chore(deps): update dependency github:github/copilot-cli to v1.0.43

[renovate]

This PR contains the following updates:

Package	Update	Change	Pending
github:github/copilot-cli	patch	1.0.32 → 1.0.43	v1.0.44

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

github/copilot-cli (github:github/copilot-cli)

v1.0.43: 1.0.43

Compare Source

2026-05-06

• Add username toggle to /statusline picker to display the active account in the footer
• Auto mode uses server-side model routing for improved real-time model selection
• Resume prompt shows correct session name when multiple sessions are active
• Protect against RCE from malicious bare repositories nested inside a project (for more information, GHSA-9ccr-r5hg-74gf)
• MCP server child processes (e.g. started via npx or uvx) are now fully terminated when a session ends
• Show download progress when running the update command

v1.0.42: 1.0.42

Compare Source

2026-05-06

• MCP server failure warning now suggests a directly runnable /mcp show command when the server name contains whitespace
• MCP server failure warnings include stderr output to help diagnose connection errors
• Add -C flag to change working directory before starting, similar to git -C
• Exit message resume command shows session ID instead of auto-generated name when session has not been renamed
• Remote session export now supports non-GitHub repositories and repo-less directories
• Resuming a session no longer shows a false "session in use" warning after choosing "Go back"
• Enter key no longer gets permanently stuck after cancelling a request
• Suppress the exit summary when the session has no user messages and no saved session to resume
• CLI updates on Windows no longer fail with ENOENT when a transient EPERM occurs during package extraction
• Add rubber-duck agent for GPT sessions, powered by Claude (available in /experimental)

v1.0.41: 1.0.41

Compare Source

2026-05-05

• CLI starts faster by rendering the UI immediately while authentication resolves in the background
• Shell completions (bash, zsh, fish) are automatically installed on first run and updated after copilot update
• Tab-completing slash commands that accept arguments now adds a trailing space automatically
• Package extraction no longer crashes on Windows when antivirus or filesystem locks cause transient EPERM errors
• Remote session connection errors show your logged-in account and tailored remediation steps
• Markdown formatting renders in ask user prompt questions
• Add experimental MCP Tasks support: MCP tools with taskSupport: "required" run as non-blocking background agents trackable via list_agents and read_agent (available when experimental mode is enabled, e.g. via /experimental on or the --experimental flag)
• Extensions now load in prompt mode (-p). User extensions load by default; project extensions alnd management tools require GITHUB_COPILOT_PROMPT_MODE_EXTENSIONS=true.
• Assistant responses no longer contain spurious system notification XML tags
• Large output guidance correctly references the configured grep tool name
• Adding a plugin marketplace using a git SSH URL (e.g. [email protected]:owner/repo) now works correctly
• Slash command picker searches command descriptions and underlines matched characters
• Memory tool confirmation prompt now shows the scope (repository or user) when requesting permission to store a memory
• SQL todo timeline entries display more accurately for INSERT OR IGNORE/REPLACE and blocked status updates
• Streaming text and shimmer animations stay smooth on slow or busy hosts
• Add --attachment flag in non-interactive (-p/--prompt) mode to attach files (images or native documents) to the initial prompt
• @​-mention completion works for ./ paths, no longer adds trailing space on directories, and shows project files before workspace roots
• Improve stability on Windows by working around a V8 crash in Node 24.x
• Session files containing Unicode line separator characters load correctly
• Reasoning effort picker hint text displays "Esc to cancel" with correct spacing
• Improve reliability of file edits by better recovering from fuzzy or misaligned edit blocks

