Copilot for JetBrains 1.18.0

Use this IDE plugin to get AI-assisted coding help and run/manage Copilot agent sessions, including planning, tool approvals, and organization-shared skills within JetBrains IDEs.

Availability

Generally available on paid Copilot plans

Pricing model

Paid Copilot plans

Deployment

GitHub Enterprise Cloud

Privacy

Users can view or delete saved preferences in Copilot settings

Licence

No GHSP or GHAS license required for these checks

• AI-assisted tool approvals (assisted approvals) are available in public preview for Copilot agent sessions ^[1]

  AI-assisted tool approvals, called assisted approvals, are now in public preview for Copilot agent sessions.

• Low-risk tool calls receive automatic approval while higher-risk actions prompt for user decision ^[1]

  Low-risk tool calls receive automatic approval, while higher-risk actions continue to prompt you for a decision.

• Users can re-edit a previous user message in a Copilot agent session, causing Copilot to rewind conversation and file changes before sending the replacement message ^[1]

  Before sending your replacement message, Copilot rewinds both the conversation and file changes.

• Local and Copilot agent sessions support organization and enterprise skills and organization-managed custom instructions ^[1]

  Local and Copilot agent sessions now support organization and enterprise skills, along with organization-managed custom instructions.

• The Codex agent now supports a plan mode that lets you review, refine, or approve a plan before implementation ^[1]

  You can review, refine, or approve a plan before implementation, giving you an opportunity to shape the approach before the agent starts making changes.

• A setting lets users turn the built-in GitHub MCP Server on or off and Copilot agent sessions have persistent per-tool controls for MCP servers ^[1]

  A new setting lets you turn the built-in GitHub MCP Server on or off without changing manually configured MCP servers.

• The policy applies to eligible features managed on the enterprise Features & clients page, Copilot Code Review policy, and MCP servers in Copilot policy. ^[2]

  This policy applies to eligible features managed on your enterprise's "Features & clients" page (i.e., https://github.com/enterprises/YOUR-ENTERPRISE-SLUG/ai-controls/copilot/features), as well as the Copilot Code Review policy on the "Agents" page and the MCP servers in Copilot policy.

• Administrators can configure the policy for 28 days before it affects feature access for users. ^[2]

  For the next 28 days, you can configure this policy, but it won't affect feature access for your users yet.

• Starting October 22, eligible generally available features left Unconfigured follow the selected global default. ^[2]

  Eligible generally available features and capabilities left Unconfigured will follow your selected global default of enabled, disabled, or let organizations decide.

• Explicitly enabled or disabled feature decisions are preserved. ^[2]

  If you've explicitly enabled or disabled a feature, we won't override that choice.

• Preview features remain opt-in. ^[2]

  Preview features remain opt-in.

• The validator detects malformed JSON, unsupported configurations, invalid team mappings, and other errors that can prevent policies from being enforced. ^[3]

  The validator detects malformed JSON, unsupported configurations, invalid team mappings, and other errors that can prevent policies from being enforced.

• Validation covers copilot/managed-settings.json and copilot/team-mappings.json, including team settings files referenced by the mappings file. ^[3]

  copilot/team-mappings.json and any team settings files referenced by the team mappings file

• Each issue identifies the affected file and JSON path. ^[3]

  Each issue identifies the affected file and JSON path, helping you make corrections to ensure that policies are enforced as intended.

• Administrators can review errors in the “Copilot settings validation” section of the enterprise AI controls page. ^[3]

  Review and correct errors in the "Copilot settings validation" section of the enterprise AI controls page.

• HydraFusion is available in Visual Studio Code and the GitHub Copilot app, expanding beyond Copilot CLI. ^[4]

  The HydraFusion research preview is now available in Visual Studio Code and the GitHub Copilot app, expanding beyond Copilot CLI.

• HydraFusion orchestrates multiple models rather than being a single model. ^[4]

  HydraFusion appears in the model picker, but rather than being a single model, it orchestrates multiple models.

• HydraFusion uses one of three workflows: Single, Cascade, or Critique. ^[4]

  HydraFusion uses one of three workflows:

• HydraFusion is available to Copilot Pro, Pro+, Business, and Enterprise users. ^[4]

  HydraFusion is available to Copilot Pro, Pro+, Business, and Enterprise users.

• Copilot Business and Enterprise administrators must enable preview features. ^[4]

  For Copilot Business and Enterprise, an administrator must enable preview features.

• HydraFusion remains a research preview and is subject to change. ^[4]

  HydraFusion remains a research preview and is subject to change.

