Bump the java-codegen-deps group in /java/scripts/codegen with 2 updates

[dependabot]

Superseded by #1389 .

Bumps the java-codegen-deps group in /java/scripts/codegen with 2 updates: @github/copilot and tsx.

Updates @github/copilot from 1.0.49-3 to 1.0.51

Release notes

Sourced from @​github/copilot's releases.

1.0.51

2026-05-20

• --session-id=<id> resumes known sessions or tasks, and starts new sessions with a specific UUID
• /remote commands now respect organization remote control and view from cloud policy and show a clear error when disabled
• /remote command can now be used while the agent is working
• Customizable status line in the terminal footer displays session info such as model, context window, git branch, and more
• MCP tool loading at startup is faster for users with many HTTP-based MCP servers
• Settings file no longer accumulates unrelated config keys when settings are updated
• Add /security-review slash command to review code changes for security vulnerabilities (experimental)
• Add preMcpToolCall hook for hook providers to control outgoing MCP request metadata
• Add /chronicle cost-tips subcommand for personalized token usage and cost reduction recommendations
• MCP servers using OAuth stay connected when authentication was performed in a separate session
• GFM tables and blockquotes inside list items render correctly without a floating top border
• Experimental mode indicator now appears persistently in the app header instead of as a one-time notification
• Loading indicator color matches the active mode (plan, autopilot, shell)
• Session naming works correctly for usage-based billing users
• Pressing Enter on a highlighted subcommand completion inserts the selection instead of submitting the partial command
• Use default release notes when publishing a release with no changelog entries
• Editor launched with Ctrl+G no longer steals keystrokes or requires double keypresses
• /memory show displays documentation links for learning about and managing Copilot Memory
• Add terminalProgress setting to enable or disable OSC 9;4 terminal progress indicators
• postToolUse hooks can now inject additionalContext into successful tool results
• Only show remote session startup failure when remote mode is explicitly requested via --remote or enabled in user configuration
• Shell tool calls succeed even when the model omits the description parameter
• Ensure input token usage includes cached, update token formatting to clarify
• Login prompt more clearly warns when token storage falls back to insecure plain text config file
• GitHub MCP web search tool is available immediately without requiring tool search
• Secret scanning now covers commit messages and PR descriptions, redacting secrets before they are published
• Input area grows responsively with terminal height instead of capping at 3 lines

1.0.51-3

Added

• Add /security-review slash command to review code changes for security vulnerabilities
• Add preMcpToolCall hook for hook providers to control outgoing MCP request metadata
• Add /chronicle cost-tips subcommand for personalized token usage and cost reduction recommendations

Improved

• Experimental mode indicator now appears persistently in the app header instead of as a one-time notification
• Loading indicator color matches the active mode (plan, autopilot, shell)

Fixed

• MCP servers using OAuth stay connected when authentication was performed in a separate session
• GFM tables and blockquotes inside list items render correctly without a floating top border

1.0.51-2

Improved

• /memory show displays documentation links for learning about and managing Copilot Memory

Fixed

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.51 - 2026-05-20

• --session-id=<id> resumes known sessions or tasks, and starts new sessions with a specific UUID
• /remote commands now respect organization remote control and view from cloud policy and show a clear error when disabled
• /remote command can now be used while the agent is working
• Customizable status line in the terminal footer displays session info such as model, context window, git branch, and more
• MCP tool loading at startup is faster for users with many HTTP-based MCP servers
• Settings file no longer accumulates unrelated config keys when settings are updated
• Add /security-review slash command to review code changes for security vulnerabilities
• Add preMcpToolCall hook for hook providers to control outgoing MCP request metadata
• Add /chronicle cost-tips subcommand for personalized token usage and cost reduction recommendations
• MCP servers using OAuth stay connected when authentication was performed in a separate session
• GFM tables and blockquotes inside list items render correctly without a floating top border
• Experimental mode indicator now appears persistently in the app header instead of as a one-time notification
• Loading indicator color matches the active mode (plan, autopilot, shell)
• Session naming works correctly for usage-based billing users
• Pressing Enter on a highlighted subcommand completion inserts the selection instead of submitting the partial command
• Use default release notes when publishing a release with no changelog entries
• Editor launched with Ctrl+G no longer steals keystrokes or requires double keypresses
• /memory show displays documentation links for learning about and managing Copilot Memory
• Add terminalProgress setting to enable or disable OSC 9;4 terminal progress indicators
• postToolUse hooks can now inject additionalContext into successful tool results
• Only show remote session startup failure when remote mode is explicitly requested via --remote or enabled in user configuration
• Shell tool calls succeed even when the model omits the description parameter
• Ensure input token usage includes cached, update token formatting to clarify
• Login prompt more clearly warns when token storage falls back to insecure plain text config file
• GitHub MCP web search tool is available immediately without requiring tool search
• Secret scanning now covers commit messages and PR descriptions, redacting secrets before they are published
• Input area grows responsively with terminal height instead of capping at 3 lines

