npm @github/copilot 1.0.70-0

2 hours ago

Added

  • Pin plugins to an exact commit SHA using the sha field in plugin source configuration
  • Add --sandbox and --no-sandbox flags to turn the OS-level shell sandbox on or off for the current session only, without changing your saved sandbox setting (useful with -p)
  • Add /refine to rewrite a rough, stream-of-consciousness prompt into a clear one
  • Add --repo and --local flags to /settings and /model
  • Add a setting to show or hide timeline timestamps
  • Let a trusted repository pin the model, effort level, and context tier and extend the URL/MCP/skill deny lists via .github/copilot/settings.json
  • Expose SDK APIs to manage live MCP servers in running sessions

Improved

  • Improve GPT-5.6 commentary guidance for tool-driven progress updates
  • Highlight the sidebar toggle hint in the input footer
  • Make markdown links and bare URLs in the timeline and tool output clickable
  • Reclaim the blank line under the home tab bar: the timeline (and Sessions+Current split) sits flush under the tabs when a prompt is pinned, keeping one breathing line only while nothing is pinned
  • Press Tab to switch the context window in /model
  • Long-running sessions refresh enterprise managed settings hourly
  • Mark locally-spawned MCP servers that run inside the sandbox in /mcp list (e.g. connected (sandboxed))

Fixed

  • Show the active user's models after /user switch
  • Declining an extension's permission prompt no longer disables tool approvals for the rest of the session
  • Avoid redundant background agent notifications after a blocking read_agent returns its result
  • Startup auth errors recommend the real copilot login command
  • Keep merge-semantics settings editable in /settings
  • Re-sync managed plugins when their cache is missing or empty
  • Copy the last assistant response even after command echoes
  • Persist the last-logged-in user on every login so a restarted runtime client stays authenticated
  • Hide /agent picker navigation hints when there is nothing to select
  • Open the plan file or research report with Ctrl+Y in any mode
  • Keep terminal color scheme changes in sync over SSH and remote shells
  • Prefill /chronicle search so it can accept a query
  • Show a distinct scrollbar thumb glyph in the /model picker on the no-color path (--no-color, non-color terminals) so the scroll position stays visible
  • Skip launching a browser in remote terminals
  • Arrow keys in /search and reverse search stay in search instead of switching tabs
  • Restore tool event ordering so permission prompts appear after tool start
  • Show only one cancellation message when streaming is aborted
  • Keep /pr tables aligned in compact timeline view
  • Show clear validation errors for empty or non-ASCII skill and command names
  • Keep footer selection highlights aligned when the session bar is open
  • Fail fast when marketplace plugin git auth needs a terminal prompt
  • Dismiss other pending read and fetch sandbox-bypass prompts after you disable the sandbox
  • Fix a crash on Windows triggered by desktop toast notifications

Don't miss a new copilot release

NewReleases is sending notifications on new releases.