Skip to content

Bump GitHub.Copilot.SDK and 6 others - #86

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/NewsletterGenerator/nuget-minor-and-patch-ece6b86e79
Closed

Bump GitHub.Copilot.SDK and 6 others#86
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/nuget/src/NewsletterGenerator/nuget-minor-and-patch-ece6b86e79

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Updated GitHub.Copilot.SDK from 1.0.15-preview.3 to 1.0.16.

Release notes

Sourced from GitHub.Copilot.SDK's releases.

1.0.16

Internal dependency updates only: this release refreshes the SDK snapshot for Copilot CLI 1.0.90. It contains no other user-visible SDK changes since v1.0.15.

[!WARNING]

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by Release Notes Generator · copilot · auto · 18.8 AIC · ⌖ 6.11 AIC · ⊞ 10.3K

1.0.16-preview.0

Internal dependency updates only (SDK snapshot updated for Copilot CLI 1.0.90-6).

Full Changelog: github/copilot-sdk@runtime-1.0.89-1.unstable.r36638597907.ge270afd...v1.0.16-preview.0

[!WARNING]

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by Release Notes Generator · copilot · auto · 23.7 AIC · ⌖ 5.81 AIC · ⊞ 10.3K

1.0.15

Feature: typed structured outputs for all six SDKs

Provide a JSON Schema, or use an idiomatic typed helper, to have the model return typed, validated output instead of free-form text. (#​2590)

const answerSchema = z.object({ value: z.number().int() });
const answer = await session.sendAndWait("What is 19 + 23?", answerSchema);
answer = await session.send_and_wait_typed("What is 19 + 23?", Answer)

Go, Java, C#, and Rust get the same capability via copilot.SendAndWait[Answer], session.sendAndWait(prompt, Answer.class), SendAndWaitAsync<Answer>, and session.send_and_wait_typed(prompt).

Feature: structured JSON-RPC error data in all SDKs

The raw JSON data payload of a JSON-RPC error response can now be inspected in every SDK, so apps can branch on machine-readable error details. (#​2664, #​2732)

if let Some(data) = error.rpc_data() { println!("{data}"); }
catch (JsonRpcException e) { JsonNode data = e.getData(); }

Feature: experimental connection-global installation confirmation

All six SDKs expose a connection-global handler for the runtime's installations.confirm callback, letting apps present a human review before an MCP or Skill installation proceeds. The handler must return an explicit confirm/decline/cancel decision.

const client = new CopilotClient({
  installationConfirmationHandler: async (request, context) => promptUser(request),
});

Java, Python, Rust, C#, and Go get equivalent options (setInstallationConfirmationHandler, installation_confirmation_handler, with_installation_confirmation_handler, InstallationConfirmationHandler). Java also now exposes typed unions for MCP installation review payloads.

Other changes

  • feature: [Java] add native runtime support for darwin-x64 (#​2701)
  • feature: [Java] add native runtime support for linuxmusl-x64 (Alpine) (#​2715)
  • feature: [Java] experimental FusionCritic generated diagnostics type
  • improvement: [Node/Python/Go/.NET/Java] coalesce intercepted HTTP response chunks for better tool-call streaming throughput (#​2734)
  • improvement: [Rust] coalesce intercepted HTTP response chunks (#​2717)
  • improvement: [Rust] avoid rebuilding and copying JSON payloads (#​2711)
  • improvement: [Rust] cut retained runtime-install memory by ~99% (#​2676)
  • improvement: [.NET] avoid redundant JSON event materialization and reduce allocations (#​2733)
  • improvement: [Node] pin production dependencies to exact versions with a publish-age policy (#​2700)
    ... (truncated)

1.0.15-preview.4

Feature: experimental connection-global installation confirmation

All six SDKs now expose a connection-global handler for the runtime's installations.confirm callback, letting apps present a human review before an MCP or Skill installation proceeds. The handler receives the generated request plus a cancellation signal that fires when the review is retired or the connection closes, and must return an explicit confirm/decline/cancel decision — the SDK never infers approval.

const client = new CopilotClient({
  installationConfirmationHandler: async (request, context) => {
    return await promptUser(request); // "confirm" | "decline" | "cancel"
  },
});
var options = new CopilotClientOptions
{
    InstallationConfirmationHandler = async (request, context) =>
        await PromptUserAsync(request, context.CancellationToken),
};
opts := copilot.ClientOptions{
    InstallationConfirmationHandler: func(ctx context.Context, req *copilot.InstallationConfirmationRequest) (copilot.InstallationConfirmationDecision, error) {
        return promptUser(ctx, req)
    },
}

Java, Python, and Rust get the equivalent setInstallationConfirmationHandler(...), installation_confirmation_handler, and with_installation_confirmation_handler options. Java additionally converts the previously untyped MCP installation/removal review payloads (InstallationConfirmationRequest.review(), McpInstallPlan.transportChoices(), McpInstallationManagementResultOutcome.getOutcome()) into sealed/typed unions, bringing it into line with the other SDKs.

