[deps-release-notes] copilot-cli v1.0.67 action items #1272

Release Notes Action Items for copilot-cli 1.0.64 → 1.0.67

This issue summarizes upstream release notes for the copilot-cli dependency between the previously pinned version (1.0.64) and the new pinned version (1.0.67), highlighting items that may need follow-up in ado-aw.

The companion version-bump PR is titled chore(deps): update COPILOT_CLI_VERSION to 1.0.67.

Releases analyzed

• v1.0.65
• v1.0.66
• v1.0.67

Notable features for ado-aw to adopt

• Add Claude Sonnet 5 as a supported model (v1.0.67) — ado-aw's engine.rs model defaults and any documentation listing supported models may need updating to include Claude Sonnet 5.
• Subagent sessions keep parent tool restrictions (v1.0.67) — security-relevant behavior change: when using subagents within a pipeline agent, they now inherit the parent's tool restrictions. ado-aw maintainers should verify this aligns with expected security model for subagent scenarios.
• MCP OAuth against Microsoft Entra servers behind a tenant vanity domain (v1.0.67) — fixes AADSTS9010010/AADSTS90023 auth failures for MCP servers behind Entra vanity domains (e.g. Copilot Studio). Relevant for ado-aw users connecting MCP tools through enterprise Azure AD tenants.
• Add a copilot skill subcommand (v1.0.65) — new /skill alias for /skills to list, add, and remove skills from a file, URL, or directory. May be relevant for ado-aw's agency plugin scaffolding and skills documentation.

Deprecations

• Claude Opus 4.6 Fast deprecated (v1.0.66) — Claude Opus 4.8 Fast is the replacement. If ado-aw has any references to Claude Opus 4.6 Fast in documentation, defaults, or example configurations, those should be updated to Claude Opus 4.8 Fast.

This issue was opened automatically by the dependency version updater workflow.

Generated by Dependency Version Updater · 594.4 AIC · ⌖ 30.4 AIC · ⊞ 40.3K · ◷