chore(deps): bump @github/copilot from 1.0.55 to 1.0.59

[dependabot]

Bumps @github/copilot from 1.0.55 to 1.0.59.

Release notes

Sourced from @​github/copilot's releases.

1.0.59

2026-06-02

• Add the /voice command to dictate prompts using local speech-to-text models

1.0.58

• Rubber Duck is now enabled by default
• Remote JSON RPC is now enabled by default
• /experimental schedule prompts with /every and /after
• /experimental new GitHub /theme
• /experimental new UI with easy access to issues, pull requests, and gists

[!NOTE] Turn /experimental on to see the Scheduled Prompts, new theme, and new UI.

1.0.57

2026-06-01

• Actionable error message shown when GitHub API rate limit is hit during copilot update
• Plugin slash commands (/plugin install, uninstall, update, marketplace add/remove/browse) now show immediate feedback while the operation is in progress
• Canceling a running shell command (Ctrl+C on a !command, or aborting an agent command — including in sandboxed and background-promoted shells) now terminates the whole process tree instead of leaving orphaned processes running
• Canvas providers can return file:// URLs in open results for local file previews
• Symlinked directories appear in /cwd completion suggestions
• In Azure DevOps-only repositories, the built-in GitHub MCP server now exposes only the web_search tool instead of being fully disabled
• Quota footer shows remaining requests as a rounded percentage
• /lsp show, /lsp test, and /lsp reload correctly discover project LSP config when the CLI is launched from a subdirectory
• MCP server timeout configuration is preserved after tools list changes
• /skills add and /skills remove correctly handle paths wrapped in quotes (e.g., from Windows Explorer "Copy as path")
• Running copilot with an unquoted multi-word prompt now shows a helpful "quote your prompt" hint instead of a raw commander error
• Default networking transport is now HTTP/1.1, improving reliability on some network paths. Opt into HTTP/2 with COPILOT_ENABLE_HTTP2=1.
• Plugins auto-installed from repository settings no longer leak into user global config
• Grep tool correctly handles tsx and jsx as file type filters
• COPILOT_HOME is honored for the server discovery registry directory
• Click a diff line with the mouse to select it in diff mode
• Ctrl+C and other modified keys work correctly inside tmux
• @-mention file search matches files regardless of query letter casing
• copilot plugin marketplace list now honors repo-level extraKnownMarketplaces settings from .github/copilot/settings.json
• Queued prompts in the footer are capped to a single line, preventing them from pushing session messages off screen
• MCP servers configured with npx --registry are no longer incorrectly blocked by policy
• Session no longer hangs indefinitely after an error occurs during internal event processing
• Installed plugins no longer include the .git directory from the plugin source repository
• New reasoning after tool calls appears at the bottom of the timeline instead of above earlier output
• Pasting text copied from a browser, editor, or terminal no longer leaves a stray empty line, broken box-drawing lines, or a misplaced cursor in the prompt
• preToolUse hook errors now deny the tool call instead of silently allowing execution
• Session resume works correctly after a crash that left partial data in the session log
• High-contrast diff backgrounds use darker colors to improve text readability
• Add showTipsOnStartup setting to control whether startup tips are shown
• Surface the underlying reason (e.g. GitHub API rate limit) when SDK auth-token validation fails, instead of the misleading "Session was not created with authentication info or custom provider" message.
• /diff defaults to branch diff when there are no unstaged changes

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.59 - 2026-06-02

• Actionable error message shown when GitHub API rate limit is hit during copilot update
• Add /rubber-duck command for adversarial feedback on code and designs
• Plugin slash commands (/plugin install, uninstall, update, marketplace add/remove/browse) now show immediate feedback while the operation is in progress
• Canceling a running shell command (Ctrl+C on a !command, or aborting an agent command — including in sandboxed and background-promoted shells) now terminates the whole process tree instead of leaving orphaned processes running
• Canvas providers can return file:// URLs in open results for local file previews
• Symlinked directories appear in /cwd completion suggestions
• In Azure DevOps-only repositories, the built-in GitHub MCP server now exposes only the web_search tool instead of being fully disabled
• Quota footer shows remaining requests as a rounded percentage
• /lsp show, /lsp test, and /lsp reload correctly discover project LSP config when the CLI is launched from a subdirectory
• MCP server timeout configuration is preserved after tools list changes
• /skills add and /skills remove correctly handle paths wrapped in quotes (e.g., from Windows Explorer "Copy as path")
• Running copilot with an unquoted multi-word prompt now shows a helpful "quote your prompt" hint instead of a raw commander error
• Default networking transport is now HTTP/1.1, improving reliability on some network paths. Opt into HTTP/2 with COPILOT_ENABLE_HTTP2=1.
• Plugins auto-installed from repository settings no longer leak into user global config
• Grep tool correctly handles tsx and jsx as file type filters
• Add the /voice command to dictate prompts using local speech-to-text models
• COPILOT_HOME is honored for the server discovery registry directory

1.0.58 - 2026-06-02

• Rubber Duck is now enabled by default
• Remote JSON RPC is now enabled by default
• Experimental schedule prompts with /every and /after
• Experimental new GitHub TUI theme
• Experimental new UI with easy access to issues, pull requests, and gists

1.0.57 - 2026-06-01

• Actionable error message shown when GitHub API rate limit is hit during copilot update
• Plugin slash commands (/plugin install, uninstall, update, marketplace add/remove/browse) now show immediate feedback while the operation is in progress
• Canceling a running shell command (Ctrl+C on a !command, or aborting an agent command — including in sandboxed and background-promoted shells) now terminates the whole process tree instead of leaving orphaned processes running
• Canvas providers can return file:// URLs in open results for local file previews
• Symlinked directories appear in /cwd completion suggestions
• In Azure DevOps-only repositories, the built-in GitHub MCP server now exposes only the web_search tool instead of being fully disabled
• Quota footer shows remaining requests as a rounded percentage
• /lsp show, /lsp test, and /lsp reload correctly discover project LSP config when the CLI is launched from a subdirectory
• MCP server timeout configuration is preserved after tools list changes
• /skills add and /skills remove correctly handle paths wrapped in quotes (e.g., from Windows Explorer "Copy as path")
• Running copilot with an unquoted multi-word prompt now shows a helpful "quote your prompt" hint instead of a raw commander error
• Default networking transport is now HTTP/1.1, improving reliability on some network paths. Opt into HTTP/2 with COPILOT_ENABLE_HTTP2=1.
• Plugins auto-installed from repository settings no longer leak into user global config
• Grep tool correctly handles tsx and jsx as file type filters
• COPILOT_HOME is honored for the server discovery registry directory
• Click a diff line with the mouse to select it in diff mode
• Ctrl+C and other modified keys work correctly inside tmux
• @-mention file search matches files regardless of query letter casing
• copilot plugin marketplace list now honors repo-level extraKnownMarketplaces settings from .github/copilot/settings.json
• Queued prompts in the footer are capped to a single line, preventing them from pushing session messages off screen

... (truncated)

Commits

• fbdc9da Update changelog.md for version 1.0.58
• eaa1eab Update changelog.md for version 1.0.57
• 5e5b150 Update changelog.md for version 1.0.56
• 3085447 Update changelog.md for version 1.0.55
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)