v0.4.1

What's Changed

• [Repo Assist] build(makefile): add -parallel=8 and -timeout flags to test targets by @github-actions[bot] in #8934
• [Repo Assist] fix(rust-guard): remove dead .or_else() fallback in notifications arm by @github-actions[bot] in #8935
• feat: enforce repos="public" when workflow runs in a public repository by @lpcox with @Copilot in #8933
• feat: add force-public-repos runtime check to proxy mode by @lpcox in #8948
• Refactor schema validation error construction to remove duplicated invariant arguments by @lpcox with @Copilot in #8955
• 🤖 chore: sync protected gh-aw templates to v0.82.6 by @lpcox with @Copilot in #8954
• Refactor collaborator permission fetch to use unified response-body guards by @lpcox with @Copilot in #8957
• Tighten testify assertions in reviewed test cases by @lpcox with @Copilot in #8958
• [test] Add tests for server guard_init sink visibility functions by @github-actions[bot] in #8964
• Docs: add missing internal/jqutil entry to CONTRIBUTING project structure by @lpcox with @Copilot in #8959
• Refactor server validation failures through a shared log-and-return helper by @lpcox with @Copilot in #8956
• fix: make force-public-repos decisions observable and fix flaky tests by @lpcox in #8981

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• [log] Add debug logging to difc/path_labels.go by @github-actions[bot] in #8538
• docs: fix unsupported headers in JSON stdin OpenTelemetry example, clarify MCP_GATEWAY_PORT behavior by @lpcox with @Copilot in #8564
• Deduplicate jq filter compile/cache pipeline in jqschema without changing public behavior by @lpcox with @Copilot in #8565
• rust-guard: extract apply_issue_read_enrichment helper + add limit_items_with_log tests by @lpcox with @Copilot in #8566
• Fix ToolAnnotations drop in routed mode; document SDK upgrade gate by @lpcox with @Copilot in #8567
• [test-improver] Improve tests for middleware jqschema by @github-actions[bot] in #8540
• [Repo Assist] test(config): add JSON schema validation tests for opentelemetry config by @github-actions[bot] in #8588
• [Repo Assist] fix(config): add headers field to JSON stdin opentelemetry config by @github-actions[bot] in #8587
• [test] Add tests for httputil.ReadResponseBody and ReadResponseBodyStrict by @github-actions[bot] in #8601
• [log] Add debug logging to difc path_labels resolve paths by @lpcox in #8608
• Use newValidationError() consistently in string validation rules by @lpcox with @Copilot in #8646
• Add coverage for serveAndWait shutdown-timeout fallback by @lpcox with @Copilot in #8650
• refactor: scatter reduction across server, config, and cmd packages by @lpcox with @Copilot in #8649
• [log] Add debug logging to BaseResponseWriter by @github-actions[bot] in #8616
• Fix stale common.go reference in Log-Level Quad-Function Pattern comments by @lpcox with @Copilot in #8647
• Refactor shared HTTP response body read path in httputil by @lpcox with @Copilot in #8648
• [Repo Assist] refactor(config): route all ValidationError constructors through newValidationError by @github-actions[bot] in #8651
• [log] Add debug logging to guard_policy_validation.go by @github-actions[bot] in #8675
• refactor: implement 7 semantic function clustering improvements by @lpcox with @Copilot in #8689
• [test] Add tests for logger.atomicWriteFile and logger.syncFileWithWarning by @github-actions[bot] in #8673
• [test-improver] Improve tests for proxy response transform by @github-actions[bot] in #8676
• refactor: eliminate duplicate empty-string validator by delegating NonEmptyString to RequiredStringField by @lpcox with @Copilot in #8705
• refactor: have TimeoutPositive delegate to PositiveInteger by @lpcox with @Copilot in #8706
• [Repo Assist] perf(logger): sanitize RPC payload once for text+markdown previews by @github-actions[bot] in #8722
• [test] Add tests for logger.SlogHandler.Handle via attrKeyString helper by @github-actions[bot] in #8730
• refactor(config): eliminate duplicate validation rules in internal/config by @lpcox with @Copilot in #8731
• [test-improver] Improve tests for cmd/output.go by @github-actions[bot] in #8746
• refactor(config): eliminate duplicate validation rules in internal/config by @lpcox in #8741
• [log] Add debug logging to difc/capabilities.go by @github-actions[bot] in #8744
• Refactor duplicated helper logic for session logging, rate-limit parsing, and routed server setup by @lpcox with @Copilot in #8762
• Model gh codespace stop as a guarded write operation by @lpcox with @Copilot in #8764
• Update nightly docs reconciler prompt for split config package layout by @lpcox with @Copilot in #8763
• Upgrade gh-aw to v0.82.2 pre-release and recompile workflows by @lpcox in #8786
• rust-guard: dedupe PR/issue response-path setup and add gist/notification path-label tests by @lpcox with @Copilot in #8778
• Add load-time WASM guard ABI checks and align guard unit runtime config by @lpcox with @Copilot in #8779
• refactor(difc): extract tagSet to deduplicate concurrent map logic from Label and Capabilities by @lpcox with @Copilot in #8780
• [test-improver] Improve tests for server SystemTools handlers by @github-actions[bot] in #8815
• [test] Add tests for githubhttp.ParseRateLimitResetFromText by @github-actions[bot] in #8811
• [log] Add debug logging to middleware/content_rewrite.go by @github-actions[bot] in #8813
• rust-guard: flatten commit integrity branch logic and expand trusted bot variant coverage by @lpcox with @Copilot in #8842
• refactor: semantic function clustering – remove wrapper, relocate helpers by @lpcox with @Copilot in #8840
• feat(tracing): OTel improvements from go-fan review by @lpcox with @Copilot in #8841
• [Repo Assist] refactor: centralise SecureCompileOpts into internal/jqutil by @github-actions[bot] in #8867
• [test-improver] Improve tests for tracing/span_helpers by @github-actions[bot] in #8876
• refactor: rename newHTTPConnection→assembleHTTPConnection, getItems→extractRawItems; extract writeJSONToFile helper by @lpcox with @Copilot in #8873
• [log] Add debug logging to resolveGuardPolicyOverride in flags_difc.go by @github-actions[bot] in #8875
• Add sink-visibility to write-sink guard policy to prevent GitLost exfiltration by @lpcox in #8895
• Add sink-visibility runtime verification and integration tests by @lpcox in #8903
• Address sink-visibility runtime check review feedback by @lpcox in #8907

