Skip to content

v0.2.25

Latest

Choose a tag to compare

@github-actions github-actions released this 18 Apr 22:59
18b19a6

🌟 Release Highlights

This release tightens GitHub guard security coverage, improves debug observability, strengthens the Rust guard implementation, and continues a broad internal code quality effort across the codebase.

πŸ›‘οΈ Security & Guard Improvements

  • Expanded set_issue_fields DIFC coverage β€” The GitHub guard now correctly classifies set_issue_fields as a write operation with appropriate DIFC rule grouping, closing a coverage gap that could allow the tool to bypass integrity enforcement. (#4049, #4104)
  • Rust guard reliability β€” Eliminated an unnecessary scopes.clone() in the label_agent path and introduced a DIFC_MODE constant for clearer mode handling in the Rust guard. (#4085)

✨ What's New

  • Debug logging for config core β€” Configuration loading now emits structured debug output via the logger framework, making it easier to trace config resolution issues in production. (#4074)
  • Rust test integration β€” A new test-rust Makefile target brings Rust guard tests into the standard make agent-finished verification pipeline. (#4086)

πŸ”§ Internal Improvements

  • Unified inbound response logging in SendRequestWithServerID to a single code path, reducing logging inconsistencies. (#4054)
  • Deduplicated tracing and HTTP server setup across cmd/server packages. (#4048)
  • Consolidated marshal/log paths and unified sanitized sys tool response logging. (#4106)
  • Moved shared helpers out of specialized files and removed unnecessary micro-packages. (#4117)
  • Refined testify assertions across the test suite for clearer failures and lint-aligned patterns. (#4051)
  • Improved test coverage for sys/container and cmd.newCompletionCmd. (#4081, #4082)

🐳 Docker Image

The Docker image for this release is available at:

docker pull ghcr.io/github/gh-aw-mcpg:v0.2.25
# or
docker pull ghcr.io/github/gh-aw-mcpg:latest

Supported platforms: linux/amd64, linux/arm64


For complete details, see the full release notes.

Generated by Release Β· ● 149.7K


What's Changed

  • Refactor duplicated tracing and HTTP server setup paths in cmd/server packages by @Copilot in #4048
  • [guard-coverage] Add set_issue_fields to github-guard write classification and DIFC rules by @Copilot in #4049
  • Refine testify assertions in tests for clearer failures and lint-aligned patterns by @Copilot in #4051
  • Refactor SendRequestWithServerID to use a single inbound response logging path by @Copilot in #4054
  • [test-improver] Improve tests for sys/container package by @github-actions[bot] in #4081
  • [Repo Assist] fix(rust-guard): eliminate scopes.clone() in label_agent + add DIFC_MODE constant by @github-actions[bot] in #4085
  • [Repo Assist] build: add test-rust Makefile target and include Rust tests in agent-finished by @github-actions[bot] in #4086
  • [log] Add debug logging to config_core.go by @github-actions[bot] in #4074
  • [test] Add tests for cmd.newCompletionCmd by @github-actions[bot] in #4082
  • Close GitHub guard coverage gap for set_issue_fields by aligning DIFC rule grouping by @Copilot in #4104
  • Refactor duplicated marshal/log paths and unify sanitized sys tool response logging by @Copilot in #4106
  • Refactor utility placement: move shared helpers out of specialized files and remove micro-packages/files by @Copilot in #4117

Full Changelog: v0.2.24...v0.2.25