• HydraFusion is a research preview in VS Code and the GitHub Copilot app alongside Copilot CLI. ^[5]

  Let Copilot select and coordinate models for your task with HydraFusion , a research preview now available in VS Code and the GitHub Copilot app alongside Copilot CLI.

• The announcement says HydraFusion provides clearer, more frequent progress updates. ^[5]

  Clearer, more frequent progress updates help you follow its work.

• HydraFusion lets Copilot select and coordinate models for a task. ^[5]

  Let Copilot select and coordinate models for your task with HydraFusion , a research preview now available in VS Code and the GitHub Copilot app alongside Copilot CLI.

• Developers can control access to the internet, local networks, Git credentials, and GitHub CLI credentials. ^[6]

  Control access to the internet, local networks, Git credentials, and GitHub CLI credentials.

• Microsoft eXecution Container translates a common sandbox policy into native operating-system controls across Windows, macOS, and Linux. ^[6]

  Local sandboxing is powered by Microsoft eXecution Container (MXC) , which translates a common sandbox policy into native operating-system controls across Windows, macOS, and Linux.

• Local sandboxing is included with GitHub Copilot at no additional cost. ^[6]

  Local sandboxing is included with GitHub Copilot at no additional cost.

• Local sandboxing is generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host. ^[6]

  Local sandboxing for GitHub Copilot is now generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host.

• Sandbox policies can limit the files and directories that agent-run commands can read or modify. ^[6]

  Limit the files and directories that agent-run commands can read or modify.

• The new checks will be off by default, and running /security-review will not enable them. ^[7]

  The new opt-in checks for push protection and the security review command will consume GitHub AI Credits.

• GitHub is adding checks from the secret classifier alongside the existing LLM-based security review. ^[7]

  Coming soon, GitHub is adding checks from the secret classifier alongside the existing LLM-based review.

• The new checks are coming soon in private preview. ^[7]

  AI-based secret scanning with the GitHub Copilot /security-review command for the Copilot CLI and Copilot app available soon in private preview.

• The new checks will consume AI Credits in addition to the review’s existing usage. ^[7]

  The new checks will consume AI Credits in addition to the review's existing usage.

• No GHSP or GHAS license is required to use these checks. ^[7]

  You don't need a GHSP or GHAS license to use these checks.

• Local sandboxing is included with Copilot at no extra cost. ^[8]

  This is included with Copilot at no extra cost.

• Local sandboxing is generally available in Copilot CLI. ^[8]

  Limit agents' access to files, networks, and credentials with local sandboxing, now generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host.

• Local sandboxing is available in the Copilot app and VS Code sessions using Agent Host. ^[8]

  Limit agents' access to files, networks, and credentials with local sandboxing, now generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host.

• Local sandboxing can limit agents’ access to files, networks, and credentials. ^[8]

  Limit agents' access to files, networks, and credentials with local sandboxing, now generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host.

• Enterprise administrators can choose any available Copilot agent model as the default for new conversations. ^[9]

  Enterprise administrators can now use managed settings to choose any available Copilot agent model as the default for new conversations.

• JetBrains IDE 2025.2 or later is required to use the plugin. ^[9]

  You now need JetBrains IDE 2025.2 or later to use the plugin.

• Diagnostic intention menus include a Fix action that opens inline chat and asks Copilot to repair the issue. ^[9]

  Diagnostic intention menus now include a Fix action that opens inline chat and asks Copilot to repair the issue.

• A new MCP setting lets users disable automatic server startup for Copilot and Claude. ^[9]

  A new MCP setting lets you disable automatic server startup for Copilot and Claude, giving you more control over when configured tools become active.

• Explicit managed values take precedence over local settings, SDK configuration, and environment variables. ^[10]

  Explicit managed values take precedence over local settings, SDK configuration, and environment variables.

• The telemetry.capture.identity setting adds user.name, process.user.name, and host.name attributes to OpenTelemetry data. ^[10]

  The telemetry.capture.identity setting adds three attributes to OpenTelemetry (OTel) data:

• Identity capture is off by default and remains separate from the existing pseudonymous user identifier. ^[10]

  Identity capture is off by default and remains separate from the existing pseudonymous user identifier.

• Administrators can independently control capture of prompts, responses, toolArguments, toolOutput, and policyDetail. ^[10]

  Administrators can also independently control five additional capture classes:

• Every capture class is off by default. ^[10]

  Every capture class is off by default.

• Fine-grained capture controls are available in Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host. ^[10]

  Fine-grained capture controls are available in Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host.

• If a client cannot confirm current policy, it fails closed rather than running with stale or unconfirmed policy. ^[11]

  If the client cannot confirm current policy, it fails closed rather than running with a stale or unconfirmed policy.

