1.0.79-5

Added

• Manage multiple concurrent sessions from the Sessions tab and sidebar

Improved

• Prompt pinning is off by default; set pinnedPrompts to true to enable it.

Fixed

• Sandboxed wrapper builds (make and friends) get the dev tool caches their recipes need, based on the build manifests in the working directory

1.0.79-4

Pre-release 1.0.79-4

1.0.79-3

Improved

• Use /worktree new to start a new session in a new worktree

1.0.79-2

Improved

• Pin the current prompt one row higher, in the row the tab bar already reserves, so it keeps the shape of the prompt it copies while costing the timeline one row less
• Leave the pinned prompt off by default on terminals under 30 rows, where it would crowd the output; set pinnedPrompts explicitly to override at any size

Fixed

• A sandbox that cannot start an MCP server now fails in seconds instead of stalling the session, and sandbox startup failures for both MCP and language servers now say the sandbox was at fault and how to fix or opt out of it
• Login links are clickable during web and device-code sign-in

1.0.79-1

Improved

• BREAKING: the sandbox setting allowDevToolCaches is renamed allowDevToolAccess, since it grants dev-tool config and registries too, not just caches. The old key is no longer read and is ignored silently, so an existing false opt-out reverts to the default (on). Rename it in settings.json and in any managed/MDM policy.

Fixed

• Compute /context attribution against the Auto-resolved model so token totals are accurate for Free/Student users
• Disabling an extension no longer breaks elicitation, canvases, or tool permission prompts for other extensions
• A prompt stashed with ctrl+s now stays with the session it was typed for, so switching away and back and pressing ctrl+s restores it instead of finding it gone
• On Linux, searches and most shell commands blocked by the sandbox now offer to re-run outside it

1.0.78

2026-08-03

• Timeline headers show how long each tool call took, right-aligned and ticking live while it runs (for calls of at least 5 seconds). On by default — disable with /settings showToolDurations.
• First-party plugins automatically update to the latest version at session start
• Add the experimental /new-worktree command to create a new worktree and start a new conversation in it
• Copilot login now defaults to the browser flow for local desktop subprocesses without a TTY, including IDE integrations, while remote and headless environments continue using device code
• Interactive shell shortcut now launches on Enter and shows an inline hint when "$" is armed
• Extension slash commands run their handler exactly once per invocation when several extensions are loaded
• Inline images no longer render with their first row repeated down the whole picture after the timeline scrolls
• A run whose prompt is piped over stdin now treats its sessionEnd hook the same way -p does: the hook fires once per completed agent turn with reason complete (or error if the turn failed), instead of once at shutdown with user_exit. As with -p, a piped run that exits before completing a turn fires no sessionEnd hook
• Split-view sidebar: the red close confirmation now reads x again to close (or x again to exit CLI on the last session) instead of x close, so a second press is clearly what closes
• Expose token usage in ACP prompt results and live usage_update notifications
• Added a forceRemoteSettingsRefresh managed setting that requires a fresh managed-settings fetch on startup
• Disabling the sandbox from a bypass prompt applies only to that session; new sessions start sandboxed again
• Managed settings now fall back to the persistent cache whenever a server-managed settings fetch fails for any reason (network error, a non-success HTTP status, or a malformed/unparseable response), and fail open — starting without the unconfirmed server restriction rather than the prior fail-closed behavior — when no usable cached policy is available
• When the sandbox blocks a shell command and bypass is allowed, CLI offers to re-run it outside the sandbox without asking the model
• /rewind no longer requires git and restores only the files Copilot changed, skipping any file whose contents no longer match what Copilot last wrote, with a conversation-only or conversation + files choice
• Add /permissions to switch between approval modes.
• ACP mode supports closing sessions with the closeSession request.
• Ctrl+Q now enqueues the highlighted mid-text skill completion instead of the partial token
• Switching sessions no longer restarts MCP servers or rebuilds hook state, so a turn running in another session is never halted with a stale-hook error
• Refresh deferred MCP tools after OAuth authentication
• New sandbox setting allowDevToolCaches (on by default): grants sandboxed builds access to toolchain caches, registries, and installs so builds work without extra setup. Set false to opt out.
• Honor explicit GitHub MCP toolset/tool config: keep gh-overlap tools and stop steering to the gh CLI when you opt in
• Warn on startup about unknown top-level keys in user settings.json (e.g. a misspelled setting) instead of silently ignoring them
• Shell completion for --model now suggests auto and supported model names
• Render long session transcripts progressively to keep scrolling responsive
• Resuming a long session is dramatically faster and far lighter on memory, because its history is now read once at startup (in parallel, across CPU cores) instead of being re-read in full for every check the CLI runs before it can paint. In our benchmark a 230MB, 74k-event transcript came back in well under a second instead of about ten, at roughly a quarter of the peak memory; the exact gain depends on your machine's core count and disk
• The /allow-all auto safety-judge model is no longer user-configurable; the judge model is now selected automatically.

