Summary
The release disables network access by default for read-only workflows. It also records richer session provenance, plugin installations and MCP configuration, improving auditability of agent-driven automation.
Why it matters
This makes least-privilege defaults a built-in property of agentic CI workflows and reduces the blast radius of compromised or misbehaving agents.
Related coverage
- GitHub Copilot CLI adds agent-scoped hooks and safer autopilot handling
- pnpm adds registry profile and token management commands
- Next.js canary adds agent-aware upgrade controls and durable-cache changes