github-featured/github--github-mcp-server
2
0
Fork 0
Code Issues Pull Requests Deployments Models Agent Notes Packages Projects Releases Wiki Activity

Commit Graph

  • 51ff1a967e Harden atomic issue creation zwick-atomic-sub-issue-creation Bryan Zwicker 2026-08-21 15:33:49 -04:00
  • 60c43f9b8b Fold atomic creation into issue tools Bryan Zwicker 2026-08-21 15:02:25 -04:00
  • 8481cdcfd1 Require complete parent repository coordinates Bryan Zwicker 2026-08-21 14:46:10 -04:00
  • 22e29eceec Support cross-repository parent issues Bryan Zwicker 2026-08-21 13:53:17 -04:00
  • b2b9273897 Add atomic parent issue creation Bryan Zwicker 2026-08-21 13:35:12 -04:00
  • 05d9ff132b feat(auth): add OAuth scope policies sammorrowdrums-scope-policy-model Sam Morrow 2026-08-21 02:15:32 +02:00
  • 64a49f34d0 Name the root command after the installed binary main Martin Pluskal 2026-08-03 15:24:32 +02:00
  • a7c3b494e6 test(http): cover authorization server override wiring Sam Morrow 2026-08-20 16:22:45 +02:00
  • 0ae533c163 feat(http): add --authorization-server flag to override OAuth AS URL Anika Reiter 2026-07-17 15:39:03 +02:00
  • fcdd664099 fix(issues): flatten issue comment input schema v1.10.1 latest-release Sam Morrow 2026-08-20 10:38:18 +02:00
  • 96d913ab25 fix(pull-requests): preserve resolver API cagesellchen-expose-resolve-as-input Annie Gesellchen 2026-08-19 14:28:58 -07:00
  • bfb759d137 feat(pull-requests): expose review resolution reason Annie Gesellchen 2026-08-19 11:40:53 -07:00
  • 55f7b721fd build(deps): bump the npm_and_yarn group across 1 directory with 4 updates v1.10.0 dependabot[bot] 2026-08-18 12:41:05 +00:00
  • 24dc8b08c1 fix(copilot): keep rate limit denials out of the review permission hint Sam Morrow 2026-08-19 16:51:04 +02:00
  • e95b7fda29 fix(copilot): explain review request denials instead of forwarding a bare 404 Dylan Pulver 2026-08-19 16:52:57 +03:00
  • 0bb1e569ce test(sanitize): drop the optimization scaffolding Sam Morrow 2026-08-19 16:39:02 +02:00
  • 02cf0f7d75 perf(sanitize): make clean text allocation-free on the hot path Sam Morrow 2026-08-19 16:25:50 +02:00
  • 95b347e945 fix(lockdown): drop fixed-age expiry, keep per-identity cache isolation Sam Morrow 2026-08-19 16:04:07 +02:00
  • acd2afc766 refactor(lockdown): trim comments to non-obvious invariants Sam Morrow 2026-08-19 15:12:43 +02:00
  • 566f4839e8 Revert "ci(lint): skip remote config schema verification" Sam Morrow 2026-08-19 15:02:14 +02:00
  • bd4e80fb54 ci(lint): skip remote config schema verification Sam Morrow 2026-08-19 14:50:46 +02:00
  • 56c9088c60 fix(lockdown): scope repo-access cache per identity via entry keys Sam Morrow 2026-08-19 14:48:54 +02:00
  • a429a8759f fix(lockdown): bound repo-access cache expiry and isolate it per identity Sam Morrow 2026-08-19 14:22:21 +02:00
  • b3ecab4a01 Set the request-body limit to 5 MiB at both layers Sam Morrow 2026-08-19 16:05:28 +02:00
  • b0b41a5515 Align request-body limit with the MCP SDK default Sam Morrow 2026-08-19 15:57:00 +02:00
  • 0f0e191bb0 test: exercise MaxBytesError branches with unknown-length bodies Sam Morrow 2026-08-19 14:51:12 +02:00
  • e0096d87d5 Limit HTTP request bodies before MCP middleware parsing Sam Morrow 2026-08-19 14:18:12 +02:00
  • 08edfa86f3 refactor: condense lockdown comments in pull_request_read get_commits Sam Morrow 2026-08-19 15:09:52 +02:00
  • c195fb9fea fix(raw): reject dot-dot segments revealed by decoding encoded separators Sam Morrow 2026-08-19 14:48:34 +02:00
  • 51ea58e70b fix(raw): reject traversal segments when constructing raw content URLs Sam Morrow 2026-08-19 14:11:19 +02:00
  • 53fc915a10 Re-run fence filter and preserve valid variation sequences Sam Morrow 2026-08-19 14:48:01 +02:00
  • ea2d979198 Filter invisible Unicode after HTML entity normalization Sam Morrow 2026-08-19 14:17:16 +02:00