• The sandbox key can enforce a required minimum client version, forcing users on older versions to update to resume using Copilot. ^[11]

  When this key is included in managed settings, users who pin to older versions of Copilot clients will now be forced to update in order to resume using Copilot.

• The forceRemoteSettingsRefresh setting can require supported clients to retrieve current settings at startup. ^[11]

  Enterprise administrators can now require supported GitHub Copilot clients to retrieve current server-managed settings at startup instead of relying on a cached policy.

• The setting is supported in Copilot CLI, VS Code, and the GitHub Copilot app. ^[11]

  The setting is supported in Copilot CLI, VS Code, and the GitHub Copilot app.

• With the setting active, a cached response cannot satisfy the freshness requirement. ^[11]

  While the setting is active, a cached response cannot satisfy the freshness requirement.

• Claude Opus 5.5 is the suggested alternative to Claude Opus 4.8 and Claude Opus 5. ^[12]

  The deprecation of Claude Opus 4.8 does not apply to these customers.

• Claude Opus 4.8, Claude Opus 5, and GPT-5.6 Terra are scheduled for deprecation across GitHub Copilot experiences on November 16, 2026. ^[12]
• Suggested alternatives are automatically enabled for Copilot Enterprise and Copilot Business customers under default model enablement, unless an administrator has disabled them. ^[12]

  Under default model enablement, the suggested alternatives are automatically enabled for Copilot Enterprise and Copilot Business customers unless an administrator has turned off the global default or explicitly disabled the model.

• GPT-6.1 Sol or GPT-6 Luna are suggested alternatives to GPT-5.6 Terra. ^[12]

  GPT-6.1 Sol or GPT-6 Luna

• Claude Opus 4.8 remains available to individual GitHub Copilot subscribers on annual plans. ^[12]

  *Claude Opus 4.8 will remain available to individual GitHub Copilot subscribers on annual plans so they retain an Opus offering.

• The API supports model policies at the organization level. ^[13]

  You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, enterprise apps, and organizations.

• Enterprise policies can delegate model control to organizations in organization mode, or to teams and apps in enterprise teams mode. ^[13]

  Enterprise policies can delegate model control to organizations in organization mode, or to teams and apps in enterprise teams mode.

• GET and PATCH endpoints for model policies are generally available. ^[13]

  GET and PATCH endpoints are now generally available for model policies at four levels:

• The API supports model policies at the enterprise level. ^[13]

  You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, enterprise apps, and organizations.

• The API supports model policies for enterprise teams and enterprise apps. ^[13]

  You can now use the REST API to retrieve and update Copilot model policies for enterprises, enterprise teams, enterprise apps, and organizations.

• Eligible generally available features left Unconfigured are set according to the selected global default. ^[14]

  Eligible generally available features and capabilities left Unconfigured will be set according to the selected global default of Enabled , Disabled , or Let organizations decide .

• Enforcement is gradually rolling out through October 26. ^[14]

  Starting today, we're gradually rolling out enforcement of the policy through October 26, so it may take effect at different times for different enterprises and organizations.

• Preview features remain opt-in. ^[14]

  Preview features remain opt-in.

• Explicit choices for individual features are preserved during rollout. ^[14]

  Administrators can still make explicit choices for individual features at any time.

• Administrators can choose Enabled, Disabled, or Let organizations decide as the global default. ^[14]

  Eligible generally available features and capabilities left Unconfigured will be set according to the selected global default of Enabled , Disabled , or Let organizations decide .

• A GitHub App can be given the read-only Copilot Requests organization permission and installed on an organization. ^[15]

  Developers can give a GitHub App the read-only Copilot Requests organization permission, install the app on an organization, and pass a short-lived installation access token to the Copilot SDK.

• Server-to-server authentication is available in public preview. ^[15]

  GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, available in public preview.

• Services and agents built with the GitHub Copilot SDK can make requests on behalf of an organization without a signed-in user's credentials. ^[15]

  Services and agents built with the GitHub Copilot SDK can now make requests on behalf of an organization without relying on a signed-in user's credentials.

• Usage is attributed and billed to the organization that owns the installation. ^[15]

  Usage is attributed and billed to the organization that owns the installation.

• Organization owners can review app access, identify app-attributed usage in AI usage CSV reports, and suspend or uninstall an app to stop its access. ^[15]

  Organization owners can review which apps have access, identify app-attributed usage in AI usage CSV reports using the app_client_id field, and stop an app's access by suspending or uninstalling it.

• Administrators can choose the default permission mode for new sessions. ^[16]

  You can also choose the default permission mode for new sessions.

• Assisted permissions are generally available in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code. ^[16]

  Assisted permissions are now generally available in GitHub Copilot CLI, GitHub Copilot app, and Visual Studio Code.

• A large language model evaluates requests to run commands, access a file system path, or open a URL. ^[16]

  When Copilot requests permission to run a command, access a file system path, or open a URL, a large language model evaluates the request.

• Requests classified as clearly safe automatically proceed. ^[16]

  Requests classified as clearly safe automatically proceed.

• Requests not classified as clearly safe require approval. ^[16]

  Requests classified as clearly safe automatically proceed.

• Enterprise administrators can block Allow All while keeping Assisted available, or disable Assisted separately. ^[16]

  If you're an enterprise administrator, you can use enterprise-managed settings to block Allow All while keeping Assisted available or disable Assisted separately.

• Copilot Chat, Copilot code review, and Copilot in the cloud require available budget. ^[17]

  Copilot Chat, Copilot code review, and Copilot in the cloud require available budget to use.

• Available now for GitHub Enterprise Cloud customers working with a GitHub or Microsoft account team. ^[17]

  Enterprises working with a GitHub or Microsoft account team can now get Copilot included with GitHub Enterprise for every licensed user.

• Self-serve availability is opening in stages, and current self-serve subscriptions are unaffected. ^[17]

  Self-serve availability is coming in stages, and current self-serve subscriptions are unaffected.

• AI usage is metered from the first request against the enterprise budget. ^[17]

  AI usage is metered from the first request against your enterprise budget, using the policies, alerts, and attribution you already have.

• Code completion and next edit suggestions keep working even when no budget is available. ^[17]

  Code completion and next edit suggestions keep working even with no budget available.

• Copilot access through GitHub Enterprise has the same features and models as Copilot Enterprise but does not include monthly AI credits per seat. ^[17]

  Copilot access through GitHub Enterprise and Copilot Standalone has the same features and models as Copilot Enterprise but does not include monthly AI credits per seat.

• Image generation is billed separately from the chat model based on image tokens that count toward the plan’s AI credits. ^[18]

  It's billed separately from your chat model, based on image tokens that count toward your plan's AI credits.

• Image generation is in public preview for Copilot Pro, Copilot Pro+, Copilot Business, and Copilot Enterprise. ^[18]

  Image generation is in public preview for Copilot Pro, Copilot Pro+, Copilot Business, and Copilot Enterprise.

• Organization and enterprise owners can disable image generation using Copilot model policies. ^[18]

  Organization and enterprise owners can turn off image generation by disabling the image generation model using Copilot model policies .

• Copilot can generate and edit images using natural language. ^[18]

  You can now generate and edit images using natural language in GitHub Copilot.

• The selected reasoning model calls a dedicated image-generation tool powered by GPT Image 2.5 Flare. ^[18]

  When you ask for an image, your selected reasoning model calls a dedicated image-generation tool powered by GPT Image 2.5 Flare, previews the result inline, and saves it to your project.

• Generated images are previewed inline and saved to the project. ^[18]

  When you ask for an image, your selected reasoning model calls a dedicated image-generation tool powered by GPT Image 2.5 Flare, previews the result inline, and saves it to your project.

• GitHub Copilot Memory is generally available on paid Copilot plans. ^[19]

  GitHub Copilot Memory is now generally available on paid Copilot plans.

• Copilot can remember personal preferences and repository conventions across sessions and clients. ^[19]

  Copilot can remember personal preferences and repository conventions across sessions and clients.

• Users can view or delete saved preferences in Copilot settings. ^[19]

  You can interact with memories in the Copilot app, Copilot CLI, and VS Code, or manage personal memories in your Copilot settings, where you can view or delete saved preferences .

• AWS Continuum can investigate code vulnerabilities and propose fixes Daily brief 2026-10-25
• OpenGCUA for macOS leads 12 AI developments on 19 October 2026 Daily brief 2026-10-19
• Bespoke-Nimble-9B-v2 leads 12 AI developments on 15 October 2026 Daily brief 2026-10-15
• An open model for tool-using agents, plus a checkpoint to fine-tune Daily brief 2026-10-13
• Two local models can classify, route, or score text and images Daily brief 2026-10-10
• Liquid AI’s decision models classify inputs without writing a response Daily brief 2026-10-07
• Backburner leads 25 AI developments in week 40, 2026 Weekly brief 2026-W40
• GitHub expands Copilot controls and adds local sandboxing Daily brief 2026-09-30
• GitHub adds controls for Copilot code review and local sandboxing Daily brief 2026-09-26
• Meta previews Muse Video and releases Muse Image and Muse Spark Daily brief 2026-09-25
• New model releases span quantized language models and image generation Daily brief 2026-09-23