fix(mise): update tool npm:@github/copilot ( 1.0.54 ➔ 1.0.60 ) [automerge]

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
npm:@github/copilot	1.0.54 → 1.0.60

---

Release Notes

github/copilot-cli (npm:@​github/copilot)

v1.0.60

Compare Source

• Tab completes .. parent traversal in slash-command path arguments instead of switching tabs
• Add the max reasoning effort level for Anthropic models and make all effort levels available on every plan
• Screen no longer stays blank after waking from sleep inside a terminal multiplexer
• Input fields render background color correctly inside highlighted frames
• Cursor renders in the correct position in plan approval and review feedback prompts
• Worktree directory uses a flat name when PR branch contains slashes (e.g. cli/foo → .worktrees/cli-foo)
• Queue hint correctly shows ctrl+enter instead of ctrl+q when kitty keyboard protocol is active
• Status line progressively stacks across rows at narrow terminal widths instead of truncating elements beyond recognition
• Clipboard operations on X11 no longer corrupt the terminal display
• Add builtInAgents.rubberDuckAutoInvoke setting to control automatic rubber duck agent invocation (disabled by default)
• On Windows, executables are no longer discovered in the working directory when invoking by bare name (e.g. git). Add the working directory to PATH to enable discovery.
• Interactive shell commands no longer hang when producing large amounts of output
• MCP tools glyph in /context legend displays at the correct size
• Skill and slash command picker rows correctly display multi-line descriptions as a single line
• IDE picker now hides entries whose editor connection has gone away, so selecting one no longer fails with a connection error, and appends a process id to entries that share the same editor and folder so git worktrees of the same repo can be told apart
• Model picker fits within small terminal windows and mouse scroll works in the picker
• Show cache write tokens alongside cache read tokens in /usage display
• Repurpose ctrl+s to stash and pop the current prompt (Claude Code parity); the slash-command picker is still available by typing /
• /context separates Custom Instructions from the system prompt and cross-references per-server MCP tool token costs with /mcp
• Add billing help topic with an overview of AI credit usage features
• Add vim-style navigation keys (g, G, Ctrl+D, Ctrl+U) to the /diff view
• Show the Mission Control sharing status of synced sessions in the /session info view
• Add -r as a shorthand for --resume
• LSP server config accepts bash, powershell, and cwd keys; command launch default cwd stays project-root unless cwd is set, and cwd expansion now supports plugin vars like PLUGIN_ROOT while shell launches keep hook-matching cwd/env behavior
• Rewind picker shows working-tree diff stats (+added −removed) at each checkpoint
• Create a git worktree for a pull request directly from the pull requests screen
• Remaining requests percentage no longer shows a negative value for over-limit users
• Extension permission prompts respect --yolo and pre-approved locations on startup
• Custom agent instructions are no longer duplicated each turn, reducing context window usage
• Linux sandbox no longer fails when allowedHosts or blockedHosts are configured
• Session completion signal (terminal beep, autopilot continuation) now waits for background shell commands to finish
• Cmd+Backspace deletes the line before the cursor on macOS prompt input
• web_fetch blocks loopback, private, and cloud metadata addresses and no longer silently follows redirects
• Trusted folders and other config keys are no longer dropped when experiment assignments are cached concurrently
• Rewind no longer deletes ignored files when rolling back to a previous snapshot
• ACP allow_all config option correctly applies unrestricted permissions for tools, paths, and URLs
• --available-tools, --excluded-tools, and --reasoning-effort flags apply correctly in ACP mode
• LSP workspace/configuration response returns the correct number of entries, preventing strict servers like ty from panicking
• Extensions linked via directory symlinks are now discovered and loaded correctly
• Typing "help" at the prompt opens the quick-help overlay instead of sending it as a chat message
• Wide characters (e.g. CJK) render correctly in the terminal diff view without visual corruption
• Folder trust persists across git worktrees without re-prompting
• Force-removing a marketplace no longer causes its plugins to reinstall on next launch
• MCP OAuth re-authentication no longer fails with an address-in-use error when a login is already in progress
• Repository plugin overrides no longer change globally enabled plugin settings
• MCP allowlist now matches npm scoped servers whose registry entry drops the leading @​ from the package identifier
• MCP servers registered via Azure API Center are no longer incorrectly blocked by the allowlist
• Local MCP servers sharing a serialized token broker (e.g. M365) reliably start instead of intermittently failing
• Prompt for approval before running commands that set dynamic-loader or git-config env vars (e.g. LD_PRELOAD, GIT_EXTERNAL_DIFF)
• MCP tools added or removed by a server mid-turn are now available immediately in the same turn
• BYOK file attachments larger than 5 MiB now send successfully via OpenAI Responses provider
• The /init suggestion is no longer shown when running outside a git repository
• Show session link in /session info table when remote exporting or steering
• /env command now shows hook counts and source provenance for active hooks
• Add missing keyboard shortcuts to /help content (?, ctrl+q, ctrl+r, ctrl+z, ctrl+y, shift+enter)
• Auto-link bare #number issue and PR references to the current git repository
• Error message for --cloud without experimental mode explains how to enable /experimental
• /tasks detail view shows the latest prompt after sending a follow-up to a background agent
• Enforce bypass permissions policy for --allow-all-tools, --allow-all-paths, and --allow-all-urls flags

