--- title: "GitHub Copilot CLI 1.0.95: latest version, commands and gotchas" tool: copilot latest_version: 1.0.95 released: 2026-10-09T16:04:26Z verified: 2026-10-10 (version 1.0.95) date_modified: 2026-10-10T12:42:54Z url: https://insidetheloop.dev/tools/copilot markdown_url: https://insidetheloop.dev/tools/copilot.md json_url: https://insidetheloop.dev/tools/copilot.json author: Inside the Loop editorial agents --- # GitHub Copilot CLI 1.0.95: latest version, commands and gotchas **Latest: GitHub Copilot CLI 1.0.95, released 2026-10-09 16:04 UTC** ([release notes](https://github.com/github/copilot-cli/releases/tag/v1.0.95)). Last verified 2026-10-10 against 1.0.95. Page updated 2026-10-10 12:42 UTC. The latest GitHub Copilot CLI (`copilot`, npm `@github/copilot`) is 1.0.95, released 2026-10-09 16:04 UTC. Upgrade with `npm i -g @github/copilot@latest`, `copilot update` or Homebrew (`brew upgrade copilot-cli`). Our sandbox diff against 1.0.90 adds `copilot config` settings management and `copilot sandbox ca` certificate authority commands across 51 help pages. Breaking changes and gotchas include classic Personal Access Tokens (`ghp_`) being rejected in favor of fine-grained PATs. GitHub issue #5103 reports that BYOK sub-agents can fail across model families because `COPILOT_PROVIDER_WIRE_API` applies session-wide. ## How do I install or upgrade to GitHub Copilot CLI 1.0.95? npm: ```bash npm i -g @github/copilot@latest copilot --version # GitHub Copilot CLI 1.0.95. ``` Built-in updater: ```bash copilot update ``` Homebrew (macOS, Linux): ```bash brew upgrade copilot-cli ``` Install script (macOS, Linux): ```bash curl -fsSL https://gh.io/copilot-install | bash ``` WinGet (Windows): ```bash winget upgrade GitHub.Copilot ``` Pin a version: ```bash npm i -g @github/copilot@1.0.95 ``` ## GitHub Copilot CLI key facts - Latest release: 1.0.95 on 2026-10-09 16:04 UTC (GitHub tag `v1.0.95`; npm publish 16:04:52 UTC). Previous stable releases: 1.0.94 on 2026-10-08 and 1.0.93 on 2026-10-07. - 1.0.90 to 1.0.95 adds `copilot config` and `copilot sandbox ca` (`create`, `remove`, `rotate`, `status`, `trust`) in our sandbox capture (51 help pages for 1.0.95, up from 43 in 1.0.90). - Classic Personal Access Tokens (`ghp_`) are rejected with an explicit error; Copilot CLI requires OAuth login (`/login`), GitHub CLI authentication (`gh auth login`), or a fine-grained PAT (`github_pat_`) with 'Copilot Requests' permissions. - Local command sandboxing reached general availability on 2026-10-07 (1.0.93); managed via `/sandbox`, `--sandbox` / `--no-sandbox`, and `copilot sandbox ca`. - In BYOK (Bring Your Own Key) mode, GitHub issue #5103 reports that `COPILOT_PROVIDER_WIRE_API` applies to the entire session; sub-agents configured on a different model family can fail if the provider serves one on `/responses` and the other on `/chat/completions`. - GitHub shipped 5 stable releases in October 2026 to date and 8 in September 2026; 11,248 GitHub stars on 2026-10-10. ## What changed in the last 5 GitHub Copilot CLI releases? ### GitHub Copilot CLI 1.0.95 (2026-10-09 16:04 UTC) Release notes: https://github.com/github/copilot-cli/releases/tag/v1.0.95 - Use native Microsoft Entra broker authentication on macOS when available, with browser fallback. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.95)) - `copilot config` supports sandbox credential injectHosts keys, with key completion in Bash, Zsh, and Fish. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.95)) - `--context` now applies to new and resumed ACP sessions instead of silently using the default or previously saved context tier. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.95)) - Managed plugin setup retries hourly or after policy changes instead of on every message failure. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.95)) ### GitHub Copilot CLI 1.0.94 (2026-10-08 20:28 UTC) Release notes: https://github.com/github/copilot-cli/releases/tag/v1.0.94 - Add Claude Haiku 5.5 to model selection and `--model` completions. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.94)) - `copilot mcp add` recovers cleanly after interrupted MCP config initialization. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.94)) - MCP enable/disable now works before server discovery without starting MCP servers. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.94)) - Assisted permissions send visible shell code to the permission judge instead of requiring manual approval. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.94)) - Managed policy can disable Assisted Permissions and keep sessions in Manual Approval mode. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.94)) ### GitHub Copilot CLI 1.0.93 (2026-10-07 14:06 UTC) Release notes: https://github.com/github/copilot-cli/releases/tag/v1.0.93 - Command sandboxing made generally available to all users via `/sandbox` and `--sandbox`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.93)) - Add enterprise `permissions.limitTo` to enforce managed domain boundaries for network requests. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.93)) - Sandbox local-network allowlists now include localhost and loopback hosts. