Update dependency @github/copilot to v1.0.63

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@github/copilot	1.0.58 → 1.0.63

---

Release Notes

github/copilot-cli (@​github/copilot)

v1.0.63

Compare Source

• Blocked image attachments now explain what to do — enable vision via the "Editor preview features" policy, switch to a vision-capable model, or try a different image — instead of showing a confusing error.
• Options in --help output sort alphabetically, including options that have two long flags
• Auth validation errors (e.g., VPN or IP allowlist failures) are now shown in the sign-in banner with guidance to check network access
• Show fork-based pull requests in /pr and the branch PR badge
• Resume remote sessions when the local and remote repository names differ only by case
• Show the spill file path when read_bash output is too large
• Include recent local sessions in /chronicle standup
• Restore /responses WebSocket connections
• Retry transient 401 auth failures in HMAC and OAuth modes
• Press w in /diff to hide whitespace-only changes
• Add deferTools option to MCP server config to keep a server's tools always available, even when tool search is enabled
• Agent mode is tracked per session, so it no longer carries over when you create, clear, or switch sessions
• Pressing Enter opens the highlighted issue details
• Plan review menus work on strict OpenAI-compatible backends
• Prevent Windows crashes when the native runtime addon loads in a corrupted host process heap
• Recover from unreadable native document attachments by falling back to file-path uploads
• Keep reverse search aligned in the input footer while you search command history
• PostToolUse hook matchers (e.g. Edit|Write) are now honored instead of silently dropped, so formatters and linters run only after the tools they target
• Improve reliability of OpenAI, Anthropic, and Azure OpenAI requests
• Experimental: /rewind no longer requires git and restores only the files Copilot changed (leaving your own edits intact), with a conversation-only or conversation + files choice

v1.0.62

Compare Source

• Ask and elicitation dialogs now scroll together with the timeline instead of taking over the screen, so a tall dialog no longer hides the agent's output — scroll up to read earlier output, then back down to the dialog
• Keep blank lines between reasoning summary sections
• Show user-typed colon terms in the search chip
• Plugins can now ship extensions, making them installable via the plugin marketplace
• Add content search, match highlighting, and n/N navigation in diff view
• Add /app slash command to open the GitHub app or a browser fallback
• Configure subagent model, reasoning effort, and context tier via user settings or the /subagents (also /agents) picker
• PowerShell redirect paths no longer trigger content-exclusion refusals
• WebSocket transport closes cleanly outside the Tokio runtime
• Shell tool errors now explain when a shell ID was stopped, completed, or reclaimed
• Voice runtime download dialog no longer reopens in a loop after an install failure
• Make the MCP server config form easier to use with a picker-based flow
• Show 'YOLO' (allow all) indicator in the footer and add allow-all state to custom statusLine.command
• Press / on the Issues or Pull Requests tab to search GitHub with server-side filtering
• Add session-scoped extensions and canvases
• Allow SDK clients to configure session memory through session.create and session.resume
• Automatically authenticate through corporate forward proxies using Kerberos/Negotiate (SPNEGO)
• Add file tree sidebar and inline comment editor to the /diff view
• Honor max_output_tokens for BYOK Responses providers
• MCP server names with dots and slashes map to valid Responses API namespaces
• Editor commands like code-insiders --wait launch correctly on Windows
• Load skills from symlinked directories outside the configured root
• Recover gracefully from oversized inline images instead of failing the turn
• An image attachment rejected because vision is disabled by policy or unsupported by the current model no longer poisons the rest of the session. The image is stripped from conversation history after the 400 so subsequent prompts succeed.
• Shells promoted to background from /tasks keep running after the turn ends
• Hide internal disabled tool messages from background helper agents
• Sandbox tool loads correctly when mxc-sdk is provided by the host environment
• Custom agents in nested .github/agents and .claude/agents directories are now discovered when the session is started from a subdirectory of the repository root
• Approving a tool permission prompt no longer causes a second prompt for the same tool call
• View tool prompts now correctly state the 20KB truncation limit instead of 50KB
• Keep workspace MCP servers from restarting in a loop
• Keep custom agents on their configured model when using BYOK providers
• Recover from temporary content policy errors without restarting the session
• Autopilot continues cleanly in relay sessions and /plan shows the short prompt
• Git commands no longer flash a console window on Windows
• Claude-format plugin preToolUse and permissionRequest hooks now fire correctly for tool matchers like Bash, Read, and *, and Claude-format hook payloads carry the Claude tool name (Bash rather than bash)
• Terminal colors update live when the active theme changes mid-session
• Streamed assistant text no longer intermittently duplicates in the timeline
• grep skips missing search paths and continues with valid results instead of failing
• Remote MCP OAuth servers start only once per matching config instead of restarting for each subagent
• Nested subagents respect concurrency limits without blocking terminal input
• Plugin install works when the marketplace ref is a fully-qualified tag (e.g. refs/tags/v2.1.0)
• Press W to create a worktree from the expanded issue or pull request details view
• /every and /after can now schedule slash commands (e.g. /every 1d /chronicle standup)
• Model picker opens to the tab containing the currently selected model
• Shell commands run via lightweight process spawning instead of a pseudo-terminal; interactive input via write_bash is no longer supported
• Improve color contrast in GitHub themes to meet WCAG AA accessibility standards
• Show descriptions for ACP session config options
• Speed up branch and HEAD detection in warm sessions
• Light theme secondary background color is now rendered correctly