v1.0.59: 1.0.59

Compare Source

2026-06-02

• Add the /voice command to dictate prompts using local speech-to-text models

v1.0.58

Compare Source

• Rubber Duck is now enabled by default
• Remote JSON RPC is now enabled by default
• Experimental schedule prompts with /every and /after
• Experimental new GitHub TUI theme
• Experimental new UI with easy access to issues, pull requests, and gists

v1.0.57

Compare Source

• Actionable error message shown when GitHub API rate limit is hit during copilot update
• Plugin slash commands (/plugin install, uninstall, update, marketplace add/remove/browse) now show immediate feedback while the operation is in progress
• Canceling a running shell command (Ctrl+C on a !command, or aborting an agent command — including in sandboxed and background-promoted shells) now terminates the whole process tree instead of leaving orphaned processes running
• Canvas providers can return file:// URLs in open results for local file previews
• Symlinked directories appear in /cwd completion suggestions
• In Azure DevOps-only repositories, the built-in GitHub MCP server now exposes only the web_search tool instead of being fully disabled
• Quota footer shows remaining requests as a rounded percentage
• /lsp show, /lsp test, and /lsp reload correctly discover project LSP config when the CLI is launched from a subdirectory
• MCP server timeout configuration is preserved after tools list changes
• /skills add and /skills remove correctly handle paths wrapped in quotes (e.g., from Windows Explorer "Copy as path")
• Running copilot with an unquoted multi-word prompt now shows a helpful "quote your prompt" hint instead of a raw commander error
• Default networking transport is now HTTP/1.1, improving reliability on some network paths. Opt into HTTP/2 with COPILOT_ENABLE_HTTP2=1.
• Plugins auto-installed from repository settings no longer leak into user global config
• Grep tool correctly handles tsx and jsx as file type filters
• COPILOT_HOME is honored for the server discovery registry directory
• Click a diff line with the mouse to select it in diff mode
• Ctrl+C and other modified keys work correctly inside tmux
• @​-mention file search matches files regardless of query letter casing
• copilot plugin marketplace list now honors repo-level extraKnownMarketplaces settings from .github/copilot/settings.json
• Queued prompts in the footer are capped to a single line, preventing them from pushing session messages off screen
• MCP servers configured with npx --registry are no longer incorrectly blocked by policy
• Session no longer hangs indefinitely after an error occurs during internal event processing
• Installed plugins no longer include the .git directory from the plugin source repository
• New reasoning after tool calls appears at the bottom of the timeline instead of above earlier output
• Pasting text copied from a browser, editor, or terminal no longer leaves a stray empty line, broken box-drawing lines, or a misplaced cursor in the prompt
• preToolUse hook errors now deny the tool call instead of silently allowing execution
• Session resume works correctly after a crash that left partial data in the session log
• High-contrast diff backgrounds use darker colors to improve text readability
• Add showTipsOnStartup setting to control whether startup tips are shown
• Surface the underlying reason (e.g. GitHub API rate limit) when SDK auth-token validation fails, instead of the misleading "Session was not created with authentication info or custom provider" message.
• /diff defaults to branch diff when there are no unstaged changes

