1.0.70-0

Added

• Pin plugins to an exact commit SHA using the sha field in plugin source configuration
• Add --sandbox and --no-sandbox flags to turn the OS-level shell sandbox on or off for the current session only, without changing your saved sandbox setting (useful with -p)
• Add /refine to rewrite a rough, stream-of-consciousness prompt into a clear one
• Add --repo and --local flags to /settings and /model
• Add a setting to show or hide timeline timestamps
• Let a trusted repository pin the model, effort level, and context tier and extend the URL/MCP/skill deny lists via .github/copilot/settings.json
• Expose SDK APIs to manage live MCP servers in running sessions

Improved

• Improve GPT-5.6 commentary guidance for tool-driven progress updates
• Highlight the sidebar toggle hint in the input footer
• Make markdown links and bare URLs in the timeline and tool output clickable
• Reclaim the blank line under the home tab bar: the timeline (and Sessions+Current split) sits flush under the tabs when a prompt is pinned, keeping one breathing line only while nothing is pinned
• Press Tab to switch the context window in /model
• Long-running sessions refresh enterprise managed settings hourly
• Mark locally-spawned MCP servers that run inside the sandbox in /mcp list (e.g. connected (sandboxed))

Fixed

• Show the active user's models after /user switch
• Declining an extension's permission prompt no longer disables tool approvals for the rest of the session
• Avoid redundant background agent notifications after a blocking read_agent returns its result
• Startup auth errors recommend the real copilot login command
• Keep merge-semantics settings editable in /settings
• Re-sync managed plugins when their cache is missing or empty
• Copy the last assistant response even after command echoes
• Persist the last-logged-in user on every login so a restarted runtime client stays authenticated
• Hide /agent picker navigation hints when there is nothing to select
• Open the plan file or research report with Ctrl+Y in any mode
• Keep terminal color scheme changes in sync over SSH and remote shells
• Prefill /chronicle search so it can accept a query
• Show a distinct scrollbar thumb glyph in the /model picker on the no-color path (--no-color, non-color terminals) so the scroll position stays visible
• Skip launching a browser in remote terminals
• Arrow keys in /search and reverse search stay in search instead of switching tabs
• Restore tool event ordering so permission prompts appear after tool start
• Show only one cancellation message when streaming is aborted
• Keep /pr tables aligned in compact timeline view
• Show clear validation errors for empty or non-ASCII skill and command names
• Keep footer selection highlights aligned when the session bar is open
• Fail fast when marketplace plugin git auth needs a terminal prompt
• Dismiss other pending read and fetch sandbox-bypass prompts after you disable the sandbox
• Fix a crash on Windows triggered by desktop toast notifications