Bump @github/copilot from 0.0.383 to 0.0.423 in /test/harness

[dependabot]

Bumps @github/copilot from 0.0.383 to 0.0.423.

Release notes

Sourced from @​github/copilot's releases.

0.0.423

2026-03-06

• Users are prompted for shell commands with potentially dangerous expansion or substitution use cases, additional guardrails for malicious exploits
• Block /share gist for EMU and GHE Cloud users with clear error messaging
• Elicitation enum and boolean fields now require Enter to confirm a selection, with a ✓ indicator for confirmed values vs ❯ for the browsing cursor
• MCP servers can now request users to visit a URL for out-of-band interactions such as OAuth flows or API key entry
• Improve explore agent precision and large repository support with better context sharing
• Diff mode displays cleanly on Windows with CRLF line endings

0.0.422

2026-03-05

• Display request ID in authentication and authorization error messages to aid troubleshooting
• Load personal hooks from ~/.copilot/hooks in addition to repo-level .github/hooks
• Timeline now shows the question in a box and displays 'Making best guess on autopilot' when ask_user is auto-responded
• Add support for GPT-5.4 model
• Plugin cache automatically recovers from a corrupted or incomplete clone without manual intervention
• Show a clear, actionable error message when git is not installed and a remote plugin or marketplace is used
• Text selection persists after copying to clipboard in alt screen
• Scroll view no longer jumps to earlier messages when scrolling during response streaming or with popups open
• Add copy_on_select config option to auto-copy selected text to clipboard in alt screen mode
• IME candidate windows appear at correct cursor position in CJK input
• Add mouse scroll support to /diff in alt-screen mode
• Reduce memory usage in alt-screen mode for long sessions
• Diff mode now works correctly when git color.diff=always is configured
• Opening links on Windows correctly handles URLs with & query parameters
• @-mention file completion always reflects the current state of the working directory
• ESC key to cancel works correctly in tmux and other non-kitty terminals
• Click in the prompt input to reposition the text cursor
• Add /copy command to copy the last response to clipboard
• Links in alt-screen mode are rendered with underline styling for better visibility
• /delegate prompts for a target remote in multi-remote repositories and clarifies confirmation text
• GitHub MCP server stays enabled in repositories that have both Azure DevOps and GitHub remotes
• Colons in inline code render correctly inside markdown tables
• Pressing Ctrl+C on the help dialog now dismisses it cleanly
• Plugin-contributed LSP servers are now loaded, started, and shown in /lsp show
• Pressing Enter in required enum field now selects the highlighted option
• Hide noisy todo bookkeeping queries and show dependency details in timeline
• CLI no longer hangs for minutes when working in a directory with a large number of files
• Add --output-format json flag to emit JSONL in prompt mode for programmatic integrations
• Add exitPlanMode.request protocol method for SDK plan approval support
• Automatic notifications when background shell commands and agents complete
• GitHub MCP server connection status is accurately tracked and counted in the status indicator
• Press Ctrl+R to search command history with reverse incremental search (like Bash)
• Long diff lines no longer overflow and wrap in the diff view
• Add startup prompt hooks to auto-submit prompts or slash commands when a session starts
• Ctrl+K joins lines when cursor is at end of line, matching standard Emacs/terminal behavior
• Escape sequences split across input chunks no longer leak into text input
• Rename launch_messages config setting to companyAnnouncements

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

0.0.423 - 2026-03-06

• Users are prompted for shell commands with potentially dangerous expansion or substitution use cases, additional guardrails for malicious exploits
• Block /share gist for EMU and GHE Cloud users with clear error messaging
• Elicitation enum and boolean fields now require Enter to confirm a selection, with a ✓ indicator for confirmed values vs ❯ for the browsing cursor
• MCP servers can now request users to visit a URL for out-of-band interactions such as OAuth flows or API key entry
• Improve explore agent precision and large repository support with better context sharing
• Diff mode displays cleanly on Windows with CRLF line endings

0.0.422 - 2026-03-05

• Display request ID in authentication and authorization error messages to aid troubleshooting
• Load personal hooks from ~/.copilot/hooks in addition to repo-level .github/hooks
• Timeline now shows the question in a box and displays 'Making best guess on autopilot' when ask_user is auto-responded
• Add support for GPT-5.4 model
• Plugin cache automatically recovers from a corrupted or incomplete clone without manual intervention
• Show a clear, actionable error message when git is not installed and a remote plugin or marketplace is used
• Text selection persists after copying to clipboard in alt screen
• Scroll view no longer jumps to earlier messages when scrolling during response streaming or with popups open
• Add copy_on_select config option to auto-copy selected text to clipboard in alt screen mode
• IME candidate windows appear at correct cursor position in CJK input
• Add mouse scroll support to /diff in alt-screen mode
• Reduce memory usage in alt-screen mode for long sessions
• Diff mode now works correctly when git color.diff=always is configured
• Opening links on Windows correctly handles URLs with & query parameters
• @-mention file completion always reflects the current state of the working directory
• ESC key to cancel works correctly in tmux and other non-kitty terminals
• Click in the prompt input to reposition the text cursor
• Add /copy command to copy the last response to clipboard
• Links in alt-screen mode are rendered with underline styling for better visibility
• /delegate prompts for a target remote in multi-remote repositories and clarifies confirmation text
• GitHub MCP server stays enabled in repositories that have both Azure DevOps and GitHub remotes
• Colons in inline code render correctly inside markdown tables
• Pressing Ctrl+C on the help dialog now dismisses it cleanly
• Plugin-contributed LSP servers are now loaded, started, and shown in /lsp show
• Pressing Enter in required enum field now selects the highlighted option
• Hide noisy todo bookkeeping queries and show dependency details in timeline
• CLI no longer hangs for minutes when working in a directory with a large number of files
• Add --output-format json flag to emit JSONL in prompt mode for programmatic integrations
• Add exitPlanMode.request protocol method for SDK plan approval support
• Automatic notifications when background shell commands and agents complete
• GitHub MCP server connection status is accurately tracked and counted in the status indicator
• Press Ctrl+R to search command history with reverse incremental search (like Bash)
• Long diff lines no longer overflow and wrap in the diff view
• Add startup prompt hooks to auto-submit prompts or slash commands when a session starts
• Ctrl+K joins lines when cursor is at end of line, matching standard Emacs/terminal behavior
• Escape sequences split across input chunks no longer leak into text input
• Rename launch_messages config setting to companyAnnouncements
• Show a waiting message when the terminal is handed to an external editor
• Support enabledPlugins in config for automatic plugin installation at startup

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.