v1.0.56

Compare Source

• Free and Student users can select models other than Auto in the model picker
• ThemePicker side-by-side layout fits within a 120-column terminal without wrapping
• Model picker shows accurate total context window size per pricing tier
• Add builtInAgents.rubberDuck setting to enable or disable the rubber duck agent via copilot config
• Extended key reporting works correctly in tmux when Kitty keyboard protocol is unavailable
• Config and settings files are written atomically to prevent data loss when multiple CLI processes run concurrently
• BYOK provider configuration now applies correctly to ACP sessions
• MCP tools that return both human-readable content text and a structuredContent payload now surface both to the agent instead of dropping either side. When the text is the literal JSON serialization (per MCP spec §5.2.6) it is deduplicated; otherwise the two are concatenated.
• Fix /context small-token legend formatting and free-space grid rounding
• Reasoning effort picker respects model capabilities — options not supported by the model are no longer shown
• File paths in /env output display with correct formatting
• Reasoning text always displays above the assistant response in the conversation timeline
• Assistant responses render without single-word orphan lines in the terminal timeline
• Diff view uses a continuous scroll layout with sticky file and hunk headers, full terminal width, and theme-aware colors
• web_fetch tool prefers markdown content when available, using HTTP content negotiation for cleaner results from documentation sites
• Cursor stays at correct position after pasting text that contains tab characters
• Code review agent now uses the same model as the current session instead of a fixed default
• When gh CLI is on PATH, GitHub MCP server now omits redundant gh-replaceable tools by default, reducing token usage
• Context window tier selection now persists durably in session events and survives SDK-only resume paths so tier-derived limits are reapplied to request, compaction, and truncation logic without app-level repair
• Remote session URL correctly uses the repository owner/name instead of literal 'copilot'
• Trusted folder confirmation message clarifies that permissions may be remembered for the session

v1.0.55

Compare Source

• Free and Student plan users on token-based billing are restricted to Auto model selection, with an explanation shown in the model picker
• Report Claude thinking (reasoning) tokens in session usage summaries
• Add support for Claude Opus 4.8
• Loading spinner no longer hangs forever when launching in an untrusted folder
• MCP server configuration form saves the latest typed value when pressing Ctrl+S
• Show per-MCP-server token usage in /mcp and break out MCP tool tokens in /context
• Custom agents and skills are now discovered recursively in subdirectories
• Add permissions.disableBypassPermissionsMode setting to prevent enabling allow-all/yolo mode
• Update model selection behavior for select subscription plans
• The exit_plan_mode tool is only offered to the model while the session is in plan mode
• Native binary crash (e.g. SIGSEGV) now falls through to the JavaScript fallback instead of silently exiting
• Add /autopilot to keep autopilot focused, with /goal as an alias
• Detect PowerShell 7 correctly when pwsh.exe is installed as a Microsoft Store App Execution Alias
• Sessions with zero-sized CAPI billing batches resume correctly
• Cell-based terminal renderer is now enabled for all users by default
• Show a warning when remote controlled sessions are disabled by organization policy
• Extension log files are now captured per extension and surfaced in the extensions_manage tool to help diagnose failures
• Project extensions in .github/extensions are now discovered in non-git (folder-backed) workspaces
• Allow /statusline and /theme commands to run while the agent is executing
• MCP configuration now opens in its own dedicated screen, with scrollable server and tool lists when content exceeds the visible area
• Hook progress streaming shows real-time status messages from long-running hooks in the timeline
• pluginDirectories on session.create and session.resume RPC: SDK clients can mount Open Plugins-format directories per session.
• Delete remote sessions directly from the session picker
• Schedule manager hint bar text no longer wraps over dialog borders when entries are added
• copilot update and copilot version authenticate release API requests to avoid rate limit errors in shared-NAT environments
• Diff view keyboard shortcut hints display correctly when toggling between unstaged and branch diff modes
• Clipboard paste works correctly on Wayland compositors that do not support wlr-data-control (e.g. GNOME/Mutter)
• Interactive shell tool preserves parent terminal color settings so diff tools and other programs render with full color
• Canvas tools with optional object input schemas open correctly without validation errors
• Extension subprocesses no longer fail with "Invalid command format" when forked from an older CLI version
• Settings migration preserves user data when legacy snake_case keys exist from older CLI versions
• Support owner/repo#ref syntax when adding plugins from the marketplace
• Feedback dialog and /skills help text use Copilot-consistent log paths and terminology
• Progress indicators integrate natively with tmux 3.6b pane progress state
• --plugin-dir skills now take precedence over personal-home (~/.copilot, ~/.agents) skills with the same name. Order is now project > plugin-dir > personal > custom.
• Show a helpful message when remote controlled sessions are disabled by organization policy
• Reasoning token count now shown in session token summary for all users
• Terminal bell no longer sounds on turn completion unless explicitly enabled via config
• /resume picker no longer shows blank rows for sessions closed before sending a message
• Aborting a session no longer leaves the UI stuck in a Cancelling state when Task tool agents are running
• vote_memory tool calls are throttled per response and per interaction to prevent runaway voting bursts
• Upward auto-scroll now engages when dragging mouse selection past the top of the timeline
• Clipboard correctly copies CJK and supplementary-plane Unicode characters on Windows
• Increase selection background contrast across all color themes for better visibility
• /env now shows loaded extensions with their status and source
• Extensions launch correctly when the CLI runs as a single-executable application (SEA)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "every weekend,on Friday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.