GitHub Copilot CLI 1.0.72-1.0.73: agentStop hook loop fix, sandboxed git/gh auth, skill/plugin management parity

GitHub

Tools official 2 src. ~1 min

GitHub Copilot CLI shipped v1.0.72 (2026-07-20) and v1.0.73 (2026-07-21): a fix so an agentStop hook that always blocks no longer loops indefinitely (forced end after 8 consecutive blocks, with a stop_hook_active flag for hooks to self-limit), opt-in git/gh authentication inside the OS sandbox, macOS keychain access now off by default in the sandbox for tighter isolation, and new /plugins update/uninstall verbs plus --skill/--mcp targeting for plugin management parity.

Why it matters

The agentStop infinite-loop fix addresses a real reliability bug in Copilot CLI's hook system, and the sandbox keychain-off-by-default change tightens the security posture for agentic terminal use.

Importance: 2/5

Notable bug-fix and sandbox-hardening update to a widely used coding CLI.

cli coding-agent github-copilot mcp

Sources

official github/copilot-cli release v1.0.73

official github/copilot-cli release v1.0.72