1.0.78-3

Added

• Add the experimental /new-worktree command to create a new worktree and start a new conversation in it

Improved

• Interactive shell shortcut now launches on Enter and shows an inline hint when "$" is armed

Fixed

• Copilot login now defaults to the browser flow for local desktop subprocesses without a TTY, including IDE integrations, while remote and headless environments continue using device code

1.0.78-2

Improved

• Split-view sidebar: the red close confirmation now reads x again to close (or x again to exit CLI on the last session) instead of x close, so a second press is clearly what closes

Fixed

• Extension slash commands run their handler exactly once per invocation when several extensions are loaded
• Inline images no longer render with their first row repeated down the whole picture after the timeline scrolls
• A run whose prompt is piped over stdin now treats its sessionEnd hook the same way -p does: the hook fires once per completed agent turn with reason complete (or error if the turn failed), instead of once at shutdown with user_exit. As with -p, a piped run that exits before completing a turn fires no sessionEnd hook

1.0.78-0

Added

• Add /permissions to switch between approval modes.
• ACP mode supports closing sessions with the closeSession request.

Improved

• New sandbox setting allowDevToolCaches (on by default): grants sandboxed builds access to toolchain caches, registries, and installs so builds work without extra setup. Set false to opt out.
• Honor explicit GitHub MCP toolset/tool config: keep gh-overlap tools and stop steering to the gh CLI when you opt in
• Warn on startup about unknown top-level keys in user settings.json (e.g. a misspelled setting) instead of silently ignoring them
• Shell completion for --model now suggests auto and supported model names
• Render long session transcripts progressively to keep scrolling responsive
• Resuming a long session is dramatically faster and far lighter on memory, because its history is now read once at startup (in parallel, across CPU cores) instead of being re-read in full for every check the CLI runs before it can paint. In our benchmark a 230MB, 74k-event transcript came back in well under a second instead of about ten, at roughly a quarter of the peak memory; the exact gain depends on your machine's core count and disk

Fixed

• Ctrl+Q now enqueues the highlighted mid-text skill completion instead of the partial token
• Switching sessions no longer restarts MCP servers or rebuilds hook state, so a turn running in another session is never halted with a stale-hook error
• Refresh deferred MCP tools after OAuth authentication

Removed

• The /allow-all auto safety-judge model is no longer user-configurable; the judge model is now selected automatically.

1.0.77

2026-07-30

• Unconditional autopilot approval now disables sandbox for the current session when bypass is allowed
• Ctrl+G opens your editor to edit ask_user freeform answers without closing the prompt
• Add a browser-based (web) OAuth login flow, now the default for copilot login on local interactive terminals (device code remains the default on remote/headless terminals). Use --web-flow/--device-code to force a mode, or pick one in the interactive /login command
• Support enforcing managed sandbox policy via macOS and Windows native MDM settings
• Allow reasoning effort to be omitted so the server can select the default