-
Notifications
You must be signed in to change notification settings - Fork 0
docs(references): daily intelligence update 2026-04-19 #48
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
github-actions
wants to merge
1
commit into
develop
Choose a base branch
from
daily-intelligence-2026-04-19-370d22895a2557c3
base: develop
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
+170
−3
Open
Changes from all commits
Commits
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -9,7 +9,7 @@ Stable architectural facts about the GitHub Agentic Workflows ecosystem. Used by | |||||
| - **Install**: `gh extension install github/gh-aw` | ||||||
| - **Purpose**: Compile markdown workflow definitions into GitHub Actions `.lock.yml` files | ||||||
| - **Key commands**: `gh aw compile`, `gh aw validate`, `gh aw upgrade`, `gh aw mcp inspect`, `gh aw mcp list` | ||||||
| - **AWF (Actions Workflow Framework)**: Default version **v0.25.24** (as of 2026-04-18) | ||||||
| - **AWF (Actions Workflow Framework)**: Default version **v0.25.25** (as of 2026-04-19; v0.25.24 [SUPERSEDED]) | ||||||
|
||||||
| - **AWF (Actions Workflow Framework)**: Default version **v0.25.25** (as of 2026-04-19; v0.25.24 [SUPERSEDED]) | |
| - **AWF (Actions Workflow Framework)**: Default version **v0.25.25** (as of 2026-04-19; v0.25.24 [SUPERSEDED by 2026-04-19]) |
Copilot
AI
Apr 19, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This file (and other repo docs) uses the convention [SUPERSEDED by YYYY-MM-DD] when marking older information as superseded. Here the marker is [SUPERSEDED] without a date; please include the superseding date (e.g., [SUPERSEDED by 2026-04-19]) or drop the marker to avoid ambiguity.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
| @@ -0,0 +1,119 @@ | ||||||
| # gh-aw Intelligence Report — 2026-04-19 | ||||||
|
|
||||||
| **Period:** 2026-04-18 → 2026-04-19 | ||||||
| **Sources:** GitHub API (gh-aw, github-mcp-server, agentics, zircote/github-agentic-workflows) | ||||||
| **Web search:** Blocked by network firewall — GitHub API data only | ||||||
|
|
||||||
| --- | ||||||
|
|
||||||
| ## 1. gh-aw CLI Updates | ||||||
|
|
||||||
| ### AWF v0.25.25 + MCP Gateway v0.2.25 (2026-04-19) | ||||||
|
|
||||||
| Routine version bump merged today (PR #27102): | ||||||
| - **AWF (Actions Workflow Framework):** v0.25.24 → **v0.25.25** | ||||||
| - **MCP Gateway:** v0.2.24 → **v0.2.25** | ||||||
|
|
||||||
| Source: https://github.com/github/gh-aw/commit/ca1d545a9b9f1a4623f30cfa1aae322fbf12db77 | ||||||
|
|
||||||
| --- | ||||||
|
|
||||||
| ## 2. Critical Bug Fix — MCP Gateway Port 8080 | ||||||
|
|
||||||
| **Severity: High** — Silent production failures | ||||||
|
|
||||||
| A previous gh-aw change (PR #27058) moved the MCP gateway from **port 80 to port 8080** (non-privileged). However, AWF's `--enable-host-access` flag only whitelists ports 80 and 443 by default. This caused the agent inside AWF to be unable to reach the MCP gateway, resulting in: | ||||||
|
|
||||||
| - **Silent MCP tool-call failures** (agent receives no tools) | ||||||
| - **Safe-output timeouts** (safe-outputs communicate via MCP gateway) | ||||||
|
|
||||||
| **Fix (merged 2026-04-19):** Added `--allow-host-ports 80,443,<gateway-port>` to the compiled AWF command, gated by minimum AWF version. Also respects custom `sandbox.mcp.port` configuration. | ||||||
|
|
||||||
| Source: https://github.com/github/gh-aw/commit/a77850ea08d6b59e87b5ba41e78a1b5ee60b755d | ||||||
|
|
||||||
| **Impact:** Any gh-aw version between the port change and v0.25.25 would silently fail MCP calls. Updating to the latest gh-aw (`gh aw upgrade`) resolves this. | ||||||
|
|
||||||
| --- | ||||||
|
|
||||||
| ## 3. New Workflow — copilot-opt | ||||||
|
|
||||||
| A new gh-aw internal workflow `copilot-opt` has been added (commit 1378d27) that: | ||||||
| - Analyzes 14-day session history | ||||||
| - Generates 3 evidence-backed Copilot optimization issue recommendations | ||||||
| - Uses lean toolset + Haiku model + pre-aggregation for token efficiency | ||||||
|
|
||||||
| Token optimizer was also improved with cli-proxy path, lean toolset, and prompt compaction. | ||||||
|
|
||||||
| Source: https://github.com/github/gh-aw/commit/1378d27a7efc20f30e8fedd484fab57beea7db26 | ||||||
|
|
||||||
| --- | ||||||
|
|
||||||
| ## 4. Exported Constants — guard-policy, BYOK, AWF Version | ||||||
|
|
||||||
| New constants exported from `pkg/constants`: | ||||||
