Update changelog.md for version 1.0.83

Author: github-actions[bot]

changelog.md

@@ -1,3 +1,43 @@
+## 1.0.83 - 2026-09-04
+
+- Show running Copilot sessions in the Windows 11 taskbar with live hover status cards
+- Add Client ID Metadata Document (CIMD) support for MCP OAuth sign-in
+- Custom agents can list several models in `model`, tried in order until one is available to you, and `model-policy: required` keeps model changes on that list
+- Adding support for claude-fable-5.1
+- Add Recent, Created, Name, and classic None sorting to the split Sessions sidebar, with the selected order saved across restarts
+- Enterprise admins can pin sign-in to approved GitHub organizations with the forceLoginOrgs managed setting
+- Add automatic HTTPS proxy mTLS client certificate support for model and web requests
+- Detect the herdr terminal multiplexer instead of mistaking it for tmux, so the Kitty keyboard protocol, color scheme following, terminal progress, `/copy` and notifications work in herdr panes
+- A session lock that is re-entered on the same thread now fails with a reported error instead of freezing the CLI.
+- Kerberos proxy authentication reconnects when the initial challenge answers with `Connection: close`
+- Sandboxed `gh` commands now authenticate as the account configured for the repository instead of the Copilot CLI login
+- MCP tools remain callable after MCP server restarts
+- Sandboxed file tools now read the same developer-tool paths as sandboxed shell commands, including token-bearing registry config such as ~/.npmrc; set sandbox.allowDevToolAccess to false to turn these grants off
+- Stopping a timed-out shell command now lets queued messages run and sessions return to idle
+- A follow-up prompt typed while autopilot is running no longer disappears from the timeline
+- Restart provides clearer update guidance when automatic restart cannot be completed
+- MCP servers configured by your agent stay available after built-in sub-agent turns.
+- Anthropic sessions continue after temporary fallback instead of failing on invalid thinking signatures
+- Long-running sessions on Linux return freed memory to the system instead of holding gigabytes of it
+- Enterprise-denied MCP servers can no longer start before the managed allow/deny policy resolves; server startup now waits for the managed-settings fetch instead of racing it
+- Host-provided plugin customizations can be read without redundant path permission prompts
+- A relative `--add-dir` or `--plugin-dir` path now resolves against the session's working directory under `--resume=<id>` and `--worktree`, instead of the directory the CLI was launched from. Relative values are also resolved after `-C` is applied, so `-C` no longer has to precede either option on the command line
+- MCP servers contributed by a plugin are no longer labelled "User" in the MCP dashboard, and a server from a bundled plugin is now shown as built-in and names the plugin it came from.
+- The newest line of output stays visible above the input box instead of hiding behind it, except while a prompt is pinned to the top of the transcript
+- Exporting a resumed session with --share or --share-gist writes the whole transcript instead of only the latest run
+- On macOS and Linux, sandboxed commands can no longer reach services running on your machine. On macOS this also blocks a server the command itself starts on 127.0.0.1, so test suites that bind a local port will fail; turn on Allow local network in /sandbox to reach localhost again.
+- Linux sandboxing now needs slirp4netns, nsenter, iptables, ip6tables, iptables-restore and ip6tables-restore on PATH. Install them if sandboxed commands start failing to launch.
+- CLI starts without the interrupted-session restore prompt by default.
+- Resuming large sessions keeps the input prompt responsive sooner.
+- Linux sandboxes now restrict network egress to the configured proxy; proxy mode requires slirp4netns, util-linux 2.35+, iptables, and /dev/net/tun access
+- `/mcp config` and the MCP add/edit/authenticate forms now open in the plugins dashboard instead of a separate MCP manager, so closing a form returns to the server list.
+- File path autocomplete stays fast in large repositories
+- Plugin list commands and /plugin now show bundled built-in plugins.
+- Improve sandboxed Bazel and Bazelisk runs by granting required cache and output paths; macOS requires a future Bazel release or additional sandbox capabilities
+- The collapsed autopilot goal panel now reads as a single-line pinned prompt, keeping the frame it shares with a pinned prompt instead of compressing into a bare band wedged against the chrome above it
+- Improve /sandbox policy by grouping path grants by source and showing detected developer tools
+- Remove retired Claude and Gemini models from /model picker results
+
 ## 1.0.82 - 2026-08-29
 
 - A message typed while /worktree or /move is preparing the worktree no longer breaks the switch into it