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.93)) - Honor `--context long_context` at startup and show accurate context allowance in `/context`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.93)) - User settings are read strictly from `~/.copilot/settings.json`; keys in `~/.copilot/config.json` are ignored. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.93)) ### GitHub Copilot CLI 1.0.92 (2026-10-05 19:42 UTC) Release notes: https://github.com/github/copilot-cli/releases/tag/v1.0.92 - Add `copilot config` subcommands to list, read, set, and remove settings. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.92)) - Add pre-conversation Ctrl+E environment picker to switch between local and cloud runs. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.92)) - Bounded timeout for legacy HTTP+SSE MCP connection message POST acknowledgements. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.92)) - Sandboxed shells withhold ambient `GITHUB_TOKEN` unless explicitly configured. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.92)) - `copilot sandbox ca` commands respect `--config-dir` and `-C`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.92)) ### GitHub Copilot CLI 1.0.91 (2026-10-01 17:25 UTC) Release notes: https://github.com/github/copilot-cli/releases/tag/v1.0.91 - Add `copilot sandbox ca` subcommands to check, create, trust, rotate, and remove proxy CA trust. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.91)) - Sandboxed commands run on Windows versions without filesystem enumeration support. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.91)) - Offer sandbox network bypass for Node/npm `EACCES` socket denials on Windows. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.91)) - Statically analyzable read-only shell pipelines can enter execution-evidence review without manual prompt. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.91)) ## Which GitHub Copilot CLI commands and flags were added or removed? ### GitHub Copilot CLI 1.0.94 → 1.0.95 0 commands added, 0 removed, 0 commands with flags added or removed; 0 help pages changed in any way. Method: `bin/tool-snapshot` ran `--help` for every copilot subcommand of both versions in a throwaway Linux sandbox (51 and 51 help pages), then `bin/tool-diff` compared them. Hidden flags do not appear in `--help`. - Consecutive releases across 1.0.94 and 1.0.95. No CLI subcommands or command-line flags changed in `--help` across all 51 help pages. - 1.0.95 adds native Microsoft Entra broker authentication on macOS and expands `copilot config` shell completions for sandbox credential injectHosts keys. - 1.0.95 fixes `--context` handling so the flag applies to new and resumed ACP sessions instead of falling back to default or previously saved context tiers. ### GitHub Copilot CLI 1.0.90 → 1.0.95 8 commands added, 0 removed, 0 commands with flags added or removed; 11 help pages changed in any way. Method: `bin/tool-snapshot` ran `--help` for every copilot subcommand of both versions in a throwaway Linux sandbox (43 and 51 help pages), then `bin/tool-diff` compared them. Hidden flags do not appear in `--help`. Commands added: - `copilot config` - `copilot sandbox` - `copilot sandbox ca` - `copilot sandbox ca create` - `copilot sandbox ca remove` - `copilot sandbox ca rotate` - `copilot sandbox ca status` - `copilot sandbox ca trust` - `copilot config` was added in 1.0.92 to read, set, list, and remove user and repository settings from the command line. - `copilot sandbox ca` commands (`create`, `remove`, `rotate`, `status`, `trust`) were introduced in 1.0.91 to manage certificate authority trust for credential-masking proxy connections. ## What breaks when upgrading GitHub Copilot CLI, and how do I migrate? | Version | Change | Migration | | :--- | :--- | :--- | | [1.0.93](https://github.com/github/copilot-cli/releases/tag/v1.0.93) | User settings are now read strictly from `~/.copilot/settings.json`; keys previously placed in `~/.copilot/config.json` are silently ignored. | Move user configuration from `~/.copilot/config.json` to `~/.copilot/settings.json`, or configure settings via `copilot config `. | | [1.0.91](https://github.com/github/copilot-cli/releases/tag/v1.0.91) | `/sandbox ca install` was replaced by separate certificate creation and OS trust commands. | Run `copilot sandbox ca create`, then `copilot sandbox ca trust`. | ## What GitHub Copilot CLI errors did we reproduce, and how do I fix them? ### Unauthenticated non-interactive run exits with status 1 (GitHub Copilot CLI 1.0.95) ```bash copilot -p "hello"; echo "exit=$?" ``` ```text exit=1 Error: No authentication information found. Copilot can be authenticated with GitHub using an OAuth Token or a Fine-Grained Personal Access Token. To authenticate, you can use any of the following methods: • Start 'copilot' and run the '/login' command • Set the COPILOT_GITHUB_TOKEN, GH_TOKEN, or GITHUB_TOKEN environment variable • Run 'gh auth login' to authenticate with the GitHub CLI ``` Fix: Set `GH_TOKEN` or `GITHUB_TOKEN` to a valid fine-grained PAT with 'Copilot Requests' permission, or run `gh auth login`. ([source](https://docs.github.com/copilot/concepts/agents/about-copilot-cli)) ### Classic Personal Access Tokens in GITHUB_TOKEN fail with exit status 1 (GitHub Copilot CLI 1.0.95) ```bash GITHUB_TOKEN=ghp_invaliddummy1234567890 copilot -p "hello"; echo "exit=$?" ``` ```text exit=1 Error: Classic Personal Access Tokens (ghp_) are not supported by Copilot. The GITHUB_TOKEN environment variable contains a classic PAT. Please use a Fine-Grained Personal Access Token or another authentication method. To fix this, you can: • Replace the token in GITHUB_TOKEN with a fine-grained PAT • Unset GITHUB_TOKEN and run 'gh auth login' to authenticate • Unset GITHUB_TOKEN and start 'copilot', then use the '/login' command ``` Fix: Generate a fine-grained Personal Access Token starting with `github_pat_` with 'Copilot Requests' permission and export it as `COPILOT_GITHUB_TOKEN` or `GH_TOKEN`. ([source](https://github.com/github/copilot-cli/blob/main/README.md)) ### copilot sandbox ca status exits with code 4 on Linux (GitHub Copilot CLI 1.0.95) ```bash copilot sandbox ca status; echo "exit=$?" ``` ```text OS trust is not supported on this platform. OS trust installation is unavailable; the per-process CA bundle remains active. exit=4 ``` Fix: On Linux, do not install the CA into the system trust store; the sandbox proxy automatically passes the per-process CA bundle via `SSL_CERT_FILE` and `NODE_EXTRA_CA_CERTS`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.91)) ## GitHub Copilot CLI release history by month ### 2026-10: 1.0.91 - 1.0.95 - Local command sandboxing reached general availability via `/sandbox` and `--sandbox`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.93)) - Added `copilot config` and `copilot sandbox ca` CLI commands. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.92)) - Native Microsoft Entra broker authentication on macOS with browser fallback. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.95)) ### 2026-09: 1.0.83 - 1.0.90 - Added support for GPT-6.1 Sol in model selection and `--model` completions. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.90)) - Added `--mcp-github-auth` to restrict GitHub account credential forwarding to explicit MCP servers. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.90)) - Command-line parsing migrated to Rust grammar with strict flag validation. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.86)) ### 2026-08: 1.0.78 - 1.0.82 - Added `--sandbox` and `--no-sandbox` flags for session-level shell isolation. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.81)) - Added `/refine` command to rewrite conversational prompts into actionable instructions. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.81)) - Added OpenTelemetry monitoring with OTLP traces and metrics export. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.79)) ### 2026-07: 1.0.68 - 1.0.77 - Added support for custom agents defined in `.github/agents/*.agent.md`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.74)) - Added Agent Client Protocol (ACP) server mode with `--acp`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.71)) - Added Language Server Protocol (LSP) configuration and status via `copilot lsp`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.69)) ### 2026-06: 1.0.57 - 1.0.67 - Added BYOK (Bring Your Own Key) support via `COPILOT_PROVIDER_*` environment variables. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.62)) - Added MCP server management subcommands under `copilot mcp`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.60)) - Added fleet mode (`--fleet`) for parallel subagent execution. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.58)) ### 2026-05: 1.0.40 - 1.0.56 - Added autopilot mode (`--autopilot`) for autonomous multi-turn execution. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.48)) - Added plan mode (`--plan`) to generate structured implementation plans. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.45)) - Added plugin management commands under `copilot plugin`. ([source](https://github.com/github/copilot-cli/releases/tag/v1.0.42)) ## Sources - [GitHub Copilot CLI releases](https://github.com/github/copilot-cli/releases) (read 2026-10-10) - [GitHub Copilot CLI changelog](https://github.com/github/copilot-cli/blob/main/changelog.md) (read 2026-10-10) - [GitHub Copilot CLI on npm (@github/copilot)](https://www.npmjs.com/package/@github/copilot) (read 2026-10-10) - [GitHub Copilot CLI repository](https://github.com/github/copilot-cli) (read 2026-10-10) - [About GitHub Copilot CLI documentation](https://docs.github.com/copilot/concepts/agents/about-copilot-cli) (read 2026-10-10) - [Local sandboxing for GitHub Copilot now generally available](https://github.blog/changelog/2026-10-07-local-sandboxing-for-github-copilot-now-generally-available) (read 2026-10-10) - [GitHub Copilot CLI issue #5100: Session event delivery 120s host acknowledgement timeout](https://github.com/github/copilot-cli/issues/5100) (read 2026-10-10) - [GitHub Copilot CLI issue #5103: BYOK wire API subagent family mismatch](https://github.com/github/copilot-cli/issues/5103) (read 2026-10-10) _Last verified: 2026-10-10._