GitHub promoted Assisted Permissions to general availability across Copilot CLI, the Copilot app and Visual Studio Code. A model classifies command, filesystem and URL requests as clearly safe or approval-required, while enterprise settings can disable Assisted, block Allow All and set a default mode.
Why it matters: The rollout moves model-mediated permission decisions from a CLI-only release line into three production surfaces. It reduces approval friction but makes the classifier part of the authority boundary, so administrators need observable defaults, denials and…
GitHub added computer use in public preview to Copilot CLI and the Copilot app on macOS and Windows. With user approval it can read accessible and visual application context, click, type, scroll and drag across desktop workflows; administrators can disable the feature.
Why it matters: Copilot can now act in legacy and GUI-only software that lacks APIs or MCP, but screen access and input control turn mistaken interpretation and hostile on-screen content into direct action risk.
GitHub released dynamic workflows in Copilot CLI, the Copilot app and Copilot SDK. A Copilot extension can define deterministic commands, services, parallel agents, structured handoffs, human-input steps and resumable checkpoints while agents handle analysis or judgment.
Why it matters: The preview gives multi-agent work a reusable program structure instead of relying only on conversational delegation. That improves observability and repeatability, while also making extension code, tool permissions, pause state and agent outputs part of one…
GitHub moved local sandboxing from Copilot app preview to general availability across Copilot CLI, the Copilot app and VS Code Agent Host sessions. The cross-platform control uses Microsoft Execution Containers to enforce filesystem, network, credential, local-tool and MCP boundaries.
Why it matters: The expanded surface makes operating-system containment a common boundary for local coding agents instead of an app-specific preview. Enterprise policies can set limits that local users cannot weaken.
GitHub made centrally managed permissions generally available for Copilot agent operations. Administrators can set shell commands, file reads and edits, and network domains to blocked, require approval or proceed, with team-specific policies across the Copilot app, Copilot CLI and VS Code sessions using Agent Host.
Why it matters: Organization policy can now override local settings, auto-approval and saved approvals, reducing the chance that an individual convenience setting silently weakens an enterprise agent boundary.
GitHub Copilot for JetBrains added public-preview enterprise sandbox policies for filesystem, network, proxy, developer-tool and macOS Keychain access. Managed restrictions override user settings, while policy diagnostics and CLI-to-IDE context were added separately.
Why it matters: Central enforcement can turn local coding-agent boundaries into administrable policy, while the new CLI bridge expands what terminal sessions can inherit from IDE selections, diagnostics, files and environment configuration.
GitHub released Enterprise Server 3.22 and added a technical preview that lets administrators connect Copilot CLI to a configured model provider in disconnected or air-gapped environments while users authenticate with GHES credentials.
Why it matters: Enterprises can trial coding assistance inside restricted networks without a GitHub Cloud dependency, but the model endpoint, logs and policy path become locally owned security and reliability responsibilities.
GitHub made administrator-defined content exclusions generally available in the Copilot app and Copilot CLI for Business and Enterprise customers. Excluded files are not used as agent context across those workflows.
Why it matters: A repository policy now follows work into two agentic surfaces where broader file access could otherwise expose sensitive code or instructions.
GitHub made Agent Plugins 1.0 support generally available in VS Code, Copilot CLI, the GitHub Copilot SDK, and the Copilot app on all Copilot plans. A portable package can combine agent skills and MCP server configuration while retaining client-specific behavior in namespaced directories.
Why it matters: A shared plugin package can reduce duplicated manifests and skill bundles across agent clients, while GitHub's existing marketplace and MCP controls give enterprise teams a concrete governance path.
Copilot CLI added an experimental worktree command and a rewind that restores conversation state and Copilot-changed files while preserving later edits. Separate side-conversation and element-annotation features reached the Copilot app and VS Code.
Why it matters: Recoverable state and isolated file work make parallel agent sessions easier to control than one long conversation operating in a shared checkout.
GitHub added soft spending caps to Copilot CLI and SDK sessions. Limits include model calls, subagents and background compaction; interactive runs can pause and resume, while scripts can stop through a maximum-credit flag.
Why it matters: A per-run budget converts unattended agent cost from an after-the-fact dashboard metric into an enforceable operating boundary close to the work.
GitHub Copilot CLI supports Azure OpenAI, Anthropic and OpenAI-compatible endpoints, including Ollama, vLLM and Foundry Local. Its /model picker now discovers running Ollama models and can add or switch them without restarting; a separate offline mode disables GitHub network calls and telemetry.
Why it matters: A mainstream coding agent separated its interface and sub-agent workflow from GitHub-hosted model routing, giving teams direct control over model choice, spend and air-gapped operation.
GitHub made its terminal-native coding agent generally available to Copilot subscribers. The CLI can plan, edit, run commands and tests, delegate to specialist agents, move work to the cloud, connect MCP servers and skills, and expose diff and undo controls.
Why it matters: The terminal is becoming a full agent runtime rather than a thin chat surface, increasing both developer leverage and command-execution risk.
GitHub made its open-source Agentic Workflows generally available. Markdown goals compile to Actions YAML with read-only defaults, sandboxing, network controls and safe outputs, while GA adds ARC and Docker-in-Docker support, cost forecasting, model routing and micro-VM isolation options.
Why it matters: Reasoning-based repository automation now has a supported GA boundary and can reuse runner policy, but natural-language intent still becomes executable CI authority.
Copilot CLI can now pause before coding, ask clarifying questions through an ask-user tool and present a structured plan for review. Users can switch between planning and implementation with Shift-Tab and continue steering the session conversationally.
Why it matters: The useful control point for a coding agent is moving earlier—from reviewing a finished patch to correcting scope, assumptions and design before the agent writes code.