137 Commits

Author SHA1 Message Date
dependabot[bot] b1318ab92a build(deps): bump actions/github-script from 8 to 9
Bumps [actions/github-script](https://github.com/actions/github-script) from 8 to 9.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v8...v9)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-21 16:33:03 +02:00
dependabot[bot] ffe4e6bdc4 build(deps): bump docker/build-push-action from 7.0.0 to 7.1.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.0.0 to 7.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/d08e5c354a6adb9ed34480a06d141179aa583294...bcafcacb16a39f128d818304e6c9c0c18556b85f)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-21 16:32:06 +02:00
dependabot[bot] 68e7371fe8 build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.0.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/8d2750c68a42422c14e847fe6c8ac0403b4cbd6f...4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 01:30:10 +02:00
dependabot[bot] f21d66269f build(deps): bump docker/login-action from 3.7.0 to 4.0.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.7.0 to 4.0.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/c94ce9fb468520275223c153574b00df6fe4bcc9...b45d80f862d83dbcd57f89517bcf500b2ab88fb2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-16 01:26:51 +02:00
Sam Morrow 76d68b476e docs: fix stale Dockerfile Go version in copilot-instructions.md
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-16 01:08:44 +02:00
Matt Holloway 15315b9913 Add MCP Insiders Feedback issue template (#2280)
* Update issue templates

* Update insiders-feedback.md
2026-04-02 10:17:17 +01:00
dependabot[bot] b1575edfef build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0
CodeQL / Analyze (go) (push) Has been cancelled
CodeQL / Analyze (actions) (push) Has been cancelled
CodeQL / Analyze (javascript) (push) Has been cancelled
Build and Test Go Project / build (macos-latest) (push) Has been cancelled
Build and Test Go Project / build (ubuntu-latest) (push) Has been cancelled
Build and Test Go Project / build (windows-latest) (push) Has been cancelled
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.10.0 to 6.0.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/c299e40c65443455700f0fdfc63efafe5b349051...030e881283bb7a6894de51c315a6bfe6a94e05cf)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-16 20:02:44 +01:00
dependabot[bot] b6ba673ea1 build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.19.2 to 7.0.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/10e90e3645eae34f1e60eeb005ba3a3d33f178e8...d08e5c354a6adb9ed34480a06d141179aa583294)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-16 19:49:45 +01:00
dependabot[bot] 1da41fa694 build(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/faadad0cce49287aee09b3a48701e75088a2c6ad...ba7bc0a3fef59531c69a25acd34668d6d3fe6f22)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 09:14:18 +01:00
dependabot[bot] 98099e6ae4 build(deps): bump docker/build-push-action from 6.18.0 to 6.19.2
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.18.0 to 6.19.2.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/263435318d21b8e681c14492fe198d362a7d2c83...10e90e3645eae34f1e60eeb005ba3a3d33f178e8)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 6.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-10 01:48:06 +01:00
dependabot[bot] 486e9fedb6 build(deps): bump reproducible-containers/buildkit-cache-dance
Bumps [reproducible-containers/buildkit-cache-dance](https://github.com/reproducible-containers/buildkit-cache-dance) from 3.3.1 to 3.3.2.
- [Release notes](https://github.com/reproducible-containers/buildkit-cache-dance/releases)
- [Commits](https://github.com/reproducible-containers/buildkit-cache-dance/compare/6f699a72a59e4252f05a7435430009b77e25fe06...1b8ab18fbda5ad3646e3fcc9ed9dd41ce2f297b4)

---
updated-dependencies:
- dependency-name: reproducible-containers/buildkit-cache-dance
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 15:36:57 +01:00
Sam Morrow 7848af8f92 Add JavaScript support to code scanning workflow (#2157) 2026-03-06 11:57:00 +00:00
JoannaaKL eec84f73b5 Improve AI issue triage prompts to detect unfilled templates (#2030)
- Add explicit detection of unmodified template text and placeholders
- Add detection of meaningless/spam-like titles
- Add 'Invalid' assessment category for spam/test issues
- Add label recommendations (waiting-for-reply, invalid)
- Strengthen 'Missing Details' criteria with specific examples
- Add guidance to be specific about which sections need actual content

