Build(deps): Bump the all-minor-patch group with 2 updates

[dependabot]

Bumps the all-minor-patch group with 2 updates: @github/copilot and eslint.

Updates @github/copilot from 0.0.414 to 0.0.420

Release notes

Sourced from @​github/copilot's releases.

0.0.420

2026-02-27

• Auto-update now also updates the binary executable, not just the JS package
• Plugin and marketplace git repos update correctly after force-pushes and tag-based installs
• 502 bad gateway errors are retried automatically and no longer crash the session with raw HTML output
• Copy hint shows cmd+c in Ghostty on macOS and right-click as an alternative for all terminals
• Type # to reference GitHub issues, pull requests and discussions

0.0.420-0

Improved

• Copy hint shows cmd+c in Ghostty on macOS and right-click as an alternative for all terminals

Fixed

• 502 bad gateway errors are retried automatically and no longer crash the session with raw HTML output

0.0.419

2026-02-27

• Add /chronicle command with standup, tips, and improve subcommands powered by session history (experimental)
• Scrolling left or right no longer triggers unintended mouse button presses
• Add Ctrl+F/Ctrl+B as page down/up shortcuts for scrolling in alt-screen views
• Add --mouse/--no-mouse flag and mouse config to disable mouse mode in alt screen
• Home and End keys jump to the top and bottom of the alt-screen scroll buffer
• Add Ctrl+G keyboard shortcut for editing prompts in external editor and dismissing UI elements
• /mcp enable works for built-in servers that were auto-disabled before configuration
• CLI spinner stops and final agent response is visible after agent finishes work
• AUTO theme now uses the terminal's actual ANSI color palette for more accurate colors on any terminal theme
• MCP server env vars referenced in command, args, or cwd fields are automatically included in the server environment
• /diagnose shows a helpful message when no session has been started yet
• MCP server names now support dots, slashes, and @ characters, enabling npm-style names like @​modelcontextprotocol/server and io.github/server

0.0.419-1

Added

• Add Ctrl+F/Ctrl+B as page down/up shortcuts for scrolling in alt-screen views
• Add --mouse/--no-mouse flag and mouse config to disable mouse mode in alt screen
• Home and End keys jump to the top and bottom of the alt-screen scroll buffer
• Add Ctrl+G keyboard shortcut for editing prompts in external editor and dismissing UI elements

Improved

• AUTO theme now uses the terminal's actual ANSI color palette for more accurate colors on any terminal theme
• MCP server env vars referenced in command, args, or cwd fields are automatically included in the server environment
• /diagnose shows a helpful message when no session has been started yet
• MCP server names now support dots, slashes, and @ characters, enabling npm-style names like @​modelcontextprotocol/server and io.github/server

Fixed

• /mcp enable works for built-in servers that were auto-disabled before configuration
• CLI spinner stops and final agent response is visible after agent finishes work

0.0.419-0

... (truncated)

Changelog

Sourced from @​github/copilot's changelog.

0.0.420 - 2026-02-27

• Auto-update now also updates the binary executable, not just the JS package
• Plugin and marketplace git repos update correctly after force-pushes and tag-based installs
• 502 bad gateway errors are retried automatically and no longer crash the session with raw HTML output
• Copy hint shows cmd+c in Ghostty on macOS and right-click as an alternative for all terminals
• Type # to reference GitHub issues, pull requests and discussions

0.0.419 - 2026-02-27

• Add /chronicle command with standup, tips, and improve subcommands powered by session history (experimental)
• Scrolling left or right no longer triggers unintended mouse button presses
• Add Ctrl+F/Ctrl+B as page down/up shortcuts for scrolling in alt-screen views
• Add --mouse/--no-mouse flag and mouse config to disable mouse mode in alt screen
• Home and End keys jump to the top and bottom of the alt-screen scroll buffer
• Add Ctrl+G keyboard shortcut for editing prompts in external editor and dismissing UI elements
• /mcp enable works for built-in servers that were auto-disabled before configuration
• CLI spinner stops and final agent response is visible after agent finishes work
• AUTO theme now uses the terminal's actual ANSI color palette for more accurate colors on any terminal theme
• MCP server env vars referenced in command, args, or cwd fields are automatically included in the server environment
• /diagnose shows a helpful message when no session has been started yet
• MCP server names now support dots, slashes, and @ characters, enabling npm-style names like @​modelcontextprotocol/server and io.github/server

0.0.418 - 2026-02-25

🎉 Copilot CLI is now generally available 🎉

• Agent protected from accidentally killing itself
• Remove --disable-parallel-tools-execution flag and parallel_tool_execution config option
• Plugin agents specified as file paths in plugin.json load correctly

0.0.417 - 2026-02-25

• Add /research command for deep research with exportable reports
• MCP servers no longer intermittently fail to load when opening a new session
• Plugin agents and skills are available immediately after install without restarting
• Plugin skills and commands load from custom paths declared in plugin.json
• Alt+backspace correctly registers as backspace instead of delete

0.0.416 - 2026-02-24

• Expand --help content with descriptions, examples, and sorted flags
• Block third-party MCP servers when the Copilot MCP policy does not allow them
• Streaming response size counter updates continuously during tool calls and reasoning, and resets between requests
• Status line automatically switches to a two-line layout on narrow terminals, keeping CWD, branch, and model info readable at any terminal width
• Undo operations now always require confirmation

0.0.415 - 2026-02-23

• Skill files saved with a UTF-8 BOM (common on Windows editors) now load correctly instead of failing with a frontmatter parse error

... (truncated)

Commits

• 9596516 Update changelog.md for version 0.0.419
• 9277ab5 Update changelog.md for version 0.0.418
• f8396ae Merge pull request #1670 from github/RyanHecht-patch-1
• b54e97c Update README.md
• aea9faa Revise README for GitHub Copilot CLI installation
• 6c3eff1 Update changelog.md for version 0.0.417
• b320dfb Update changelog.md for version 0.0.416
• 9134dfd Update changelog.md for version 0.0.415
• 837a597 Update changelog.md for version 0.0.414
• See full diff in compare view

Updates eslint from 10.0.1 to 10.0.2

Release notes

Sourced from eslint's releases.

v10.0.2

Bug Fixes

• 2b72361 fix: update ajv to 6.14.0 to address security vulnerabilities (#20537) (루밀LuMir)

Documentation

• 13eeedb docs: link rule type explanation to CLI option --fix-type (#20548) (Mike McCready)
• 98cbf6b docs: update migration guide per Program range change (#20534) (Huáng Jùnliàng)
• 61a2405 docs: add missing semicolon in vars-on-top rule example (#20533) (Abilash)

Chores

• 951223b chore: update dependency @​eslint/eslintrc to ^3.3.4 (#20553) (renovate[bot])
• 6aa1afe chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (#20536) (Milos Djermanovic)

Commits

• 55122d6 10.0.2
• 80f1e29 Build: changelog update for 10.0.2
• 951223b chore: update dependency @​eslint/eslintrc to ^3.3.4 (#20553)
• 13eeedb docs: link rule type explanation to CLI option --fix-type (#20548)
• 6aa1afe chore: update dependency eslint-plugin-jsdoc to ^62.7.0 (#20536)
• 2b72361 fix: update ajv to 6.14.0 to address security vulnerabilities (#20537)
• 98cbf6b docs: update migration guide per Program range change (#20534)
• 61a2405 docs: add missing semicolon in vars-on-top rule example (#20533)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud