diff --git a/pkgbuilds/shared/cursor-bin/.SRCINFO b/pkgbuilds/shared/cursor-bin/.SRCINFO
index eb2da5a..a1613bc 100644
--- a/pkgbuilds/shared/cursor-bin/.SRCINFO
+++ b/pkgbuilds/shared/cursor-bin/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = cursor-bin
 	pkgdesc = AI-first coding environment
-	pkgver = 2.6.12
+	pkgver = 2.6.13
 	pkgrel = 1
 	url = https://www.cursor.com
 	arch = x86_64
@@ -12,13 +12,13 @@ pkgbase = cursor-bin
 	depends = gcc-libs
 	depends = hicolor-icon-theme
 	depends = libxkbfile
-	noextract = cursor_2.6.12_amd64.deb
+	noextract = cursor_2.6.13_amd64.deb
 	options = !strip
 	options = !debug
-	source = https://downloads.cursor.com/production/1917e900a0c4b0111dc7975777cfff60853059d3/linux/x64/deb/amd64/deb/cursor_2.6.12_amd64.deb
+	source = https://downloads.cursor.com/production/60faf7b51077ed1df1db718157bbfed740d2e168/linux/x64/deb/amd64/deb/cursor_2.6.13_amd64.deb
 	source = https://gitlab.archlinux.org/archlinux/packaging/packages/code/-/raw/main/code.sh
 	source = rg.sh
-	sha512sums = ce9b26a216af1d4b5a4bac22c3762ea72ba7db84d5808ce9ca0e229a2f433367b4734ebc040187a7aba5e647533c7d52b53e6819c1cdc56d36b48309a5fc295f
+	sha512sums = f72f231cb299ebdb0408b52b3d31a9da8b872ae9b37182c2f643287c75012be97bea0a9f32e65fbbc104de28f4ca9fac12266e017255f6b719ab2128b7b4d2ee
 	sha512sums = 937299c6cb6be2f8d25f7dbc95cf77423875c5f8353b8bd6cd7cc8e5603cbf8405b14dbf8bd615db2e3b36ed680fc8e1909410815f7f8587b7267a699e00ab37
 	sha512sums = e79fe7659f59d1ae02fc68816399bfd31587315df6cdb6ccf1d0ca76f7cdc692c2a42b30591c0091147bd97ef14b1c7745dc26bd7cb3ea6bba45698e5044fa2a
 
diff --git a/pkgbuilds/shared/cursor-bin/PKGBUILD b/pkgbuilds/shared/cursor-bin/PKGBUILD
index cd3b07d..2bdbe51 100644
--- a/pkgbuilds/shared/cursor-bin/PKGBUILD
+++ b/pkgbuilds/shared/cursor-bin/PKGBUILD
@@ -1,7 +1,7 @@
 # Maintainer: Gunther Schulz <dev@guntherschulz.de>
 
