Copilot CLI 1.0.111 adds regex permission rules for enterprises and a host option for remote sessions

GitHub's Copilot CLI 1.0.111, dated November 13, 2026, adds:

• Permission rules: enterprise-managed Shell, Bash and PowerShell permission rules now support regular expressions.
• Remote sessions: --host-allow-session-creation lets remote clients create sessions on a CLI host for one launch, without changing saved settings; sessions started with /new or from the Sessions tab can be controlled from GitHub when remote sessions are enabled.
• Usage: /usage refreshes premium request usage so percentages stay current, and its activity graph counts only the prompts the user typed, not sub-agent or autopilot prompts.
• Workflows (experimental): with dynamic workflows, a workflow's own agent can no longer start or resume workflow runs, so a workflow can no longer start copies of itself without limit when all tools are allowed.
• MCP and plugins: duplicate MCP OAuth reconnects are prevented, OAuth sign-in for remote MCP servers works through proxies that require Kerberos (Negotiate) authentication, and context from several userPromptSubmitted hooks now reaches the model instead of only the last one's. copilot plugin enable, disable, update and uninstall now fail and name config.json when it cannot be parsed.
• Config safety: a config.json that cannot be read is no longer replaced at startup by a file holding only firstLaunchAt, so trusted folders, plugins and marketplaces stay in the file.
• Other: scratch files under /tmp on macOS no longer trigger path permission prompts unless --disallow-temp-dir is set; with Auto selected, the footer's context percentage uses the window of the model Auto routed to; copilot -p "/compact" --silent no longer prints the compaction result.

The release also carries many fixes to terminal layout in narrow terminals, screen-reader mode, pasted text and escape sequences, /diff and the Sessions sidebar.