Bump the java-codegen-deps group across 1 directory with 2 updates

[dependabot]

Bumps the java-codegen-deps group with 2 updates in the /java/scripts/codegen directory: @github/copilot and tsx.

Updates @github/copilot from 1.0.65 to 1.0.71

Release notes

Sourced from @​github/copilot's releases.

1.0.71

2026-07-16

• copilot -p --autopilot no longer hangs when a background shell or agent outlives the turn; it now honors the COPILOT_TASK_WAIT_TIMEOUT_SECONDS timeout the same way plain -p does.
• Reopening the /subagents model picker keeps each agent's reasoning effort and context tier
• Refresh memory context after 30 minutes in long-lived sessions
• Keep MCP tool lists up to date when servers change
• Avoid leaving long-running background git processes after exit
• Add a configurable maximum for Ctrl+R command history
• On startup, an invalid settings.json now shows a warning identifying the offending value instead of silently ignoring your settings
• /terminal-setup no longer skips setup on terminals without real kitty keyboard support
• Add /voice devices to choose and persist the microphone for voice mode
• Limit which built-in agents are available to tasks and subagents
• Add canvas support in the CLI for extension-driven interactions
• Enforce the sandbox filesystem policy on LSP file reads and rename edits
• Allow empty owner and author emails in marketplace metadata
• Keep all MCP Server Type options visible on short terminals
• Mark disabled skills in copilot skill list and its JSON output
• Plan mode now hard-blocks built-in tool calls that would modify the workspace, so the agent can no longer edit files or run mutating shell commands while planning (built-in mutators like opening a pull request are blocked; MCP and external tools are still allowed)
• Improve /chronicle cost-tips recommendations with richer cost profiles
• Highlight standalone hex colors inline in Markdown
• Persist GitHub MCP toolset/tool config via settings.json (githubMcpToolsets, githubMcpTools, etc.)
• Add plugins marketplace subcommands to list, add, and remove plugin marketplaces
• Persist sidebar sessions across restarts
• Add plugins marketplace browse and update commands
• Split /worktree and /move: /worktree now creates a new worktree and leaves your uncommitted changes behind, while the new /move carries them into the new worktree
• Add local and cloud cost profiles to /chronicle cost-tips
• Switching to autopilot mid-turn now auto-answers questions asked during that same turn
• Custom agents that request a shell tool by alias now also receive the matching read, list, and stop shell tools
• Slash commands and their autocomplete now match regardless of case (e.g. /SESSION works like /session)
• Show repo-enabled plugins in /plugin list and skill pickers
• Press ? twice to dismiss quick help and start a prompt with a literal ?
• Shell completions suggest positional-argument choices
• Show the /app launch message and download link immediately on Linux
• Validate --max-autopilot-continues rejects NaN, negative, and fractional values
• Honor NO_COLOR in the CLI even when chalk cached a color level
• Apply updated session options (shell flags, streaming, custom agent defaults) immediately after /settings changes
• Announce the focused /model row for screen readers
• Announce the focused picker row to screen readers
• Show selected custom agents once in /agent and keep their source label when the file name differs from the display name
• Clear the /model pricing banner when no models match
• Keep /share file session and /share html session from using the full-session selector as an output path
• Honor --context in fresh interactive sessions
• Fixed the model picker changing a hidden model's reasoning effort or context window when the search matched no results, and hid the inert key hints shown in that empty state
• Display plugin root skills as /plugin instead of /plugin:plugin
• Keep valid hooks in a config file when one hook entry is malformed
• Denying write(path) now blocks only the specified path
• Using --add-github-mcp-tool "*" now enables all GitHub MCP tools
• Render empty untracked files without a phantom added line
• Show clean failure messages when copilot skill add fails

