What changed
GitHub's Copilot CLI 1.0.108 prerelease restarts a running local MCP server after /cd so sandbox-denied paths follow the new working directory. The same prerelease line adds enumerate-only Windows directory grants and shared repository indexing controls.
Why it matters
A local server that retained the old directory's policy could keep an authority boundary that no longer matched the visible workspace. Restarting it closes that stale-policy path, while enumerate-only grants separate discovery from file reading or modification.
What to do
Canary 1.0.108-1 in a disposable repository: start a local MCP server, change into a directory with different denied paths, confirm the server restarts and both old and new denials behave as configured, then roll back to stable until the fix is promoted.
Caveat
Both 1.0.108-0 and 1.0.108-1 are prereleases, not the stable channel. GitHub documents the fix but supplies no independent sandbox audit, and restarting a server can change state or interrupt in-flight work.