Other changes

  • feature: [Java] experimental FusionCritic generated diagnostics type for execution-phase model/reasoning-effort tracking

[!WARNING]

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.12.

Release notes

Sourced from Microsoft.Extensions.Logging.Abstractions's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Microsoft.NET.Test.Sdk from 18.8.1 to 18.10.1.

Release notes

Sourced from Microsoft.NET.Test.Sdk's releases.

18.10.1

What's Changed

Full Changelog: microsoft/vstest@v18.10.0...v18.10.1

18.10.0

What's Changed

Full Changelog: microsoft/vstest@v18.9.0...v18.10.0

18.9.0

What's Changed

New Contributors

Full Changelog: microsoft/vstest@v18.8.0...v18.9.0

Commits viewable in compare view.

Updated Nerdbank.MessagePack from 1.2.36 to 1.3.88.

Release notes

Sourced from Nerdbank.MessagePack's releases.

1.3.88

What's Changed

Full Changelog: AArnott/Nerdbank.MessagePack@v1.3.86...v1.3.88

1.3.86

Security fix

Full Changelog: AArnott/Nerdbank.MessagePack@v1.3.85...v1.3.86

1.3.85

What's Changed

Full Changelog: AArnott/Nerdbank.MessagePack@v1.3.84...v1.3.85

1.3.84

What's Changed

Fixes

Enhancements

Full Changelog: AArnott/Nerdbank.MessagePack@v1.2.36...v1.3.84

1.3.77-beta

What's Changed

Full Changelog: AArnott/Nerdbank.MessagePack@v1.3.66-beta...v1.3.77-beta

1.3.66-beta

What's Changed

Full Changelog: AArnott/Nerdbank.MessagePack@v1.3.55-beta...v1.3.66-beta

1.3.55-beta

What's Changed

Dependency updates

Full Changelog: AArnott/Nerdbank.MessagePack@v1.3.29-beta...v1.3.55-beta

1.3.29-beta

What's Changed

Enhancements

Fixes

Dependency updates

Full Changelog: AArnott/Nerdbank.MessagePack@v1.2.36...v1.3.29-beta

Commits viewable in compare view.

Updated Spectre.Console.Cli from 0.55.0 to 0.57.2.

Release notes

Sourced from Spectre.Console.Cli's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated System.ServiceModel.Syndication from 10.0.10 to 10.0.12.

Release notes

Sourced from System.ServiceModel.Syndication's releases.

No release notes found for this version range.

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Oct 5, 2026
@dependabot dependabot Bot mentioned this pull request Oct 5, 2026
Closed
@dependabot
Bump GitHub.Copilot.SDK and 6 others
3435ea1 
Bumps GitHub.Copilot.SDK from 1.0.15-preview.3 to 1.0.16
Bumps Microsoft.Extensions.Logging from 10.0.10 to 10.0.12
Bumps Microsoft.Extensions.Logging.Abstractions from 10.0.10 to 10.0.12
Bumps Microsoft.NET.Test.Sdk from 18.8.1 to 18.10.1
Bumps Nerdbank.MessagePack from 1.2.36 to 1.3.88
Bumps Spectre.Console.Cli from 0.55.0 to 0.57.2
Bumps System.ServiceModel.Syndication from 10.0.10 to 10.0.12

---
updated-dependencies:
- dependency-name: GitHub.Copilot.SDK
  dependency-version: 1.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.Extensions.Logging
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.Extensions.Logging.Abstractions
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
- dependency-name: Microsoft.NET.Test.Sdk
  dependency-version: 18.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Nerdbank.MessagePack
  dependency-version: 1.3.88
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: Spectre.Console.Cli
  dependency-version: 0.57.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: nuget-minor-and-patch
- dependency-name: System.ServiceModel.Syndication
  dependency-version: 10.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: nuget-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the nuget-minor-and-patch group with 7 updates Bump GitHub.Copilot.SDK and 6 others Oct 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/nuget/src/NewsletterGenerator/nuget-minor-and-patch-ece6b86e79 branch from ccd4aa6 to 3435ea1 Compare October 6, 2026 02:31
@jongalloway jongalloway closed this Oct 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/nuget/src/NewsletterGenerator/nuget-minor-and-patch-ece6b86e79 branch October 9, 2026 03:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jongalloway