| - `guard-policy` — AWF network guard policy identifiers | ||||||
| - `BYOK` (Bring Your Own Key) — token configuration constants | ||||||
| - AWF version string constants | ||||||
|
|
||||||
| Source: https://github.com/github/gh-aw/commit/c842421a058e688346db5491ce80e44179df6d01 | ||||||
|
|
||||||
| --- | ||||||
|
|
||||||
| ## 5. API Rename — ResolveLatestActionPin | ||||||
|
|
||||||
| `GetCachedActionPin` renamed to `ResolveLatestActionPin` in `pkg/actionpins`. This is an internal API change; no impact on workflow authors. | ||||||
|
|
||||||
| Source: https://github.com/github/gh-aw/commit/7533280119bfffdd4f020ca893dcc818935e4600 | ||||||
|
|
||||||
| --- | ||||||
|
|
||||||
| ## 6. GitHub MCP Server — v1.0.0 Still Current | ||||||
|
|
||||||
| No new releases since v1.0.0 (2026-04-16). The stable 1.0 release with: | ||||||
| - `set_issue_fields` tool (issues_granular toolset) | ||||||
| - MCP Apps migrated from insiders to `remote_mcp_ui_apps` feature flag | ||||||
| - granular toolsets: `issues_granular`, `pull_request_granular` | ||||||
| - `resolve_review_thread` tool (v0.33.0) | ||||||
| - `list_commits`: `path`, `since`, `until` parameters (v0.33.0) | ||||||
|
|
||||||
| --- | ||||||
|
|
||||||
| ## 7. githubnext/agentics | ||||||
|
|
||||||
| Minor formatting fixes (2026-04-17, don Syme). No new workflows or patterns. | ||||||
|
||||||
| Minor formatting fixes (2026-04-17, don Syme). No new workflows or patterns. | |
| Minor formatting fixes (2026-04-17, Don Syme). No new workflows or patterns. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -305,7 +305,29 @@ entrypointArgs: | |||||
| - "apk add --no-cache curl >/dev/null 2>&1 && exec my-server" | ||||||
| ``` | ||||||
|
|
||||||
| ### `gh aw mcp inspect/list` Limitation | ||||||
| ### MCP Gateway Port 8080 — AWF Firewall Blocks Traffic | ||||||
|
|
||||||
| A gh-aw change moved the MCP gateway from port **80** to port **8080** (non-privileged). AWF's `--enable-host-access` only whitelists ports 80 and 443 by default. This leaves port 8080 blocked, causing silent failures. | ||||||
|
|
||||||
| **Symptom:** MCP tools are completely unavailable to the agent AND safe-output calls silently time out — the agent appears to run but no tools work and writes never happen. Check `agent-artifacts/mcp-logs/` for connection refused errors on port 8080. | ||||||
|
|
||||||
| **Affected versions:** gh-aw versions between the gateway port change (around AWF v0.25.20) and **v0.25.25** (which includes the `--allow-host-ports` fix). | ||||||
|
|
||||||
| **Fix:** Update gh-aw to the latest version: | ||||||
|
|
||||||
| ```bash | ||||||
| gh aw upgrade | ||||||
| ``` | ||||||
|
|
||||||
| This compiles `--allow-host-ports 80,443,8080` into the AWF command, allowing the agent to reach the MCP gateway. | ||||||
|
||||||
| This compiles `--allow-host-ports 80,443,8080` into the AWF command, allowing the agent to reach the MCP gateway. | |
| This compiles `--allow-host-ports 80,443,<gateway-port>` into the AWF command, allowing the agent to reach the MCP gateway. The default gateway port is `8080`. |
Copilot
AI
Apr 19, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The link labeled “Root cause commit” points to the port-8080 fix commit (per the report/PR description). Consider either renaming this label to something like “Fix commit”/“Reference commit”, or linking the actual port-change (root cause) commit/PR instead.
Suggested change
| **Root cause commit:** https://github.com/github/gh-aw/commit/a77850ea08d6b59e87b5ba41e78a1b5ee60b755d | |
| **Fix commit:** https://github.com/github/gh-aw/commit/a77850ea08d6b59e87b5ba41e78a1b5ee60b755d |
Comment on lines
+330
to
331
Copilot
AI
Apr 19, 2026
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The ### \gh aw mcp inspect/list` Limitationheading appears to have been removed, leaving the following explanatory paragraph unscoped (it now starts immediately after the---`). Re-introduce the heading (or another appropriate subheading) so the section structure remains clear and consistent.
Suggested change
| ### `gh aw mcp inspect/list` Limitation |
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This new 2026-04-19 entry is appended near the bottom, but the file’s instruction says to keep entries newest first. Please move the 2026-04-19 section above the 2026-04-18 section (while still staying above the bottom marker) so chronology is maintained.