Fixed

• Sandboxed commands on Windows write temporary files to the granted temp directory, so tools that rename a temp file into place work
• Prompt-mode sessions fire a single sessionEnd hook after Stop-hook continuations complete

Fixed

• Reconnect to remote MCP servers after idle Streamable HTTP sessions expire
• Messaging a running background agent now steers its active turn at the next processing opportunity.
• Context rollovers keep your latest requests in the recovery context.
• Hide the automatic sandbox CA setup prompt on Windows accounts that cannot self-elevate
• Copilot no longer describes a subagent as configured when the current session cannot run it. Previously a session that could not use rubber-duck still reported it as set up in /subagents, and asking for it failed instead of being skipped cleanly.

Fixed

• MCP tools continue working after OAuth reauthentication when tool definitions are unchanged

2026-10-01

• Add copilot sandbox ca commands to check, create, trust, rotate, and remove proxy CA trust, including unattended Windows setup; /sandbox ca install becomes create and trust
• Session timelines now clear busy status after interrupted turns finish.
• Sandboxed commands run on Windows versions without filesystem enumeration support, with a warning that PowerShell's current location may be wrong
• Footer text selection stays on the same visible line when the footer grows or shrinks.
• Offer sandbox network bypass for Node/npm EACCES socket denials on Windows
• CLI shutdown flushes pending telemetry before exit, with a bounded delay when telemetry is still initializing.
• Complete, statically analyzable read-only shell pipelines can now enter execution-evidence review, while incomplete or unbound pipelines require explicit approval.

Added

• Add copilot sandbox ca commands to check, create, trust, rotate, and remove proxy CA trust, including unattended Windows setup; /sandbox ca install becomes create and trust

Improved

• CLI shutdown flushes pending telemetry before exit, with a bounded delay when telemetry is still initializing.

Fixed

• Session timelines now clear busy status after interrupted turns finish.
• Sandboxed commands run on Windows versions without filesystem enumeration support, with a warning that PowerShell's current location may be wrong
• Footer text selection stays on the same visible line when the footer grows or shrinks.

Improved

• Complete, statically analyzable read-only shell pipelines can now enter execution-evidence review, while incomplete or unbound pipelines require explicit approval.

Fixed

• Offer sandbox network bypass for Node/npm EACCES socket denials on Windows

2026-09-30

• Add support for GPT-6.1 Sol in model selection
• Add --mcp-github-auth to scope GitHub account auth to approved MCP server origins
• Add session-scoped read-only directory approvals to path access prompts
• Permission prompts remain answerable after resuming interrupted sessions.
• Auto-approval now takes into account messages you type while the agent is working, as it already did for prompts sent while it was idle
• Compaction now returns a summary even when instructions ask for tool use.
• Copying selected text on Wayland now finishes as soon as wl-copy accepts it, instead of timing out and falling back to the in-process clipboard that can print "Somebody else owns the clipboard now" over the UI
• A narrow Sessions sidebar drops keyboard hints that do not fit instead of cutting one off mid-word
• MCP tools recover after transient discovery failures without restarting the session; unchanged catalogs remain available during recovery.
• "No supported model available" is no longer shown on launch or in the model picker when a configured provider already supplies a model
• MCP tool calls complete even when servers keep sending progress updates after responding
• A fresh launch no longer prints "Failed to read model provider attribution" errors while it signs in
• MCP OAuth sign-in to servers such as Datadog reuses a still-valid cached token
• Withdrawn running prompts stay removed after session resume
• Click anywhere on expanded tool calls in compact timeline to collapse them
• Holding Space and Ctrl+X V explain when voice mode is off or still getting ready

Fixes and changes

Added

• Add support for GPT-6.1 Sol in model selection

Improved

• Click anywhere on expanded tool calls in compact timeline to collapse them
• Holding Space and Ctrl+X V explain when voice mode is off or still getting ready

Fixed

• Permission prompts remain answerable after resuming interrupted sessions.
• Auto-approval now takes into account messages you type while the agent is working, as it already did for prompts sent while it was idle
• Compaction now returns a summary even when instructions ask for tool use.
• Copying selected text on Wayland now finishes as soon as wl-copy accepts it, instead of timing out and falling back to the in-process clipboard that can print "Somebody else owns the clipboard now" over the UI
• A narrow Sessions sidebar drops keyboard hints that do not fit instead of cutting one off mid-word
• MCP tools recover after transient discovery failures without restarting the session; unchanged catalogs remain available during recovery.

Fixed

• "No supported model available" is no longer shown on launch or in the model picker when a configured provider already supplies a model
• MCP tool calls complete even when servers keep sending progress updates after responding