Managed settings endpoint returns 422 Validation Failed since 2026-11-03 (was working 2026-11-02, same CLI version) #5346

Summary

As of 2026-11-03, every managed-settings poll fails with HTTP 422. The same request succeeded on 2026-11-02 for the same account on the same CLI version, so this looks like a server-side regression rather than a client change.

The CLI logs this warning roughly every 30 seconds for the lifetime of the session:

[WARNING] [rust:copilot_runtime::storage::managed_settings] [managedSettings] server policy fetch failed ([fetchManagedSettings] Server returned 422) — preserving the current in-memory policy

Version

1.0.105 (linux-x64, Node v24.22.1). Note 1.0.105 was already in use on 2026-10-30 and 2026-11-02 without this error, so the CLI version is not the trigger.

Before / after

Working, 2026-11-02:

[managedSettings] self-fetch starting for account https://github.com/<redacted>
[managedSettings] server policy received from https://github.com: bypassDisabled=false, keys=[telemetry]
[managedSettings] self-fetch complete for https://github.com/<redacted>: bypassDisabled=false, serverFetchFailed=false, serverResolution=Live, serverRetryableFailure=false, deviceLoadFailed=false

Failing, 2026-11-03:

[managedSettings] device MDM: no policy present on this device
[managedSettings] server policy fetch failed ([fetchManagedSettings] Server returned 422) — preserving the current in-memory policy
[managedSettings] effective policy resolved: source=server, bypassDisabled=false, serverFetchFailed=false, ...
[managedSettings] self-fetch complete for https://github.com/<redacted>: ... serverResolution=FallbackCache, ...

Occurrence counts across my five retained session logs:

Direct reproduction

Reproducible outside the CLI with the CLI's own stored OAuth token:

GET https://api.github.com/copilot_internal/managed_settings
→ 422
{"message":"Validation Failed","documentation_url":"https://docs.github.com/rest","status":"422"}

Same 422 with every variant I tried:

• plain request
• Editor-Version / Editor-Plugin-Version headers
• X-GitHub-Api-Version: 2022-11-28
• ?client=cli
• ?integration_id=copilot-developer-cli

The token itself is valid — GET https://api.github.com/user returns 200 with the same credentials.

Account context: no device MDM policy present, policyHelperConfigured=false, personal account on github.com.

Impact

Mostly cosmetic but noisy:

• A [WARNING] is written to the session log every ~30 seconds.
• The CLI correctly falls back to the cached policy, so no permission restrictions are wrongly applied (bypassDisabled=false throughout).

Possible secondary issues

1. 422 Validation Failed suggests the server is rejecting the request shape. If a newly-required parameter was added server-side, older clients will fail closed-ish forever with no actionable message.
2. The log message says serverFetchFailed=false on the very same line that reports the fetch failing, which seems inconsistent and made this harder to diagnose.
3. There is no apparent way to suppress or rate-limit the repeated warning once the endpoint is failing persistently.