{
  "tool": "copilot",
  "name": "GitHub Copilot CLI",
  "long_name": "GitHub Copilot CLI (copilot, npm @github/copilot)",
  "aliases": [
    "copilot-cli",
    "github-copilot",
    "github-copilot-cli",
    "@github/copilot",
    "copilot-agent",
    "gh-copilot"
  ],
  "homepage": "https://github.com/github/copilot-cli",
  "url": "https://insidetheloop.dev/tools/copilot",
  "markdown_url": "https://insidetheloop.dev/tools/copilot.md",
  "date_modified": "2026-10-10T12:42:54Z",
  "title": "GitHub Copilot CLI 1.0.95: latest version, commands and gotchas",
  "description": "Copilot CLI 1.0.95 (2026-10-09 UTC): upgrade commands, config and sandbox ca diff, Entra broker auth, BYOK wire API limits, and exact error messages.",
  "answer": "The latest GitHub Copilot CLI (`copilot`, npm `@github/copilot`) is 1.0.95, released 2026-10-09 16:04 UTC. Upgrade with `npm i -g @github/copilot@latest`, `copilot update` or Homebrew (`brew upgrade copilot-cli`). Our sandbox diff against 1.0.90 adds `copilot config` settings management and `copilot sandbox ca` certificate authority commands across 51 help pages. Breaking changes and gotchas include classic Personal Access Tokens (`ghp_`) being rejected in favor of fine-grained PATs. GitHub issue #5103 reports that BYOK sub-agents can fail across model families because `COPILOT_PROVIDER_WIRE_API` applies session-wide.",
  "latest": {
    "version": "1.0.95",
    "released_at": "2026-10-09T16:04:26Z",
    "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.95"
  },
  "upgrade": [
    {
      "label": "npm",
      "command": "npm i -g @github/copilot@latest\ncopilot --version   # GitHub Copilot CLI 1.0.95."
    },
    {
      "label": "Built-in updater",
      "command": "copilot update"
    },
    {
      "label": "Homebrew (macOS, Linux)",
      "command": "brew upgrade copilot-cli"
    },
    {
      "label": "Install script (macOS, Linux)",
      "command": "curl -fsSL https://gh.io/copilot-install | bash"
    },
    {
      "label": "WinGet (Windows)",
      "command": "winget upgrade GitHub.Copilot"
    },
    {
      "label": "Pin a version",
      "command": "npm i -g @github/copilot@1.0.95"
    }
  ],
  "verified": {
    "date": "2026-10-10",
    "version": "1.0.95",
    "method": "Installed @github/copilot 1.0.90, 1.0.94 and 1.0.95 from npm in throwaway Linux sandboxes on x86_64 and arm64 with no credentials, captured `--help` for every subcommand (51 pages for 1.0.95) and reproduced the errors below."
  },
  "updated_at": "2026-10-10T12:42:54Z",
  "key_facts": [
    "Latest release: 1.0.95 on 2026-10-09 16:04 UTC (GitHub tag `v1.0.95`; npm publish 16:04:52 UTC). Previous stable releases: 1.0.94 on 2026-10-08 and 1.0.93 on 2026-10-07.",
    "1.0.90 to 1.0.95 adds `copilot config` and `copilot sandbox ca` (`create`, `remove`, `rotate`, `status`, `trust`) in our sandbox capture (51 help pages for 1.0.95, up from 43 in 1.0.90).",
    "Classic Personal Access Tokens (`ghp_`) are rejected with an explicit error; Copilot CLI requires OAuth login (`/login`), GitHub CLI authentication (`gh auth login`), or a fine-grained PAT (`github_pat_`) with 'Copilot Requests' permissions.",
    "Local command sandboxing reached general availability on 2026-10-07 (1.0.93); managed via `/sandbox`, `--sandbox` / `--no-sandbox`, and `copilot sandbox ca`.",
    "In BYOK (Bring Your Own Key) mode, GitHub issue #5103 reports that `COPILOT_PROVIDER_WIRE_API` applies to the entire session; sub-agents configured on a different model family can fail if the provider serves one on `/responses` and the other on `/chat/completions`.",
    "GitHub shipped 5 stable releases in October 2026 to date and 8 in September 2026; 11,248 GitHub stars on 2026-10-10."