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

1.0.71 - 2026-07-16

• copilot -p --autopilot no longer hangs when a background shell or agent outlives the turn; it now honors the COPILOT_TASK_WAIT_TIMEOUT_SECONDS timeout the same way plain -p does.
• Reopening the /subagents model picker keeps each agent's reasoning effort and context tier
• Refresh memory context after 30 minutes in long-lived sessions
• Keep MCP tool lists up to date when servers change
• Avoid leaving long-running background git processes after exit
• Add a configurable maximum for Ctrl+R command history
• On startup, an invalid settings.json now shows a warning identifying the offending value instead of silently ignoring your settings
• /terminal-setup no longer skips setup on terminals without real kitty keyboard support
• Add /voice devices to choose and persist the microphone for voice mode
• Limit which built-in agents are available to tasks and subagents
• Add canvas support in the CLI for extension-driven interactions
• Enforce the sandbox filesystem policy on LSP file reads and rename edits
• Allow empty owner and author emails in marketplace metadata
• Keep all MCP Server Type options visible on short terminals
• Mark disabled skills in copilot skill list and its JSON output
• Plan mode now hard-blocks built-in tool calls that would modify the workspace, so the agent can no longer edit files or run mutating shell commands while planning (built-in mutators like opening a pull request are blocked; MCP and external tools are still allowed)
• Improve /chronicle cost-tips recommendations with richer cost profiles
• Highlight standalone hex colors inline in Markdown
• Persist GitHub MCP toolset/tool config via settings.json (githubMcpToolsets, githubMcpTools, etc.)
• Add plugins marketplace subcommands to list, add, and remove plugin marketplaces
• Persist sidebar sessions across restarts
• Add plugins marketplace browse and update commands
• Split /worktree and /move: /worktree now creates a new worktree and leaves your uncommitted changes behind, while the new /move carries them into the new worktree
• Add local and cloud cost profiles to /chronicle cost-tips
• Switching to autopilot mid-turn now auto-answers questions asked during that same turn
• Custom agents that request a shell tool by alias now also receive the matching read, list, and stop shell tools
• Slash commands and their autocomplete now match regardless of case (e.g. /SESSION works like /session)
• Show repo-enabled plugins in /plugin list and skill pickers
• Press ? twice to dismiss quick help and start a prompt with a literal ?
• Shell completions suggest positional-argument choices
• Show the /app launch message and download link immediately on Linux
• Validate --max-autopilot-continues rejects NaN, negative, and fractional values
• Honor NO_COLOR in the CLI even when chalk cached a color level
• Apply updated session options (shell flags, streaming, custom agent defaults) immediately after /settings changes
• Announce the focused /model row for screen readers
• Announce the focused picker row to screen readers
• Show selected custom agents once in /agent and keep their source label when the file name differs from the display name
• Clear the /model pricing banner when no models match
• Keep /share file session and /share html session from using the full-session selector as an output path
• Honor --context in fresh interactive sessions
• Fixed the model picker changing a hidden model's reasoning effort or context window when the search matched no results, and hid the inert key hints shown in that empty state
• Display plugin root skills as /plugin instead of /plugin:plugin
• Keep valid hooks in a config file when one hook entry is malformed
• Denying write(path) now blocks only the specified path
• Using --add-github-mcp-tool "*" now enables all GitHub MCP tools
• Render empty untracked files without a phantom added line
• Show clean failure messages when copilot skill add fails
• Press Enter on a blank settings array item to show an error instead of saving an empty value

... (truncated)

Commits

• 6a8b92e Update changelog.md for version 1.0.70
• 758c2c9 Update changelog.md for version 1.0.69
• 9622b56 Update changelog.md for version 1.0.68
• 914f26a Update changelog.md for version 1.0.67
• c802cc3 Update changelog.md for version 1.0.66
• 214d530 Update changelog.md for version 1.0.65
• See full diff in compare view

Updates tsx from 4.22.4 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

• support tsImport after global preload (8d4ffc2)
• watch: avoid clearing piped output (95d0672)
• watch: treat script and dependency paths literally (79fddde)

Performance Improvements

• index transform cache lazily (e818ad6)
• load esbuild lazily in CLI (d067938)
• map Node TypeScript formats directly (cdcc623)
• use sync module hooks on Node v22.22.3+ (f8992f1)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

• avoid redundant filesystem probes during module resolution (257bbbb), closes privatenumber/tsx#809

Features

• add multi-scenario startup benchmark suite (c178197), closes privatenumber/tsx#809 #809 hi#signal privatenumber/tsx#145 #809

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

• isolate hook state per async module.register() registration (a305f36)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 79fddde fix(watch): treat script and dependency paths literally
• e818ad6 perf: index transform cache lazily
• cdcc623 perf: map Node TypeScript formats directly
• d067938 perf: load esbuild lazily in CLI
• 95d0672 fix(watch): avoid clearing piped output
• 6fd4607 docs: add per-page metadata
• f4176d8 docs: generate sitemap
• 8d4ffc2 fix: support tsImport after global preload
• f0e89b2 docs: document Node's public type-stripping API vs internal loader path
• f8992f1 perf: use sync module hooks on Node v22.22.3+
• Additional commits viewable in compare view