This addresses issues like #2029 where template text was not replaced
with actual information but was not flagged as missing details.
2026-02-18 11:20:27 +01:00
Matt Holloway e83440db58 Add initial PoC for MCP Apps for select tools under Insiders (#1957)
* PoC full flow (hello world example)

* add avatar resource domain

* add postmessage logic and richer UI

* add create issue ui

* update ui for issue creatioon

* fix

* ignore banner

* update docs after rebase

* update toolsnap for get_me

* new UI changes

* update docs

* update workflows that need ui build

* add UI diff

* fix build ui step for windows runners to use git bash

* fix UI diff

* refactor issue creation UI

* add AvatarWithFallback component and update UserCard to use it; enhance CreateIssueApp to manage existing issue data

* fix formatting of button labels

* add create pull request functionality with UI support and insiders

* update docs

* add test for insiders mode handling in ServerTool schema

* remove `show_ui` param for now

* make insiders mode metadata stripping generic

* remove ui diff

* fix CI

* remove redundant mention of old app name

* add node types to fix ide issues for ts code

* remove unused TriangleDownIcon import

* update @primer/behaviors and electron-to-chromium versions in package-lock.json

* add check to ensure base and head are not the same when creating a new PR

* remove old show_ui

* fix gitignore for dist so builds dont break

* add tests for insiders mode handling and metadata stripping in ServerTool

* remove unused state and components from CreatePRApp

* fix ui build

* update docker build to fix npm issue

* remove reference to show_ui

* allow insiders to work for non-ui features

* formalise insiders inventory support

* update docs

* fix overflow issues and replace pull request dropdown with matching UI from dotcom

* fix createpullrequest test

* consolidate fetching tools under `ui_get` tool to remove toolset deps

* fix issue data prefill in issue_write form

* fix link component when updating issue

* fix avatar URL

* fix broken issue update logic

* remove dbg

* fix for new GetFlags

* revert to original required fields for create_pull_request

* fix for UI form submission

* Simplify MCP App UIs for basic branch

Remove advanced features to be kept in mcp-ui-apps-advanced:
- Strip labels, assignees, milestones, issue types, repo picker from issue-write
- Strip repo picker, branch selectors from pr-write
- Delete ui_get tool (ui_tools.go, ui_tools_test.go, ui_get.snap)
- Remove UIGet registration from tools.go

Basic forms retain: title, body, submit with _ui_submitted,
draft/regular split button (PR), MarkdownEditor, and SuccessView.

* Fix header spacing in issue-write and pr-write UIs

Add proper spacing between icon, title text, and repo name in the
header bar for both issue-write and create-pull-request forms.

* fix UI spacing

* Add insiders flag to User-Agent header

When InsidersMode is enabled, append '(insiders)' to the User-Agent
string sent with GitHub API requests, enabling server-side adoption
tracking.

* address ui feedback

* added ui/no-ui support

* improve active state UI for write and preview button. make padding consistent in textarea

