Fix permissions syntax in workflow YAML#2582

Closed

Seli-Kasela wants to merge 311 commits into

github:compare-scopesfrom

Seli-Kasela:SeliKasela

This pull request is big! We're only showing the most recent 250 commits

Commits on Jan 26, 2026

Fix typo in OpenAI Codex installation guide link

leereilly
authored and
SamMorrowDrums
committed
Update Go version requirement in mcpcurl to 1.24

alexandear
authored and
SamMorrowDrums
committed
docs: add Windows notes for Claude MCP HTTP setup

loktar00
authored and
SamMorrowDrums
committed
remove old flags

mattdholloway
authored and
SamMorrowDrums
committed
adding correct insiders-mode name

tonytrg
authored and
SamMorrowDrums
committed
fix naming

tonytrg
authored and
SamMorrowDrums
committed
Fix generateInstructions to use only enabled toolsets
SamMorrowDrums
committed
Update mcp-server-diff action to v2.2.0
SamMorrowDrums
committed
Add more toolset configurations to mcp-diff workflow
SamMorrowDrums
committed
build(deps): bump SamMorrowDrums/mcp-server-diff from 2.2.0 to 2.3.5

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump golang from 1.25.4-alpine to 1.25.6-alpine

dependabot[bot]
authored and
SamMorrowDrums
committed

Commits on Jan 27, 2026

add line length truncate buffer

mattdholloway
authored and
SamMorrowDrums
committed
consolidate buffer logic

mattdholloway
authored and
SamMorrowDrums
committed
Refactor buffer processing for clarity and add edge case tests
SamMorrowDrums
committed

Commits on Jan 28, 2026

docs: add Copilot CLI installation guide

GeekTrainer
authored and
SamMorrowDrums
committed
Update docs/installation-guides/install-copilot-cli.md

authored and
SamMorrowDrums
committed
Apply suggestion from @GeekTrainer

GeekTrainer
authored and
SamMorrowDrums
committed

Commits on Feb 3, 2026

Commits on Feb 4, 2026

Add reply to PR comment (#1856)

authored

Commits on Feb 6, 2026

Commits on Feb 9, 2026

Improve Copilot CLI installation doc (#1972)
kerobbi
authored
build(deps): bump github.com/modelcontextprotocol/go-sdk

dependabot[bot]
authored and
SamMorrowDrums
committed
chore: regenerate license files

github-actions[bot]
authored and
SamMorrowDrums
committed
build(deps): bump golang from 1.25.6-alpine to 1.25.7-alpine

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.5

dependabot[bot]
authored and
SamMorrowDrums
committed
chore: regenerate license files

github-actions[bot]
authored and
SamMorrowDrums
committed
build(deps): bump reproducible-containers/buildkit-cache-dance

dependabot[bot]
authored and
SamMorrowDrums
committed
Fix buildkit-cache-dance action to use cache-map instead of deprecated cache-source

Copilot
and
SamMorrowDrums
committed

Commits on Feb 10, 2026

build(deps): bump github.com/josephburnett/jd/v2 to v2.4.0

alexandear
authored and
SamMorrowDrums
committed
Remove old non-consolidated actions and Projects toolsets

authored and
SamMorrowDrums
committed
No code changes (final verification complete)

authored and
SamMorrowDrums
committed
Fix: Remove test binary and update .gitignore to exclude *.test files

authored and
SamMorrowDrums
committed
Revert .gitignore changes

authored and
SamMorrowDrums
committed
fix ff hangover from old code

mattdholloway
authored and
SamMorrowDrums
committed
fix test

mattdholloway
authored and
SamMorrowDrums
committed

Commits on Feb 16, 2026

Token scopes context (#1997)
omgitsads
authored

Commits on Feb 17, 2026

Commits on Feb 18, 2026

Commits on Feb 19, 2026

fix for -1 in tailLines (#2047)
mattdholloway
authored

Commits on Feb 21, 2026

build(deps): bump hono

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump ajv

dependabot[bot]
authored and
SamMorrowDrums
committed

Commits on Feb 25, 2026

Commits on Feb 26, 2026

Reduce context usage for list_issues (#2098)
kerobbi
authored

Commits on Mar 3, 2026

Stricter matching for github.com and ghe.com URLs

almaleksia
authored and
SamMorrowDrums
committed

Commits on Mar 4, 2026

Commits on Mar 5, 2026

Commits on Mar 6, 2026

Add JavaScript support to code scanning workflow (#2157)
SamMorrowDrums
authored
Skip MCP Apps UI form when update includes a state change

authored and
SamMorrowDrums
committed
Use key presence check instead of OptionalParam in UI gate

authored and
SamMorrowDrums
committed
build(deps): bump reproducible-containers/buildkit-cache-dance

dependabot[bot]
authored and
SamMorrowDrums
committed

Commits on Mar 10, 2026

build(deps): bump docker/build-push-action from 6.18.0 to 6.19.2

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump golang from 1.25.7-alpine to 1.25.8-alpine

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0

dependabot[bot]
authored and
SamMorrowDrums
committed

Commits on Mar 13, 2026

feat: add resolve/unresolve review thread methods

authored and
SamMorrowDrums
committed

Commits on Mar 24, 2026

feat: add path, since, and until filters to list_commits

Luc45
authored and
SamMorrowDrums
committed
docs: regenerate README with new list_commits parameters

Luc45
authored and
SamMorrowDrums
committed

Commits on Mar 29, 2026

fix: additionalProperties in push_files schema (#2011)

sierikov
authored and
SamMorrowDrums
committed

Commits on Mar 31, 2026

Initial OSS logging adapter for http (#2008)

authored

Commits on Apr 2, 2026

Commits on Apr 13, 2026

feat(http): enforce static CLI flags as upper bound for per-request filtering

SamMorrowDrums
and
Copilot
committed

Commits on Apr 14, 2026

OSS granular PRs and issues toolsets (#2306)

authored

Commits on Apr 15, 2026

build(deps): bump distroless/base-debian12 from `937c7ea` to `9dce90e`

dependabot[bot]
authored and
SamMorrowDrums
committed
feat(http): implement HeaderAllowedFeatureFlags for X-MCP-Features header validation

mattdholloway
authored and
SamMorrowDrums
committed
Apply suggestion from @Copilot

authored and
SamMorrowDrums
committed
feat(http): update knownFeatureFlags to use HeaderAllowedFeatureFlags() and add tests for feature flag validation

mattdholloway
authored and
SamMorrowDrums
committed
deps: upgrade modelcontextprotocol/go-sdk to v1.5.0

SamMorrowDrums
and
Copilot
committed
chore: regenerate license files

github-actions[bot]
authored and
SamMorrowDrums
committed
docs: fix stale Dockerfile Go version in copilot-instructions.md

SamMorrowDrums
and
Copilot
committed
build(deps): bump docker/login-action from 3.7.0 to 4.0.0

dependabot[bot]
authored and
SamMorrowDrums
committed
docs: fix broken link to tool renaming guide in README

authored and
SamMorrowDrums
committed
build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0

dependabot[bot]
authored and
SamMorrowDrums
committed

Commits on Apr 16, 2026

build(deps): bump github.com/josephburnett/jd/v2 from 2.4.0 to 2.5.0

dependabot[bot]
authored and
SamMorrowDrums
committed
chore: regenerate license files

github-actions[bot]
authored and
SamMorrowDrums
committed
build(deps): bump golang from 1.25.8-alpine to 1.25.9-alpine

dependabot[bot]
authored and
SamMorrowDrums
committed
refactor: migrate MCP Apps from insiders mode to feature flag

SamMorrowDrums
and
Copilot
committed
docs: add MCP Apps feature flag configuration section

SamMorrowDrums
and
Copilot
committed
feat: add granular tool to set issue field values

mattdholloway
authored and
SamMorrowDrums
committed
Enforce exactly one value key per field in set_issue_fields (#2339)

authored and
SamMorrowDrums
committed

Commits on Apr 21, 2026

Fix Content-Type rejection for application/json; charset=utf-8

authored and
SamMorrowDrums
committed
Bump go-sdk to 27f29c1 (Content-Type media type parsing fix)

authored and
SamMorrowDrums
committed
Remove NormalizeContentType middleware workaround

authored and
SamMorrowDrums
committed
chore: regenerate license files

github-actions[bot]
authored and
SamMorrowDrums
committed
Apply suggestion from @Copilot

authored and
SamMorrowDrums
committed
chore: run go mod tidy

authored and
SamMorrowDrums
committed
chore: revert unintended handler test formatting

authored and
SamMorrowDrums
committed
Allow browser-based MCP clients via CORS and cross-origin bypass

RossTarrant
authored and
SamMorrowDrums
committed
build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump actions/github-script from 8 to 9

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump golang from `04d017a` to `5caaf1c`

dependabot[bot]
authored and
SamMorrowDrums
committed

Commits on Apr 22, 2026

Fix set_issue_fields mutation: use correct inline fragments for IssueFieldValue union (#2366)
iulia-b
authored

Commits on Apr 23, 2026

Fix lockdown mode permission check (#2361)

kerobbi
and
SamMorrowDrums
authored

Commits on Apr 30, 2026

improve dependabot error message (#2375)
aashah
authored

Commits on May 6, 2026

Add Xcode installation guide for Codex and Claude Agent

RossTarrant
authored and
SamMorrowDrums
committed
Enhance Xcode setup documentation for Claude Agent and update troubleshooting notes

RossTarrant
authored and
SamMorrowDrums
committed

Commits on May 8, 2026

fix(mcp-apps): defer _meta.ui strip to per-request RegisterTools (#2446)

mattdholloway
and
Copilot
authored

Commits on May 11, 2026

Commits on May 12, 2026

Commits on May 13, 2026

Commits on May 14, 2026

Commits on May 15, 2026

Commits on May 18, 2026

Commits on May 19, 2026

Commits on May 20, 2026

Commits on May 21, 2026

Commits on May 25, 2026

Fix permissions syntax in workflow YAML
Seli-Kasela
authored

Commits on May 26, 2026

Adding suggest bool flag to suggest type changes to an issue (#2548)
boazreicher
authored