v1.0.61

Compare Source

• Polish /agents picker and Create New Agent wizard with consistent borders, headers, and styled inputs
• Fixed a bug where resuming a session could leave the screen blank
• Add /settings interactive dialog to browse and edit all user settings in one place
• Resuming a local session with memory disabled no longer crashes the UI to a blank screen
• /after and /every commands now appear in the /experimental slash command list
• Auto-load MCP servers from .github/mcp.json workspace config file
• /env output hides internal hooks and shows full file paths for hook sources
• Prevent crashes from malformed UTF-8, oversized string buffers, and terminal disconnect errors
• Add support for Claude Fable 5 model
• Gemini models work correctly with MCP tools that use nullable schema types
• Number-key selection in pickers (e.g. /agent) works for items 10 and beyond
• GitHub issue and PR references inside existing links no longer create broken nested autolinks
• Bash tool correctly handles multi-byte UTF-8 characters (em dash, curly quotes, etc.) in command input
• Symlinked directories now appear in @​-file picker suggestions
• MCP OAuth re-authentication correctly uses the saved OAuth client ID for remote servers
• Pasted images no longer leak into the main prompt after a permission dialog closes
• Press '/' in the /agent picker to filter agents by name
• Configure home tab bar visibility, order, and hidden tabs via the tabs setting in settings.json
• grep and glob tools correctly handle single path arguments, preventing missed search results
• Hook progress status lines marked as temporary collapse in place instead of accumulating in the conversation timeline
• /fork shows a "Creating fork..." progress notification while the fork is being created
• /mcp search works correctly with external registries
• Use natural language with /every and /after to schedule tasks using cron expressions, calendar times, or relative durations
• Light theme secondary background color is now rendered correctly
• Search bar match count stays inside the prompt frame
• GitHub theme adapts to light terminals with an authentic GitHub Primer light color palette
• Add mTLS and private-CA support for OTLP telemetry export over HTTPS
• Fixed false positives in shell command validation that could block harmless commands containing words like "kill" in string literals or embedded documents (heredocs).
• Add full screen scrollbar
• Grep searches in large monorepos use an indexed search engine for significantly faster results
• /sessions now navigates to the Sessions tab instead of opening an overlay
• Add http/protobuf OTLP HTTP export via standard OTel protocol env vars
• Prompt mode surfaces model-load errors on stderr instead of exiting silently
• Add /worktree command (aliased /move) to create a new git worktree and switch into it, moving any uncommitted changes along
• Plugin install enforces managed marketplace policy even when settings cannot be fetched due to network errors
• /help now lists $HOME/.copilot/instructions/**/*.instructions.md alongside the other user-level instruction locations
• Colors render correctly in WSL and tmux sessions instead of falling back to a degraded palette
• Exit shell mode by pressing Esc or Ctrl+C on an empty prompt, in addition to Backspace
• Add beepOnSchedule setting to disable completion beeps for scheduled /every and /after runs

