Bump GitHub.Copilot.SDK and 2 others#13
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
Bumps GitHub.Copilot.SDK from 0.2.2 to 1.0.0 Bumps Vecc.YamlDotNet.Analyzers.StaticGenerator from 16.3.0 to 18.0.0 Bumps YamlDotNet from 16.3.0 to 18.0.0 --- updated-dependencies: - dependency-name: GitHub.Copilot.SDK dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-other-nuget - dependency-name: Vecc.YamlDotNet.Analyzers.StaticGenerator dependency-version: 18.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-other-nuget - dependency-name: YamlDotNet dependency-version: 18.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-other-nuget ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updated GitHub.Copilot.SDK from 0.2.2 to 1.0.0.
Release notes
Sourced from GitHub.Copilot.SDK's releases.
1.0.0
Installation
vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will beMaj.Min.Micro-java.N, whereMaj,MinandMicroare the corresponding numbers for the reference implementation release, andNis a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in thedocs/adrdirectory of the source code.📦 View on Maven Central
📖 Documentation · Javadoc
Maven
Gradle (Kotlin DSL)
implementation("com.github:copilot-sdk-java:1.0.0")Gradle (Groovy DSL)
implementation 'com.github:copilot-sdk-java:1.0.0'What's Changed
Full Changelog: github/copilot-sdk@java/v1.0.0-beta-12-java.1...java/v1.0.0
1.0.0-beta-12-java.1
Installation
vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will beMaj.Min.Micro-java.N, whereMaj,MinandMicroare the corresponding numbers for the reference implementation release, andNis a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in thedocs/adrdirectory of the source code.📦 [View on Maven Central]((central.sonatype.com/redacted)
📖 [Documentation]((github.github.io/redacted) · [Javadoc]((github.github.io/redacted)
Maven
Gradle (Kotlin DSL)
implementation("com.github:copilot-sdk-java:1.0.0-beta-12-java.1")Gradle (Groovy DSL)
implementation 'com.github:copilot-sdk-java:1.0.0-beta-12-java.1'Feature: slash command responses accessible via RPC
Applications can now retrieve responses from slash commands. Previously the ability to invoke slash commands existed, but responses were not surfaced through the RPC layer. (#1520)
Feature:
session.mcp.apps.callToolreturnsJsonNodesession.mcp.apps.callTool()previously returnedCompletableFuture<Void>due to a codegen gap; it now correctly returnsCompletableFuture<JsonNode>, making the tool result accessible. (#1523)1.0.0-beta-10-java.5
Installation
vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will beMaj.Min.Micro-java.N, whereMaj,MinandMicroare the corresponding numbers for the reference implementation release, andNis a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in thedocs/adrdirectory of the source code.📦 [View on Maven Central]((central.sonatype.com/redacted)
Maven
Gradle (Kotlin DSL)
implementation("com.github:copilot-sdk-java:1.0.0-beta-10-java.5")Gradle (Groovy DSL)
implementation 'com.github:copilot-sdk-java:1.0.0-beta-10-java.5'Changes since java/v1.0.0-beta-10-java.4
New contributors
@examonmade their first contribution in #1323Full Changelog: github/copilot-sdk@java/v1.0.0-beta-10-java.4...java/v1.0.0-beta-10-java.5
1.0.0-beta-10-java.4
Installation
i️ Public Preview: This is the official Java SDK for GitHub Copilot. This repository treats the official .NET and Node.js SDKs for GitHub Copilot as reference implementations. These SDKs are all officially supported as GitHub open source projects. The Java implementation follows the backward compatibility guarantees offered by the reference implementations.
vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will beMaj.Min.Micro-java.N, whereMaj,MinandMicroare the corresponding numbers for the reference implementation release, andNis a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in thedocs/adrdirectory of the source code.📦 View on Maven Central
Maven
Gradle (Kotlin DSL)
implementation("com.github:copilot-sdk-java:1.0.0-beta-10-java.4")Gradle (Groovy DSL)
implementation 'com.github:copilot-sdk-java:1.0.0-beta-10-java.4'Changes since java/v1.0.0-beta-10-java.3
Full Changelog: github/copilot-sdk@java/v1.0.0-beta-10-java.3...java/v1.0.0-beta-10-java.4
1.0.0-beta-10-java.3
Installation
ℹ️ Public Preview: This is the official Java SDK for GitHub Copilot. This repository treats the official .NET and Node.js SDKs for GitHub Copilot as reference implementations. These SDKs are all officially supported as GitHub open source projects. The Java implementation follows the backward compatibility guarantees offered by the reference implementations.
vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will beMaj.Min.Micro-java.N, whereMaj,MinandMicroare the corresponding numbers for the reference implementation release, andNis a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in thedocs/adrdirectory of the source code.📦 View on Maven Central
Maven
Gradle (Kotlin DSL)
implementation("com.github:copilot-sdk-java:1.0.0-beta-10-java.3")Gradle (Groovy DSL)
implementation 'com.github:copilot-sdk-java:1.0.0-beta-10-java.3'Full Changelog: github/copilot-sdk@java/v1.0.0-beta-10-java.1...java/v1.0.0-beta-10-java.3
1.0.0-beta.12
What's Changed
session.mcp.apps.callToolresult toJsonNodeand hardenmvn cleanby @edburns in Mapsession.mcp.apps.callToolresult toJsonNodeand hardenmvn cleangithub/copilot-sdk#1523New Contributors
Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.10...rust/v1.0.0-beta.12
1.0.0-beta.10
What's Changed
New Contributors
Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.9...rust/v1.0.0-beta.10
1.0.0-beta.9
What's Changed
kind()method by @heaths in Refactor Rust SDK errors to use structs with akind()method github/copilot-sdk#1400New Contributors
kind()method github/copilot-sdk#1400Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.8...rust/v1.0.0-beta.9
1.0.0-beta.8
What's Changed
Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.7...rust/v1.0.0-beta.8
1.0.0-beta.7
What's Changed
^1.0.52-1, addpreMcpToolCallhook, fixPingResponsetimestamp type by @edburns in Java SDK: sync reference implementation to^1.0.52-1, addpreMcpToolCallhook, fixPingResponsetimestamp type github/copilot-sdk#1389Full Changelog: github/copilot-sdk@rust/v1.0.0-beta.6...rust/v1.0.0-beta.7
1.0.0-beta.6
What's Changed
... (truncated)
1.0.0-beta.4
What's Changed
New Contributors
Full Changelog: github/copilot-sdk@rust-v0.1.0...rust/v1.0.0-beta.4
1.0.0-beta.3
Feature: mode handler APIs for plan approval and rate-limit recovery
Applications can now register callbacks for
exitPlanMode.requestandautoModeSwitch.requestfrom the Copilot runtime, giving full control over plan-mode transitions and automatic model switching after rate-limit events. (#1228)on_exit_plan_mode/on_auto_mode_switchkwargs oncreate_session()ExitPlanModeHandler/AutoModeSwitchHandlerfields onSessionConfigFeature: SDK tracing diagnostics
The .NET, Python, and Rust SDKs now emit structured diagnostic logs covering CLI startup, TCP connection, JSON-RPC request timing, session lifecycle, and error paths. (#1217)
Python emits logs via stdlib
loggingundercopilot.*loggers atDEBUGlevel. Rust usestracingstructured fields; wire up atracing_subscriberas usual.Feature:
enableSessionTelemetrysession optionA new
enableSessionTelemetryoption onSessionConfigandResumeSessionConfiglets applications explicitly enable or disable the runtime's internal session telemetry. (#1224)Other changes
... (truncated)
1.0.0-beta.2
Feature: remote session support
Applications can now enable remote session support across all SDKs, providing parity with the CLI's
--remoteflag. There are two complementary mechanisms: a client-level option that enables remote for all sessions, and per-session RPC methods to toggle remote on demand. (#1192)Always-on via client option:
On-demand via RPC:
await session.rpc.remote.enable()/session.rpc.remote.disable()session.RPC.Remote.Enable(ctx)/session.RPC.Remote.Disable(ctx)Other changes
autoModeSwitch,exitPlanMode,disabled_mcp_servers; addsavailable_tools/disabled_skillstoResumeSessionConfig; expands tool results with binary payloads and MCPCallToolResultconversion (#1212)env_value_modefor cross-SDK parity —envValueModeis now always sent as"direct"on the wire, consistent with all other SDKs (#1215)1.0.0-beta.1
This is the first beta release of the Copilot SDK. The release includes all features we have committed to including in the upcoming General Availability (GA) release.