Commits on May 27, 2026

feat(http): ignore proxy forwarding headers by default

SamMorrowDrums
and
Copilot
committed
docs: update CLI command for adding GitHub PAT in README

RossTarrant
authored and
SamMorrowDrums
committed
feat(issue-fields): support issue_fields in issue_write using fullDatabaseId

authored and
SamMorrowDrums
committed
Fix field_option_name to pass option name to REST API, not DB ID - return minimal fields

kelsey-myers
authored and
SamMorrowDrums
committed
docs update

kelsey-myers
authored and
SamMorrowDrums
committed
refactor(issue-fields): unexport IssueWriteFieldInput, fix issue_fields schema with oneOf

kelsey-myers
authored and
SamMorrowDrums
committed
docs: regenerate after issue_fields schema update

kelsey-myers
authored and
SamMorrowDrums
committed
schema: strict additionalProperties and typed value in issue_fields items

kelsey-myers
authored and
SamMorrowDrums
committed
add delete support and merge logic

iulia-b
authored and
SamMorrowDrums
committed
fix tests

kelsey-myers
authored and
SamMorrowDrums
committed

Commits on May 28, 2026

Boazreicher/add suggest to labels and issue fields (#2557)

boazreicher
and
Copilot
authored
docs: clarify auth in Codex CLI instructions

RossTarrant
authored and
SamMorrowDrums
committed
Add consistency to code block language

authored and
SamMorrowDrums
committed
feat: gate issue_write and get_issue behind remote_mcp_issue_fields flag

SamMorrowDrums
and
Copilot
committed
refactor: inline IssueWrite/LegacyIssueWrite as full duplicates

SamMorrowDrums
and
Copilot
committed
test: add Test_GetIssue_FieldValues_FlagOn to cover the enrichment path

SamMorrowDrums
and
Copilot
committed
fix: make mergeIssueFieldValues output order deterministic

SamMorrowDrums
and
Copilot
committed
Reduce project item response size

authored and
SamMorrowDrums
committed
fix: extract text-content for option name and iteration title in map path

SamMorrowDrums
and
Copilot
committed
build(deps): bump node from `e71ac5e` to `7c6af15`

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump actions/setup-go from 5 to 6

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump docker/login-action from 4.1.0 to 4.2.0

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump docker/build-push-action from 7.1.0 to 7.2.0

dependabot[bot]
authored and
SamMorrowDrums
committed
build(deps): bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0

dependabot[bot]
authored and
SamMorrowDrums
committed
chore: regenerate license files

github-actions[bot]
authored and
SamMorrowDrums
committed
deps: bump go-sdk to v1.6.1 and drop CrossOriginProtection workaround

SamMorrowDrums
and
Copilot
committed
I want to enable only ifc (#2565)
JoannaaKL
authored

Commits on May 29, 2026

test(github): enforce explicit ReadOnlyHint on every mcp.Tool literal

jluocsa
authored and
SamMorrowDrums
committed
test(github): address reviewer feedback on ReadOnlyHint check

jluocsa
authored and
SamMorrowDrums
committed
refactor(toolvalidation): extract ReadOnlyHint scanner into reusable package

SamMorrowDrums
and
Copilot
committed
Register MCP App UI resources in shared server constructor

SamMorrowDrums
and
Copilot
committed
lockdown mode: remove RepoAccessCache singleton and isolate viewer state per instance

kerobbi
authored and
SamMorrowDrums
committed
Strip _meta.ui when client lacks UI capability

authored and
SamMorrowDrums
committed
Align UI resources with MCP Apps 2026-01-26 polish recommendations

authored and
SamMorrowDrums
committed
Adopt MCP Apps 2026-01-26 view-side capabilities

authored and
SamMorrowDrums
committed
feat: add create_project and create_iteration_field methods to projects_write

committed

Commits on May 30, 2026

fix: restore thread id in get_review_comments response

omid-ant
authored and
SamMorrowDrums
committed
docs: add installation guides for Zed and OpenCode

jluocsa
authored and
SamMorrowDrums
committed
docs: improve Claude installation guide with Windows PowerShell support

Emily Chen
authored and
SamMorrowDrums
committed
docs: address review feedback on env-var examples

Copilot
authored and
SamMorrowDrums
committed
docs: clarify that / uses default toolset in remote MCP server

korobitsin
authored and
SamMorrowDrums
committed
docs: fix remote default toolset generation

korobitsin
authored and
SamMorrowDrums
committed
docs: also advertise /x/all meta toolset

Copilot
authored and
SamMorrowDrums
committed
Merge branch 'github:main' into main
Seli-Kasela
authored

Commits on May 31, 2026