v1.0.40: 1.0.40

Compare Source

2026-05-01

• PR branch decoration displays correctly in the footer regardless of model name length
• /clear and /new reset the active custom agent selection
• Assistant responses stream with smoother text output
• copilot plugin list shows the correct version after running copilot plugin update
• Add support for client_credentials OAuth grant type for MCP servers, enabling fully headless authentication without a browser
• Subagents correctly evaluate tool search support for their own model instead of inheriting the parent session's settings
• Switching sessions with /new or /resume no longer carries over pending messages to the new session
• CLI no longer hangs at 100% CPU when sending a large file attachment
• Resume session picker no longer shows duplicate entries for the same Mission Control-backed session
• Session resume selector displays summaries on a single line, truncated to fit the column width
• Print "Exiting…" to stderr immediately on Ctrl+C during prompt mode so shutdown progress is visible
• /research uses an orchestrator/subagent model for more thorough and reliable deep research results
• Autopilot mode now limits continuation messages to 5 by default (configurable with --max-autopilot-continues)
• Automatically clean up old CLI package versions from disk during auto-update
• Remote session statusline shows the remote working directory and branch instead of local context
• /update no longer re-submits the original -i prompt after restarting
• Detect Azure DevOps repositories and auto-disable the GitHub MCP server
• Session history, file tracking, and the /chronicle command are now available to all users
• Skills are available as slash commands in ACP clients, matching the CLI experience
• Resuming a session no longer falsely reports it as in use after a previous CLI process exited unexpectedly
• --config-dir now propagates correctly to plugin subcommands; --config-dir is deprecated in favor of COPILOT_HOME
• Mouse selection works while the /ask response dialog is open, so its content can be highlighted and copied
• Improve CLI startup speed by loading custom CA certificates asynchronously
• Remote control link shows the full URL in the timeline instead of 'Open in browser'
• ACP clients (e.g. Zed) now display the agent's live plan as it works through multi-step tasks
• Add toggle for custom statusLine.command visibility in the statusline picker
• ACP clients can now list and switch custom agents via the agent config option
• MCP OAuth tokens cache correctly when multiple servers share the same URL but use different static OAuth client IDs
• MCP tool names with dots or other invalid characters are now sanitized correctly
• Ctrl+C and double-Esc remove pending queued messages one at a time instead of all at once
• Slash command suggestions rank prefix matches above fuzzy matches
• Prompt mode (-p) now gates repo hooks and workspace MCP behind opt-in env vars (GITHUB_COPILOT_PROMPT_MODE_REPO_HOOKS and GITHUB_COPILOT_PROMPT_MODE_WORKSPACE_MCP) for secure-by-default behavior

v1.0.39: 1.0.39

Compare Source

2026-04-28

• Allow ACP clients to toggle allow-all permission mode via session configuration
• Add /compact, /context, /usage, and /env slash commands for ACP sessions
• Press ctrl+x → b to move the current running task or shell command to the background
• Transient pipe errors on child process stdio streams no longer cause crashes or trigger false crash reports
• /remote status output now shows actionable hints for each connection state
• Improve --resume session picker with better tab layout, status display, and progressive loading
• Slash command argument picker opens immediately at exact command boundaries without requiring a trailing space

v1.0.37: 1.0.37

Compare Source

2026-04-27

• Location-based permission persistence is now enabled by default, so approvals carry over across sessions for the same directory
• Add copilot completion <bash|zsh|fish> subcommand to generate static shell completion scripts for subcommands, flags, and known choice values
• Press s in the session picker to cycle sort order: relevance, last used, created, or name
• ACP model config options now include description and metadata for clients using the configOptions API
• Model and effort change notification no longer appears when re-selecting the same model or effort level
• Clipboard write no longer leaks X11 handles on Linux
• Pending message indicator displays correctly alongside prompt frames
• Fix detached HEAD detection always returning false after switch to git branch --show-current
• Skill picker list stays fully visible when skills have errors or warnings
• /ask responses now render markdown, including tables and formatted links

v1.0.36: 1.0.36

Compare Source

2026-04-24

• Subcommand picker shows a selection indicator (❯) next to the highlighted item
• Clearer error message with a direct link when multiple Copilot licenses are detected
• Fixed an issue where preToolUse.matcher was ignored. After upgrade, hooks with matcher run only for tool names that fully match the regex.
• /keep-alive is available without experimental mode to prevent system sleep while Copilot CLI is active
• /remote command shows current status and supports /remote on and /remote off to toggle remote control
• Disabled skills no longer appear in the slash command list
• Add a 'changes' statusline toggle to show added/removed line counts for the session
• Custom instruction files in .gitignored directories (e.g., .github/instructions/) now load correctly
• Require double Esc to cancel in-flight work, preventing accidental interruptions
• Saving debug logs or feedback bundles no longer overwrites existing archive files
• Custom agents, skills, and commands from ~/.claude/ are no longer loaded by the Copilot CLI
• Claude Opus 4.6 now uses medium reasoning effort by default

