build(deps): Bump @github/copilot from 1.0.63 to 1.0.64

[dependabot]

Bumps @github/copilot from 1.0.63 to 1.0.64.

Release notes

Sourced from @​github/copilot's releases.

1.0.64

2026-06-23

• Path access prompt shows resolved symlink targets so you can see exactly what access is being granted
• Show the pay-as-you-go additional usage budget at launch, refresh it after a request is rejected for hitting the additional spend limit, and show a friendly message when the additional usage limit is reached
• Add websocket responses support for BYOK OpenAI-compatible providers
• Resumed sessions reproduce the original attached-file references even if those files later change on disk, avoiding prompt-cache resets
• Free-text search terms containing colons (e.g. CLI:) now return correct results in Issues and Pull requests search instead of being misread as invalid qualifiers by GitHub
• Support static OAuth client overrides, including client secrets, for MCP server authentication
• Preserve keystrokes typed while the CLI is still loading
• Add an option to bypass the sandbox for shell commands
• Add mouse click and double-click selection to paginated lists
• Link PR and issue references in markdown tables
• Use the GitHub theme by default and enable home tabs and prompt frame for all users
• Keep terminal output aligned after terminal resizes
• Content exclusion no longer blocks every file when the rules service is unreachable (offline or a transient network error). Access is allowed until rules can be fetched and retried in the background, matching the editor's behavior.
• Configure the rubber-duck subagent in /subagents, including a complementary model strategy that picks an opposite-family model
• /diff shows a session diff of Copilot's changes in non-git folders
• Set an HTTP(S) proxy with a user setting
• Resume sessions by name even when the name contains spaces
• Hide unsupported slash commands in remote-hosted sessions
• Add a setting to hide the conversation scrollbar
• Add inline image rendering in the CLI
• Add argument-hint frontmatter support for skills
• OpenTelemetry: chat spans after a successful compaction carry gen_ai.conversation.compacted=true, and the summary is emitted as a CompactionPart in gen_ai.input.messages
• PowerShell cmdlets (Select-String, Where-Object, ForEach-Object) no longer trigger spurious directory access prompts
• Non-interactive prompt output now stays at column 1
• Clear queued tool images when vision is disabled
• Changing the model now waits until the new model is applied
• Treat 2>/dev/null redirects as read-only in shell safety prompts
• Normalize edited text to LF when opening prompts in an external editor
• Skip computer-use consent prompts in full allow-all sessions
• Remote export keeps running after /clear and /session info keeps the task URL
• Keep the cursor on the adjacent session after deleting one in the session selector
• Use the correct Linux libc target when resolving and auto-updating SEA packages on musl hosts
• Allow required multi-select prompts to submit an empty selection when minItems is not set
• Keep the home session timeline visible after attaching and restoring
• The /settings search field supports readline editing keys and cursor movement
• OpenTelemetry GenAI spans now emit gen_ai.usage.cache_read.input_tokens, gen_ai.usage.cache_creation.input_tokens, and gen_ai.usage.reasoning.output_tokens per the GenAI semantic conventions spec (previously used incorrect underscore-separated names)
• Fix mouse wheel scrolling being broken in the terminal after the CLI exits by tearing down terminal modes in reverse order (mouse tracking is now disabled before leaving the alt screen)
• Fix the /rewind file-restore confirmation dialog being clipped at the bottom when it opens above a scrolled timeline; it now shows at full height once the file list loads
• Show --remote-export and --no-remote-export in --help output
• Wrap expanded compact timeline shell entries so long commands and descriptions stay visible
• Make links in markdown tables clickable
• Show per-model token totals in /usage and speed up large history scans
• OpenTelemetry GenAI chat spans emit gen_ai.request.reasoning.level for the configured reasoning effort
• Autopilot mode now returns to interactive mode after the agent calls task_complete, so you aren't left in autopilot for your next prompt
• Add /branch as an alias for /fork, matching Claude Code's command naming
• Experimental: adds a --worktree [name] (-w) flag (enable with /experimental) that creates or reuses a git worktree under <repo>.worktrees/ and starts the session inside it
• Add tab completion for /agent names