Full Changelog: v0.3.33...v0.4.0

v0.3.33

What's Changed

• [log] Add debug logging to FilterAndConvertLabeledData by @github-actions[bot] in #8250
• docs: fix three documentation discrepancies from nightly reconciliation by @lpcox with @Copilot in #8264
• [test-improver] Improve tests for proxy handler by @github-actions[bot] in #8251
• Fix test-improver workflow AI credits rate limit by @lpcox in #8265
• [Repo Assist] test(guards): add unit tests for issue_integrity and pr_integrity by @github-actions[bot] in #8291
• Upgrade gh-aw to v0.82.2 pre-release and recompile workflows by @lpcox in #8277
• refactor(rust-guard): replace reaction_kind: &str with ReactionKind enum; collapse issue_dependency_read double guard by @lpcox with @Copilot in #8279
• feat(middleware): gojq improvements — caching, panic-on-broken-init, secureCompileOpts by @lpcox with @Copilot in #8280
• fix: add roles: all to smoke-copilot workflow by @lpcox in #8301
• Upgrade gh-aw to v0.82.0 pre-release and recompile workflows by @lpcox in #8329
• [log] tracing: add debug logging to config_resolver.go by @github-actions[bot] in #8306
• Replace deprecated api_key with agent_id in example config by @lpcox in #8342
• refactor: consolidate single-function files in strutil, difc, and middleware by @lpcox in #8348
• fix: deduplicate write paths in label_response by @lpcox in #8345
• refactor: use NewLabeledResource constructor instead of inline struct literals by @lpcox in #8344
• [test-improver] Improve tests for registerPromptsFromBackend by @github-actions[bot] in #8307
• Extract shared HTTP response body read helpers to httputil package by @lpcox in #8346
• Replace raw fmt.Errorf with RequiredStringField and NonEmptyString validators by @lpcox in #8356
• [Repo Assist] refactor(guard): deduplicate label_response write paths and extract get_author_association by @github-actions[bot] in #8343
• Apply cobra best practices for testability and conventions by @lpcox in #8347
• [log] difc/labels: add debug logging to FormatViolationError, StringsToTags, TagsToStrings by @github-actions[bot] in #8385
• [test-improver] Improve tests for version.BuildVersionString by @github-actions[bot] in #8386
• [Repo Assist] refactor(rust-guard): extract extract_items_slice and is_pr_merged helpers by @github-actions[bot] in #8417
• Tighten TOML config test coverage for unknown keys and dynamic guard config by @lpcox with @Copilot in #8423
• fix: add missing WASM compilation cache cleanup in run() by @lpcox with @Copilot in #8424
• Deduplicate /close lifecycle logging and align shutdown event messages by @lpcox with @Copilot in #8425
• Upgrade .github/aw prompt templates to gh-aw v0.82.0 by @lpcox with @Copilot in #8428
• [test] Add tests for guard.WasmGuard.LabelResponse by @github-actions[bot] in #8383
• Refactor Rust guard response item extraction and PR merged detection by @lpcox with @Copilot in #8422
• Deduplicate proxy startup logging via logger.StartupInfo by @lpcox with @Copilot in #8426
• refactor: inline Close*Logger closures and rename syncutil.GetOrCreate → MapGetOrCreate by @lpcox with @Copilot in #8427
• [test] Add tests for guard.NewWasmGuardWithOptions coverage paths by @github-actions[bot] in #8455
• [log] Add debug logging to httputil response body readers by @github-actions[bot] in #8463
• [test-improver] Improve tests for proxy.New and proxy.Handler by @github-actions[bot] in #8464
• [Repo Assist] perf(logger): reduce allocations in formatLogLine with sync.Pool by @github-actions[bot] in #8493
• docs: add log volume mount to Docker dev examples in CONTRIBUTING.md by @lpcox with @Copilot in #8501
• Upgrade gh aw prerelease by @lpcox in #8515
• fix: remove headers from OTEL JSON stdin config (spec §4.1.3.7 v1.14.0 breaking change) by @lpcox with @Copilot in #8500
• config: use ParseError.ErrorWithUsage() for richer TOML startup diagnostics by @lpcox with @Copilot in #8505
• refactor(logger): extract syncFileWithWarning to eliminate duplicated sync boilerplate by @lpcox with @Copilot in #8504
• refactor: extract newValidationError helper to deduplicate log+return pattern in validation functions by @lpcox with @Copilot in #8503
• refactor(logger): replace 12 boilerplate log-level wrappers with var aliases by @lpcox with @Copilot in #8502
• refactor(rust-guard): extract resolve_integrity_level helper + add promotion/demotion label tests by @lpcox with @Copilot in #8506
• refactor: semantic function clustering improvements (Finding 1–4) by @lpcox with @Copilot in #8507

Full Changelog: v0.3.32...v0.3.33

v0.3.32

What's Changed

• [Repo Assist] fix(guard): add reaction operations to WRITE_OPERATIONS and DIFC rules by @github-actions[bot] in #8235
• [test] Add tests for logger.MarkdownLogger.Log by @github-actions[bot] in #8239
• [test-improver] Improve tests for guard package (normalizeLabelListField) by @github-actions[bot] in #8210
• 🔄 chore: pin MCP Gateway schema URL to v0.81.6 by @github-actions[bot] in #8223
• [log] Add debug logging to guard policy helpers by @github-actions[bot] in #8208
• refactor: Semantic function clustering — split strutil.go, extract githubhttp package, fix validation.go placement, rename logger/common.go by @lpcox with @Copilot in #8244

Full Changelog: v0.3.31...v0.3.32

v0.3.31

What's Changed

• [test] Add tests for logger.ObservedURLDomainsLogger by @github-actions[bot] in #8054
• Migrate jsonschema v5→v6, eliminate fixSchemaBytes() workaround by @lpcox with @Copilot in #8048
• refactor: extract WASM cache helpers and split validation errors/rules by @lpcox with @Copilot in #8056
• [test-improver] Improve tests for server session path-validation by @github-actions[bot] in #8060
• [Repo Assist] refactor: consolidate UnsupportedField and remove dead type normalization by @github-actions[bot] in #8090
• [log] Add debug logging to nonce cache in server/hmac.go by @github-actions[bot] in #8059
• refactor(config): centralize stdio server type helpers by @lpcox with @Copilot in #8098
• rust-guard: eliminate Vec<&Value> in issues arm; extract try_write_json_output helper by @lpcox with @Copilot in #8094
• go-sdk: fix context propagation through SDK calls and add prompt passthrough by @lpcox with @Copilot in #8095
• config: remove dead server type re-normalization in convertStdinServerConfig by @lpcox with @Copilot in #8096
• config: eliminate duplicate body between UnsupportedField and InvalidValue by @lpcox with @Copilot in #8097
• [test-improver] Improve tests for mcp package by @github-actions[bot] in #8109
• [test] Add tests for logger.atomicWriteFile and setupObservedURLDomainsLogger by @github-actions[bot] in #8104
• [log] Add debug logging to config validation error factories by @github-actions[bot] in #8108
• 🔄 chore: update gh-aw schema URL to v0.81.3 by @github-actions[bot] in #8124
• [Repo Assist] refactor(rust-guard): remove PathLabelEntry, use PathLabel directly; simplify secrecy conditions by @github-actions[bot] in #8139
• [test] Add tests for guard.WasmGuard dispatch methods by @github-actions[bot] in #8148
• Deduplicate streamable transport setup and tighten go-sdk upgrade guards by @lpcox with @Copilot in #8151
• 🔄 Pin schema URL to gh-aw v0.81.5 by @github-actions[bot] in #8174
• [test-improver] Improve tests for middleware package by @github-actions[bot] in #8157
• [log] Add debug logging to config/config_stdin.go by @github-actions[bot] in #8156
• Refactor duplicated backend list handling in tool and prompt registration by @lpcox with @Copilot in #8152
• docs: reconcile AGENTS.md package list and jsonschema version by @lpcox with @Copilot in #8154
• Refactor validation, DIFC, tracing, and logger helpers around semantic clustering findings by @lpcox with @Copilot in #8150
• refactor: extract generic executeBackendRequest[T] to eliminate duplicate backend call pattern by @lpcox with @Copilot in #8153
• Refactor MountFormat to use a shared mount validation error helper by @lpcox with @Copilot in #8192
• Refactor ServerFileLogger.Close to reuse shared file-close helper by @lpcox with @Copilot in #8193
• Refactor duplicated DIFC LabeledResource parsing in WASM guard response handling by @lpcox with @Copilot in #8194
• [guard-coverage] Close issue dependency guard gaps in tool classification and DIFC labeling by @lpcox with @Copilot in #8195
• Fix DIFC proxy GHEC data-residency REST API host derivation by @lpcox in #8203
• [test] Add tests for difc.IsSingularReadTool by @github-actions[bot] in #8201

Full Changelog: v0.3.30...v0.3.31

v0.3.30

What's Changed

• [Repo Assist] refactor: extract SortedSetKeys and atomicWriteFile to eliminate code duplication by @github-actions[bot] in #8042
• [test-improver] Improve tests for urlutil package by @github-actions[bot] in #8008
• fix: widen gateway.domain validation to accept RFC-1123 topology hostnames by @lpcox with @Copilot in #8044
• rust-guard: extract first_matching_label helper and add label-check unit tests by @lpcox with @Copilot in #8047
• refactor(mcp): eliminate duplicate cursor cycle detection by delegating paginateAll to PaginateAll by @lpcox with @Copilot in #8049

Full Changelog: v0.3.29...v0.3.30

v0.3.29

What's Changed

• [log] log: add debug logging to mcp/pagination.go by @github-actions[bot] in #7950
• 🔄 chore: pin gh-aw schema URL to v0.80.9 by @github-actions[bot] in #7966
• [Repo Assist] feat(tracing): add GenAIOperationName and GenAIAgentName to mcp.tool_call spans by @github-actions[bot] in #7981
• rust-guard: deduplicate repo fallback resolution and private-flag field checks by @lpcox with @Copilot in #7988
• [test] Add tests for oidc.fetchToken by @github-actions[bot] in #7986
• [test-improver] Improve tests for cmd tracing helpers by @github-actions[bot] in #7951
• Add opt-in observed URL domain audit pipeline for tool responses and write sinks by @lpcox with @Copilot in #7987
• Improve OTel GenAI span semantics and DIFC/rate-limit milestone visibility by @lpcox with @Copilot in #7989
• Deduplicate WASM guards env var constant across guard/server packages by @lpcox with @Copilot in #7991
• Refactor duplicated []string→[]interface{} conversions into strutil.StringsToAny by @lpcox with @Copilot in #7990
• Refactor DIFC tool classification placement and extract middleware content-rewrite helpers by @lpcox with @Copilot in #7992
• Refactor DIFC helper placement and extract response content-rewrite helpers from jqschema middleware by @lpcox with @Copilot in #8000
• docs: add internal/urlutil/ to CONTRIBUTING.md project structure by @lpcox with @Copilot in #8004
• [log] Add debug logging to urlutil/domains by @github-actions[bot] in #8005

Full Changelog: v0.3.28...v0.3.29

v0.3.28

What's Changed

• [log] Add debug logging to proxy/response_transform.go by @github-actions[bot] in #7739
• [test] Add tests for middleware.wrapToolHandler by @github-actions[bot] in #7736
• [test-improver] Improve tests for tracing package by @github-actions[bot] in #7740
• chore: recompile all workflows by @lpcox in #7766
• refactor: extract registrationErrors helper to deduplicate error-tracking in tool registration by @lpcox with @Copilot in #7763
• refactor(config): extract applyCommonServerConfigFields to eliminate stdio/HTTP duplication by @lpcox with @Copilot in #7764
• Refactor duplicate label-agent guard initialization into shared helper by @lpcox with @Copilot in #7758
• Deduplicate Phase 5 DIFC collection filtering across unified server and proxy by @lpcox with @Copilot in #7759
• fix(guard): cover 4 DIFC labeling gaps — get_code_quality_finding, ui_get, add_gpg_key, add_ssh_key by @lpcox with @Copilot in #7765
• Refactor DIFC pre-phase error handling into a shared guard helper by @lpcox with @Copilot in #7760
• rust-guard: simplify default_secrecy conditions; remove lifetime noise from integrity helpers by @lpcox with @Copilot in #7762
• [Repo Assist] refactor(rust-guard): consolidate check_file_secrecy into is_sensitive predicate by @github-actions[bot] in #7786
• refactor: semantic function clustering — reduce cross-concern placement and duplication by @lpcox with @Copilot in #7761
• Validate TOML gateway.port and cover config.example.toml by @lpcox with @Copilot in #7792
• Reduce Repo Assist GitHub MCP tool scope by @lpcox with @Copilot in #7794
• Upgrade wazero to v1.12.0 and harden WASM compilation cache shutdown by @lpcox with @Copilot in #7793
• [test] Add tests for config.validateServerAgainstSchema by @github-actions[bot] in #7798
• Refactor duplicated filter validation and localize RPC/launcher helpers by @lpcox with @Copilot in #7802
• [test-improver] Improve tests for cmd/serve package by @github-actions[bot] in #7805
• [Repo Assist] refactor(httputil): centralize TLS min-version policy by @github-actions[bot] in #7834
• Allow Nightly Schema Updater to complete Rust-guard verification by @lpcox with @Copilot in #7839
• Deduplicate command tracing provider lifecycle wiring by @lpcox with @Copilot in #7840
• Centralize TLS config construction behind shared httputil helpers by @lpcox with @Copilot in #7841
• Add debug logging to shared server handlers by @lpcox with @Copilot in #7843
• Close GitHub guard coverage gaps for 4 CLI-only mutating operations by @lpcox with @Copilot in #7842
• [Repo Assist] fix(httputil): remove duplicate TLS declarations by @github-actions[bot] in #7878
• [test-improver] Improve tests for sys package by @github-actions[bot] in #7848
• Remove duplicate TLS declarations in internal/httputil by @lpcox with @Copilot in #7887
• Remove duplicate TLS helpers and consolidate DIFC/proxy utility functions by @lpcox with @Copilot in #7889
• fix: remove duplicate TLS helpers in httputil; add create-issue safe output to nightly schema updater by @lpcox with @Copilot in #7884
• Deduplicate shared config validation across TOML and stdin paths by @lpcox with @Copilot in #7885
• Refactor ServerFileLogger initialization to eliminate duplicated struct construction by @lpcox with @Copilot in #7886
• Add synthetic guard coverage for CLI-only issue, repository, and Projects v2 mutations by @lpcox with @Copilot in #7888
• [test] Add tests for config.unmarshalStringListOrExpression by @github-actions[bot] in #7895
• Tighten Go Logger workflow scope and validation behavior by @lpcox with @Copilot in #7891
• Raise Test Coverage Improver daily AI credit guardrail by @lpcox with @Copilot in #7890
• Raise Repo Assist AI credit budget to 1500 to stop budget-guardrail failure issues by @lpcox with @Copilot in #7883
• [log] Add debug logging to DIFC policy helper functions by @github-actions[bot] in #6501
• 🔄 chore: pin schema URL to v0.79.8 by @github-actions[bot] in #7920
• [log] Add debug logging to proxy/router.go by @github-actions[bot] in #7902
• [test-improver] Improve tests for launcher connection pool by @github-actions[bot] in #7903
• guard: add 11 CLI-only GitHub operations to guard coverage by @lpcox with @Copilot in #7935
• [rust-guard] Hoist commit SHA extraction in commit_integrity and add default-branch commit-context coverage by @lpcox with @Copilot in #7939
• refactor: co-locate sys tool handlers and extract savePayload to payload.go by @lpcox with @Copilot in #7934
• refactor(logger): extract emit helper to eliminate Printf/Print duplication by @lpcox with @Copilot in #7936
• refactor: add strutil.InterfaceToIntString to deduplicate JSON numeric extraction by @lpcox with @Copilot in #7937
• [test] Add tests for guard.FindServerWASMGuardFile and GetWASMGuardsRootDir by @github-actions[bot] in #7941
• feat(guard): wazero security hardening — memory cap, backend call limit, interpreter tests by @lpcox with @Copilot in #7938