* return to prev non ui check

* use hardcoded client name check for ui support

* linter fixes

* merge fix

* linter fix 2

---------

Co-authored-by: tommaso-moro <tommaso-moro@github.com>
2026-02-12 13:03:00 +00:00
Oleksandr Redko 1b829dc736 Update .github/workflows/lint.yml
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-12 12:58:49 +01:00
Oleksandr Redko 505d5dc33a refactor: modernize code with modernize and intrange 2026-02-12 12:58:49 +01:00
copilot-swe-agent[bot] cd1b5a203a Fix lint CI: use Go 1.25 to match golangci-lint v2.5.0
Co-authored-by: SamMorrowDrums <4811358+SamMorrowDrums@users.noreply.github.com>
2026-02-11 11:32:07 +01:00
copilot-swe-agent[bot] ee74b47d91 Fix buildkit-cache-dance action to use cache-map instead of deprecated cache-source
Co-authored-by: SamMorrowDrums <4811358+SamMorrowDrums@users.noreply.github.com>
2026-02-09 22:43:02 +01:00
dependabot[bot] 30765decab build(deps): bump reproducible-containers/buildkit-cache-dance
Bumps [reproducible-containers/buildkit-cache-dance](https://github.com/reproducible-containers/buildkit-cache-dance) from 2.1.4 to 3.3.1.
- [Release notes](https://github.com/reproducible-containers/buildkit-cache-dance/releases)
- [Commits](https://github.com/reproducible-containers/buildkit-cache-dance/compare/4b2444fec0c0fb9dbf175a96c094720a692ef810...6f699a72a59e4252f05a7435430009b77e25fe06)

---
updated-dependencies:
- dependency-name: reproducible-containers/buildkit-cache-dance
  dependency-version: 3.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-09 22:43:02 +01:00
dependabot[bot] c1f8d4cd06 build(deps): bump docker/login-action from 3.6.0 to 3.7.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/5e57cd118135c172c3672efd75eb46360885c0ef...c94ce9fb468520275223c153574b00df6fe4bcc9)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-03 16:40:31 +00:00
dependabot[bot] 53a5f606ec build(deps): bump SamMorrowDrums/mcp-server-diff from 2.2.0 to 2.3.5
Bumps [SamMorrowDrums/mcp-server-diff](https://github.com/sammorrowdrums/mcp-server-diff) from 2.2.0 to 2.3.5.
- [Release notes](https://github.com/sammorrowdrums/mcp-server-diff/releases)
- [Commits](https://github.com/sammorrowdrums/mcp-server-diff/compare/v2.2.0...v2.3.5)

---
updated-dependencies:
- dependency-name: SamMorrowDrums/mcp-server-diff
  dependency-version: 2.3.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-01-26 19:31:45 +01:00
Sam Morrow b1a2b741e8 Add more toolset configurations to mcp-diff workflow
Add toolsets-context and toolsets-issues,context configurations to
improve test coverage for instruction generation with different
toolset combinations.
2026-01-26 18:27:22 +01:00
Sam Morrow e2640de31f Update mcp-server-diff action to v2.2.0
Updates to v2.2.0 which includes server instructions diff support for
detecting issues like #1897.
2026-01-26 18:27:22 +01:00
Oleksandr Redko b1d4aa34e5 chore: workaround LF for Windows 2026-01-26 15:25:49 +01:00
Oleksandr Redko 1410dc1b93 chore: remove unused github.com/fatih/color 2026-01-26 15:25:49 +01:00
Sam Morrow afc2396a0c Fix mcp-diff workflow triggers
Add push triggers to run on:
- Pushes to main branch (catches merges)
- Tag pushes (v*) for release comparisons against previous tags

