Upstream sync: port 27 new commits from github/copilot-sdk (2026-03-05)

[Copilot]

Ports relevant changes from github/copilot-sdk since last merge (dcd86c1→4246289).

Before the change?

• PermissionRequestResult.setKind() only accepted raw String values; no typed constants for well-known permission outcomes
• E2ETestContext used CI env var for CI detection — wrong variable for GitHub Actions; fake token was not being set in CI
• Resume session E2E tests did not assert continued stateful conversation after resume
• StreamingFidelityTest E2E tests were absent; streaming delta coverage lived in a snapshot that was removed upstream
• No E2E test for getLastSessionId()

After the change?

• PermissionRequestResultKind — new string-backed value type with well-known constants; case-insensitive equality; Jackson serializes transparently as a string:

new PermissionRequestResult().setKind(PermissionRequestResultKind.APPROVED)
new PermissionRequestResult().setKind(PermissionRequestResultKind.DENIED_COULD_NOT_REQUEST_FROM_USER)
// Backward-compatible: .setKind("approved") still works

• CI detection fix — System.getenv("CI") → System.getenv("GITHUB_ACTIONS") in E2ETestContext.createClient()
• Resume tests — both testShouldResumeSessionUsingTheSameClient and testShouldResumeSessionUsingNewClient now assert a follow-up stateful turn after resume; snapshots updated accordingly
• StreamingFidelityTest — new E2E test class (streaming_fidelity snapshot category) covering: delta events when streaming enabled, no deltas when disabled, deltas after session resume
• testShouldGetLastSessionId — new E2E test using the session/should_get_last_session_id snapshot
• Removed two tests whose snapshots were deleted upstream (should_receive_streaming_delta_events_when_streaming_is_enabled, should_pass_streaming_option_to_session_creation)
• advanced.md Permission Handling section updated with PermissionRequestResultKind constant table

Not ported

Commit	Reason
2951807 .NET build infra + docs	.NET-specific; Java Javadoc already more complete
4246289 Go remove hand-written PermissionRequest	Go-specific
5b4a6ec Update @github/copilot to 0.0.421	Node.js dep; Java tests clone upstream for CLI
207b85b Python timeout in generated RPC methods	Python-specific
87a54de/b49e5d8/c13dbba	GitHub Actions runtime triage workflows
2fc65b4–e9797ca	Dependabot/dep bumps (Node.js, actions)
760ba65 custom agents guide	Existing Java SDK docs already cover this

Pull request checklist

• Tests for the changes have been added (for bug fixes / features)
• Docs have been reviewed and added / updated if needed (for bug fixes / features)
• mvn spotless:apply has been run to format the code
• mvn clean verify passes locally

Does this introduce a breaking change?

• Yes
• No

---

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• checkstyle.org
  • Triggering command: /opt/hostedtoolcache/CodeQL/2.24.2/x64/codeql/tools/linux64/java/bin/java /opt/hostedtoolcache/CodeQL/2.24.2/x64/codeql/tools/linux64/java/bin/java -jar /opt/hostedtoolcache/CodeQL/2.24.2/x64/codeql/xml/tools/xml-extractor.jar --fileList=/tmp/codeql-scratch-a0b8ba07f7cabbfc/dbs/java/working/files-to-index723148437249810622.list --sourceArchiveDir=/tmp/codeql-scratch-a0b8ba07f7cabbfc/dbs/java/src --outputDir=/tmp/codeql-scratch-a0b8ba07f7cabbfc/dbs/java/trap/java va/copilot-sdk-java/src/test/java/com/github/copilot/sdk/SessionEventsE2ETest.java sh (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[edburns]

Metric	Main	PR	Delta
Instructions	88.5%	88.8%	+0.3%
Branches	82.5%	82.5%	0.0%
Lines	89.3%	89.6%	+0.3%
Tests	404	420	+16

JaCoCo coverage comparison. Looks good.