From e776389d4fd7dfee61be55c5f4c2135e0f01985d Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sun, 26 Jul 2026 01:42:09 +0000 Subject: [PATCH] docs: refresh Copilot CLI/SDK workshop from upstream sources (2026-07-26) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit CLI tutorial: - features.md: update model deprecation warning (Opus 4.6 deprecated, Gemini 2.5 Pro/3 Flash scheduled); add new models (Claude Opus 5, Gemini 3.6 Flash, GPT-5.6 Sol/Terra/Luna); add AI credit session limits note; add auto model selection task-routing note - features.ja.md: sync Japanese translation - appendix/references.md: add 7 new ledger rows (2026-07-01 through 2026-07-24) SDK tutorial: - getting_started.md: update GitHub Actions section — Copilot CLI no longer requires a PAT; update 'avoid static tokens' section - getting_started.ja.md: sync Japanese translation - appendix/references.md: add ledger rows for SDK v1.0.7, v1.0.8, and PAT change Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- docs/copilot_cli_tutorial/appendix/references.md | 7 +++++++ docs/copilot_cli_tutorial/features.ja.md | 7 ++++++- docs/copilot_cli_tutorial/features.md | 7 ++++++- docs/copilot_sdk_tutorial/appendix/references.md | 4 ++++ docs/copilot_sdk_tutorial/getting_started.ja.md | 13 ++++++++----- docs/copilot_sdk_tutorial/getting_started.md | 13 ++++++++----- 6 files changed, 39 insertions(+), 12 deletions(-) diff --git a/docs/copilot_cli_tutorial/appendix/references.md b/docs/copilot_cli_tutorial/appendix/references.md index a3287dc..cacab43 100644 --- a/docs/copilot_cli_tutorial/appendix/references.md +++ b/docs/copilot_cli_tutorial/appendix/references.md @@ -64,6 +64,13 @@ Check these sources before each workshop run. Copilot CLI changes quickly enough | Date | Change | Source | |------|--------|--------| +| 2026-07-24 | Claude Opus 5 now available in GitHub Copilot; CLI 1.0.75 adds native support — designed for complex, long-running coding tasks | [GitHub Blog Changelog](https://github.blog/changelog/2026-07-24-claude-opus-5-is-now-available-in-github-copilot) | +| 2026-07-21 | Gemini 3.6 Flash now available in GitHub Copilot | [GitHub Blog Changelog](https://github.blog/changelog/2026-07-21-gemini-3-6-flash-is-now-available-in-github-copilot) | +| 2026-07-09 | OpenAI GPT-5.6 Sol, Terra, and Luna now available in GitHub Copilot | [GitHub Blog Changelog](https://github.blog/changelog/2026-07-09-openai-s-gpt-5-6-sol-terra-and-luna-are-now-available-in-github-copilot) | +| 2026-07-02 | Copilot CLI can now authenticate in GitHub Actions using the built-in `GITHUB_TOKEN` with `permissions: copilot: write` — no PAT required | [GitHub Blog Changelog](https://github.blog/changelog/2026-07-02-copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions) | +| 2026-07-02 | Gemini 2.5 Pro and Gemini 3 Flash scheduled for upcoming deprecation across Copilot surfaces | [GitHub Blog Changelog](https://github.blog/changelog/2026-07-02-upcoming-deprecation-of-gemini-2-5-pro-and-gemini-3-flash) | +| 2026-07-01 | Copilot CLI auto model selection now routes to the best model based on task type | [GitHub Blog Changelog](https://github.blog/changelog/2026-07-01-copilot-cli-auto-model-selection-routes-based-on-task) | +| 2026-07-01 | AI credit session limits can be set in Copilot CLI and SDK to cap per-session spend | [GitHub Blog Changelog](https://github.blog/changelog/2026-07-01-set-ai-credit-session-limits-in-copilot-cli-and-sdk) | | 2026-06-29 | Claude Opus 4.8 (fast mode) entered preview across Copilot surfaces including Copilot CLI (admin policy off by default) | [GitHub Blog Changelog](https://github.blog/changelog/2026-06-29-claude-opus-4-8-fast-mode-is-now-in-preview-for-github-copilot) | | 