  ],
  "releases": [
    {
      "version": "1.0.95",
      "released_at": "2026-10-09T16:04:26Z",
      "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.95",
      "changes": [
        {
          "text": "Use native Microsoft Entra broker authentication on macOS when available, with browser fallback.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.95"
        },
        {
          "text": "`copilot config` supports sandbox credential injectHosts keys, with key completion in Bash, Zsh, and Fish.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.95"
        },
        {
          "text": "`--context` now applies to new and resumed ACP sessions instead of silently using the default or previously saved context tier.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.95"
        },
        {
          "text": "Managed plugin setup retries hourly or after policy changes instead of on every message failure.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.95"
        }
      ]
    },
    {
      "version": "1.0.94",
      "released_at": "2026-10-08T20:28:44Z",
      "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.94",
      "changes": [
        {
          "text": "Add Claude Haiku 5.5 to model selection and `--model` completions.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.94"
        },
        {
          "text": "`copilot mcp add` recovers cleanly after interrupted MCP config initialization.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.94"
        },
        {
          "text": "MCP enable/disable now works before server discovery without starting MCP servers.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.94"
        },
        {
          "text": "Assisted permissions send visible shell code to the permission judge instead of requiring manual approval.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.94"
        },
        {
          "text": "Managed policy can disable Assisted Permissions and keep sessions in Manual Approval mode.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.94"
        }
      ]
    },
    {
      "version": "1.0.93",
      "released_at": "2026-10-07T14:06:47Z",
      "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.93",
      "changes": [
        {
          "text": "Command sandboxing made generally available to all users via `/sandbox` and `--sandbox`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.93"
        },
        {
          "text": "Add enterprise `permissions.limitTo` to enforce managed domain boundaries for network requests.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.93"
        },
        {
          "text": "Sandbox local-network allowlists now include localhost and loopback hosts.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.93"
        },
        {
          "text": "Honor `--context long_context` at startup and show accurate context allowance in `/context`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.93"
        },
        {
          "text": "User settings are read strictly from `~/.copilot/settings.json`; keys in `~/.copilot/config.json` are ignored.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.93"
        }
      ]
    },
    {
      "version": "1.0.92",
      "released_at": "2026-10-05T19:42:08Z",
      "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.92",
      "changes": [
        {
          "text": "Add `copilot config` subcommands to list, read, set, and remove settings.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.92"
        },
        {
          "text": "Add pre-conversation Ctrl+E environment picker to switch between local and cloud runs.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.92"
        },
        {
          "text": "Bounded timeout for legacy HTTP+SSE MCP connection message POST acknowledgements.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.92"
        },
        {
          "text": "Sandboxed shells withhold ambient `GITHUB_TOKEN` unless explicitly configured.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.92"
        },
        {
          "text": "`copilot sandbox ca` commands respect `--config-dir` and `-C`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.92"
        }
      ]
    },
    {
      "version": "1.0.91",
      "released_at": "2026-10-01T17:25:02Z",
      "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.91",
      "changes": [
        {
          "text": "Add `copilot sandbox ca` subcommands to check, create, trust, rotate, and remove proxy CA trust.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.91"
        },
        {
          "text": "Sandboxed commands run on Windows versions without filesystem enumeration support.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.91"
        },
        {
          "text": "Offer sandbox network bypass for Node/npm `EACCES` socket denials on Windows.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.91"
        },
        {
          "text": "Statically analyzable read-only shell pipelines can enter execution-evidence review without manual prompt.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.91"
        }
      ]
    }
  ],
  "surface": [
    {
      "from": "1.0.94",
      "to": "1.0.95",
      "method": "`bin/tool-snapshot` ran `--help` for every copilot subcommand of both versions in a throwaway Linux sandbox (51 and 51 help pages), then `bin/tool-diff` compared them. Hidden flags do not appear in `--help`.",
      "summary": "0 commands added, 0 removed, 0 commands with flags added or removed; 0 help pages changed in any way.",
      "commands_added": [],
      "commands_removed": [],
      "flags": [],
      "notes": [
        "Consecutive releases across 1.0.94 and 1.0.95. No CLI subcommands or command-line flags changed in `--help` across all 51 help pages.",
        "1.0.95 adds native Microsoft Entra broker authentication on macOS and expands `copilot config` shell completions for sandbox credential injectHosts keys.",
        "1.0.95 fixes `--context` handling so the flag applies to new and resumed ACP sessions instead of falling back to default or previously saved context tiers."