The pull_request trigger alone doesn't run when commits are pushed
to PR branches via merge or direct push. Adding push triggers ensures
the diff runs in all expected scenarios.
2026-01-23 00:59:27 +01:00
Sam Morrow e559a36060 Rename workflow for mcp-server-diff action 2026-01-23 00:44:12 +01:00
Sam Morrow adfd83b12a Rename to mcp-diff.yml (action renamed to mcp-server-diff) 2026-01-23 00:44:12 +01:00
Sam Morrow 55d22d8320 chore: update mcp-conformance-action to v2 for security fixes 2026-01-23 00:44:12 +01:00
Sam Morrow f850ce31a4 chore: update mcp-conformance-action to v2.3.2 2026-01-23 00:44:12 +01:00
Sam Morrow f244b8a5f2 chore: update mcp-conformance-action to v2.3.0 2026-01-23 00:44:12 +01:00
Sam Morrow 4bbd84e74c ci: upgrade mcp-conformance-action to v2.2.0
v2.2.0 adds automatic HTTP server lifecycle management and
improved documentation for transport configuration.
2026-01-23 00:44:12 +01:00
Sam Morrow e1cde287d4 chore: update conformance action to v2.0.2 with Zod schema fix
Fixes custom message validation error:
'v3Schema.safeParse is not a function'
2026-01-23 00:44:12 +01:00
Sam Morrow a236b66465 chore: update conformance action to v2.0.1 with transport fix 2026-01-23 00:44:12 +01:00
Sam Morrow 2c2613c436 ci: update to mcp-conformance-action@v2.0.0 2026-01-23 00:44:12 +01:00
Sam Morrow bd541e3b0c chore: update mcp-conformance-action to v1.4.6
Uses named pipes for reliable server startup detection instead of
a blind sleep, fixing intermittent failures on slow startup.
2026-01-23 00:44:12 +01:00
Sam Morrow 5ab8874708 chore: update mcp-conformance-action to v1.4.4
Removes stderr log capture entirely for cleaner output and smaller artifacts.
2026-01-23 00:44:12 +01:00
Sam Morrow aec726bd7b chore: update mcp-conformance-action to v1.4.3
Removes embedded JSON schemas from report to stay under GitHub's 1MB
step summary limit. Full data is still available in the artifact.
2026-01-23 00:44:12 +01:00
Sam Morrow d074f7fbee chore: update mcp-conformance-action to v1.4.2
Fixes step summary size limit issue by excluding full stderr logs from
the markdown report. Logs are still available in the uploaded artifact.
2026-01-23 00:44:12 +01:00
Sam Morrow 148d51fcb2 chore: update mcp-conformance-action to v1.4.1 2026-01-23 00:44:12 +01:00
Sam Morrow 6f2f155002 chore: use immutable semver tag v1.4.0 2026-01-23 00:44:12 +01:00
Sam Morrow fbfc0259c4 fix: update action SHA to include stderr logging 2026-01-23 00:44:12 +01:00
Sam Morrow 21eff0b761 fix: update action SHA to include subshell fix 2026-01-23 00:44:12 +01:00
Sam Morrow c09815f468 fix: address review feedback
- Use checkout@v6 for consistency with other workflows
- Pin mcp-conformance-action to SHA for security
2026-01-23 00:44:12 +01:00
Sam Morrow a70165b2a4 fix: use correct action input names 2026-01-23 00:44:12 +01:00
Sam Morrow 5fd65a25ae ci: use mcp-conformance-action for conformance tests
Replace custom script/conformance-test with the reusable
mcp-conformance-action GitHub Action. This provides:

- Standardized MCP conformance testing across all MCP servers
- Automatic comparison between PR branch and merge-base
- Support for multiple configurations with different flags
- Custom message support for dynamic toolset testing
- Detailed conformance reports with timing comparisons
- Artifact upload for test results

All 16 original test configurations are preserved including
the dynamic tool call tests for toolset management.

Action: https://github.com/marketplace/actions/mcp-conformance-test
Related: #1826
2026-01-23 00:44:12 +01:00
JoannaaKL 7c053f1acd Add default label to all new issues (#1828)
* Add default label to all new issues

* Run on all issues

* Update .github/workflows/issue-labeler.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update .github/workflows/issue-labeler.yml

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-16 14:51:15 +01:00
copilot-swe-agent[bot] 953d26f9c0 fix: use gh pr checkout to handle fork PRs in license-check workflow
Co-authored-by: SamMorrowDrums <4811358+SamMorrowDrums@users.noreply.github.com>
2025-12-31 18:49:43 +00:00
dependabot[bot] 73a8f98bdc build(deps): bump actions/github-script from 7 to 8
Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-29 21:24:40 +00:00
dependabot[bot] d4da526785 build(deps): bump docker/metadata-action from 5.9.0 to 5.10.0
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.9.0 to 5.10.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/318604b99e75e41977312d83839a89be02ca4893...c299e40c65443455700f0fdfc63efafe5b349051)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-23 20:54:18 +00:00