Copilot tokens stay private
Security fix: Copilot’s config file is owner-only again
- The bug
- trusting a folder for GitHub Copilot could leave
~/.copilot/config.json, which can hold your Copilot login tokens, readable by other users - SSH hosts
- v1.4.219 and v1.4.220 did this on SSH hosts too, where machines are often shared
- Old files
- a file an older Orca opened up is fixed the next time Orca adds a folder to it
Orca 1.4.221 fixes a security bug. Trusting a folder for GitHub Copilot could leave its config file, which can hold your login tokens, readable by other users on the machine. Now it's owner only.
Codex on Windows uses ~/.codex
Codex on Windows now uses your own ~/.codex
- Sign-in
- if you only signed in inside Orca, that sign-in is copied over
- Expect
- Codex may ask again to trust a folder or approve a command; MCP servers added only in Orca must be added again
- Open terminals
- keep Orca’s old folder and their MCP servers, with no restart dialog
On Windows, Codex in Orca now shares the same folder as Codex outside it, like on Mac and Linux. Your sign-in carries over, but MCP servers you added only in Orca need adding again.
Max and ultra effort for new Codex models
Codex workers take max and ultra effort on models Orca doesn’t list yet
worker-start now accepts them for models such as gpt-6.x instead of refusing. Codex’s “Implement this plan?” menu also counts as waiting on you, so sent text no longer lands on it.
For orchestration, starting a Codex worker now accepts max and ultra effort on newer models Orca doesn't list yet, instead of refusing them. And Codex's plan menu now counts as waiting on you.
More agents and accounts
Qoder, Qwen Code and GLM Coding Plans join Orca
- Qoder
- conversations appear in session history and search; Orca can launch Qoder CLI China
- Qwen Code
- Orca can launch it
- Accounts
- GLM Coding Plans link without ZCode; OpenCode and Devin keep separate account profiles
More agents join too. Qoder conversations show up in session history and search, Orca can launch Qwen Code, and OpenCode and Devin can each keep separate account profiles.
Notifications per machine
Desktop notifications can be turned off per machine
A paired server’s switch also covers work reached through it.
In notification settings, a new Machines list lets you silence desktop notifications from one connected machine while keeping the rest. A paired server's switch also covers work reached through it.
Three fixes
Three fixes you may have hit
- Update & Restart
- on macOS, no longer closes Orca and then waits forever on background Orca servers; it says what to close
- Worktree delete
- one that git can’t finish stays listed so you can retry
- CSV
- semicolon-separated files show as columns
Three fixes. On a Mac, Update and Restart no longer hangs on background Orca servers. A worktree delete that git can't finish stays listed for a retry. And semicolon CSV files show as columns.
Get Orca v1.4.221
Orca v1.4.221: the October 4 daily build, plus fixes from main
Terminals open before the update stay on the previous terminal service; new ones get these fixes.
v1.4.221 release notes
Orca 1.4.221 is the October 4 daily build plus fixes from main. Terminals open before you update stay on the old terminal service, so open new ones for these fixes.