Full Changelog: v0.3.27...v0.3.28

v0.3.27

What's Changed

• [log] Add debug logging to config/config_tracing.go by @github-actions[bot] in #7599
• [test-improver] Improve tests for mcptest example package by @github-actions[bot] in #7600
• [Repo Assist] refactor: replace strings.SplitN(x, sep, 2) with strings.Cut by @github-actions[bot] in #7628
• [test] Add tests for config.StdinGatewayConfig.UnmarshalJSON and validateAgainstCustomSchema by @github-actions[bot] in #7597
• rust-guard: dedupe unsafe output write-back and unify search scope labeling arms by @lpcox with @Copilot in #7629
• Deduplicate LogMarshaledForDebug callback wiring with formatted helper by @lpcox with @Copilot in #7631
• feat(cmd): cobra improvements from go-fan module review by @lpcox with @Copilot in #7630
• refactor(guard): extract RunLabelAgentForAgent to eliminate duplicate LabelAgent init pattern by @lpcox with @Copilot in #7632
• refactor: semantic function clustering — collaborator helpers, SessionSuffix, middleware split, AgentTagsSnapshot by @lpcox with @Copilot in #7633
• [test] Add tests for config.AllowOnlyPolicy.UnmarshalJSON by @github-actions[bot] in #7639
• Support GitHub MCP Server v1.3.0: PR commits routing, get_file_blame spec, and guard docs by @lpcox with @Copilot in #7641
• rust-guard: extract extract_item_number_opt and add MinIntegrity::build_labels by @lpcox with @Copilot in #7679
• [test-improver] Improve tests for auth package by @github-actions[bot] in #7650
• Improve gojq usage: ValueError handling, WithVariables, filter cache, inferSchema decoupling, any alias by @lpcox with @Copilot in #7680
• docs: document MCP_GATEWAY_SHUTDOWN_TIMEOUT environment variable by @lpcox with @Copilot in #7683
• [Repo Assist] fix(run_containerized): skip port mapping validation for host-networked containers by @github-actions[bot] in #7684
• fix(nightly-schema-updater): switch model from deprecated claude-sonnet-4.6 to gpt-5.4 by @lpcox with @Copilot in #7682
• Fix Large Payload Tester: move secret to top level, harden agent prompt by @lpcox with @Copilot in #7681
• [test] Add tests for auth.GenerateRandomAgentID by @github-actions[bot] in #7691
• Refactor HTTP transport auth helpers and simplify sys/tracing boundaries by @lpcox with @Copilot in #7693
• [log] Add debug logging to internal/mcp/helpers.go by @github-actions[bot] in #7695
• [test-improver] Improve tests for proxy/graphql_rewrite by @github-actions[bot] in #7696
• Set explicit supported Copilot model for GitHub Guard Coverage Checker by @lpcox with @Copilot in #7699
• Add debug instrumentation to mcpresult content parsing and extraction by @lpcox with @Copilot in #7698
• Implement refusal-labels guard policy and align health specVersion with MCP Gateway v1.14.0 by @lpcox with @Copilot in #7700
• fix: recompile duplicate-code-detector workflow by @lpcox with @Copilot in #7697

