feat: upgrade GitHub MCP server to v1.6.0, enable fields_param by default

[Copilot]

Bumps the default GitHub MCP server to v1.6.0 and automatically enables the new fields_param feature flag, which lets agents filter tool response fields to reduce token usage on heavy list/search APIs.

Version & pin

• DefaultGitHubMCPServerVersion → v1.6.0
• Added v1.6.0 container digest to actions-lock.json (synced to both data/action_pins.json copies)

Features wiring

• Added Features string to GitHubMCPDockerOptions and GitHubMCPRemoteOptions
• buildGitHubMCPEnvVars → emits GITHUB_FEATURES=fields_param (Docker/local mode)
• buildGitHubMCPRemoteHeaders → emits X-MCP-Features: fields_param (remote mode)
• New getGitHubFeatures(): defaults to "fields_param" for v1.6.0+; respects explicit tools.github.features override

Default fields constants (mcp_github_default_fields.go, new)

• GitHubMCPFeatureFieldsParam = "fields_param" — the feature flag name
• GitHubMCPDefaultFields — recommended slim field sets per tool (drops body, reactions, text_matches, repository, etc. from heavy responses):

var GitHubMCPDefaultFields = map[string][]string{
    "list_pull_requests":   {"number", "title", "state", "draft", "created_at", ...},
    "search_issues":        {"number", "title", "state", "user", "labels", ...},
    "search_code":          {"name", "path", "sha", "html_url"},
    "list_commits":         {"sha", "html_url", "commit", "author"},
    // ...
}

Workflows can opt out or override via:

tools:
  github:
    features: ""          # disable
    features: "insiders"  # use insiders mode

---

---

✨ PR Review Safe Output Test - Run 29470703221

💥 [THE END] — Illustrated by Smoke Claude · 113.2 AIC · ⌖ 31.8 AIC · ⊞ 8.4K · ◷
_{Comment /smoke-claude to run again}

[Copilot]

Pull request overview

Upgrades GitHub MCP Server to v1.6.0 and enables fields_param for local and remote transports.

Changes:

• Bumps and pins the v1.6.0 container image.
• Wires feature flags through MCP renderers.
• Adds field recommendations and regenerates fixtures/workflows.

Show a summary per file

File	Description
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden	Updates the MCP image version.
pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden	Adds feature configuration to Codex output.
pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden	Updates generated MCP configuration.
pkg/workflow/mcp_renderer_types.go	Adds renderer feature options.
pkg/workflow/mcp_renderer_section_helpers.go	Emits feature env vars and headers.
pkg/workflow/mcp_renderer_section_helpers_test.go	Updates helper invocation.
pkg/workflow/mcp_renderer_github.go	Propagates features through renderers.
pkg/workflow/mcp_github_default_fields.go	Adds recommended response fields.
pkg/workflow/mcp_github_config.go	Selects default and explicit features.
pkg/workflow/data/action_pins.json	Adds the v1.6.0 image pin.
pkg/workflow/codex_engine_test.go	Updates Codex rendering expectations.
pkg/constants/version_constants.go	Changes the default MCP version.
pkg/actionpins/data/action_pins.json	Synchronizes the image pin.
.github/workflows/schema-feature-coverage.lock.yml	Adds the remote feature header.
.github/workflows/pr-description-caveman.lock.yml	Regenerates the v1.6.0 image pin.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Adds the remote feature header.
.github/workflows/github-mcp-tools-report.lock.yml	Adds the remote feature header.
.github/workflows/firewall.lock.yml	Regenerates local MCP configuration.
.github/workflows/example-permissions-warning.lock.yml	Regenerates local MCP configuration.
.github/workflows/eslint-miner.lock.yml	Regenerates the image pin.
.github/workflows/designer-drift-audit.lock.yml	Regenerates the image pin.
.github/workflows/daily-windows-terminal-integration-builder.lock.yml	Regenerates the image pin.
.github/workflows/daily-max-ai-credits-test.lock.yml	Regenerates local MCP configuration.
.github/workflows/daily-formal-spec-verifier.lock.yml	Regenerates the image pin.
.github/workflows/daily-credit-limit-test.lock.yml	Regenerates local MCP configuration.
.github/workflows/daily-cli-performance.lock.yml	Regenerates the image pin.
.github/workflows/daily-byok-ollama-test.lock.yml	Regenerates local MCP configuration.
.github/workflows/daily-assign-issue-to-user.lock.yml	Regenerates the image pin.
.github/workflows/craft.lock.yml	Regenerates the image pin.
.github/workflows/copilot-opt.lock.yml	Regenerates the image pin.
.github/workflows/copilot-cli-deep-research.lock.yml	Regenerates the image pin.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Adds the remote feature header.
.github/workflows/code-scanning-fixer.lock.yml	Regenerates the image pin.
.github/workflows/bot-detection.lock.yml	Regenerates local MCP configuration.
.github/workflows/artifacts-summary.lock.yml	Regenerates the image pin.
.github/workflows/agentic-token-optimizer.lock.yml	Regenerates the image pin.
.github/workflows/agentic-auto-upgrade.yml	Regenerates the weekly schedule.
.github/workflows/ace-editor.lock.yml	Regenerates local MCP configuration.
.github/aw/actions-lock.json	Adds the canonical v1.6.0 pin.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 113/277 changed files
• Comments generated: 7
• Review effort level: Medium

