chore(deps): bump @github/copilot from 1.0.21 to 1.0.51

[dependabot]

Bumps @github/copilot from 1.0.21 to 1.0.51.

Release notes

Sourced from @​github/copilot's releases.

1.0.51

2026-05-20

• --session-id=<id> resumes known sessions or tasks, and starts new sessions with a specific UUID
• /remote commands now respect organization remote control and view from cloud policy and show a clear error when disabled
• /remote command can now be used while the agent is working
• Customizable status line in the terminal footer displays session info such as model, context window, git branch, and more
• MCP tool loading at startup is faster for users with many HTTP-based MCP servers
• Settings file no longer accumulates unrelated config keys when settings are updated
• Add /security-review slash command to review code changes for security vulnerabilities (experimental)
• Add preMcpToolCall hook for hook providers to control outgoing MCP request metadata
• Add /chronicle cost-tips subcommand for personalized token usage and cost reduction recommendations
• MCP servers using OAuth stay connected when authentication was performed in a separate session
• GFM tables and blockquotes inside list items render correctly without a floating top border
• Experimental mode indicator now appears persistently in the app header instead of as a one-time notification
• Loading indicator color matches the active mode (plan, autopilot, shell)
• Session naming works correctly for usage-based billing users
• Pressing Enter on a highlighted subcommand completion inserts the selection instead of submitting the partial command
• Use default release notes when publishing a release with no changelog entries
• Editor launched with Ctrl+G no longer steals keystrokes or requires double keypresses
• /memory show displays documentation links for learning about and managing Copilot Memory
• Add terminalProgress setting to enable or disable OSC 9;4 terminal progress indicators
• postToolUse hooks can now inject additionalContext into successful tool results
• Only show remote session startup failure when remote mode is explicitly requested via --remote or enabled in user configuration
• Shell tool calls succeed even when the model omits the description parameter
• Ensure input token usage includes cached, update token formatting to clarify
• Login prompt more clearly warns when token storage falls back to insecure plain text config file
• GitHub MCP web search tool is available immediately without requiring tool search
• Secret scanning now covers commit messages and PR descriptions, redacting secrets before they are published
• Input area grows responsively with terminal height instead of capping at 3 lines

1.0.51-3

Added

• Add /security-review slash command to review code changes for security vulnerabilities
• Add preMcpToolCall hook for hook providers to control outgoing MCP request metadata
• Add /chronicle cost-tips subcommand for personalized token usage and cost reduction recommendations

Improved

• Experimental mode indicator now appears persistently in the app header instead of as a one-time notification
• Loading indicator color matches the active mode (plan, autopilot, shell)

Fixed

• MCP servers using OAuth stay connected when authentication was performed in a separate session
• GFM tables and blockquotes inside list items render correctly without a floating top border

1.0.51-2

Improved

• /memory show displays documentation links for learning about and managing Copilot Memory

Fixed

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.51 - 2026-05-20

• --session-id=<id> resumes known sessions or tasks, and starts new sessions with a specific UUID
• /remote commands now respect organization remote control and view from cloud policy and show a clear error when disabled
• /remote command can now be used while the agent is working
• Customizable status line in the terminal footer displays session info such as model, context window, git branch, and more
• MCP tool loading at startup is faster for users with many HTTP-based MCP servers
• Settings file no longer accumulates unrelated config keys when settings are updated
• Add /security-review slash command to review code changes for security vulnerabilities
• Add preMcpToolCall hook for hook providers to control outgoing MCP request metadata
• Add /chronicle cost-tips subcommand for personalized token usage and cost reduction recommendations
• MCP servers using OAuth stay connected when authentication was performed in a separate session
• GFM tables and blockquotes inside list items render correctly without a floating top border
• Experimental mode indicator now appears persistently in the app header instead of as a one-time notification
• Loading indicator color matches the active mode (plan, autopilot, shell)
• Session naming works correctly for usage-based billing users
• Pressing Enter on a highlighted subcommand completion inserts the selection instead of submitting the partial command
• Use default release notes when publishing a release with no changelog entries
• Editor launched with Ctrl+G no longer steals keystrokes or requires double keypresses
• /memory show displays documentation links for learning about and managing Copilot Memory
• Add terminalProgress setting to enable or disable OSC 9;4 terminal progress indicators
• postToolUse hooks can now inject additionalContext into successful tool results
• Only show remote session startup failure when remote mode is explicitly requested via --remote or enabled in user configuration
• Shell tool calls succeed even when the model omits the description parameter
• Ensure input token usage includes cached, update token formatting to clarify
• Login prompt more clearly warns when token storage falls back to insecure plain text config file
• GitHub MCP web search tool is available immediately without requiring tool search
• Secret scanning now covers commit messages and PR descriptions, redacting secrets before they are published
• Input area grows responsively with terminal height instead of capping at 3 lines

1.0.49 - 2026-05-18

• postToolUse hook additionalContext is now injected as a system message for the model instead of being silently discarded
• Mouse clicks in the prompt correctly position cursor when input contains wide characters (CJK, emoji)
• Add /chronicle search subcommand to search all session content by keyword or topic
• /user switch reuses the fetched user list and shows a loading spinner on first open
• MCP servers using static OAuth clients correctly persist registration for token refreshes
• Add support for running the CLI on Alpine Linux (musl libc)
• Add /exit print option to print the session to the terminal before exiting
• Add /rubber-duck command to get an independent critique of the agent's current work
• Add /session id subcommand to display the current session ID and copy it to the clipboard
• Add auth.redirectPort config option for MCP servers to pin the OAuth callback to a fixed port
• Add /memory on|off|show slash command to enable, disable, or view memory status (persistent)
• Add copilot plugin update --all to update all installed plugins at once
• Add /rubber-duck command to invoke the rubber duck agent for an independent critique (experimental)
• Input prompt collapses to a single line when empty and grows naturally as you type
• File diffs are correctly reported to ACP clients for all edit tool types
• Repo hooks in .github/hooks/ now load in prompt mode (-p) when the folder is already trusted
• Fix extra line in timeline entries
• Box drawing and block characters render correctly on Windows terminals not using UTF-8 code page

... (truncated)

Commits

• d0b5734 Update changelog.md for version 1.0.49
• 196c5f6 Update changelog.md for version 1.0.48
• 4328afb Update changelog.md for version 1.0.47
• 5b5dd40 Update changelog.md for version 1.0.46
• fd2900c Update changelog.md for version 1.0.45
• 41b4018 Update changelog.md for version 1.0.44
• bee20d0 Update changelog.md for version 1.0.43
• 5ab6de6 Update changelog.md for version 1.0.42
• ac346d1 Update changelog.md for version 1.0.41
• cc85e32 Update changelog.md for version 1.0.40
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.