Full Changelog: v0.3.26...v0.3.27

v0.3.26

What's Changed

• [test] Add tests for strutil.DeepCloneJSON by @github-actions[bot] in #7232
• [log] config/config_stdin: add debug logging to helper functions by @github-actions[bot] in #7239
• [Repo Assist] refactor(launcher): eliminate double config lookup in GetOrLaunchForSession by @github-actions[bot] in #7268
• [test-improver] Improve tests for strutil package (DeepCloneJSON) by @github-actions[bot] in #7240
• Tighten wazero guard lifecycle semantics and document start suppression by @Copilot in #7275
• Refactor launcher connection error logging into internal/launcher by @Copilot in #7276
• Reconcile CONTRIBUTING.md with actual package layout and direct dependency surface by @Copilot in #7278
• Refactor dead helpers and trivial guard wrappers; consolidate session ID utility by @Copilot in #7279
• [test-improver] Improve tests for httputil package (endpoint helpers) by @github-actions[bot] in #7286
• Add direct repo-scope fallback coverage in Rust guard by @Copilot in #7274
• [Repo Assist] refactor(rust-guard): extract short_sha helper to fix 5-site duplication and 7-vs-8 inconsistency by @github-actions[bot] in #7316
• refactor: replace filteredServerCache with generic syncutil.TTLCache by @Copilot in #7277
• [test] Add tests for difc.BuildReflectResponse and tagsToStrings by @github-actions[bot] in #7322
• Refactor duplicated first-content-item rewrite logic in rewriteEnvelopeTextPayload by @Copilot in #7324
• Reconcile CONTRIBUTING.md with actual strutil deep-clone location by @Copilot in #7326
• Clarify strutil scope for time/duration formatting helpers by @Copilot in #7327
• Tighten testify fatal assertions in dependent test paths by @Copilot in #7323
• Extract shared MCP content-slice normalization by @Copilot in #7325
• fix: resolve test deadlock and integration timeout by @lpcox in #7330
• fix: resolve test deadlock/timeout + recompile workflows by @lpcox in #7337
• fix(run.sh): use MCP_GATEWAY_AGENT_ID with deprecated fallback for MCP_GATEWAY_API_KEY by @Copilot in #7342
• refactor: consolidate over-fragmented files in internal/ packages by @Copilot in #7343
• [Repo Assist] refactor(rust-guard): add MinIntegrity::from_policy_str to unify duplicate parsers by @github-actions[bot] in #7377
• refactor(mcp): remove redundant entry-level logs and cross-reference list* methods by @Copilot in #7384
• Refactor auth/HMAC request rejection call sites to remove duplicated constants by @Copilot in #7383
• Handle wrapped jsonschema validation errors in config schema formatting by @Copilot in #7385
• rust-guard: add MinIntegrity::from_policy_str to unify integrity parsers + extract_repo_from_item tests by @Copilot in #7386
• [test-improver] Improve tests for mcpresult package by @github-actions[bot] in #7345
• 🔄 chore: update schema URL to v0.79.4 by @github-actions[bot] in #7362
• chore: upgrade workflows to gh-aw v0.79.6 by @lpcox in #7432
• refactor: move outlier functions to semantically correct files/packages by @Copilot in #7394
• 🔄 chore: update schema URL to v0.79.6 by @github-actions[bot] in #7410
• fix: increase max-ai-credits default for duplicate-code-detector workflow by @Copilot in #7424
• Add unit tests for LogUnrecognizedEndpointPassthrough by @Copilot in #7421
• rust-guard: delegate parse_integrity to MinIntegrity::from_policy_str + add response_items tests by @Copilot in #7422