2026-06-26 | MAI-Code-1-Flash reached general availability for Copilot Business and Copilot Enterprise | [GitHub Blog Changelog](https://github.blog/changelog/2026-06-26-mai-code-1-flash-for-copilot-business-and-copilot-enterprise) | | 2026-06-25 | Copilot code review now uses the CLI/SDK `grep`/`rg`/`glob`/`view` file tools (~20% lower review cost) and adds org-level default Medium analysis depth | [GitHub Blog Changelog](https://github.blog/changelog/2026-06-25-copilot-code-review-analysis-depth-and-efficiency-updates) | diff --git a/docs/copilot_cli_tutorial/features.ja.md b/docs/copilot_cli_tutorial/features.ja.md index e62983e..6c288a7 100644 --- a/docs/copilot_cli_tutorial/features.ja.md +++ b/docs/copilot_cli_tutorial/features.ja.md @@ -24,10 +24,15 @@ | ローカル／外部プロバイダー検証 | BYOK 設定を使う（[BYOK](#byok) を参照） | モデルはツール呼び出しとストリーミングをサポートする必要がある | !!! warning "モデルのライフサイクルは短い" - 最近の changelog だけでも、GPT-4.1 は 2026-06-01 に deprecated、GPT-5.2 と GPT-5.2-Codex は 2026-06-05 に多くの Copilot 体験で deprecated、Opus 4.6 (fast) は 2026-06-29 に deprecated 予定です（[GPT-4.1 deprecated](https://github.blog/changelog/2026-06-02-gpt-4-1-deprecated)、[GPT-5.2 and GPT-5.2-Codex deprecated](https://github.blog/changelog/2026-06-05-gpt-5-2-and-gpt-5-2-codex-deprecated)、[Upcoming deprecation of Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)）。ワークショップ実施前に `/model`、[supported models](https://docs.github.com/copilot/reference/ai-models/supported-models)、[GitHub Blog Copilot changelog](https://github.blog/changelog/label/copilot/) を確認してください。 + 最近の changelog だけでも、GPT-4.1 は 2026-06-01 に deprecated、GPT-5.2 と GPT-5.2-Codex は 2026-06-05 に多くの Copilot 体験で deprecated、Opus 4.6 (fast) は 2026-06-29 に deprecated、Gemini 2.5 Pro と Gemini 3 Flash は近く deprecated 予定です（[GPT-4.1 deprecated](https://github.blog/changelog/2026-06-02-gpt-4-1-deprecated)、[GPT-5.2 and GPT-5.2-Codex deprecated](https://github.blog/changelog/2026-06-05-gpt-5-2-and-gpt-5-2-codex-deprecated)、[Upcoming deprecation of Gemini 2.5 Pro and Gemini 3 Flash](https://github.blog/changelog/2026-07-02-upcoming-deprecation-of-gemini-2-5-pro-and-gemini-3-flash)）。ワークショップ実施前に `/model`、[supported models](https://docs.github.com/copilot/reference/ai-models/supported-models)、[GitHub Blog Copilot changelog](https://github.blog/changelog/label/copilot/) を確認してください。 固定の演習手順にしない範囲で、最近の追加として押さえるべき点は次のとおりです。 +- **Claude Opus 5** が GitHub Copilot で利用可能になりました。慎重な推論と効果的なツール使用を必要とする複雑な長時間コーディングタスク向けで、CLI 1.0.75 でネイティブサポートされます（[Claude Opus 5 available](https://github.blog/changelog/2026-07-24-claude-opus-5-is-now-available-in-github-copilot)）。 +- **Gemini 3.6 Flash** が GitHub Copilot で利用可能になりました（[Gemini 3.6 Flash available](https://github.blog/changelog/2026-07-21-gemini-3-6-flash-is-now-available-in-github-copilot)）。 +- **GPT-5.6 Sol、Terra、Luna**（OpenAI）が GitHub Copilot で利用可能になりました（[GPT-5.6 Sol, Terra, Luna available](https://github.blog/changelog/2026-07-09-openai-s-gpt-5-6-sol-terra-and-luna-are-now-available-in-github-copilot)）。 +- **Auto モデル選択** がタスクの種類に基づいて最適なモデルにルーティングするようになりました。ワークショップのスクリプトにモデル名を固定しないもう一つの理由です（[Copilot CLI auto model selection routes based on task](https://github.blog/changelog/2026-07-01-copilot-cli-auto-model-selection-routes-based-on-task)）。 +- **AI クレジットのセッション制限** を CLI と SDK で設定し、エージェントがセッションで消費する量を上限設定できます。自律実行や CI に便利です（[Set AI credit session limits](https://github.blog/changelog/2026-07-01-set-ai-credit-session-limits-in-copilot-cli-and-sdk)）。 - Gemini 3.1 Pro (Preview) と Gemini 3.5 Flash は、プランとポリシーが許せば Copilot CLI で利用できます。Business／Enterprise 管理者はモデルポリシーで opt in する必要があります（[Gemini models in Copilot CLI](https://github.blog/changelog/2026-06-02-gemini-models-in-copilot-cli-cloud-agent-and-the-copilot-app)）。 - MAI-Code-1-Flash は Copilot Business および Copilot Enterprise で一般提供（GA）になりました（管理者はポリシーを有効化する必要があります）。Copilot CLI でもプランごとに段階的に提供されます（[MAI-Code-1-Flash for Copilot Business and Copilot Enterprise](https://github.blog/changelog/2026-06-26-mai-code-1-flash-for-copilot-business-and-copilot-enterprise)、[MAI-Code-1-Flash available on more Copilot surfaces](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces)）。 - Enterprise 管理者が構成した外部プロバイダーモデルは Copilot CLI の model picker に表示されます。一方で個人ユーザーはクライアント側 BYOK プロバイダーも構成できます（[Copilot CLI supports enterprise BYOK models](https://github.blog/changelog/2026-06-17-copilot-cli-supports-enterprise-bring-your-own-key-byok-models)）。 diff --git a/docs/copilot_cli_tutorial/features.md b/docs/copilot_cli_tutorial/features.md index a254304..078b8ef 100644 --- a/docs/copilot_cli_tutorial/features.md +++ b/docs/copilot_cli_tutorial/features.md @@ -24,10 +24,15 @@ Use this decision table instead: | Local or external-provider experiments | Use BYOK settings (see [BYOK](#byok)) | Model must support tool calling and streaming | !!! warning "Model lifecycle changes quickly" - Recent changelog examples show why fixed model lists go stale: GPT-4.1 was deprecated on 2026-06-01, GPT-5.2 and GPT-5.2-Codex were deprecated across most Copilot experiences on 2026-06-05, and Opus 4.6 (fast) is scheduled for deprecation on 2026-06-29 ([GPT-4.1 deprecated](https://github.blog/changelog/2026-06-02-gpt-4-1-deprecated), [GPT-5.2 and GPT-5.2-Codex deprecated](https://github.blog/changelog/2026-06-05-gpt-5-2-and-gpt-5-2-codex-deprecated), [Upcoming deprecation of Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)). Before running a workshop, check `/model`, [supported models](https://docs.github.com/copilot/reference/ai-models/supported-models), and the [GitHub Blog Copilot changelog](https://github.blog/changelog/label/copilot/). + Recent changelog examples show why fixed model lists go stale: GPT-4.1 was deprecated on 2026-06-01, GPT-5.2 and GPT-5.2-Codex were deprecated across most Copilot experiences on 2026-06-05, Opus 4.6 (fast) was deprecated on 2026-06-29, and Gemini 2.5 Pro and Gemini 3 Flash are scheduled for deprecation ([GPT-4.1 deprecated](https://github.blog/changelog/2026-06-02-gpt-4-1-deprecated), [GPT-5.2 and GPT-5.2-Codex deprecated](https://github.blog/changelog/2026-06-05-gpt-5-2-and-gpt-5-2-codex-deprecated), [Upcoming deprecation of Gemini 2.5 Pro and Gemini 3 Flash](https://github.blog/changelog/2026-07-02-upcoming-deprecation-of-gemini-2-5-pro-and-gemini-3-flash)). Before running a workshop, check `/model`, [supported models](https://docs.github.com/copilot/reference/ai-models/supported-models), and the [GitHub Blog Copilot changelog](https://github.blog/changelog/label/copilot/). Recent additions worth knowing, without hard-coding them into exercises: +- **Claude Opus 5** is now available in GitHub Copilot, designed for complex, long-running coding tasks that require careful reasoning and effective tool use. CLI 1.0.75 adds native support ([Claude Opus 5 available](https://github.blog/changelog/2026-07-24-claude-opus-5-is-now-available-in-github-copilot)). +- **Gemini 3.6 Flash** is now available in GitHub Copilot ([Gemini 3.6 Flash available](https://github.blog/changelog/2026-07-21-gemini-3-6-flash-is-now-available-in-github-copilot)). +- **GPT-5.6 Sol, Terra, and Luna** (OpenAI) are now available in GitHub Copilot ([GPT-5.6 Sol, Terra, Luna available](https://github.blog/changelog/2026-07-09-openai-s-gpt-5-6-sol-terra-and-luna-are-now-available-in-github-copilot)). +- **Auto model selection** now routes to the best model for the task