chore(deps): bump @github/copilot from 1.0.10 to 1.0.36

[dependabot]

Bumps @github/copilot from 1.0.10 to 1.0.36.

Release notes

Sourced from @​github/copilot's releases.

1.0.36

2026-04-24

• Subcommand picker shows a selection indicator (❯) next to the highlighted item
• Clearer error message with a direct link when multiple Copilot licenses are detected
• Fixed an issue where preToolUse.matcher was ignored. After upgrade, hooks with matcher run only for tool names that fully match the regex.
• /keep-alive is available without experimental mode to prevent system sleep while Copilot CLI is active
• /remote command shows current status and supports /remote on and /remote off to toggle remote control
• Disabled skills no longer appear in the slash command list
• Add a 'changes' statusline toggle to show added/removed line counts for the session
• Custom instruction files in .gitignored directories (e.g., .github/instructions/) now load correctly
• Require double Esc to cancel in-flight work, preventing accidental interruptions
• Saving debug logs or feedback bundles no longer overwrites existing archive files
• Custom agents, skills, and commands from ~/.claude/ are no longer loaded by the Copilot CLI
• Claude Opus 4.6 now uses medium reasoning effort by default

1.0.36-1

Added

• Add a 'changes' statusline toggle to show added/removed line counts for the session

Improved

• Require double Esc to cancel in-flight work, preventing accidental interruptions

Fixed

• Custom instruction files in .gitignored directories (e.g., .github/instructions/) now load correctly

1.0.36-0

Improved

• Claude Opus 4.6 now uses medium reasoning effort by default

Fixed

• Saving debug logs or feedback bundles no longer overwrites existing archive files
• Custom agents, skills, and commands from ~/.claude/ are no longer loaded by the Copilot CLI

1.0.35

2026-04-23

• Slash commands support tab-completion for arguments and subcommands
• Shell escape commands (!) now use your $SHELL when set, instead of always invoking /bin/sh
• Permission prompts appear correctly in remote sessions for the CLI TUI
• Session selector shows branch names, idle/in-use status, and has improved search with cursor support
• Model change notification shows both the previous and new model name
• /update and /version commands now honor your configured update channel
• Session sync prompt uses clearer labels and explains GitHub.com cross-device sync
• Support COPILOT_GH_HOST environment variable for GitHub hostname, taking precedence over GH_HOST
• Press Ctrl+Y (in addition to Tab) to accept the highlighted option in completion popups (@-mentions, path completions, slash commands)
• Add /session delete, delete , and delete-all subcommands, and x-to-delete in the session picker
• MCP server names with spaces and special characters are now supported
• Skill slash commands (e.g. /skill-name) passed as the initial prompt via -i are recognized correctly on startup
• Shell completion notifications are not duplicated when read_bash already returned the result

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.36 - 2026-04-24

• Subcommand picker shows a selection indicator (❯) next to the highlighted item
• Clearer error message with a direct link when multiple Copilot licenses are detected
• Fixed an issue where preToolUse.matcher was ignored. After upgrade, hooks with matcher run only for tool names that fully match the regex.
• /keep-alive is available without experimental mode to prevent system sleep while Copilot CLI is active
• /remote command shows current status and supports /remote on and /remote off to toggle remote control
• Disabled skills no longer appear in the slash command list
• Add a 'changes' statusline toggle to show added/removed line counts for the session
• Custom instruction files in .gitignored directories (e.g., .github/instructions/) now load correctly
• Require double Esc to cancel in-flight work, preventing accidental interruptions
• Saving debug logs or feedback bundles no longer overwrites existing archive files
• Custom agents, skills, and commands from ~/.claude/ are no longer loaded by the Copilot CLI
• Claude Opus 4.6 now uses medium reasoning effort by default

1.0.35 - 2026-04-23

• Slash commands support tab-completion for arguments and subcommands
• Shell escape commands (!) now use your $SHELL when set, instead of always invoking /bin/sh
• Permission prompts appear correctly in remote sessions for the CLI TUI
• Session selector shows branch names, idle/in-use status, and has improved search with cursor support
• Model change notification shows both the previous and new model name
• /update and /version commands now honor your configured update channel
• Session sync prompt uses clearer labels and explains GitHub.com cross-device sync
• Support COPILOT_GH_HOST environment variable for GitHub hostname, taking precedence over GH_HOST
• Press Ctrl+Y (in addition to Tab) to accept the highlighted option in completion popups (@-mentions, path completions, slash commands)
• Add /session delete, delete , and delete-all subcommands, and x-to-delete in the session picker
• MCP server names with spaces and special characters are now supported
• Skill slash commands (e.g. /skill-name) passed as the initial prompt via -i are recognized correctly on startup
• Shell completion notifications are not duplicated when read_bash already returned the result
• --continue prefers resuming sessions from the current working directory instead of the most recently touched session
• Status line script now includes context window fields that match the model badge and /context output
• User settings are now stored in ~/.copilot/settings.json, separate from internal state in config.json
• Name sessions with --name and resume them by name with --resume=
• Configure Copilot agent now has shell access on Windows
• Show a helpful error message with install instructions when clipboard utilities (wl-clipboard or xclip) are missing on Linux
• LSP server entries in lsp.json support configurable spawn, initialization, and warmup timeouts
• Context window indicator in the statusline is now hidden by default
• Move MCP OAuth into the shared runtime flow and clear associated OAuth state when removing an MCP server.
• Added a GitHub-style contribution graph to /usage that adapts to terminal color mode and falls back to distinct glyphs in no-color terminals
• Self-correcting custom tool calls in agentic loop
• Cursor movement, deletion, and rendering work correctly for emoji and multi-codepoint characters in the text input
• Tool availability detection works correctly on Windows
• Session token expiry during a turn is handled automatically without requiring you to resend your message
• Initial tab and arrow key navigation in /cwd and /add-dir path picker selects the correct item
• Transient I/O errors no longer appear as red error entries in the timeline when an IDE or extension disconnects
• Custom agents and skills in ~/.claude/ are no longer incorrectly loaded as Copilot project config
• Login command restores interactive input correctly after authentication
• Improve rendering performance when displaying large amounts of text in the timeline
• Sync task calls block until completion under MULTI_TURN_AGENTS instead of auto-promoting to background after 60s; sync no longer returns a reusable agent_id, use mode: "background" for follow-ups

... (truncated)

Commits

• d7a0581 Update changelog.md for version 1.0.35
• 6594437 Update changelog.md for version 1.0.34
• 75fbe0c Update changelog.md for version 1.0.33
• 4e51f5a Update changelog.md for version 1.0.32
• 3b72dea Update changelog.md for version 1.0.31
• 2f883ed Update changelog.md for version 1.0.30
• 709b59e Update changelog.md for version 1.0.29
• 8973042 Update changelog.md for version 1.0.28
• ae7b374 Update changelog.md for version 1.0.27
• 559a22a Update changelog.md for version 1.0.26
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #65.