Most of 1.0.91 is sandbox plumbing, and most of it lands on Windows. The new `copilot sandbox ca` subcommands let you manage which proxy certificate authorities the sandbox trusts, and unattended setup now runs without a human at the keyboard — useful if you're wiring Copilot CLI into CI on Windows runners. The release also fixes a PowerShell working-directory bug and reworks how shell pipelines get approved: a complete, statically analyzable read-only pipeline can now go through execution-evidence review instead of demanding an explicit yes, while anything that can write still needs your sign-off. A pre-release, 1.0.92-0, followed the same afternoon to fix a narrower annoyance — MCP tools silently dying after an OAuth re-authentication when the tool definitions hadn't changed. If you run MCP servers through Copilot CLI and have hit tools going dark after a token refresh, that's the one.