The self-update functionality used http.Get() without timeouts, causing potential indefinite hangs on slow or unresponsive GitHub API calls.

Changes

• Created http.Client with 30-second timeout in internal/updater/self_update.go
• Applied timeout to both GitHub API requests: release metadata fetch and binary download

// Before
resp, err := http.Get("https://api.github.com/repos/" + repo + "/releases/latest")

// After
client := &http.Client{
    Timeout: 30 * time.Second,
}
resp, err := client.Get("https://api.github.com/repos/" + repo + "/releases/latest")

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.