type rather than a single default — another reason not to fix a model name in workshop scripts ([Copilot CLI auto model selection routes based on task](https://github.blog/changelog/2026-07-01-copilot-cli-auto-model-selection-routes-based-on-task)). +- **AI credit session limits** can be set in the CLI and SDK to cap the amount an agent spends in a session — useful for autonomous runs and CI ([Set AI credit session limits](https://github.blog/changelog/2026-07-01-set-ai-credit-session-limits-in-copilot-cli-and-sdk)). - Gemini 3.1 Pro (Preview) and Gemini 3.5 Flash are available on Copilot CLI when plan and policy allow them; Business/Enterprise admins must opt in via model policy ([Gemini models in Copilot CLI](https://github.blog/changelog/2026-06-02-gemini-models-in-copilot-cli-cloud-agent-and-the-copilot-app)). - MAI-Code-1-Flash reached general availability for Copilot Business and Copilot Enterprise (admins must enable the policy); it is also available on Copilot CLI with staged availability by plan ([MAI-Code-1-Flash for Copilot Business and Copilot Enterprise](https://github.blog/changelog/2026-06-26-mai-code-1-flash-for-copilot-business-and-copilot-enterprise), [MAI-Code-1-Flash available on more Copilot surfaces](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces)). - Enterprise-admin configured external-provider models now appear in the Copilot CLI model picker, while individual users can still configure client-side BYOK providers ([Copilot CLI supports enterprise BYOK models](https://github.blog/changelog/2026-06-17-copilot-cli-supports-enterprise-bring-your-own-key-byok-models)). diff --git a/docs/copilot_sdk_tutorial/appendix/references.md b/docs/copilot_sdk_tutorial/appendix/references.md index 1e500ae..4617e56 100644 --- a/docs/copilot_sdk_tutorial/appendix/references.md +++ b/docs/copilot_sdk_tutorial/appendix/references.md @@ -87,6 +87,10 @@ Check these sources before each workshop run. The SDK and the Copilot CLI it dep | Date | Change | Source | |------|--------|--------| +| 2026-07-22 | SDK v1.0.8 (Python, Go, Java): per-agent reasoning effort — custom sub-agents can now have their own `reasoningEffort` level independent of the parent session | [Copilot SDK v1.0.8](https://github.com/github/copilot-sdk/releases/tag/v1.0.8) | +| 2026-07-22 | SDK v1.0.8 also adds AI credit session limits (from CLI 1.0.73) and stronger typing for `expAssignments` across SDKs | [Copilot SDK v1.0.8](https://github.com/github/copilot-sdk/releases/tag/v1.0.8) | +| 2026-07-16 | SDK v1.0.7 (Python, Go, Java): in-process (FFI) transport support for Python and Go SDK integrations; tool search configuration; opaque metadata passthrough on tool definitions; `canvasProvider` and managed settings support | [Copilot SDK v1.0.7](https://github.com/github/copilot-sdk/releases/tag/v1.0.7) | +| 2026-07-02 | Copilot CLI can now authenticate in GitHub Actions using the built-in `GITHUB_TOKEN` with `permissions: copilot: write` — no PAT required | [GitHub Blog Changelog](https://github.blog/changelog/2026-07-02-copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions) | | 2026-06-25 | SDK v1.0.4 (Python and Go): the Python package downloads the pinned CLI runtime instead of bundling it (`python -m copilot download-runtime`); adds an HTTP request callback to intercept inference requests, a `getBearerToken` callback for BYOK providers (e.g. Managed Identity), an experimental multi-provider BYOK registry, `preamble`/`preserve` system-message section controls, and `capi.enableWebSocketResponses` / `provider.transport` session options | [Copilot SDK v1.0.4](https://github.com/github/copilot-sdk/releases/tag/v1.0.4) | | 2026-06-19 | Python and Go SDK tutorials established against the then-current SDK packages and Copilot CLI server mode | [github/copilot-sdk releases](https://github.com/github/copilot-sdk/releases) | | 2026-06-18 | SDK v1.0.2: opt-in session memory on create/resume, tool `defer` option for tool search, `otlpProtocol` telemetry transport (`http/json` \| `http/protobuf`), `ModelBilling.tokenPrices`, and deterministic telemetry flush on client stop | [Copilot SDK v1.0.2](https://github.com/github/copilot-sdk/releases/tag/v1.0.2) | diff --git a/docs/copilot_sdk_tutorial/getting_started.ja.md b/docs/copilot_sdk_tutorial/getting_started.ja.md index 52dd223..a5e4c87 100644 --- a/docs/copilot_sdk_tutorial/getting_started.ja.md +++ b/docs/copilot_sdk_tutorial/getting_started.ja.md @@ -116,9 +116,10 @@ export COPILOT_GITHUB_TOKEN="github_pat_xxxxxxxxxxxxxxxxxxxx" ### 1. トークンを作成する -上記の「オプション C: Fine-grained PAT（CI 向け推奨）」に従います。 +!!! note "2026-07-02: GitHub Actions では PAT が不要になりました" + [2026 年 7 月 2 日](https://github.blog/changelog/2026-07-02-copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions)以降、Copilot CLI は GitHub Actions の組み込み `GITHUB_TOKEN` を使って認証できるようになりました。PAT の作成・管理が不要になります。ジョブ（またはワークフロー）に `permissions: copilot: write` を追加すれば、CLI が自動的にトークンを取得します。以下の PAT 方式も引き続き使えます。 -> **なぜ `GITHUB_TOKEN` ではダメか?** Actions が自動提供する `secrets.GITHUB_TOKEN` では Copilot CLI を認証**できません**。**Copilot Requests** は*ユーザー所有*の fine-grained PAT でのみ付与できるためです。自分で PAT を作成し、Secret として保存する必要があります。 +上記の「オプション C: Fine-grained PAT（CI 向け推奨）」に従うか、**または**ワークフローに `permissions: copilot: write` を追加して組み込みの `GITHUB_TOKEN` を使います（上記の注を参照）。 ### 2. 権限を選ぶ @@ -159,9 +160,11 @@ export COPILOT_GITHUB_TOKEN="github_pat_xxxxxxxxxxxxxxxxxxxx" --- -## なぜ `GITHUB_TOKEN` や `gh auth login` では動作しないのか +## `GITHUB_TOKEN` なしの `gh auth login` が動作しない理由 -「静的な PAT を使わず、組み込みの `GITHUB_TOKEN`（やそれを使った `gh auth login`）で認証できないか?」というのはよくある疑問です。Copilot CLI/SDK では**これは動作しません**。しかもこれは設定ミスではなく、仕組み上の制約です。 +> **更新（2026-07-02）：** GitHub Actions に限っては、`permissions: copilot: write` を付与した組み込みの `GITHUB_TOKEN` で Copilot CLI を認証*できる*ようになりました（[Copilot CLI no longer needs a PAT in GitHub Actions](https://github.blog/changelog/2026-07-02-copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions)）。下記の制約は古いトークン種別や GitHub Actions 以外の環境に適用されます。 + +「静的な PAT を使わず、Copilot アクセス権のないトークンを使った `gh auth login` で認証できないか?」というのはよくある疑問です。Copilot CLI/SDK では**これは動作しません**。設定ミスではなく、仕組み上の制約です。 - **`GITHUB_TOKEN` は GitHub App のインストールトークンです。** リポジトリ操作（contents・issues・pull requests）にスコープされており、**ユーザーアカウントに紐づきません**。そのため **Copilot Requests** が表す Copilot のエンタイトルメントを持つことができません。 - **`GITHUB_TOKEN` を使った `gh auth login` でも解決しません。** これは GitHub REST/GraphQL **API** の認証であって、Copilot サブスクリプションの認証ではありません。トークンの背後に課金対象となるユーザー ID が存在しないためです。 @@ -169,7 +172,7 @@ export COPILOT_GITHUB_TOKEN="github_pat_xxxxxxxxxxxxxxxxxxxx" ### 「静的なトークンを使いたくない」場合 -気持ちは分かりますが、Copilot CLI/SDK では**ユーザー所有の fine-grained PAT が現時点で唯一サポートされる CI 認証情報**です。静的トークンを完全に排除することはできないため、代わりに影響範囲を最小化します。 +**GitHub Actions の場合**、`permissions: copilot: write` を追加することで組み込みの `GITHUB_TOKEN` を使えます（静的 PAT 不要）（[Copilot CLI no longer needs a PAT in GitHub Actions](https://github.blog/changelog/2026-07-02-copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions)）。他の CI 環境では、ユーザー所有の fine-grained PAT が引き続きサポートされる認証情報です。影響範囲を最小化するために： - `Copilot Requests` **のみ**を付与する（Repository 権限の追加は最小限に）。 - トークンの対象を **Only select repositories** に絞る。 diff --git a/docs/copilot_sdk_tutorial/getting_started.md b/docs/copilot_sdk_tutorial/getting_started.md index 745fe52..3db61a0 100644 --- a/docs/copilot_sdk_tutorial/getting_started.md +++ b/docs/copilot_sdk_tutorial/getting_started.md @@ -116,9 +116,10 @@ You can run the Copilot CLI non-interactively inside a workflow. This repository ### 1. Create the token -Follow [Option C: Fine-grained PAT](#option-c-fine-grained-pat-recommended-for-ci) above. +!!! note "2026-07-02: PAT no longer required in GitHub Actions" + As of [July 2, 2026](https://github.blog/changelog/2026-07-02-copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions), the Copilot CLI can authenticate in GitHub Actions using the built-in `GITHUB_TOKEN` — no PAT required. Add `permissions: copilot: write` to your job (or workflow), and the CLI picks up the token automatically. The PAT approach below still works, so both options are valid; the built-in token approach reduces secret management overhead. -> **Why not `GITHUB_TOKEN`?** The automatic `secrets.GITHUB_TOKEN` provided by Actions **cannot** authenticate the Copilot CLI, because **Copilot Requests** can only be granted on a *user-owned* fine-grained PAT. You must create your own PAT and store it as a secret. +Follow [Option C: Fine-grained PAT](#option-c-fine-grained-pat-recommended-for-ci) above, **or** use the built-in `GITHUB_TOKEN` with `permissions: copilot: write` in your workflow (see the note above). ### 2. Choose the permissions @@ -159,9 +160,11 @@ In the repository (or organization) settings, add the token as a secret named `C --- -## Why `GITHUB_TOKEN` or `gh auth login` Won't Work +## Why `gh auth login` Without Copilot Access Won't Work -A common question is whether you can skip the static PAT and authenticate with the built-in `GITHUB_TOKEN` (or `gh auth login` using it). For the Copilot CLI/SDK, **this does not work** — and the reason is structural, not a configuration mistake: +> **Update (2026-07-02):** For GitHub Actions specifically, the built-in `GITHUB_TOKEN` now *can* authenticate the Copilot CLI when `permissions: copilot: write` is granted ([Copilot CLI no longer needs a PAT in GitHub Actions](https://github.blog/changelog/2026-07-02-copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions)). The limitation below applies to older token types and to contexts outside GitHub Actions. + +A common question is whether you can skip the static PAT and authenticate with `gh auth login` using a token that lacks Copilot access. For the Copilot CLI/SDK, **this does not work** — and the reason is structural: - **`GITHUB_TOKEN` is a GitHub App installation token.** It is scoped to repository operations (contents, issues, pull requests) and is **not bound to a user account**, so it can never carry the Copilot entitlement that **Copilot Requests** represents. - **`gh auth login` backed by `GITHUB_TOKEN` does not help either.** That authenticates the GitHub REST/GraphQL **API**, not a Copilot subscription. There is no user identity behind the token for Copilot to bill the request against. @@ -169,7 +172,7 @@ A common question is whether you can skip the static PAT and authenticate with t ### "I want to avoid static tokens" -Understandable — but for the Copilot CLI/SDK a **user-owned fine-grained PAT is currently the only supported CI credential**. You cannot fully eliminate the static token; instead, minimize the blast radius: +For **GitHub Actions**, you can now use the built-in `GITHUB_TOKEN` with `permissions: copilot: write` — no static PAT required ([Copilot CLI no longer needs a PAT in GitHub Actions](https://github.blog/changelog/2026-07-02-copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions)). For other CI environments, a user-owned fine-grained PAT remains the supported credential. Minimize the blast radius: - Grant **only** `Copilot Requests` (add repository permissions sparingly). - Scope the token to **Only select repositories**.