π Release Highlights
This release tightens GitHub guard security coverage, improves debug observability, strengthens the Rust guard implementation, and continues a broad internal code quality effort across the codebase.
π‘οΈ Security & Guard Improvements
- Expanded
set_issue_fieldsDIFC coverage β The GitHub guard now correctly classifiesset_issue_fieldsas a write operation with appropriate DIFC rule grouping, closing a coverage gap that could allow the tool to bypass integrity enforcement. (#4049, #4104) - Rust guard reliability β Eliminated an unnecessary
scopes.clone()in thelabel_agentpath and introduced aDIFC_MODEconstant for clearer mode handling in the Rust guard. (#4085)
β¨ What's New
- Debug logging for config core β Configuration loading now emits structured debug output via the logger framework, making it easier to trace config resolution issues in production. (#4074)
- Rust test integration β A new
test-rustMakefile target brings Rust guard tests into the standardmake agent-finishedverification pipeline. (#4086)
π§ Internal Improvements
- Unified inbound response logging in
SendRequestWithServerIDto a single code path, reducing logging inconsistencies. (#4054) - Deduplicated tracing and HTTP server setup across
cmd/serverpackages. (#4048) - Consolidated marshal/log paths and unified sanitized sys tool response logging. (#4106)
- Moved shared helpers out of specialized files and removed unnecessary micro-packages. (#4117)
- Refined testify assertions across the test suite for clearer failures and lint-aligned patterns. (#4051)
- Improved test coverage for
sys/containerandcmd.newCompletionCmd. (#4081, #4082)
π³ Docker Image
The Docker image for this release is available at:
docker pull ghcr.io/github/gh-aw-mcpg:v0.2.25
# or
docker pull ghcr.io/github/gh-aw-mcpg:latestSupported platforms: linux/amd64, linux/arm64
For complete details, see the full release notes.
Generated by Release Β· β 149.7K
What's Changed
- Refactor duplicated tracing and HTTP server setup paths in cmd/server packages by @Copilot in #4048
- [guard-coverage] Add
set_issue_fieldsto github-guard write classification and DIFC rules by @Copilot in #4049 - Refine testify assertions in tests for clearer failures and lint-aligned patterns by @Copilot in #4051
- Refactor
SendRequestWithServerIDto use a single inbound response logging path by @Copilot in #4054 - [test-improver] Improve tests for sys/container package by @github-actions[bot] in #4081
- [Repo Assist] fix(rust-guard): eliminate scopes.clone() in label_agent + add DIFC_MODE constant by @github-actions[bot] in #4085
- [Repo Assist] build: add test-rust Makefile target and include Rust tests in agent-finished by @github-actions[bot] in #4086
- [log] Add debug logging to config_core.go by @github-actions[bot] in #4074
- [test] Add tests for cmd.newCompletionCmd by @github-actions[bot] in #4082
- Close GitHub guard coverage gap for
set_issue_fieldsby aligning DIFC rule grouping by @Copilot in #4104 - Refactor duplicated marshal/log paths and unify sanitized sys tool response logging by @Copilot in #4106
- Refactor utility placement: move shared helpers out of specialized files and remove micro-packages/files by @Copilot in #4117
Full Changelog: v0.2.24...v0.2.25