Copilot CLI locks down MCP; Skills mature; watch VS Code and licensing gotchas
GitHub Copilot’s latest CLI releases tighten Model Context Protocol access and add workflow polish, while teams see editor and licensing edge cases worth planning for. Copilot CLI v0.0.416 adds enforcement to block third‑party MCP servers when policy disallows them and improves help, streaming counters, terminal status layout, and undo confirmations, while v0.0.415 brought agent model selection, a plan approval menu with curated actions, an env loader, a show_file tool, and quality fixes like UTF‑8 BOM handling and MCP UI polish ([0.0.416](https://github.com/github/copilot-cli/releases/tag/v0.0.416), [0.0.415](https://github.com/github/copilot-cli/releases/tag/v0.0.415), [all releases](https://github.com/github/copilot-cli/releases)). For security‑minded orgs, this pairs with growing scrutiny of what MCP unlocks inside enterprises, from querying internal systems to chaining multi‑step actions—governance and allowlists now matter in practice ([Scalekit’s analysis](https://www.scalekit.com/blog/github-copilot-mcp-enterprise-security-governance)). On the usability front, VS Code Insiders is iterating on a model picker with search, context‑window details, and contextual quick‑pick dialogs, while Copilot in VS Code is adding deeper C++/CMake awareness for richer assistance ([Insiders discussion](https://www.reddit.com/r/GithubCopilot/comments/1rct0g9/new_in_vs_code_insiders_model_picker_and/), [InfoWorld coverage](https://www.infoworld.com/article/4136164/microsoft-brings-c-plus-plus-smarts-to-github-copilot-in-visual-studio-code.html)). Teams should also track known rough edges like Copilot chat sessions not updating without reinstall and license entitlement desync between business and personal seats ([VS Code issue](https://github.com/microsoft/vscode/issues/297226), [GitHub community thread](https://github.com/orgs/community/discussions/187874)). For repeatable DevOps/SRE workflows, “Skills” provide on‑demand, reusable AI runbooks that load progressively and bundle scripts/templates, making it easier to standardize safe automation alongside MCP‑backed tools ([Skills walkthrough](https://dev.to/pwd9000/github-copilot-skills-reusable-ai-workflows-for-devops-and-sres-caf)).