  • 912cce687b Sanitize remaining issue-ref and blame headline response paths Sam Morrow 2026-08-19 14:52:06 +02:00
  • 56bfeec0a9 Centralize sanitization of untrusted GitHub response fields Sam Morrow 2026-08-19 14:31:09 +02:00
  • 3bad3bc651 fix(http): make server lockdown mode an upper bound over requests (#3112) Sam Morrow 2026-08-19 15:20:19 +02:00
  • 5ef7a401ca refactor: condense lockdown comments in pull_request_read get_commits sammorrowdrums-harden-lockdown-pr-commits Sam Morrow 2026-08-19 15:09:52 +02:00
  • 769340d6a1 fix(lockdown): harden pull_request_read get_commits handling Sam Morrow 2026-08-19 14:16:18 +02:00
  • cd1642ae8e fix(lockdown): harden pull_request_read get_commits handling Sam Morrow 2026-08-19 14:16:18 +02:00
  • c54cd63e3e build(deps): clear UI dependency alerts Sam Morrow 2026-08-19 13:38:45 +02:00
  • c64b6fed32 fix(issues): narrow search field enrichment fallback Sam Morrow 2026-08-19 12:31:19 +02:00
  • ee37dd8bdb make search_issues field value enrichment best-effort kerobbi 2026-07-16 15:49:27 +01:00
  • 1e7b3f9bc5 fix(issues): preserve delete field semantics Sam Morrow 2026-08-17 15:21:29 +02:00
  • 9cfe97e20a fix(issues): allow delete:false in issue_write issue_fields Travis Gockel 2026-08-14 18:04:15 -06:00
  • a6b820741b fix(repos): label deferred symlink content accurately Sam Morrow 2026-08-19 12:51:18 +02:00
  • f8d38356e9 refactor(repos): simplify symlink read disclosure Sam Morrow 2026-08-19 12:37:26 +02:00
  • 8aeb670b0b fix(repos): disclose dereferenced symlink reads Sam Morrow 2026-08-19 11:38:33 +02:00
  • 30600ba335 perf(repos): reduce symlink guard overhead Sam Morrow 2026-08-19 10:44:48 +02:00
  • bb3a1b2a03 fix(repos): guard writes to symbolic links Sam Morrow 2026-08-19 00:07:35 +02:00
  • 596203ef54 Clarify symlink behavior for repository file writes Keshav Malik 2026-08-14 18:27:00 +05:30
  • 46651854ef fix(tools): allow omitted tool arguments Sam Morrow 2026-08-19 11:45:08 +02:00
  • 316b8efcd0 test(issues): cover GHES fallback assignees Sam Morrow 2026-08-19 11:45:03 +02:00
  • 91de9a0bf1 fix(issues): harden GHES schema fallback Sam Morrow 2026-08-18 23:36:23 +02:00
  • b036edcac5 fix(issues): fall back on unsupported field schemas Sam Morrow 2026-08-17 15:31:14 +02:00
  • 8395beae41 test(issues): cover stable assignee responses Sam Morrow 2026-08-19 11:23:55 +02:00
  • 95a8e75705 Return assignees from list_issues Travis Gockel 2026-08-13 14:28:53 -06:00
  • 3000061430 fix(repositories): return raw bytes for MCP blobs Sam Morrow 2026-08-19 11:19:47 +02:00
  • d8a1627b13 fix(notifications): mark subscription tools destructive Sam Morrow 2026-07-23 12:35:49 +02:00
  • bf47e3eca9 fix(errors): safely format GitHub validation failures Sam Morrow 2026-08-18 23:51:31 +02:00
  • 4e6329eb46 Show nested GitHub API validation messages in tool errors Hashim1999164 2026-08-16 17:16:35 +05:00
  • 21c5a6f1dd fix(auth): scope tokens across GitHub clients Sam Morrow 2026-08-17 15:41:17 +02:00
  • 198017fb54 Attach GitHub token only to configured GitHub hosts Syed Anas Mohiuddin 2026-08-12 21:32:03 -05:00
  • 505b88f8ac test(http): preserve fail-closed inventory regressions Sam Morrow 2026-08-18 23:33:46 +02:00
  • a4f801e3d6 fix(http): fail startup on invalid static tools Sam Morrow 2026-08-17 15:31:31 +02:00
  • bb19060e63 Fix static tools validation fallback Mahmoud772122777 2026-08-11 11:54:45 +05:30
  • 2211a4d645 fix(issues): validate issue comment input modes Sam Morrow 2026-08-17 15:22:09 +02:00
  • e503398c34 fix(auth): keep path out of projected headers sammorrowdrums-workflow-scope-challenges Sam Morrow 2026-08-18 16:39:38 +02:00
  • dde00d0d8c feat(auth): challenge workflow file writes for scope Sam Morrow 2026-08-18 16:13:08 +02:00
  • 8ec62491c6 Add confirmed repository deletion tool (#3076) Sam Morrow 2026-08-18 14:50:38 +02:00
