GITHUB PUB_DATE: 2026.03.14

COPILOT CLI 1.0.5: /PR AUTOMATION, SAFER PATHS, AND EXTENSION CONTROLS

GitHub shipped Copilot CLI 1.0.5 with a new /pr workflow, extension management, security hardening, and quality-of-life fixes. The [release](https://github.com...

Copilot CLI 1.0.5: /pr automation, safer paths, and extension controls

GitHub shipped Copilot CLI 1.0.5 with a new /pr workflow, extension management, security hardening, and quality-of-life fixes.

The release adds /pr to create and view PRs, auto-fix CI failures, handle review feedback, and resolve merge conflicts. You can now manage CLI extensions with /extensions, and @ file mentions support absolute, home, and parent-relative paths. A new /version command checks for updates from inside a session.

Security and reliability see upgrades: UNC network paths are blocked to prevent SMB credential leaks, classic PATs now error clearly, and Windows gets proper /diff rendering. There’s experimental embedding-based dynamic retrieval for MCP and skills per turn, a preCompact hook for running commands before context compaction, and syntax highlighting in /diff for 17 languages. Model defaults (like claude-sonnet-4.6) now persist correctly, and request IDs surface in timelines when retries exhaust.

[ WHY_IT_MATTERS ]
01.

/pr turns Copilot CLI into a hands-on PR co-pilot that can push fixes through CI and reviews, not just suggest code.

02.

Security hardening (UNC path block, PAT validation) reduces accidental credential exposure in mixed Windows/networked environments.

[ WHAT_TO_TEST ]
  • terminal

    Run /pr on a repo with a failing CI job and measure how often auto-fixes land green without human edits.

  • terminal

    Enable the experimental embedding-based MCP/skills retrieval and verify output quality and latency with and without a preCompact hook.

[ BROWNFIELD_PERSPECTIVE ]

Legacy codebase integration strategies...

  • 01.

    Audit scripts and shares for UNC path usage to avoid breakage from the new network path block; update flows where needed.

  • 02.

    Replace classic ghp_ PATs with fine‑grained tokens and validate Windows terminals now render /diff correctly in your developer images.

[ GREENFIELD_PERSPECTIVE ]

Fresh architecture paradigms...

  • 01.

    Bake /pr into your trunk-based flow to standardize branch-to-merge automation with CI feedback loops.

  • 02.

    Define a minimal extension set via /extensions and use preCompact hooks to shape context before long agent runs.

SUBSCRIBE_FEED
Get the digest delivered. No spam.