Skip to content
GC

GitHub Copilot CLI v1.0.106-5

Released · GitHub / Microsoft

Pre-releaseBreakingSecurity fixChanges MCP server config, settings files

What the release notes say

Fixed

  • includeCoAuthoredBy: false is now honored in ACP mode (copilot --acp), so ACP clients no longer instruct the agent to add a Co-authored-by trailer to commits.
  • Targeted /settings commands show the selected setting immediately
  • A telemetry-disabled warning raised while resuming a session is saved to the session history, so later events no longer reference a missing parent.
  • A BYOK provider key that is not a valid HTTP header value, such as key command output with a status line before the key, is no longer printed in the model error or saved in the session log.
  • copilot mcp enable now fails with a clear message for a server the repository disables, instead of reporting success and changing nothing
  • A prompt hook that returns an empty modifiedPrompt or modifiedTransformedPrompt no longer sends the model an empty prompt. A hook value that is ignored because it is empty or not a string now shows a warning naming the field.
  • copilot sessions import --name "" is now rejected as an invalid name in both --dry-run and a real import, instead of passing the dry run and then failing with a persistence error.
  • A ~/ directory in skillDirectories, COPILOT_SKILLS_DIRS or COPILOT_CUSTOM_INSTRUCTIONS_DIRS now resolves to your home directory, so its skills and instructions load.
  • The .vscode/mcp.json migration notice now appears in repository subdirectories and after /cd into another workspace, and no longer appears for repositories already migrated to .mcp.json.
  • Skill and background-agent timeline entries now show sanitized, readable errors and results
  • Allow /mcp enable and /mcp disable for servers granted GitHub auth at startup
  • Gemini models automatically defer tools behind search when requests exceed the 512-function limit.
  • Removed repository hook configs no longer block later tool calls in the same session.
  • In --autopilot, background task completions that arrive after a run stops are delivered with your next message instead of being dropped.
  • Collect debug logs keeps the active invocation and ignores stale completion results
  • Resuming a session with an unreadable event log now reports a load error instead of not found
  • Copying text on native Windows no longer changes your console code page.
  • Keep the selected task visible in /tasks when long lists exceed terminal height
  • Signing in to a remote MCP server whose protected resource is a bare origin such as https://mcp.example.com no longer sends the resource with an added trailing slash, which authorization servers that compare it exactly rejected.
  • Write remote session handoff cleanup failures to the debug log and show a clear error when no remote session is prepared
  • Keep command-mode drafts after accepted commands so you can continue typing immediately.