• refactor: go-sdk module review quick wins (5 items from #7416) by @Copilot in #7423
• guard: cover get_file_blame, create_discussion, edit_discussion by @Copilot in #7425
• Raise Repo Assist fallback AI credit cap to prevent guardrail-triggered agent aborts by @Copilot in #7440
• [test] Add tests for config.ValidateStringArrayField and config.IsValidAllowOnlyReposValue by @github-actions[bot] in #7443
• feat: OTLP multi-endpoint fan-out via GH_AW_OTLP_ENDPOINTS by @Copilot in #7446
• [Repo Assist] fix(tracing): isolate provider tests from ambient GH_AW_OTLP_ENDPOINTS by @github-actions[bot] in #7478
• [test-improver] Improve tests for mcp package: add PaginateAll coverage by @github-actions[bot] in #7451
• refactor: fix package placement and consolidate micro-files per semantic clustering analysis by @Copilot in #7483
• Reconcile proxy-mode coverage docs with current implementation by @Copilot in #7484
• Refactor fanout exporter concurrent dispatch by @Copilot in #7486
• Handle JSON-form GH_AW_OTLP_ENDPOINTS in tracing provider and isolate inherited env in provider tests by @Copilot in #7482
• [WIP] Fix Go Logger Enhancement workflow failure by @Copilot in #7485
• [test] Add tests for syncutil.TTLCache.GetOrCreate with maxSize <= 0 by @github-actions[bot] in #7491
• [test-improver] Improve tests for tracing package by @github-actions[bot] in #7497
• 🔄 chore: update schema URL to gh-aw v0.79.8 by @github-actions[bot] in #7512
• [test] Add tests for config.normalizeAgentID, effectiveAgentID, and validateToolResponseFilters by @github-actions[bot] in #7530
• [Repo Assist] perf(sanitize): pre-compile separator regex; use json.Compact in SanitizeJSON by @github-actions[bot] in #7528
• refactor(tracing): extract private startSpan helper to eliminate boilerplate in span factory functions by @Copilot in #7535
• refactor: semantic function clustering — consolidate rate-limit utils, httputil, and logger helpers by @Copilot in #7532
• docs: reconcile OTLP fan-out env var and sanitize package visibility by @Copilot in #7534
• tracing: fix StartProxyForwardSpan dead code by adding serverAddress param by @Copilot in #7536
• fix(tracing): align semconv to v1.41.0, preserve resource attributes on schema-URL conflict by @Copilot in #7531
• [test-improver] Improve tests for httputil package by @github-actions[bot] in #7546
• 🔄 chore: update schema URL to v0.79.9 by @github-actions[bot] in #7562
• refactor: document strict vs. lenient content-item semantics in convertMapToCallToolResult by @Copilot in #7571
• docs: add POST /close to API Endpoints section in README by @Copilot in #7572
• Deduplicate logger startup and shutdown wiring with shared registries by @Copilot in #7575
• refactor: extract validateW3CHexID to eliminate duplicate W3C hex-ID validation by @Copilot in #7573
• [rust-guard] Deduplicate item_number extraction and add direct commit_integrity coverage by @Copilot in #7577
• refactor(mcp): eliminate listTools/listResources/listPrompts wrapper methods by @Copilot in #7574
• [Repo Assist] test: upgrade assert.NoError to require.NoError where result is used downstream by @github-actions[bot] in #7591
• Fix missing OTel span error recording in proxy handler; consolidate to semconv/v1.41.0 by @Copilot in #7576

Full Changelog: v0.3.25...v0.3.26