 pkgname=cursor-bin
-pkgver=2.6.12
+pkgver=2.6.13
 pkgrel=1
 pkgdesc='AI-first coding environment'
 arch=('x86_64')
@@ -11,13 +11,13 @@ _electron=electron
 depends=(xdg-utils ripgrep $_electron nodejs
   'gcc-libs' 'hicolor-icon-theme' 'libxkbfile')
 options=(!strip !debug) # Don't break ext of VSCode
-_commit=1917e900a0c4b0111dc7975777cfff60853059d3
+_commit=60faf7b51077ed1df1db718157bbfed740d2e168
 source=("https://downloads.cursor.com/production/${_commit}/linux/x64/deb/amd64/deb/cursor_${pkgver}_amd64.deb"
 https://gitlab.archlinux.org/archlinux/packaging/packages/code/-/raw/main/code.sh rg.sh)
 sha512sums=('SKIP'
   '937299c6cb6be2f8d25f7dbc95cf77423875c5f8353b8bd6cd7cc8e5603cbf8405b14dbf8bd615db2e3b36ed680fc8e1909410815f7f8587b7267a699e00ab37'
   'e79fe7659f59d1ae02fc68816399bfd31587315df6cdb6ccf1d0ca76f7cdc692c2a42b30591c0091147bd97ef14b1c7745dc26bd7cb3ea6bba45698e5044fa2a')
-sha512sums[0]=ce9b26a216af1d4b5a4bac22c3762ea72ba7db84d5808ce9ca0e229a2f433367b4734ebc040187a7aba5e647533c7d52b53e6819c1cdc56d36b48309a5fc295f
+sha512sums[0]=f72f231cb299ebdb0408b52b3d31a9da8b872ae9b37182c2f643287c75012be97bea0a9f32e65fbbc104de28f4ca9fac12266e017255f6b719ab2128b7b4d2ee
 noextract=(cursor_${pkgver}_amd64.deb) # avoid double tarball
 _app=usr/share/cursor/resources/app
 package() {
diff --git a/pkgbuilds/shared/github-copilot-cli/.SRCINFO b/pkgbuilds/shared/github-copilot-cli/.SRCINFO
index 1ab92da..edcc132 100644
--- a/pkgbuilds/shared/github-copilot-cli/.SRCINFO
+++ b/pkgbuilds/shared/github-copilot-cli/.SRCINFO
@@ -1,6 +1,6 @@
 pkgbase = github-copilot-cli
 	pkgdesc = GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal.
-	pkgver = 0.0.422
+	pkgver = 0.0.423
 	pkgrel = 1
 	url = https://github.com/github/copilot-cli
 	changelog = changelog.md
@@ -17,12 +17,12 @@ pkgbase = github-copilot-cli
 	conflicts = github-copilot
 	conflicts = github-copilot-cli-legacy
 	replaces = github-copilot
-	noextract = copilot-0.0.422.tgz
+	noextract = copilot-0.0.423.tgz
 	options = !strip
 	options = emptydirs
 	options = staticlibs
 	options = zipman
-	source = https://registry.npmjs.org/@github/copilot/-/copilot-0.0.422.tgz
-	b2sums = 7edb9fc953ff25c711662ca0fffec7bc969c37d67fcb6c0217f28854f835d55c99bfc85bd23091f5c328daec4f0bf89465398c98426586542a4dc43829275c92
+	source = https://registry.npmjs.org/@github/copilot/-/copilot-0.0.423.tgz
+	b2sums = 13332ae74f891c2d7ac6da3c572935dab666685a50ad2afa6bd5c47907ca1f147b57885ef846603fddad1ca1a24ae80f069db3d93731c7db46f9caab3976246d
 
 pkgname = github-copilot-cli
diff --git a/pkgbuilds/shared/github-copilot-cli/PKGBUILD b/pkgbuilds/shared/github-copilot-cli/PKGBUILD
index 9a27045..dbbc974 100644
--- a/pkgbuilds/shared/github-copilot-cli/PKGBUILD
+++ b/pkgbuilds/shared/github-copilot-cli/PKGBUILD
@@ -5,7 +5,7 @@ _npmmodule=@github/copilot
 pkgname=github-copilot-cli
 _pkgexec=copilot
 
-pkgver=0.0.422
+pkgver=0.0.423
 pkgrel=1
 
 pkgdesc="GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal."
@@ -28,7 +28,7 @@ source=("https://registry.npmjs.org/${_npmmodule}/-/copilot-${pkgver}.tgz")
 noextract=("copilot-${pkgver}.tgz")
 changelog="changelog.md"
 
-b2sums=('7edb9fc953ff25c711662ca0fffec7bc969c37d67fcb6c0217f28854f835d55c99bfc85bd23091f5c328daec4f0bf89465398c98426586542a4dc43829275c92')
+b2sums=('13332ae74f891c2d7ac6da3c572935dab666685a50ad2afa6bd5c47907ca1f147b57885ef846603fddad1ca1a24ae80f069db3d93731c7db46f9caab3976246d')
 
 # Document: https://wiki.archlinux.org/title/Node.js_package_guidelines
 package() {
diff --git a/pkgbuilds/shared/github-copilot-cli/changelog.md b/pkgbuilds/shared/github-copilot-cli/changelog.md
index 6043dd4..a31d897 100644
--- a/pkgbuilds/shared/github-copilot-cli/changelog.md
+++ b/pkgbuilds/shared/github-copilot-cli/changelog.md
@@ -1,3 +1,12 @@
+## 0.0.423 - 2026-03-06
+
+- Users are prompted for shell commands with potentially dangerous expansion or substitution use cases, additional guardrails for malicious exploits
+- Block /share gist for EMU and GHE Cloud users with clear error messaging
+- Elicitation enum and boolean fields now require Enter to confirm a selection, with a ✓ indicator for confirmed values vs ❯ for the browsing cursor
+- MCP servers can now request users to visit a URL for out-of-band interactions such as OAuth flows or API key entry
+- Improve explore agent precision and large repository support with better context sharing
+- Diff mode displays cleanly on Windows with CRLF line endings
+
 ## 0.0.422 - 2026-03-05
 
 - Display request ID in authentication and authorization error messages to aid troubleshooting