v1.0.60

Compare Source

• Tab completes .. parent traversal in slash-command path arguments instead of switching tabs
• Add the max reasoning effort level for Anthropic models and make all effort levels available on every plan
• Screen no longer stays blank after waking from sleep inside a terminal multiplexer
• Input fields render background color correctly inside highlighted frames
• Cursor renders in the correct position in plan approval and review feedback prompts
• Worktree directory uses a flat name when PR branch contains slashes (e.g. cli/foo → .worktrees/cli-foo)
• Queue hint correctly shows ctrl+enter instead of ctrl+q when kitty keyboard protocol is active
• Status line progressively stacks across rows at narrow terminal widths instead of truncating elements beyond recognition
• Clipboard operations on X11 no longer corrupt the terminal display
• Add builtInAgents.rubberDuckAutoInvoke setting to control automatic rubber duck agent invocation (disabled by default)
• On Windows, executables are no longer discovered in the working directory when invoking by bare name (e.g. git). Add the working directory to PATH to enable discovery.
• Interactive shell commands no longer hang when producing large amounts of output
• MCP tools glyph in /context legend displays at the correct size
• Skill and slash command picker rows correctly display multi-line descriptions as a single line
• IDE picker now hides entries whose editor connection has gone away, so selecting one no longer fails with a connection error, and appends a process id to entries that share the same editor and folder so git worktrees of the same repo can be told apart
• Model picker fits within small terminal windows and mouse scroll works in the picker
• Show cache write tokens alongside cache read tokens in /usage display
• Repurpose ctrl+s to stash and pop the current prompt (Claude Code parity); the slash-command picker is still available by typing /
• /context separates Custom Instructions from the system prompt and cross-references per-server MCP tool token costs with /mcp
• Add billing help topic with an overview of AI credit usage features
• Add vim-style navigation keys (g, G, Ctrl+D, Ctrl+U) to the /diff view
• Show the Mission Control sharing status of synced sessions in the /session info view
• Add -r as a shorthand for --resume
• LSP server config accepts bash, powershell, and cwd keys; command launch default cwd stays project-root unless cwd is set, and cwd expansion now supports plugin vars like PLUGIN_ROOT while shell launches keep hook-matching cwd/env behavior
• Rewind picker shows working-tree diff stats (+added −removed) at each checkpoint
• Create a git worktree for a pull request directly from the pull requests screen
• Remaining requests percentage no longer shows a negative value for over-limit users
• Extension permission prompts respect --yolo and pre-approved locations on startup
• Custom agent instructions are no longer duplicated each turn, reducing context window usage
• Linux sandbox no longer fails when allowedHosts or blockedHosts are configured
• Session completion signal (terminal beep, autopilot continuation) now waits for background shell commands to finish
• Cmd+Backspace deletes the line before the cursor on macOS prompt input
• web_fetch blocks loopback, private, and cloud metadata addresses and no longer silently follows redirects
• Trusted folders and other config keys are no longer dropped when experiment assignments are cached concurrently
• Rewind no longer deletes ignored files when rolling back to a previous snapshot
• ACP allow_all config option correctly applies unrestricted permissions for tools, paths, and URLs
• --available-tools, --excluded-tools, and --reasoning-effort flags apply correctly in ACP mode
• LSP workspace/configuration response returns the correct number of entries, preventing strict servers like ty from panicking
• Extensions linked via directory symlinks are now discovered and loaded correctly
• Typing "help" at the prompt opens the quick-help overlay instead of sending it as a chat message
• Wide characters (e.g. CJK) render correctly in the terminal diff view without visual corruption
• Folder trust persists across git worktrees without re-prompting
• Force-removing a marketplace no longer causes its plugins to reinstall on next launch
• MCP OAuth re-authentication no longer fails with an address-in-use error when a login is already in progress
• Repository plugin overrides no longer change globally enabled plugin settings
• MCP allowlist now matches npm scoped servers whose registry entry drops the leading @​ from the package identifier
• MCP servers registered via Azure API Center are no longer incorrectly blocked by the allowlist
• Local MCP servers sharing a serialized token broker (e.g. M365) reliably start instead of intermittently failing
• Prompt for approval before running commands that set dynamic-loader or git-config env vars (e.g. LD_PRELOAD, GIT_EXTERNAL_DIFF)
• MCP tools added or removed by a server mid-turn are now available immediately in the same turn
• BYOK file attachments larger than 5 MiB now send successfully via OpenAI Responses provider
• The /init suggestion is no longer shown when running outside a git repository
• Show session link in /session info table when remote exporting or steering
• /env command now shows hook counts and source provenance for active hooks
• Add missing keyboard shortcuts to /help content (?, ctrl+q, ctrl+r, ctrl+z, ctrl+y, shift+enter)
• Auto-link bare #number issue and PR references to the current git repository
• Error message for --cloud without experimental mode explains how to enable /experimental
• /tasks detail view shows the latest prompt after sending a follow-up to a background agent
• Enforce bypass permissions policy for --allow-all-tools, --allow-all-paths, and --allow-all-urls flags

v1.0.59: 1.0.59

Compare Source

2026-06-02

• Add the /voice command to dictate prompts using local speech-to-text models

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.