      ]
    },
    {
      "from": "1.0.90",
      "to": "1.0.95",
      "method": "`bin/tool-snapshot` ran `--help` for every copilot subcommand of both versions in a throwaway Linux sandbox (43 and 51 help pages), then `bin/tool-diff` compared them. Hidden flags do not appear in `--help`.",
      "summary": "8 commands added, 0 removed, 0 commands with flags added or removed; 11 help pages changed in any way.",
      "commands_added": [
        "copilot config",
        "copilot sandbox",
        "copilot sandbox ca",
        "copilot sandbox ca create",
        "copilot sandbox ca remove",
        "copilot sandbox ca rotate",
        "copilot sandbox ca status",
        "copilot sandbox ca trust"
      ],
      "commands_removed": [],
      "flags": [],
      "notes": [
        "`copilot config` was added in 1.0.92 to read, set, list, and remove user and repository settings from the command line.",
        "`copilot sandbox ca` commands (`create`, `remove`, `rotate`, `status`, `trust`) were introduced in 1.0.91 to manage certificate authority trust for credential-masking proxy connections."
      ]
    }
  ],
  "breaking": [
    {
      "version": "1.0.93",
      "change": "User settings are now read strictly from `~/.copilot/settings.json`; keys previously placed in `~/.copilot/config.json` are silently ignored.",
      "migrate": "Move user configuration from `~/.copilot/config.json` to `~/.copilot/settings.json`, or configure settings via `copilot config <key> <value>`.",
      "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.93"
    },
    {
      "version": "1.0.91",
      "change": "`/sandbox ca install` was replaced by separate certificate creation and OS trust commands.",
      "migrate": "Run `copilot sandbox ca create`, then `copilot sandbox ca trust`.",
      "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.91"
    }
  ],
  "gotchas": [
    {
      "title": "Unauthenticated non-interactive run exits with status 1",
      "version": "1.0.95",
      "command": "copilot -p \"hello\"; echo \"exit=$?\"",
      "description": "Running `copilot -p` in scripts or CI without credentials fails immediately without interactive prompt fallback.",
      "output": "exit=1\nError: No authentication information found.\n\nCopilot can be authenticated with GitHub using an OAuth Token or a Fine-Grained Personal Access Token.\n\nTo authenticate, you can use any of the following methods:\n  • Start 'copilot' and run the '/login' command\n  • Set the COPILOT_GITHUB_TOKEN, GH_TOKEN, or GITHUB_TOKEN environment variable\n  • Run 'gh auth login' to authenticate with the GitHub CLI",
      "fix": "Set `GH_TOKEN` or `GITHUB_TOKEN` to a valid fine-grained PAT with 'Copilot Requests' permission, or run `gh auth login`.",
      "url": "https://docs.github.com/copilot/concepts/agents/about-copilot-cli"
    },
    {
      "title": "Classic Personal Access Tokens in GITHUB_TOKEN fail with exit status 1",
      "version": "1.0.95",
      "command": "GITHUB_TOKEN=ghp_invaliddummy1234567890 copilot -p \"hello\"; echo \"exit=$?\"",
      "description": "CI systems that automatically populate `GITHUB_TOKEN` with classic `ghp_` tokens fail on launch.",
      "output": "exit=1\nError: Classic Personal Access Tokens (ghp_) are not supported by Copilot.\n\nThe GITHUB_TOKEN environment variable contains a classic PAT.\nPlease use a Fine-Grained Personal Access Token or another authentication method.\n\nTo fix this, you can:\n  • Replace the token in GITHUB_TOKEN with a fine-grained PAT\n  • Unset GITHUB_TOKEN and run 'gh auth login' to authenticate\n  • Unset GITHUB_TOKEN and start 'copilot', then use the '/login' command",
      "fix": "Generate a fine-grained Personal Access Token starting with `github_pat_` with 'Copilot Requests' permission and export it as `COPILOT_GITHUB_TOKEN` or `GH_TOKEN`.",
      "url": "https://github.com/github/copilot-cli/blob/main/README.md"
    },
    {
      "title": "copilot sandbox ca status exits with code 4 on Linux",
      "version": "1.0.95",
      "command": "copilot sandbox ca status; echo \"exit=$?\"",
      "description": "Running `copilot sandbox ca status` on Linux systems prints that OS trust is not supported and exits with status 4.",
      "output": "OS trust is not supported on this platform. OS trust installation is unavailable; the per-process CA bundle remains active.\nexit=4",
      "fix": "On Linux, do not install the CA into the system trust store; the sandbox proxy automatically passes the per-process CA bundle via `SSL_CERT_FILE` and `NODE_EXTRA_CA_CERTS`.",
      "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.91"
    }
  ],
  "monthly": [
    {
      "month": "2026-10",
      "count": 5,
      "versions": "1.0.91 - 1.0.95",
      "highlights": [
        {
          "text": "Local command sandboxing reached general availability via `/sandbox` and `--sandbox`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.93"
        },
        {
