GitHub Copilot CLI — May 2026 Releases

16 releases in May 2026.

What's new in GitHub Copilot CLI, May 2026

GitHub Copilot CLI adds /autopilot, /fork, /rubber-duck and a customizable status line

GitHub Copilot CLI's May 2026 releases focused on session control, autopilot and MCP. New commands include /autopilot (with /autopilot <objective> and a /goal alias), /fork to branch a session, /rubber-duck for an independent critique of the agent's work, /security-review, and /chronicle subcommands for session search and cost tips. Sixteen releases shipped, from v1.0.40 to v1.0.56.

Sessions now resume in their saved working directory, with -C <dir> to override, and --session-id=<id> resumes or starts a session by UUID. MCP got clientcredentials OAuth for headless use, experimental MCP Tasks support, an auth.redirectPort option, and per-server token usage in /mcp and /context. Startup got faster, Alpine Linux (musl) is supported, and the permissions.disableBypassPermissionsMode setting blocks allow-all mode. A security fix protects against RCE from malicious bare repositories nested in a project. Claude Opus 4.8 support arrived in v1.0.55. The remaining releases were mostly terminal rendering, resume and Windows fixes.

  • /autopilot toggles autopilot mode; /autopilot <objective> keeps it focused, with /goal as an alias (v1.0.45, v1.0.55)
  • /fork creates an independent copy of the current session and accepts an optional name (v1.0.45, v1.0.47)
  • /rubber-duck gets an independent critique of the agent's current work (v1.0.49)
  • MCP: clientcredentials OAuth for headless auth, experimental MCP Tasks, per-server token usage in /mcp (v1.0.40, v1.0.41, v1.0.55)
  • Security fix against RCE from malicious bare repositories nested in a project (v1.0.43)
  • Added /security-review, a customizable status line, and permissions.disableBypassPermissionsMode (v1.0.51, v1.0.55)

Upgrading from v1.0.39? See every change through v1.0.56.

GitHub Copilot CLI full changelog