remove, rotate, status, trust) were introduced in 1.0.91 to manage certificate authority trust for credential-masking proxy connections.

Unauthenticated non-interactive run exits with status 1 (GitHub Copilot CLI 1.0.95)

copilot -p "hello"; echo "exit=$?"

exit=1
Error: No authentication information found.

Copilot can be authenticated with GitHub using an OAuth Token or a Fine-Grained Personal Access Token.

To authenticate, you can use any of the following methods:
  • Start 'copilot' and run the '/login' command
  • Set the COPILOT_GITHUB_TOKEN, GH_TOKEN, or GITHUB_TOKEN environment variable
  • Run 'gh auth login' to authenticate with the GitHub CLI

Fix: Set GH_TOKEN or GITHUB_TOKEN to a valid fine-grained PAT with 'Copilot Requests' permission, or run gh auth login. (source)

Classic Personal Access Tokens in GITHUB_TOKEN fail with exit status 1 (GitHub Copilot CLI 1.0.95)

GITHUB_TOKEN=ghp_invaliddummy1234567890 copilot -p "hello"; echo "exit=$?"

exit=1
Error: Classic Personal Access Tokens (ghp_) are not supported by Copilot.

The GITHUB_TOKEN environment variable contains a classic PAT.
Please use a Fine-Grained Personal Access Token or another authentication method.

To fix this, you can:
  • Replace the token in GITHUB_TOKEN with a fine-grained PAT
  • Unset GITHUB_TOKEN and run 'gh auth login' to authenticate
  • Unset GITHUB_TOKEN and start 'copilot', then use the '/login' command

Fix: Generate a fine-grained Personal Access Token starting with github_pat_ with 'Copilot Requests' permission and export it as COPILOT_GITHUB_TOKEN or GH_TOKEN. (source)

copilot sandbox ca status exits with code 4 on Linux (GitHub Copilot CLI 1.0.95)

copilot sandbox ca status; echo "exit=$?"

OS trust is not supported on this platform. OS trust installation is unavailable; the per-process CA bundle remains active.
exit=4

Fix: On Linux, do not install the CA into the system trust store; the sandbox proxy automatically passes the per-process CA bundle via SSL_CERT_FILE and NODE_EXTRA_CA_CERTS. (source)

2026-10: 1.0.91 - 1.0.95

• Local command sandboxing reached general availability via /sandbox and --sandbox. (source)
• Added copilot config and copilot sandbox ca CLI commands. (source)
• Native Microsoft Entra broker authentication on macOS with browser fallback. (source)

2026-09: 1.0.83 - 1.0.90

• Added support for GPT-6.1 Sol in model selection and --model completions. (source)
• Added --mcp-github-auth to restrict GitHub account credential forwarding to explicit MCP servers. (source)
• Command-line parsing migrated to Rust grammar with strict flag validation. (source)

2026-08: 1.0.78 - 1.0.82

• Added --sandbox and --no-sandbox flags for session-level shell isolation. (source)
• Added /refine command to rewrite conversational prompts into actionable instructions. (source)
• Added OpenTelemetry monitoring with OTLP traces and metrics export. (source)

2026-07: 1.0.68 - 1.0.77

• Added support for custom agents defined in .github/agents/*.agent.md. (source)
• Added Agent Client Protocol (ACP) server mode with --acp. (source)
• Added Language Server Protocol (LSP) configuration and status via copilot lsp. (source)

2026-06: 1.0.57 - 1.0.67

• Added BYOK (Bring Your Own Key) support via COPILOT_PROVIDER_* environment variables. (source)
• Added MCP server management subcommands under copilot mcp. (source)
• Added fleet mode (--fleet) for parallel subagent execution. (source)

2026-05: 1.0.40 - 1.0.56

• Added autopilot mode (--autopilot) for autonomous multi-turn execution. (source)
• Added plan mode (--plan) to generate structured implementation plans. (source)
• Added plugin management commands under copilot plugin. (source)