[bot] Update Learning Hub: MCP config locations, folder trust, and CLI settings (v1.0.6–v1.0.10)

[github-actions]

What's New

Covers GitHub Copilot CLI releases v1.0.6 through v1.0.10 (2026-03-16 to 2026-03-20).

New features / changes found

v1.0.8 – v1.0.10:

• Workspace MCP servers (.mcp.json, .vscode/mcp.json, devcontainer.json) are now loaded only after folder trust is confirmed — a security improvement worth documenting
• Experimental MCP_ALLOWLIST feature for validating MCP servers against a configured registry
• New CLI config file locations: .mcp.json (repo root) and devcontainer.json now supported alongside .vscode/mcp.json

v1.0.9 – v1.0.10:

• include_gitignored config option to include gitignored files in @ file search
• extension_mode setting to control extensibility

v1.0.10:

• Config settings renamed to camelCase: includeCoAuthoredBy, effortLevel, autoUpdatesChannel, statusLine (old names still work)

Sections updated

File	Changes
understanding-mcp-servers.md	Updated "Configuring MCP Servers" section with a table of all supported config file locations; added folder trust security note; added MCP_ALLOWLIST to Best Practices
copilot-configuration-basics.md	Extended the "GitHub Copilot CLI" section with a table of recent settings additions and a camelCase naming note

Sources

• https://github.com/github/copilot-cli/releases/tag/v1.0.10
• https://github.com/github/copilot-cli/releases/tag/v1.0.9
• https://github.com/github/copilot-cli/releases/tag/v1.0.8
• https://github.com/github/copilot-cli/releases/tag/v1.0.7
• https://github.com/github/copilot-cli/releases/tag/v1.0.6

Note: automating-with-hooks.md and installing-and-using-plugins.md were both updated 2026-03-22 and already reflect the latest changes (hooks in settings.json, External Plugins section, etc.).

Generated by Learning Hub Updater · ◷

[Copilot]

Pull request overview

Updates Learning Hub documentation to reflect recent GitHub Copilot CLI changes (v1.0.6–v1.0.10), focusing on MCP configuration discovery/security and newly added/renamed CLI settings.

Changes:

• Documented additional MCP config file locations and added a folder-trust security note.
• Added guidance on the experimental MCP_ALLOWLIST feature.
• Expanded Copilot CLI configuration docs with a table of recently added settings and a naming convention note.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
website/src/content/docs/learning-hub/understanding-mcp-servers.md	Adds MCP config discovery locations table, folder trust note, and MCP_ALLOWLIST best-practice guidance.
website/src/content/docs/learning-hub/copilot-configuration-basics.md	Adds a CLI settings table and notes about the move to camelCase naming.

[Copilot]

The text says “CLI settings use camelCase naming”, but the table immediately below includes snake_case keys (include_gitignored, extension_mode). This reads as internally inconsistent/misleading. Consider either updating the intro sentence to reflect that some settings remain snake_case, or listing the preferred camelCase names for those settings (and optionally mentioning the legacy aliases in the note).

Suggested change

	| `include_gitignored` | Include gitignored files in `@` file search |
	| `extension_mode` | Control extensibility (agent tools and plugins) |
	> **Note**: Older snake_case names (e.g., `include_gitignored`, `auto_updates_channel`) are still accepted for backward compatibility, but camelCase is now the preferred format.
	| `includeGitIgnored` | Include gitignored files in `@` file search |
	| `extensionMode` | Control extensibility (agent tools and plugins) |
	> **Note**: Older snake_case aliases (for example, `include_gitignored` → `includeGitIgnored`, `extension_mode` → `extensionMode`, `auto_updates_channel` → `autoUpdatesChannel`) are still accepted for backward compatibility, but camelCase is now the preferred format.