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.64 - 2026-06-23

• Path access prompt shows resolved symlink targets so you can see exactly what access is being granted
• Show the pay-as-you-go additional usage budget at launch, refresh it after a request is rejected for hitting the additional spend limit, and show a friendly message when the additional usage limit is reached
• Add websocket responses support for BYOK OpenAI-compatible providers
• Resumed sessions reproduce the original attached-file references even if those files later change on disk, avoiding prompt-cache resets
• Free-text search terms containing colons (e.g. CLI:) now return correct results in Issues and Pull requests search instead of being misread as invalid qualifiers by GitHub
• Support static OAuth client overrides, including client secrets, for MCP server authentication
• Preserve keystrokes typed while the CLI is still loading
• Add an option to bypass the sandbox for shell commands
• Add mouse click and double-click selection to paginated lists
• Link PR and issue references in markdown tables
• Use the GitHub theme by default and enable home tabs and prompt frame for all users
• Keep terminal output aligned after terminal resizes
• Content exclusion no longer blocks every file when the rules service is unreachable (offline or a transient network error). Access is allowed until rules can be fetched and retried in the background, matching the editor's behavior.
• Configure the rubber-duck subagent in /subagents, including a complementary model strategy that picks an opposite-family model
• /diff shows a session diff of Copilot's changes in non-git folders
• Set an HTTP(S) proxy with a user setting
• Resume sessions by name even when the name contains spaces
• Hide unsupported slash commands in remote-hosted sessions
• Add a setting to hide the conversation scrollbar
• Add inline image rendering in the CLI
• Add argument-hint frontmatter support for skills
• OpenTelemetry: chat spans after a successful compaction carry gen_ai.conversation.compacted=true, and the summary is emitted as a CompactionPart in gen_ai.input.messages
• PowerShell cmdlets (Select-String, Where-Object, ForEach-Object) no longer trigger spurious directory access prompts
• Non-interactive prompt output now stays at column 1
• Clear queued tool images when vision is disabled
• Changing the model now waits until the new model is applied
• Treat 2>/dev/null redirects as read-only in shell safety prompts
• Normalize edited text to LF when opening prompts in an external editor
• Skip computer-use consent prompts in full allow-all sessions
• Remote export keeps running after /clear and /session info keeps the task URL
• Keep the cursor on the adjacent session after deleting one in the session selector
• Use the correct Linux libc target when resolving and auto-updating SEA packages on musl hosts
• Allow required multi-select prompts to submit an empty selection when minItems is not set
• Keep the home session timeline visible after attaching and restoring
• The /settings search field supports readline editing keys and cursor movement
• OpenTelemetry GenAI spans now emit gen_ai.usage.cache_read.input_tokens, gen_ai.usage.cache_creation.input_tokens, and gen_ai.usage.reasoning.output_tokens per the GenAI semantic conventions spec (previously used incorrect underscore-separated names)
• Fix mouse wheel scrolling being broken in the terminal after the CLI exits by tearing down terminal modes in reverse order (mouse tracking is now disabled before leaving the alt screen)
• Fix the /rewind file-restore confirmation dialog being clipped at the bottom when it opens above a scrolled timeline; it now shows at full height once the file list loads
• Show --remote-export and --no-remote-export in --help output
• Wrap expanded compact timeline shell entries so long commands and descriptions stay visible
• Make links in markdown tables clickable
• Show per-model token totals in /usage and speed up large history scans
• OpenTelemetry GenAI chat spans emit gen_ai.request.reasoning.level for the configured reasoning effort
• Autopilot mode now returns to interactive mode after the agent calls task_complete, so you aren't left in autopilot for your next prompt
• Add /branch as an alias for /fork, matching Claude Code's command naming
• Experimental: adds a --worktree [name] (-w) flag (enable with /experimental) that creates or reuses a git worktree under <repo>.worktrees/ and starts the session inside it
• Add tab completion for /agent names
• Add model family aliases like opus, sonnet, haiku, gpt, and gemini in the model setting

... (truncated)

Commits

• b71d117 Update changelog.md for version 1.0.63
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)