[copilot-pr-merged-report] Daily Copilot PR Merged Report - 2026-03-23

[github-actions[bot]]

🤖 Summary

Analysis Period: 2026-03-22T15:30Z → 2026-03-23T15:30Z (last 24 hours)
Total Merged PRs: 29
Total Lines Added: 7,386
Total Lines Deleted: 2,026
Net Code Change: +5,360 lines

💡 Insights

• 🚀 Feature-rich day: 5 feature PRs including the large dispatch_repository safe-output type (feat: add dispatch_repository safe-output type for repository_dispatch events (experimental) #22315, +1,966 lines with 4 test files) and blocked-users/approval-labels guard policy support (Add blocked-users and approval-labels to tools.github guard policy #22360, +845 lines).
• 🔒 Security & safety focus: Two security-relevant PRs merged — path traversal fix (fix: path traversal sanitization for scriptFilename in safe_output_handler_manager #22280) and pull_request_target runtime guard (Add runtime check to disallow pull_request_target event on public repositories #22378).
• 🧪 Strong test coverage: 15 of 29 PRs (52%) included test file changes, with ~21 test files added or modified.
• 🔄 High churn PRs: Several version bump PRs (chore: bump MCP Gateway v0.1.20→v0.1.22, APM v0.8.2→v0.8.3 #22299, chore: upgrade gh-aw-mcpg to v0.1.25 #22321, chore: bump gh-aw-mcpg default version to v0.1.26 #22334, chore: bump gh-aw-mcpg to v0.2.0 #22388) show large addition+deletion counts due to 177+ lock file recompilation rather than net-new code.

Merged Pull Requests (29)

PR #	Title	+Added	-Deleted	Tests	Merged At
#22437	feat(compile): add --actions-repo flag	+171	-11	✅	14:27 UTC
#22427	feat: render all rpc-messages.jsonl message types in gateway preview	+303	-4	✅	14:06 UTC
#22422	Make build-wasm a dependency of agent-finish	+11	-11	—	13:59 UTC
#22421	Fix build-wasm CI: update golden files for gh-aw-mcpg v0.2.0	+6	-6	—	14:08 UTC
#22388	chore: bump gh-aw-mcpg to v0.2.0	+360	-355	—	07:43 UTC
#22378	Add runtime check to disallow pull_request_target on public repos	+106	—	✅	06:59 UTC
#22377	fix: use <strong> instead of ** bold in <summary> elements	+3	-3	✅	04:37 UTC
#22371	fix: propagate assign_copilot_to_created_issues failure	+115	-6	✅	05:07 UTC
#22361	fix: remove required inputs from smoke-* workflows	+41	-29	✅	02:50 UTC
#22360	Add blocked-users and approval-labels to tools.github guard policy	+845	-7	✅	04:36 UTC
#22359	perf: eliminate hot-path regexp compilations and redundant YAML parses	+98	-25	✅	03:21 UTC
#22358	fix(agent-persona-explorer): direct recommendations to .github/aw/*.md	+2	-1	—	02:35 UTC
#22355	fix: update smoke-copilot golden file for gh-aw-mcpg v0.1.26	+2	-2	—	02:07 UTC
#22347	Post failure comment on target issue/PR when agent assignment fails	+179	—	✅	01:42 UTC
#22334	chore: bump gh-aw-mcpg default version to v0.1.26	+364	-359	—	00:11 UTC
#22333	fix: remove sandbox.mcp.container from strict-mode WASM golden fixture	+2	-5	—	00:03 UTC
#22331	fix: apply repos → allowed-repos codemod to agentic workflows	+26	-26	—	23:30 UTC
#22327	Fix build-wasm: update MCPG golden test files to v0.1.25	+4	-4	—	22:34 UTC
#22321	chore: upgrade gh-aw-mcpg to v0.1.25	+360	-355	—	21:30 UTC
#22315	feat: add dispatch_repository safe-output type (experimental)	+1,966	-1	✅	22:35 UTC
#22313	Deep-clean .github/aw/*.md: remove invalid patterns and deprecated refs	+10	-116	—	20:33 UTC
#22311	Rename tools.github.repos to tools.github.allowed-repos	+1,010	-63	✅	20:31 UTC
#22310	docs(sandbox): remove Custom AWF/MCP Gateway Configuration sections	+415	-230	✅	21:26 UTC
#22300	feat: progressive disclosure for protected file messages using <details>	+11	-4	—	18:54 UTC
#22299	chore: bump MCP Gateway v0.1.20→v0.1.22, APM v0.8.2→v0.8.3	+370	-365	—	19:23 UTC
#22298	feat(integrity-analysis): add per-user analysis of filtered events	+64	-1	—	18:10 UTC
#22285	fix: exclude .git directory from push_repo_memory size check	+29	—	✅	16:46 UTC
#22284	Add per-handler staged mode to all safe output types	+286	-36	✅	17:03 UTC
#22280	fix: path traversal sanitization for scriptFilename	+227	-1	✅	15:47 UTC

Times shown are UTC on 2026-03-22 or 2026-03-23.

Code Generation Metrics

Lines of Code

• Total Lines Added: 7,386
• Total Lines Deleted: 2,026
• Net Code Change: +5,360 lines
• Files Changed: ~1,250 total (heavily inflated by lock file recompilation)

Note: Several PRs (#22299, #22321, #22334, #22388) involve mass recompilation of ~177-182 lock files each. These inflate raw counts but represent version bumps, not net-new logic.

Test Coverage

• PRs with Test Changes: 15 of 29 (52%)
• Test Files Added/Modified: ~21 files
• Test File Types:
  • Go tests (*_test.go): ~12 files (compile_integration_test.go, label_trigger_parser_test.go, dispatch_repository_test.go, safe_scripts_test.go, and others)
  • JavaScript tests (*.test.cjs): ~9 files (parse_mcp_gateway_log.test.cjs, validate_lockdown_requirements.test.cjs, firewall_blocked_domains.test.cjs, safe_output_handler_manager.test.cjs, and others)

PR Category Breakdown

Category	Count	Notable PRs
🚀 Features	5	#22315 (dispatch_repository), #22360 (guard policies), #22437 (--actions-repo)
🐛 Bug Fixes	10	#22280 (security), #22378 (security), #22371, #22361, #22377
🔧 Chores/Bumps	7	#22388, #22334, #22321, #22299, #22331, #22327, #22355
📚 Docs	3	#22313, #22310, #22358
⚡ Performance	1	#22359
🛠 Refactoring	2	#22311, #22422
✨ Enhancements	1	#22284 (staged mode), #22300, #22298, #22285, #22347

Workflow Execution

• Token consumption data: Not directly available via GitHub API
• Workflow execution timing is not included in this report

---

References: §23445369988

AI generated by Daily Copilot PR Merged Report · history

• expires on Mar 24, 2026, 3:36 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Daily Copilot PR Merged Report.

A newer discussion is available at Discussion #22715.