Skip to content

chore(deps): bump the prod-dependencies group across 1 directory with 2 updates#27

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-0a1300dc15
Closed

chore(deps): bump the prod-dependencies group across 1 directory with 2 updates#27
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/prod-dependencies-0a1300dc15

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the prod-dependencies group with 2 updates in the / directory: @github/copilot-sdk and cosmiconfig-typescript-loader.

Updates @github/copilot-sdk from 0.1.23 to 0.2.2

Release notes

Sourced from @​github/copilot-sdk's releases.

v0.2.2

Feature: session filesystem support across all four SDKs

The sessionFs feature introduced earlier in Node.js is now available across .NET, Go, and Python too, so you can redirect session-scoped storage (events, checkpoints, temp files, workspace state) to your own backing store instead of the runtime's default local filesystem. This is especially useful for serverless and multi-tenant hosts. (#1036)

// TypeScript
const client = new CopilotClient({
  sessionFs: { initialCwd: "/", sessionStatePath: "/s", conventions: "posix" },
});
const session = await client.createSession({
createSessionFsHandler: () => ({ readFile: async () => "...", writeFile: async () => { /* ... / }, / ... */ })
});

// C#
var client = new CopilotClient(new CopilotClientOptions {
    SessionFs = new()
    {
        InitialCwd = "/",
        SessionStatePath = "/",
        Conventions = SessionFsSetProviderRequestConventions.Posix
    }
});
var session = await client.CreateSessionAsync(new SessionConfig
{
CreateSessionFsHandler = _ => new MySessionFsHandler(/* ... */) // e.g., map to in-memory storage, etc
});

For a full end-to-end sample of a multi-user hosted system using sessionFs, see https://github.com/github/copilot-sdk-server-sample

Feature: override model capabilities when creating a session or switching models

All SDKs can now override individual model capabilities such as vision support without replacing the full capabilities object. This makes BYOK and custom-provider scenarios easier, and lets you change behavior mid-session with setModel/SetModelAsync. (#1029)

const session = await client.createSession({
  modelCapabilities: { supports: { vision: false } },
});
await session.setModel("claude-sonnet-4.5", { modelCapabilities: { supports: { vision: true } } });
await session.SetModelAsync("claude-sonnet-4.5", reasoningEffort: null,
    modelCapabilities: new ModelCapabilitiesOverride { Supports = new ModelCapabilitiesOverrideSupports { Vision = true } });

... (truncated)

Changelog

Sourced from @​github/copilot-sdk's changelog.

v0.2.2 (2026-04-10)

Feature: enableConfigDiscovery for automatic MCP and skill config loading

Set enableConfigDiscovery: true when creating a session to let the runtime automatically discover MCP server configurations (.mcp.json, .vscode/mcp.json) and skill directories from the working directory. Discovered settings are merged with any explicitly provided values; explicit values take precedence on name collision. (#1044)

const session = await client.createSession({
  enableConfigDiscovery: true,
});
var session = await client.CreateSessionAsync(new SessionConfig {
    EnableConfigDiscovery = true,
});
  • Python: await client.create_session(enable_config_discovery=True)
  • Go: client.CreateSession(ctx, &copilot.SessionConfig{EnableConfigDiscovery: ptr(true)})

v0.2.1 (2026-04-03)

Feature: commands and UI elicitation across all four SDKs

Register slash commands that CLI users can invoke and drive interactive input dialogs from any SDK language. This feature was previously Node.js-only; it now ships in Python, Go, and .NET as well. (#906, #908, #960)

const session = await client.createSession({
  onPermissionRequest: approveAll,
  commands: [{
    name: "summarize",
    description: "Summarize the conversation",
    handler: async (context) => { /* ... */ },
  }],
  onElicitationRequest: async (context) => {
    if (context.type === "confirm") return { action: "confirm" };
  },
});
// Drive dialogs from the session
const confirmed = await session.ui.confirm({ message: "Proceed?" });
const choice = await session.ui.select({ message: "Pick one", options: ["A", "B"] });

var session = await client.CreateSessionAsync(new SessionConfig {
    OnPermissionRequest = PermissionHandler.ApproveAll,
    Commands = [
        new CommandDefinition {
</tr></table>

... (truncated)

Commits

Updates cosmiconfig-typescript-loader from 6.2.0 to 6.3.0

Release notes

Sourced from cosmiconfig-typescript-loader's releases.

Release 6.3.0

   ⚙️ Maintenance Release

  • deps: Update dependencies to resolve security advisories
  • security: Pin all dependencies
  • security: Use trusted NPM OIDC for releases
  • security: Remove any manually generated tokens
Changelog

Sourced from cosmiconfig-typescript-loader's changelog.

[6.3.0](https://github.com/Codex-/cosmiconfig-typescript-loader.git

/compare/6.2.0...6.3.0)

... (truncated)

Commits
  • 20b1c63 Release 6.3.0
  • 4a3813b cicd(release): fix gh token usage (#216)
  • 7e86241 cicd(release): fix misconfigured release (#215)
  • 6d91f9a build(deps): release-it from 19.2.4 to 20.0.0-1 (#214)
  • 226d168 build(deps): bump basic-ftp from 5.2.0 to 5.2.1 (#213)
  • ee083c9 chore(deps): lock file maintenance (#212)
  • 55e4993 build(deps): bump lodash from 4.17.21 to 4.18.1 (#211)
  • 1a6dee9 chore(deps): update pnpm/action-setup action to v5 (#210)
  • 8625a57 chore(deps): update jdx/mise-action action to v4 (#209)
  • 9072213 chore(deps): update all non-major dependencies (#207)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for cosmiconfig-typescript-loader since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the prod-dependencies group across 1 directory with…
8711290 
… 2 updates

Bumps the prod-dependencies group with 2 updates in the / directory: [@github/copilot-sdk](https://github.com/github/copilot-sdk) and [cosmiconfig-typescript-loader](https://github.com/Codex-/cosmiconfig-typescript-loader).


Updates `@github/copilot-sdk` from 0.1.23 to 0.2.2
- [Release notes](https://github.com/github/copilot-sdk/releases)
- [Changelog](https://github.com/github/copilot-sdk/blob/main/CHANGELOG.md)
- [Commits](github/copilot-sdk@v0.1.23...v0.2.2)

Updates `cosmiconfig-typescript-loader` from 6.2.0 to 6.3.0
- [Release notes](https://github.com/Codex-/cosmiconfig-typescript-loader/releases)
- [Changelog](https://github.com/Codex-/cosmiconfig-typescript-loader/blob/main/CHANGELOG.md)
- [Commits](Codex-/cosmiconfig-typescript-loader@6.2.0...6.3.0)

---
updated-dependencies:
- dependency-name: "@github/copilot-sdk"
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: cosmiconfig-typescript-loader
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 28, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/prod-dependencies-0a1300dc15 branch April 28, 2026 00:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

⚡