1.0.83-5

Added

• Show running Copilot sessions in the Windows 11 taskbar with live hover status cards

Improved

• On macOS and Linux, sandboxed commands can no longer reach services running on your machine. On macOS this also blocks a server the command itself starts on 127.0.0.1, so test suites that bind a local port will fail; turn on Allow local network in /sandbox to reach localhost again.
• Linux sandboxing now needs slirp4netns, nsenter, iptables, ip6tables, iptables-restore and ip6tables-restore on PATH. Install them if sandboxed commands start failing to launch.

Fixed

• A session lock that is re-entered on the same thread now fails with a reported error instead of freezing the CLI.
• Kerberos proxy authentication reconnects when the initial challenge answers with Connection: close
• Sandboxed gh commands now authenticate as the account configured for the repository instead of the Copilot CLI login
• MCP tools remain callable after MCP server restarts

1.0.83-4

Added

• Add Client ID Metadata Document (CIMD) support for MCP OAuth sign-in

Improved

• CLI starts without the interrupted-session restore prompt by default.
• Resuming large sessions keeps the input prompt responsive sooner.

Fixed

• Sandboxed file tools now read the same developer-tool paths as sandboxed shell commands, including token-bearing registry config such as ~/.npmrc; set sandbox.allowDevToolAccess to false to turn these grants off
• Stopping a timed-out shell command now lets queued messages run and sessions return to idle
• A follow-up prompt typed while autopilot is running no longer disappears from the timeline
• Restart provides clearer update guidance when automatic restart cannot be completed
• MCP servers configured by your agent stay available after built-in sub-agent turns.
• Anthropic sessions continue after temporary fallback instead of failing on invalid thinking signatures
• Long-running sessions on Linux return freed memory to the system instead of holding gigabytes of it
• Enterprise-denied MCP servers can no longer start before the managed allow/deny policy resolves; server startup now waits for the managed-settings fetch instead of racing it
• Host-provided plugin customizations can be read without redundant path permission prompts

Removed

• Remove retired Claude and Gemini models from /model picker results

1.0.83-3

Fixes and changes

1.0.83-2

Added

• Custom agents can list several models in model, tried in order until one is available to you, and model-policy: required keeps model changes on that list
• Adding support for claude-fable-5.1

Improved

• Linux sandboxes now restrict network egress to the configured proxy; proxy mode requires slirp4netns, util-linux 2.35+, iptables, and /dev/net/tun access

1.0.83-1

Added

• Add Recent, Created, Name, and classic None sorting to the split Sessions sidebar, with the selected order saved across restarts
• Enterprise admins can pin sign-in to approved GitHub organizations with the forceLoginOrgs managed setting

Improved

• /mcp config and the MCP add/edit/authenticate forms now open in the plugins dashboard instead of a separate MCP manager, so closing a form returns to the server list.
• File path autocomplete stays fast in large repositories
• Plugin list commands and /plugin now show bundled built-in plugins.
• Improve sandboxed Bazel and Bazelisk runs by granting required cache and output paths; macOS requires a future Bazel release or additional sandbox capabilities
• The collapsed autopilot goal panel now reads as a single-line pinned prompt, keeping the frame it shares with a pinned prompt instead of compressing into a bare band wedged against the chrome above it

Fixed

• A relative --add-dir or --plugin-dir path now resolves against the session's working directory under --resume=<id> and --worktree, instead of the directory the CLI was launched from. Relative values are also resolved after -C is applied, so -C no longer has to precede either option on the command line
• MCP servers contributed by a plugin are no longer labelled "User" in the MCP dashboard, and a server from a bundled plugin is now shown as built-in and names the plugin it came from.

1.0.83-0

Added

• Add automatic HTTPS proxy mTLS client certificate support for model and web requests
• Detect the herdr terminal multiplexer instead of mistaking it for tmux, so the Kitty keyboard protocol, color scheme following, terminal progress, /copy and notifications work in herdr panes

Improved

• Improve /sandbox policy by grouping path grants by source and showing detected developer tools

Fixed

• The newest line of output stays visible above the input box instead of hiding behind it, except while a prompt is pinned to the top of the transcript
• Exporting a resumed session with --share or --share-gist writes the whole transcript instead of only the latest run

1.0.82

2026-08-29

• A message typed while /worktree or /move is preparing the worktree no longer breaks the switch into it
• Ctrl+E expands the plan approval card to show the full plan again
• Show the specific authentication failure (such as 401 Bad credentials) instead of only the /login prompt

1.0.82-2

Fixed

• A message typed while /worktree or /move is preparing the worktree no longer breaks the switch into it
• Ctrl+E expands the plan approval card to show the full plan again

1.0.82-1

Fixed

• Show the specific authentication failure (such as 401 Bad credentials) instead of only the /login prompt

1.0.82-0

Fixes and changes