Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion .github/workflows/check-for-spammy-prs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,7 @@ jobs:
const onlyRenames = files.length > 0 && files.every(
f => f.status === 'renamed' && f.additions === 0 && f.deletions === 0
)
const onlyIndexMd = files.length === 1 && files[0].filename.split('/').pop() === 'index.md'
if (
targetsNonMain ||
Expand All @@ -58,7 +59,8 @@ jobs:
isEmptyCommit ||
touchesTooMany ||
isBlankLineEdit ||
onlyRenames
onlyRenames ||
onlyIndexMd
) {
await github.rest.issues.addLabels({
owner,
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -768,7 +768,7 @@ If a device has a managed policy that could not be read, the CLI fails closed an

### Restricting the --allow-all options

When `permissions.disableBypassPermissionsMode` is set to `"disable"`, all of the command line options that allow all permissions (`--allow-all-tools`, `--allow-all-paths`, `--allow-all-urls`, `--allow-all`, `--yolo`) are suppressed at startup and cannot be used to grant elevated permissions. The `/permissions allow-all` slash command, and its aliases `/allow-all` and `/yolo`, are also suppressed.
When `permissions.disableBypassPermissionsMode` is set to `"disable"`, all of the command line options that allow all permissions (`--allow-all-tools`, `--allow-all-paths`, `--allow-all-urls`, `--allow-all`, `--yolo`) are suppressed at startup and cannot be used to grant elevated permissions. The CLI shows a policy warning when it suppresses these options. The `/permissions allow-all` slash command, and its aliases `/allow-all` and `/yolo`, are also suppressed.

Set `permissions.disableBypassPermissionsMode` to `"allow-auto-only"` to block full allow-all permissions but permit `/permissions assisted` (LLM-assisted permission approval). Assisted approval still prompts for each request, but attaches an LLM safety recommendation so the CLI can auto-approve requests the model evaluates as acceptable.

Expand Down Expand Up @@ -796,6 +796,7 @@ Use `--model=MODEL` or the `COPILOT_MODEL` environment variable to select the AI
| `gpt-6-astra` | Recommended, opt-in (not the automatic default) |
| `gpt-6-luna` | Recommended, opt-in (not the automatic default) |
| `claude-opus-5.5` | Recommended, high-capability complex tasks |
| `claude-haiku-5.5` | Fast, lightweight operations |
| `claude-haiku-4.5` | Fast, lightweight operations |
| `gpt-5.3-codex` | Code-focused tasks |
| `gemini-3.7-flash` | Fast Google Gemini responses |
Expand Down
2 changes: 1 addition & 1 deletion src/content-pipelines/state/copilot-cli.sha
Original file line number Diff line number Diff line change
@@ -1 +1 @@
b54a98168fccacdc804509ca951452c6d97811c9
d7d56dfd452da6277ff654c83953b2725a1eeb57
Original file line number Diff line number Diff line change
Expand Up @@ -6372,6 +6372,15 @@
"additional-permissions": true,
"access": "read"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "read"
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -8865,6 +8874,15 @@
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8106,6 +8106,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "read",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -11159,6 +11170,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6372,6 +6372,15 @@
"additional-permissions": true,
"access": "read"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "read"
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -8865,6 +8874,15 @@
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -8106,6 +8106,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "read",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -11159,6 +11170,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7017,6 +7017,15 @@
"additional-permissions": true,
"access": "read"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "read"
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -9555,6 +9564,15 @@
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10173,6 +10173,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "read",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -13281,6 +13292,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -7017,6 +7017,15 @@
"additional-permissions": true,
"access": "read"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "read"
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -9555,6 +9564,15 @@
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -10173,6 +10173,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "read",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -13281,6 +13292,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -3732,6 +3732,15 @@
"additional-permissions": true,
"access": "read"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "read"
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -5778,6 +5787,15 @@
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"additional-permissions": true,
"access": "write"
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -5004,6 +5004,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "read",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "git",
"slug": "create-a-blob",
Expand Down Expand Up @@ -7512,6 +7523,17 @@
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-fork",
"subcategory": "forks",
"verb": "post",
"requestPath": "/repos/{owner}/{repo}/forks",
"access": "write",
"user-to-server": true,
"server-to-server": true,
"additional-permissions": true
},
{
"category": "repos",
"slug": "create-a-repository-using-a-template",
Expand Down
Loading
Loading