deps: bump @github/copilot-sdk from 0.3.0 to 1.0.5

[dependabot]

Bumps @github/copilot-sdk from 0.3.0 to 1.0.5.

Release notes

Sourced from @​github/copilot-sdk's releases.

GitHub Copilot SDK for Java 1.0.5

Installation

⚠️ Artifact versioning plan: Releases of this implementation track releases of the reference implementation. For each release of the reference implementation, there may follow a corresponding release of this implementation with the same number as the reference implementation. Release identifiers of the reference implementation are in the form vMaj.Min.Micro. For example v0.1.32. The corresponding maven version for the release will be Maj.Min.Micro-java.N, where Maj, Min and Micro are the corresponding numbers for the reference implementation release, and N is a monotonically increasing sequence number starting with 0 for each release. See the corresponding architectural decision record for more information in the docs/adr directory of the source code.

📦 [View on Maven Central](https://github.com/github/copilot-sdk/blob/HEAD/(central.sonatype.com/redacted)

📖 [Documentation](https://github.com/github/copilot-sdk/blob/HEAD/(github.github.io/redacted) · [Javadoc](https://github.com/github/copilot-sdk/blob/HEAD/(github.github.io/redacted)

Maven

<dependency>
    <groupId>com.github</groupId>
    <artifactId>copilot-sdk-java</artifactId>
    <version>1.0.5</version>
</dependency>

Gradle (Kotlin DSL)

implementation("com.github:copilot-sdk-java:1.0.5")

Gradle (Groovy DSL)

implementation 'com.github:copilot-sdk-java:1.0.5'

---

Feature: annotation-based tool API (@CopilotTool)

The Java SDK now includes a high-level, annotation-driven tool API. Annotate methods with @CopilotTool and parameters with @CopilotToolParam to define tools — a JSR-269 annotation processor generates metadata at compile time with no runtime reflection. Use ToolDefinition.fromObject() to register tools with minimal boilerplate. (#1792)

public class WeatherTools {
    `@CopilotTool`("Get the current weather for a given city")
    public String getWeather(
            `@CopilotToolParam`(value = "The city to get weather for", required = true) String city,
            `@CopilotToolParam`(value = "Temperature unit: celsius or fahrenheit", defaultValue = "celsius") String unit) {
        // implementation
    }
}
List<ToolDefinition> tools = ToolDefinition.fromObject(new WeatherTools());
SessionConfig config = new SessionConfig().setTools(tools);

Feature: ToolInvocation injection in @CopilotTool methods

... (truncated)

Changelog

Sourced from @​github/copilot-sdk's changelog.

v1.0.5 (2026-07-01)

Feature: MCP OAuth host token handlers

SDK applications can now handle OAuth challenges from MCP servers that require host-provided authentication. Register an onMcpAuthRequest callback on the session config and the SDK will invoke it whenever an MCP server responds with a 401 WWW-Authenticate challenge; return an access token (or cancel the request). Supports initial auth, refresh, reauth, and upscope flows across all SDKs. (#1669)

const session = await client.createSession({
    onMcpAuthRequest: async (request) => ({
        accessToken: await myIdentityProvider.getToken(request.serverUrl),
    }),
});

var session = await client.CreateSessionAsync(new SessionConfig
{
    OnMcpAuthRequest = async ctx =>
        McpAuthResult.FromToken(new McpAuthToken
        {
            AccessToken = await myIdentityProvider.GetTokenAsync(ctx.ServerUrl)
        }),
});

Feature: session options for citations, excluded agents, and spending limits

Three additional session configuration options are now available across all SDKs. (#1865)

const session = await client.createSession({
    enableCitations: true,
    excludedBuiltinAgents: ["github-search"],
    sessionLimits: { maxAiCredits: 10 },
});

var session = await client.CreateSessionAsync(new SessionConfig
{
    EnableCitations = true,
    ExcludedBuiltInAgents = ["github-search"],
    SessionLimits = new SessionLimitsConfig { MaxAiCredits = 10 },
});

Other changes

• improvement: [All SDKs] rename BYOK callback field getBearerToken → bearerTokenProvider; add sessionId to ProviderTokenArgs for per-session token scoping (#1796)
• bugfix: [Node] fix MCP OAuth registerInterest sent before session.resume, causing "Session not found" errors when resuming a session with onMcpAuthRequest (#1861)

... (truncated)

Commits

• 62ffcfe docs: add session limits guidance (#1856)
• 1047dfb docs: update billing information for GitHub Copilot SDK usage (#1854)
• cbc3026 Fix MCP OAuth resume order in Node.js SDK (#1861)
• 64dcd25 Expose new session options across SDKs (#1865)
• b168366 Update @​github/copilot to 1.0.67 (#1860)
• cc66206 Update @​github/copilot to 1.0.66 (#1859)
• 6189f84 [maven-release-plugin] prepare for next development iteration
• 5657aab [maven-release-plugin] prepare release java/v1.0.5
• d98a6c5 docs: update version references to 1.0.5
• 91eaa4b Add MCP OAuth lifecycle SDK support (#1669)
• Additional commits viewable in compare view

[github-actions]

✅ Test & Coverage Summary

Tier	Tests	Passed	Failed	Skipped	Time	Stmts	Branch	Funcs	Lines
✅ Unit Tests	2119	2119	0	0	20.9s	78.4% ✅	70.2% ✅	81.0% ✅	78.9% ✅
✅ Integration L3	256	256	0	0	9.6s	33.3% ✅	30.7% ✅	31.9% ✅	33.8% ✅
✅ Integration L4-L6	80	80	0	0	1.7s	19.2% ✅	15.3% ✅	21.9% ✅	19.7% ✅
✅ Integration L7	244	244	0	0	2.5s	66.0% ✅	53.8% ✅	72.0% ✅	67.1% ✅
✅ E2E	236	236	0	0	16.3s	10.8% ✅	7.5% ❌	10.4% ❌	11.1% ✅
Total	2935	2935	0	0

📊 Unit Coverage Details (78.9% lines)

Metric	Covered / Total	Percentage
Statements	6280/8006	78.44%
Branches	3055/4352	70.19%
Functions	1246/1539	80.96%
Lines	5959/7556	78.86%

[github-actions]

Coverage Report for Unit

Status	Category	Percentage	Covered / Total
🔵	Lines	78.86%	5959 / 7556
🔵	Statements	78.44%	6280 / 8006
🔵	Functions	80.96%	1246 / 1539
🔵	Branches	70.19%	3055 / 4352

File Coverage

No changed files found.

Generated in workflow #496 for commit 86e7e90 by the Vitest Coverage Report Action

[dependabot]

Superseded by #145.