But note - we're not stopping here! Before GA, we still plan to add more top-requested features, as well as any critical bugfixes. We'll also carry out a final round of API reviews and will likely make further breaking changes to streamline naming before it locks down at 1.0.0.
Highlights of 1.0.0 Beta 1 include custom instruction directories, configurable data directories, TCP connection tokens for headless servers, and a more self-contained .NET distribution (eliminating third-party dependencies).
New features
Custom instruction directories
Sessions can now specify additional directories to search for custom instruction files via the
instructionDirectoriesoption on session create and resume config. This lets applications point the CLI at project-specific or team-shared instruction files beyond the default locations. (#1190)await client.create_session(on_permission_request=..., instruction_directories=["/repo/.copilot/instructions"])client.CreateSession(ctx, &copilot.SessionConfig{InstructionDirectories: []string{"/repo/.copilot/instructions"}})TCP connection token
When the SDK spawns a CLI server in TCP mode, it now auto-generates a connection token to authenticate the handshake — closing the loopback listener to unauthorized connections by default. For applications connecting to an externally managed TCP server that requires a token, the new
tcpConnectionTokenclient option lets you supply it explicitly. (#1176)This is independent of the client-level
gitHubToken(which authenticates the CLI process itself, and is not required if all sessions bring their own auth). The session-level token determines the identity used for content exclusion, model routing, and quota checks.Per-agent tool visibility
A new
defaultAgent.excludedToolsoption lets you hide tools from the default agent while keeping them available to custom sub-agents, enabling the orchestrator pattern where the default agent delegates to specialized sub-agents. (#1098)Per-agent skills
Custom agents can now declare
skills: string[]to eagerly inject specific skills into their context at startup. Skills are opt-in — agents receive no skills by default, and sub-agents do not inherit skills from the parent. (#995)Sub-agent streaming content
When streaming is enabled,
assistant.message_deltaandassistant.reasoning_deltaevents are now also delivered for sub-agents. Each event carries anagentIdfield identifying which sub-agent produced it (absent for the root agent). If your application renders all streaming deltas to the UI, you'll want to filter byagentId(or for pure back-compat, setincludeSubAgentStreamingEvents: falseonSessionConfigto get the old behavior of only streaming main-agent content updates). (#1108)Session idle timeout
A new
sessionIdleTimeoutSecondsclient option configures automatic session cleanup after inactivity. When set, sessions without activity for the specified duration are cleaned up. Disabled by default (sessions live indefinitely). Previously, sessions would always time out after 30 minutes of idleness - this change fixes that. (#1093)Custom HTTP headers for BYOK model providers
Provider headers and per-message
requestHeaderscan now be passed throughcreateSession,resumeSession, andsend, enabling custom header forwarding to bring-your-own-key model providers. (#1094)MCP CallToolResult conversion
A new
convertMcpCallToolResult()utility function converts MCPCallToolResultobjects (withcontentarrays of text, image, and resource blocks) into the SDK'sToolResultObjectformat. This makes it easy to use MCP tool servers as backends for SDK tool handlers. (#1049)ProviderConfigexportedProviderConfigis now re-exported from the Node.js and Python SDK entry points, so consumers no longer need to duplicate the type locally when configuring Responses API providers. (#1048)New RPC methods
Additional low-level RPC methods are now available via
session.rpc:... (truncated)
0.3.0-preview.1
This release adds new capabilities — per-session authentication, scoped permissions, agent-level tool and skill control, MCP interop utilities, and more — alongside a broad naming cleanup across all four SDK languages. As we close in on a GA release, we've done a deep clean on our naming to bring it closer to the final state, reducing the amount of churn you should expect in subsequent releases. The result is a more consistent, more readable API surface across the board.
New features
Per-session GitHub authentication
Sessions can now carry their own GitHub identity. Different sessions on the same CLI server can have different GitHub users, Copilot plans, and quota limits.
This is independent of the client-level
gitHubToken(which authenticates the CLI process itself, and is not required if all sessions bring their own auth). The session-level token determines the identity used for content exclusion, model routing, and quota checks.Per-agent tool visibility
A new
defaultAgent.excludedToolsoption lets you hide tools from the default agent while keeping them available to custom sub-agents, enabling the orchestrator pattern where the default agent delegates to specialized sub-agents. (#1098)Per-agent skills
Custom agents can now declare
skills: string[]to eagerly inject specific skills into their context at startup. Skills are opt-in — agents receive no skills by default, and sub-agents do not inherit skills from the parent. (#995)Sub-agent streaming content
When streaming is enabled,
assistant.message_deltaandassistant.reasoning_deltaevents are now also delivered for sub-agents. Each event carries anagentIdfield identifying which sub-agent produced it (absent for the root agent). If your application renders all streaming deltas to the UI, you'll want to filter byagentId(or for pure back-compat, setincludeSubAgentStreamingEvents: falseonSessionConfigto get the old behavior of only streaming main-agent content updates). (#1108)Session idle timeout
A new
sessionIdleTimeoutSecondsclient option configures automatic session cleanup after inactivity. When set, sessions without activity for the specified duration are cleaned up. Disabled by default (sessions live indefinitely). Previously, sessions would always time out after 30 minutes of idleness - this change fixes that. (#1093)Custom HTTP headers for BYOK model providers
Provider headers and per-message
requestHeaderscan now be passed throughcreateSession,resumeSession, andsend, enabling custom header forwarding to bring-your-own-key model providers. (#1094)MCP CallToolResult conversion
A new
convertMcpCallToolResult()utility function converts MCPCallToolResultobjects (withcontentarrays of text, image, and resource blocks) into the SDK'sToolResultObjectformat. This makes it easy to use MCP tool servers as backends for SDK tool handlers. (#1049)ProviderConfigexportedProviderConfigis now re-exported from the Node.js and Python SDK entry points, so consumers no longer need to duplicate the type locally when configuring Responses API providers. (#1048)New RPC methods
Additional low-level RPC methods are now available via
session.rpc:... (truncated)
0.3.0-preview.0
What's Changed
... (truncated)
Commits viewable in compare view.
Updated Vecc.YamlDotNet.Analyzers.StaticGenerator from 16.3.0 to 18.0.0.
Release notes
Sourced from Vecc.YamlDotNet.Analyzers.StaticGenerator's releases.
18.0.0
What's Changed
BREAKING CHANGE This is a breaking change in the
TypeInspectorSkeletonclass and theITypeInspectorinterface by adding 2 methods . Quick fix to resolve those breaking changes in your own custom TypeInspector is to return false on the HasParseMethod method and return null or throw an exception on the Parse method.Full Changelog: aaubry/YamlDotNet@v17.1.0...v18.0.0
17.1.0
What's Changed
There was a potential breaking change for large yaml files in the MergingParser. You may need to specify the optional parameter for maximum events to be processed. It default to 100k events which is a very large yaml file.
Full Changelog: aaubry/YamlDotNet@v17.0.0...v17.1.0
17.0.0
What's Changed
New Contributors
Full Changelog: aaubry/YamlDotNet@v16.3.0...v17.0.0
Commits viewable in compare view.
Updated YamlDotNet from 16.3.0 to 18.0.0.
Release notes
Sourced from YamlDotNet's releases.
18.0.0
What's Changed
BREAKING CHANGE This is a breaking change in the
TypeInspectorSkeletonclass and theITypeInspectorinterface by adding 2 methods . Quick fix to resolve those breaking changes in your own custom TypeInspector is to return false on the HasParseMethod method and return null or throw an exception on the Parse method.Full Changelog: aaubry/YamlDotNet@v17.1.0...v18.0.0
17.1.0
What's Changed
There was a potential breaking change for large yaml files in the MergingParser. You may need to specify the optional parameter for maximum events to be processed. It default to 100k events which is a very large yaml file.
Full Changelog: aaubry/YamlDotNet@v17.0.0...v17.1.0
17.0.0
What's Changed
New Contributors
Full Changelog: aaubry/YamlDotNet@v16.3.0...v17.0.0
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions