[copilot-pr-merged-report] 2026-03-24 Merged PR Report

[github-actions[bot]]

🤖 Daily Copilot PR Merged Report — 2026-03-24

Analysis Period: Last 24 hours (2026-03-23 15:33 UTC → 2026-03-24 15:33 UTC)
Total Merged PRs: 75
Total Lines Added: 23,127
Total Lines Deleted: 10,059
Net Code Change: +13,068 lines

💡 Insights

• High volume day: 75 Copilot PRs merged in 24h — covering compiler fixes, firewall upgrades, MCP Gateway bumps, and safe-output improvements. The breadth reflects active cross-cutting work across the full stack.
• Strong test coverage: 26 of 75 PRs (35%) modified test files, adding 25 Go test files and 11 JavaScript test files. PR #22581 led with 4 test files for compiler error message improvements.
• Notable large PRs: #22528 (+3,949 lines) fixed a HIGH security vulnerability across workflows; #22183 (+2,731) added the new qmd documentation search tool; #22687 achieved a net −891 lines by removing dual-path safe-output config generation.

Merged Pull Requests (75)

PR #	Title	Lines Added	Lines Deleted	Test Files	Merged At
#22708	Fix: vulnerability-alerts incorrectly emitted as job-level permission	+288	-1	3	2026-03-24 15:31 UTC
#22710	fix: update wasm golden files for mcpg v0.2.4	+6	-6	0	2026-03-24 14:44 UTC
#22709	Never suggest tools.github mode: remote in agent prompts	+6	-16	0	2026-03-24 14:44 UTC
#22687	Remove dual path safe output config generation	+233	-1124	0	2026-03-24 14:20 UTC
#22683	qmd: replace paths array with pattern string and add ignore	+255	-150	1	2026-03-24 14:19 UTC
#22693	chore: bump MCP Gateway v0.2.3→v0.2.4, APM v0.8.4→v0.8.5	+367	-362	0	2026-03-24 13:49 UTC
#22689	fix: surface full error message in agent failure issue comments	+180	-10	1	2026-03-24 13:31 UTC
#22688	feat: add on-demand workflow_dispatch trigger to auto-triage-issues	+12	-2	0	2026-03-24 13:14 UTC
#22676	refactor: remove ForInspector wrapper indirection + dual-path parity test	+164	-72	3	2026-03-24 12:57 UTC
#22677	fix: correct repository org in smoke cross-repo PR workflows	+35	-35	0	2026-03-24 12:55 UTC
#22675	docs: fix homepage title duplication and disable glow animation on mobile	+2	-2	0	2026-03-24 12:39 UTC
#22669	fix: better diagnostics and messaging in the update command	+78	-7	1	2026-03-24 12:35 UTC
#22671	fix: align qmd_index test assertion with ERR_CONFIG error message prefix	+1	-1	1	2026-03-24 12:25 UTC
#22658	refactor: rename codemod_permissions functions for discoverability	+24	-24	1	2026-03-24 11:48 UTC
#22660	Improve glossary-maintainer: allow any bash command and leverage qmd search	+27	-35	0	2026-03-24 11:47 UTC
#22619	fix(sec-004): sanitize body field in assign_to_agent.cjs	+25	-1	1	2026-03-24 11:46 UTC
#22620	fix: add standardized error codes (USE-001) to four safe-output handlers	+12	-8	0	2026-03-24 11:46 UTC
#22621	fix(safe-outputs): add 🎭 emoji to staged mode preview in PR review handlers	+10	-1	0	2026-03-24 11:46 UTC
#22665	Add diagnostic logging to qmd_index.cjs for empty index debugging	+33	-3	0	2026-03-24 11:45 UTC
#22623	feat: wrap qmd documentation index step summary in details/summary HTML	+13	-2	1	2026-03-24 06:22 UTC
#22610	fix: exclude .git from push_repo_memory size calculation	+5	-0	0	2026-03-24 06:19 UTC
#22616	Remove sandbox.mcp.container from smoke workflows	+5	-17	0	2026-03-24 06:15 UTC
#22613	fix: add labels as a valid update field for update_discussion	+143	-2	0	2026-03-24 06:11 UTC
#22601	fix(create-discussion): prevent double-posting when GraphQL mutation partially succeeds	+239	-0	1	2026-03-24 06:09 UTC
#22615	ci-doctor: remove workflow_run, stop-after, and if	+4	-42	0	2026-03-24 06:02 UTC
#22614	Rephrase aw_context input description	+164	-164	0	2026-03-24 05:57 UTC
#22608	Fix untrusted_checkout_exec poutine finding in smoke-workflow-call workflows	+543	-0	0	2026-03-24 05:55 UTC
#22605	Convert qmd-docs.md and qmd.md to use tools.qmd with GPU runner	+1026	-1216	0	2026-03-24 05:51 UTC
#22607	docs: document --action-tag and --actions-repo compile flags	+54	-1	0	2026-03-24 05:49 UTC
#22603	Add proxy.golang.org and sum.golang.org to jsweep network allowlist	+9	-5	0	2026-03-24 05:32 UTC
#22602	Fix Upload Safe Output Items capitalization and DIFC filtered summary	+191	-183	0	2026-03-24 05:23 UTC
#22598	skip-if-check-failing: ignore checks from current workflow run	+157	-2	1	2026-03-24 05:15 UTC
#22591	Update MCP Gateway (gh-aw-mcpg) v0.2.2 → v0.2.3	+369	-364	0	2026-03-24 04:47 UTC
#22581	Improve compiler error messages for YAML syntax errors and permission scope	+474	-69	4	2026-03-24 04:41 UTC
#22582	Fix go/unsafe-quoting (CWE-78/89/94) in expression deprecation warning	+1	-1	0	2026-03-24 04:16 UTC
#22575	fix: surface engine failure reason in conclusion job when agent_output.json is missing	+1129	-4	0	2026-03-24 04:13 UTC
#22577	Add aw_context parsing from aw_info.json to logs and audit JSON output	+63	-36	0	2026-03-24 04:11 UTC
#22574	fix: add missing SARIF upload step for create-code-scanning-alert safe output	+163	-0	1	2026-03-24 03:58 UTC
#22576	fix: safe-outputs prompt says "exactly one" even when config allows multiple	+198	-92	1	2026-03-24 03:57 UTC
#22563	Compiler: inject DIFC proxy for pre-agent gh CLI custom steps	+1040	-0	1	2026-03-24 03:33 UTC
#22572	fix: use GraphQL mutation to mark pull requests as ready for review	+370	-18	1	2026-03-24 03:33 UTC
#22568	fix: create remote branch via REST before using createCommitOnBranch	+94	-6	1	2026-03-24 03:06 UTC
#22537	Add skip-if-check-failing pre-activation gate	+1175	-59	2	2026-03-24 02:20 UTC
#22551	Upload firewall audit logs as dedicated GitHub Actions artifacts	+1500	-209	0	2026-03-24 02:19 UTC
#22547	Update fuzzy schedule algorithm with weighted preferred windows	+463	-167	2	2026-03-24 01:33 UTC
#22183	Add builtin qmd documentation search tool (experimental)	+2731	-45	1	2026-03-23 23:16 UTC
#22538	Upgrade gh-aw-mcpg to v0.2.2	+366	-361	0	2026-03-23 23:16 UTC
#22528	Fix github-env HIGH vulnerability in ci-doctor and dev-hawk workflows	+3949	-2747	0	2026-03-23 23:00 UTC
#22479	Add aw_context caller metadata to workflow dispatches	+1375	-37	0	2026-03-23 22:25 UTC
#22529	fix: apply SHA pinning to on.steps in pre-activation job	+20	-2	0	2026-03-23 22:24 UTC
#22474	refactor: resolve semantic function clustering issues in pkg/workflow	+296	-133	1	2026-03-23 22:14 UTC
#22491	perf: eliminate redundant YAML parsing in import field extraction	+79	-159	0	2026-03-23 22:08 UTC
#22531	fix: update golden test files to AWF firewall version 0.25.0	+42	-42	0	2026-03-23 22:06 UTC
#22502	chore: no-op — agentic-workflows MCP guidance is already built in	+30	-30	0	2026-03-23 21:17 UTC
#22517	Add token budget guardrails to top-cost workflows	+166	-6	0	2026-03-23 21:11 UTC
#22516	Extract agentic workflow logs pre-fetch into shared component	+47	-26	0	2026-03-23 21:07 UTC
#22505	fix: reduce skipped workflow fan-out on comment and PR events	+14	-25	0	2026-03-23 20:55 UTC
#22508	bump gh-aw-firewall to v0.25.0	+879	-874	0	2026-03-23 20:38 UTC
#22495	Add changeset for awf v0.24.0 bump	+5	-0	0	2026-03-23 20:08 UTC
#22492	refactor: extract shared PR code review base configuration	+65	-20	0	2026-03-23 20:07 UTC
#22493	fix: align step names with glossary terminology	+29	-29	0	2026-03-23 19:47 UTC
#22490	Fix GH_AW_STOP_TIME YAML type error causing schema validation failures	+22	-4	1	2026-03-23 19:45 UTC
#22472	perf(parser): fix ParseWorkflow regression — eliminate redundant file read	+65	-40	0	2026-03-23 19:01 UTC
#22483	ci-doctor: add label_command trigger for PR check diagnosis	+245	-24	0	2026-03-23 18:54 UTC
#22480	Optimize fuzzy scheduler to avoid hour-boundary peaks	+231	-136	2	2026-03-23 18:53 UTC
#22464	perf: fix BenchmarkCompileMemoryUsage regression (+81.9%)	+27	-2	1	2026-03-23 18:51 UTC
#22471	chore: upgrade gh-aw-mcpg to v0.2.1	+360	-355	0	2026-03-23 17:37 UTC
#22475	fix: normalize report formatting for archie workflow	+15	-4	0	2026-03-23 17:32 UTC
#22458	fix(cli): resolve 5 CLI consistency issues from automated inspection	+14	-13	1	2026-03-23 17:14 UTC
#22465	chore: update github.com/securego/gosec/v2 from v2.24.7 to v2.25.0	+18	-18	0	2026-03-23 17:10 UTC
#22463	Fix FeatureGrid 3/4-col overflow on narrow viewports + WCAG 2.4.1 skip link	+43	-21	0	2026-03-23 17:02 UTC
#22457	[safeoutputs] Clarify update_issue target-dependent behavior	+4	-4	0	2026-03-23 16:54 UTC
#22459	perf: fix double regex pass in UnquoteYAMLKey causing ~2x compile slowdown	+33	-11	1	2026-03-23 16:52 UTC
#22405	Fix missing model and version in activation run details and safe-output footers	+593	-368	0	2026-03-23 16:49 UTC
#22444	Update APM (Agent Package Manager) to v0.8.4	+14	-4	0	2026-03-23 16:00 UTC

Code Generation Metrics

Test Coverage

• Total Test Files Modified/Added: 36
• PRs with test files: 26 / 75 (35%)
• Test File Types:
  • Go tests (*_test.go): 25
  • JavaScript tests (*.test.cjs): 11
  • .NET tests: 0

Top 5 PRs by Lines Added

PR #	Title	+Lines
#22528	Fix github-env HIGH vulnerability in ci-doctor and dev-hawk workflows	+3,949
#22183	Add builtin qmd documentation search tool (experimental)	+2,731
#22551	Upload firewall audit logs as dedicated GitHub Actions artifacts	+1,500
#22479	Add aw_context caller metadata to workflow dispatches	+1,375
#22537	Add skip-if-check-failing pre-activation gate	+1,175

Workflow Execution

Workflow execution time data is not directly available via the GitHub API for these PRs. Token consumption data is similarly unavailable.

---

References:

• §23497842788 — This workflow run

AI generated by Daily Copilot PR Merged Report · history

• expires on Mar 25, 2026, 3:41 PM UTC

[github-actions[bot]]

This discussion was automatically closed because it expired on 2026-03-25T15:41:12.956Z.

Closed by Workflow