  • 8cd36f8d11 build(deps): bump actions/stale from 10 to 11 dependabot/github_actions/actions/stale-11 dependabot[bot] 2026-08-18 12:48:37 +00:00
  • 21007a9e21 Merge branch 'main' into dependabot/github_actions/github/codeql-action-4.37.4 dependabot/github_actions/github/codeql-action-4.37.4 Iryna Kulakova 2026-08-18 14:48:24 +02:00
  • bfb59bb786 build(deps): bump docker/login-action from 4.4.0 to 4.6.0 (#3005) dependabot[bot] 2026-08-18 14:46:18 +02:00
  • 0d7ca0e240 build(deps): bump the npm_and_yarn group across 1 directory with 2 updates (#3007) dependabot[bot] 2026-08-18 14:39:26 +02:00
  • bbdd9e304e build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#3089) dependabot[bot] 2026-08-18 14:38:17 +02:00
  • 9525994ff0 Merge branch 'main' into dependabot/github_actions/github/codeql-action-4.37.4 Iryna Kulakova 2026-08-18 14:33:59 +02:00
  • 0970236b2b build(deps): bump node from e88a35b to aadf416 dependabot/docker/node-2337615 dependabot[bot] 2026-08-18 12:31:31 +00:00
  • 4fb8b89d4e build(deps): bump golang from 1.25.12-alpine to 1.25.13-alpine (#3087) dependabot[bot] 2026-08-18 14:29:26 +02:00
  • 05ebfd54be build(deps): bump distroless/base-debian12 from 348dac1 to 76b3162 (#3088) dependabot[bot] 2026-08-18 14:21:28 +02:00
  • 3085e59f66 Reject unsupported subscription streams (#3073) Sam Morrow 2026-08-17 13:42:34 +02:00
  • 0ea1f775a7 fix: preserve authority for loopback GHES hosts Sam Morrow 2026-08-14 13:22:26 +02:00
  • 0c825b4233 fix(security): enforce HTTPS for gh-host/GITHUB_HOST to prevent cleartext credentials Sam Morrow 2026-08-14 13:10:55 +02:00
  • accc2e0970 fix(actions): avoid malformed response on log download failure Sam Morrow 2026-08-14 09:04:13 +02:00
  • 2198e8599b Add visible fields to project views (#2988) Bryan Zwicker 2026-08-12 09:40:51 -04:00
  • d6cab9757a Add basic project view management (#2961) Bryan Zwicker 2026-08-12 08:41:33 -04:00
  • ff15f6825d Use minimal types for tool responses (#3055) Tommaso Moro 2026-08-12 12:33:51 +01:00
  • eff4c3c041 Minimize Actions workflow list responses (#3047) Tommaso Moro 2026-08-10 15:13:30 +01:00
  • cdfa34e0a9 Order list_label results by issue count (descending) (#2974) v1.9.0 Iulia Bejan 2026-08-10 10:35:52 +02:00
  • eb4c099e05 Support singular Project Issue Field updates (#2941) Bryan Zwicker 2026-08-07 08:31:43 -04:00
  • 1b3f89a90a Add non-default find_duplicate tool gated by duplicate_detection flag (#3020) Michael Jacholke 2026-08-07 09:45:49 +01:00
  • e7f7bb8b31 Support removing issue types (#2999) Bryan Zwicker 2026-08-06 20:25:58 -04:00
  • 91ae1ffdcc FeatureFlagArtifacts veralizeth/mcp-artifacts-flag Lizeth Vera 2026-08-06 23:50:55 +00:00
  • f3cb662c25 Make search_issues semantic by default (#2964) Kelsey Myers 2026-08-06 15:51:13 +01:00
  • e6e3a4e841 Return closing pull requests from issue_read (#3006) Bryan Zwicker 2026-08-06 04:04:10 -04:00
  • 4ee34426b8 build(deps): bump github/codeql-action from 4 to 4.37.4 dependabot[bot] 2026-08-03 16:25:21 +00:00
  • b912101d87 feat(governance): add custom properties tools sammorrowdrums-add-rulesets-custom-properties Sam Morrow 2026-08-01 00:22:32 +02:00
  • 53de0492ea feat(governance): add rulesets tools in new governance toolset sammorrowdrums-governance-rulesets Sam Morrow 2026-08-01 00:21:29 +02:00
  • 92f6bb5dab Add adaptive Markdown tool responses tommaso-moro-markdown-tool-responses tommaso-moro 2026-07-31 16:00:20 +01:00
  • f0e9713884 Evaluate Markdown tool responses tommaso-moro-markdown-response-evals tommaso-moro 2026-07-31 15:46:31 +01:00
  • 3778a41476 Clarify that create_or_update_file content is plain text (#2983) eric sciple 2026-07-31 02:49:14 -05:00
  • ca8ab52dcc test: assert advertised capabilities omit list-changed v1.8.0 Sam Morrow 2026-07-30 13:37:48 +02:00
  • ea8099d7b2 fix: don't advertise unsupported list-changed capabilities Sam Morrow 2026-07-28 22:25:56 +02:00