v1.0.35: 1.0.35

Compare Source

2026-04-23

• Slash commands support tab-completion for arguments and subcommands
• Shell escape commands (!) now use your $SHELL when set, instead of always invoking /bin/sh
• Permission prompts appear correctly in remote sessions for the CLI TUI
• Session selector shows branch names, idle/in-use status, and has improved search with cursor support
• Model change notification shows both the previous and new model name
• /update and /version commands now honor your configured update channel
• Session sync prompt uses clearer labels and explains GitHub.com cross-device sync
• Support COPILOT_GH_HOST environment variable for GitHub hostname, taking precedence over GH_HOST
• Press Ctrl+Y (in addition to Tab) to accept the highlighted option in completion popups (@​-mentions, path completions, slash commands)
• Add /session delete, delete , and delete-all subcommands, and x-to-delete in the session picker
• MCP server names with spaces and special characters are now supported
• Skill slash commands (e.g. /skill-name) passed as the initial prompt via -i are recognized correctly on startup
• Shell completion notifications are not duplicated when read_bash already returned the result
• --continue prefers resuming sessions from the current working directory instead of the most recently touched session
• Status line script now includes context window fields that match the model badge and /context output
• User settings are now stored in ~/.copilot/settings.json, separate from internal state in config.json
• Name sessions with --name and resume them by name with --resume=
• Configure Copilot agent now has shell access on Windows
• Show a helpful error message with install instructions when clipboard utilities (wl-clipboard or xclip) are missing on Linux
• LSP server entries in lsp.json support configurable spawn, initialization, and warmup timeouts
• Context window indicator in the statusline is now hidden by default
• Move MCP OAuth into the shared runtime flow and clear associated OAuth state when removing an MCP server.
• Added a GitHub-style contribution graph to /usage that adapts to terminal color mode and falls back to distinct glyphs in no-color terminals
• Self-correcting custom tool calls in agentic loop
• Cursor movement, deletion, and rendering work correctly for emoji and multi-codepoint characters in the text input
• Tool availability detection works correctly on Windows
• Session token expiry during a turn is handled automatically without requiring you to resend your message
• Initial tab and arrow key navigation in /cwd and /add-dir path picker selects the correct item
• Transient I/O errors no longer appear as red error entries in the timeline when an IDE or extension disconnects
• Custom agents and skills in ~/.claude/ are no longer incorrectly loaded as Copilot project config
• Login command restores interactive input correctly after authentication
• Improve rendering performance when displaying large amounts of text in the timeline
• Sync task calls block until completion under MULTI_TURN_AGENTS instead of auto-promoting to background after 60s; sync no longer returns a reusable agent_id, use mode: "background" for follow-ups
• Tab navigation supports Home/End keys to jump to first and last tab
• Plugins take effect immediately after install without requiring a restart
• Add continueOnAutoMode config option to automatically switch to auto model on rate limit instead of pausing
• Auto mode no longer fails with an error when switching to a model that doesn't support the configured reasoning effort
• Pattern-specific instruction files (.github/instructions/*.instructions.md) no longer include their full body in the system prompt on every session
• Extension shutdown errors no longer appear as error-level log noise on every session exit
• LSP refactoring tools now register correctly on the first turn when LSP configs are present
• Add HTTP hook support, allowing hooks to POST JSON payloads to a configured URL instead of running a local command
• Hide subagent thinking from the timeline
• Custom agent name is now visible in the statusline footer and can be toggled via /statusline
• Pressing Escape on startup dialogs no longer causes race conditions
• grep and glob tools now accept multiple search paths

v1.0.34: 1.0.34

Compare Source

2026-04-20

• Rate limit error message now says "session rate limit" instead of "global rate limit"

v1.0.33: 1.0.33

Compare Source

2026-04-20

• Resuming a remote session with --resume or --continue automatically inherits the --remote flag without needing to re-specify it
• Add /bug, /continue, /release-notes, /export, and /reset as command aliases
• Slash command picker suggests similar commands when you type an unrecognized or misspelled slash command
• Add /upgrade as an alias for the /update command
• Grep no longer times out on large repositories when content exclusion policies are enabled
• Non-interactive mode waits for all background agents to finish before exiting
• Skill picker correctly truncates CJK/Japanese descriptions and long skill names without wrapping
• Slash command picker selects the highlighted command when pressing Enter
• ctrl+t to toggle reasoning display is now listed in the /help and ? overlay
• Sub-agents in auto mode now inherit the session model
• Show usage limit warnings at 50% and 95% capacity, giving earlier notice before hitting rate limits
• Use j/k for vim-style navigation and x to kill tasks in the tasks dialog

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.