1.0.49 - 2026-05-18

• postToolUse hook additionalContext is now injected as a system message for the model instead of being silently discarded
• Mouse clicks in the prompt correctly position cursor when input contains wide characters (CJK, emoji)
• Add /chronicle search subcommand to search all session content by keyword or topic
• /user switch reuses the fetched user list and shows a loading spinner on first open
• MCP servers using static OAuth clients correctly persist registration for token refreshes
• Add support for running the CLI on Alpine Linux (musl libc)
• Add /exit print option to print the session to the terminal before exiting
• Add /rubber-duck command to get an independent critique of the agent's current work
• Add /session id subcommand to display the current session ID and copy it to the clipboard
• Add auth.redirectPort config option for MCP servers to pin the OAuth callback to a fixed port
• Add /memory on|off|show slash command to enable, disable, or view memory status (persistent)
• Add copilot plugin update --all to update all installed plugins at once
• Add /rubber-duck command to invoke the rubber duck agent for an independent critique (experimental)
• Input prompt collapses to a single line when empty and grows naturally as you type
• File diffs are correctly reported to ACP clients for all edit tool types
• Repo hooks in .github/hooks/ now load in prompt mode (-p) when the folder is already trusted
• Fix extra line in timeline entries
• Box drawing and block characters render correctly on Windows terminals not using UTF-8 code page

... (truncated)

Commits

• See full diff in compare view

Updates tsx from 4.21.0 to 4.22.3

Release notes

Sourced from tsx's releases.

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

• decode typed loader source (dce02fc)
• preserve entrypoint with TypeScript preload hooks (68f72f3)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

• preserve CJS JSON require in ESM hooks (35b700b)
• preserve named exports from CommonJS TypeScript (11de737)
• support module.exports require(esm) interop (cf8f199)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.1

4.22.1 (2026-05-17)

Bug Fixes

• resolve tsconfig path aliases containing a colon (#780) (6979f28)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.0

4.22.0 (2026-05-14)

Features

• upgrade esbuild to 0.28 (#789) (b29f6ee)

---

This release is also available on:

• npm package (@​latest dist-tag)

... (truncated)

Commits

• dce02fc fix: decode typed loader source
• 68f72f3 fix: preserve entrypoint with TypeScript preload hooks
• 69455cf test: cover package exports for ambiguous ESM reexports
• 35b700b fix: preserve CJS JSON require in ESM hooks
• ef807db chore: update testing dependencies
• 3917090 test: document compatibility test taxonomy
• de8113f refactor: centralize Node capability facts
• c1f62db test: consolidate tsconfig path edge coverage
• 4e08174 test: consolidate loader hook coverage
• 674bb30 test: consolidate tsImport commonjs mts coverage
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Commit pushed: 19891e5

Generated by Java Codegen Agentic Fix · ● 50.6M

[edburns]

Hi @stephentoub,

I'm closing this PR for now. The same changes were brought over (also agentically) from copilot-sdk-java#224 as #1389, using the existing agentic sync process from the standalone Java repo.

I'd like to defer to whatever direction you and the team settle on in ghcp-sp-109 for the long-term maintenance policy. Once that's decided, we'll shut down Java SDK's standalone repo sync process accordingly — currently it just runs weekly on Fridays, and I'm happy to turn it off or adapt it to whatever workflow makes the most sense for the monorepo.

Please let me know if you'd prefer a different approach in the meantime.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml