News · Use it
Orca 1.4.221 fixes Copilot credential-file permissions
Folder-trust updates could leave ~/.copilot/config.json readable by other users, including shared SSH hosts in 1.4.219 and 1.4.220. New writes are owner-only. An already exposed file is repaired on the next folder addition; upgrading alone is not evidence that its permissions changed. Inspect the file mode and follow the release’s remediation. 3
Relevant to: Orca users running GitHub Copilot on shared machines or SSH hosts.
What the verdict meansAvailable, works, worth your time today.
Sources
Originally part of the 6 October 2026 edition.