Update changelog.md for version 1.0.70

Author: github-actions[bot]

changelog.md

@@ -1,3 +1,53 @@
+## 1.0.70 - 2026-07-09
+
+- Add GPT-5.6 model support
+- Show a single Error prefix for mcp and skill command failures
+- Show the real parse error when --agent selects a malformed custom agent
+- web_fetch works through mandatory HTTPS proxies
+- Hide / search on the Gists tab
+- Treat superseded subagent runs as cancellations instead of failures
+- Add paginated session.mcp.resources read/list/listTemplates RPCs for MCP server resources
+- preToolUse hooks that exit with code 2 deny tool calls
+- Create draft skills when Forge finds a clear workflow pattern
+- Hide the GitHub App install nudge in remote terminals
+- Pin plugins to an exact commit SHA using the `sha` field in plugin source configuration
+- Add --sandbox and --no-sandbox flags to turn the OS-level shell sandbox on or off for the current session only, without changing your saved sandbox setting (useful with -p)
+- Add /refine to rewrite a rough, stream-of-consciousness prompt into a clear one
+- Add --repo and --local flags to /settings and /model
+- Add a setting to show or hide timeline timestamps
+- Let a trusted repository pin the model, effort level, and context tier and extend the URL/MCP/skill deny lists via .github/copilot/settings.json
+- Expose SDK APIs to manage live MCP servers in running sessions
+- Show the active user's models after /user switch
+- Declining an extension's permission prompt no longer disables tool approvals for the rest of the session
+- Avoid redundant background agent notifications after a blocking read_agent returns its result
+- Startup auth errors recommend the real `copilot login` command
+- Keep merge-semantics settings editable in /settings
+- Re-sync managed plugins when their cache is missing or empty
+- Copy the last assistant response even after command echoes
+- Persist the last-logged-in user on every login so a restarted runtime client stays authenticated
+- Hide /agent picker navigation hints when there is nothing to select
+- Open the plan file or research report with Ctrl+Y in any mode
+- Keep terminal color scheme changes in sync over SSH and remote shells
+- Prefill /chronicle search so it can accept a query
+- Show a distinct scrollbar thumb glyph in the /model picker on the no-color path (--no-color, non-color terminals) so the scroll position stays visible
+- Skip launching a browser in remote terminals
+- Arrow keys in /search and reverse search stay in search instead of switching tabs
+- Restore tool event ordering so permission prompts appear after tool start
+- Show only one cancellation message when streaming is aborted
+- Keep /pr tables aligned in compact timeline view
+- Show clear validation errors for empty or non-ASCII skill and command names
+- Keep footer selection highlights aligned when the session bar is open
+- Fail fast when marketplace plugin git auth needs a terminal prompt
+- Dismiss other pending read and fetch sandbox-bypass prompts after you disable the sandbox
+- Fix a crash on Windows triggered by desktop toast notifications
+- Improve GPT-5.6 commentary guidance for tool-driven progress updates
+- Highlight the sidebar toggle hint in the input footer
+- Make markdown links and bare URLs in the timeline and tool output clickable
+- Reclaim the blank line under the home tab bar: the timeline (and Sessions+Current split) sits flush under the tabs when a prompt is pinned, keeping one breathing line only while nothing is pinned
+- Press Tab to switch the context window in /model
+- Long-running sessions refresh enterprise managed settings hourly
+- Mark locally-spawned MCP servers that run inside the sandbox in `/mcp list` (e.g. `connected (sandboxed)`)
+
 ## 1.0.69 - 2026-07-07
 
 - Label built-in file edits with a (sandbox policy) badge instead of (sandboxed), since they follow the sandbox policy on a best-effort basis rather than running in the OS-level sandbox