[gh-aw-bot]

@copilot please run the pr-finisher skill, address unresolved review feedback, refresh the branch if needed, and rerun checks once updates are pushed.

Generated by 👨‍🍳 PR Sous Chef · 8.91 AIC · ⌖ 5.49 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot please run the pr-finisher skill, address unresolved review feedback, refresh the branch if needed, and rerun checks once updates are pushed.

...

Addressed all unresolved review threads in commit fix: address review feedback on GitHub MCP v1.6.0 fields_param feature:

• Schema: Added features property to the GitHub tool object in main_workflow_schema.json — the additionalProperties: false guard was blocking tools.github.features from being set at all.
• Empty-string disable: Fixed getGitHubFeatures — an explicit features: "" now returns "" immediately (disabling all feature flags) instead of falling through to the v1.6.0 default.
• search_pull_requests: Removed base and head — not in the v1.6.0 fields enum for issue-search objects.
• list_issues: Removed assignees — not in the v1.6.0 fields enum (only search_issues supports it).
• search_code: Removed html_url — not selectable; valid fields are name, path, sha, repository, text_matches.
• get_file_contents / list_releases: Added both missing entries to GitHubMCPDefaultFields.
• Doc comment: Corrected the guidance line for issues — labels are included in the slim set, not omitted.

The "insiders mode via features: insiders" was only in the PR description, not in code or docs, and no wiring for GITHUB_INSIDERS was added, so that advertised behavior has simply been dropped.

Local make fmt, make test-unit, and make agent-report-progress all pass. CI needs a human re-trigger to confirm.

[gh-aw-bot]

@copilot please run the pr-finisher skill, address the unresolved review feedback (newest first: Copilot: #45832 (comment)), and rerun checks once the branch is up to date.

Generated by 👨‍🍳 PR Sous Chef · 9.41 AIC · ⌖ 6.79 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

[gh-aw-bot]

@copilot please run the pr-finisher skill, address any unresolved review feedback, and rerun checks once the branch is up to date.

Generated by 👨‍🍳 PR Sous Chef · 3.47 AIC · ⌖ 11.2 AIC · ⊞ 5.1K · ◷
_{Comment /souschef to run again}

[github-actions]

Comment Memory

In code's silent halls
Whispers of logic resound
Dreams compiled anew

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

📰 BREAKING: Report filed by Smoke Copilot - AOAI (Entra) · 19.1 AIC · ⌖ 2.97 AIC · ⊞ 17.6K · ◷
_{Comment /smoke-copilot-aoai-entra to run again
Add label smoke to run again}

[Copilot]

@copilot merge main and recompile

Done. Merged origin/main (2 new commits: update all packages, rebuild), resolved lock-file conflicts, recompiled all 257 workflows, and updated golden fixtures.

[pelikhan]

@copilot merge main recompile

[Copilot]

@copilot merge main recompile

Done. Merged origin/main (3 new commits), resolved lock-file conflicts in avenger, hourly-ci-cleaner, release, and skillet, and recompiled all 257 workflows. Build, fmt, lint, and workflow-drift checks all pass.

[pelikhan]

@copilot merge main and recompile

[Copilot]

@copilot merge main and recompile

Done. Merged origin/main (3 new commits), resolved lock-file conflicts, and recompiled all 257 workflows.

[pelikhan]

@copilot merge main and recompile

[Copilot]

@copilot merge main and recompile

Done. Merged origin/main (2 new commits), resolved lock-file conflicts, and recompiled all 257 workflows.

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.82.11