Copilot CLI 1.0.112 stabilizes sandbox and subagent controls
GitHub promoted the Copilot CLI line to stable 1.0.112 with organization MCP policy enforcement, explicit untrusted-folder warnings, terminal-control sanitization for agent and MCP text, and session-wide AI-credit limits that now apply to subagents. It also documents macOS local-port sandbox behavior and repairs queued-session and approval handling.
Why it matters: The release moves several authority and cost controls onto the stable channel: administrators can keep the built-in GitHub MCP server disabled, operators can see skipped workspace configuration, terminal output is less able to restyle or hide prompts, and…