          "text": "Added `copilot config` and `copilot sandbox ca` CLI commands.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.92"
        },
        {
          "text": "Native Microsoft Entra broker authentication on macOS with browser fallback.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.95"
        }
      ]
    },
    {
      "month": "2026-09",
      "count": 8,
      "versions": "1.0.83 - 1.0.90",
      "highlights": [
        {
          "text": "Added support for GPT-6.1 Sol in model selection and `--model` completions.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.90"
        },
        {
          "text": "Added `--mcp-github-auth` to restrict GitHub account credential forwarding to explicit MCP servers.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.90"
        },
        {
          "text": "Command-line parsing migrated to Rust grammar with strict flag validation.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.86"
        }
      ]
    },
    {
      "month": "2026-08",
      "count": 5,
      "versions": "1.0.78 - 1.0.82",
      "highlights": [
        {
          "text": "Added `--sandbox` and `--no-sandbox` flags for session-level shell isolation.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.81"
        },
        {
          "text": "Added `/refine` command to rewrite conversational prompts into actionable instructions.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.81"
        },
        {
          "text": "Added OpenTelemetry monitoring with OTLP traces and metrics export.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.79"
        }
      ]
    },
    {
      "month": "2026-07",
      "count": 10,
      "versions": "1.0.68 - 1.0.77",
      "highlights": [
        {
          "text": "Added support for custom agents defined in `.github/agents/*.agent.md`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.74"
        },
        {
          "text": "Added Agent Client Protocol (ACP) server mode with `--acp`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.71"
        },
        {
          "text": "Added Language Server Protocol (LSP) configuration and status via `copilot lsp`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.69"
        }
      ]
    },
    {
      "month": "2026-06",
      "count": 11,
      "versions": "1.0.57 - 1.0.67",
      "highlights": [
        {
          "text": "Added BYOK (Bring Your Own Key) support via `COPILOT_PROVIDER_*` environment variables.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.62"
        },
        {
          "text": "Added MCP server management subcommands under `copilot mcp`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.60"
        },
        {
          "text": "Added fleet mode (`--fleet`) for parallel subagent execution.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.58"
        }
      ]
    },
    {
      "month": "2026-05",
      "count": 17,
      "versions": "1.0.40 - 1.0.56",
      "highlights": [
        {
          "text": "Added autopilot mode (`--autopilot`) for autonomous multi-turn execution.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.48"
        },
        {
          "text": "Added plan mode (`--plan`) to generate structured implementation plans.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.45"
        },
        {
          "text": "Added plugin management commands under `copilot plugin`.",
          "url": "https://github.com/github/copilot-cli/releases/tag/v1.0.42"
        }
      ]
    }
  ],
  "sources": [
    {
      "title": "GitHub Copilot CLI releases",
      "url": "https://github.com/github/copilot-cli/releases",
      "read": "2026-10-10"
    },
    {
      "title": "GitHub Copilot CLI changelog",
      "url": "https://github.com/github/copilot-cli/blob/main/changelog.md",
      "read": "2026-10-10"
    },
    {
      "title": "GitHub Copilot CLI on npm (@github/copilot)",
      "url": "https://www.npmjs.com/package/@github/copilot",
      "read": "2026-10-10"
    },
    {
      "title": "GitHub Copilot CLI repository",
      "url": "https://github.com/github/copilot-cli",
      "read": "2026-10-10"
    },
    {
      "title": "About GitHub Copilot CLI documentation",
      "url": "https://docs.github.com/copilot/concepts/agents/about-copilot-cli",
      "read": "2026-10-10"
    },
    {
      "title": "Local sandboxing for GitHub Copilot now generally available",
      "url": "https://github.blog/changelog/2026-10-07-local-sandboxing-for-github-copilot-now-generally-available",
      "read": "2026-10-10"
    },
    {
      "title": "GitHub Copilot CLI issue #5100: Session event delivery 120s host acknowledgement timeout",
      "url": "https://github.com/github/copilot-cli/issues/5100",
      "read": "2026-10-10"
    },
    {
      "title": "GitHub Copilot CLI issue #5103: BYOK wire API subagent family mismatch",
      "url": "https://github.com/github/copilot-cli/issues/5103",
      "read": "2026-10-10"
    }
  ],
  "fixes": []
}