Repository navigation
[bot] Update Learning Hub for Copilot CLI 1.0.100–1.0.101 - #5196
Merged
aaronpowell merged 2 commits intoOct 27, 2026
Merged
Conversation
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
Author
🚦 Submission status: ⏳ Awaiting automationRisk tier: Why this tier
Automated checks
Review
Commands
Updated for |
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
Author
|
Commit pushed:
|
aaronpowell
approved these changes
Oct 27, 2026
aaronpowell
left a comment
aaronpowell
left a comment
Contributor
There was a problem hiding this comment.
Verified each addition against the copilot-cli release notes for v1.0.100–v1.0.103 — all accurate, and the sandbox localhost correction is right. Title/description still say 1.0.100–1.0.101 though later commits cover 1.0.102 and 1.0.103; retitling when marking ready.
aaronpowell
marked this pull request as ready for review
October 27, 2026 02:49
aaronpowell
enabled auto-merge
October 27, 2026 02:49
aaronpowell
deleted the
docs/learning-hub-cli-1-0-101-update-8530609dd17dd577
branch
October 27, 2026 02:49
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The primary sandbox guidance still contradicts the updated local-network default, potentially misleading readers about isolation.
1 open issue
What changed in this PR
Updates the Learning Hub’s Copilot CLI guides with configuration, plugin, and remote-control changes from releases 1.0.100–1.0.103.
Changes:
- Documents startup flags, sandbox controls, and Assisted permissions guidance.
- Expands plugin installation and marketplace documentation.
- Replaces retired remote startup flags with in-session commands.
| File | Description |
|---|---|
website/src/content/docs/learning-hub/using-copilot-coding-agent.md |
Updates remote-control instructions and adds migration guidance. |
website/src/content/docs/learning-hub/installing-and-using-plugins.md |
Adds install-link, marketplace, and plugin update guidance. |
website/src/content/docs/learning-hub/copilot-configuration-basics.md |
Documents new flags, sandbox behavior, and permission settings. |
Review effort: Max
| - **Sandbox auth settings moved from `sandbox.gitAuth`/`sandbox.ghAuth` to `sandbox.auth.git`/`sandbox.auth.gh`.** There is no automatic migration; the old keys are silently ignored, and SDK requests that still send them are rejected as invalid. | ||
| - **`worktreeBaseRef` now defaults to `HEAD` for all worktree-creation paths.** The `--worktree` startup flag previously defaulted to branching from the remote default branch instead. | ||
| - **Sandbox network isolation on macOS/Linux blocks localhost by default.** Sandboxed commands — including a server the sandboxed command itself starts on `127.0.0.1` — can no longer reach services on your own machine. Turn on **Allow local network** in `/sandbox` if your test suite binds a local port. Linux sandboxing also requires `slirp4netns`, `nsenter`, `iptables`, `ip6tables`, `iptables-restore`, and `ip6tables-restore` on `PATH`. | ||
| - **Sandbox local network access is now allowed by default.** Earlier releases blocked localhost and private-network access from sandboxed commands. Current releases allow it, so commands can reach local services; turn off **Allow local network** in `/sandbox` if you want the stricter isolation. Linux sandboxing also requires `slirp4netns`, `nsenter`, `iptables`, `ip6tables`, `iptables-restore`, and `ip6tables-restore` on `PATH`. |
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
New features found (Copilot CLI v1.0.100 and v1.0.101)
--trust-folderfor one-off-p/piped sessions, and--disable-client-telemetry/sandboxsession-only enablement, proxy env var support,GITHUB_TOKENviacredentials.envVars, and local network access now allowed by defaultassistedApprovalInstructionssetting for Assisted permissions(redacted) install links, auto-install of trusted repo plugins, Team marketplaces, and thebrowser-use` renameSections updated
copilot-configuration-basics.md: CLI Startup Flags, new Sandbox Session Control and Assisted Permissions Guidance sectionsinstalling-and-using-plugins.md: new Installing from GitHub Install Links sectionSources
Content cleanup
Rewrote the outdated Compatibility and Migration Notes entry saying sandbox blocks localhost by default. Local network access is now allowed by default. No other version notes needed changes.
Note: the other fetch sources (changelog pages, blog, VS Code notes) were not reachable in this run, so only the GitHub release notes were used. The existing PR #5062 covers agent-scoped hooks, a different area, so this is a separate PR.