v0.3.30

What's Changed

• [Repo Assist] refactor: extract SortedSetKeys and atomicWriteFile to eliminate code duplication by @github-actions[bot] in #8042
• [test-improver] Improve tests for urlutil package by @github-actions[bot] in #8008
• fix: widen gateway.domain validation to accept RFC-1123 topology hostnames by @lpcox with @Copilot in #8044
• rust-guard: extract first_matching_label helper and add label-check unit tests by @lpcox with @Copilot in #8047
• refactor(mcp): eliminate duplicate cursor cycle detection by delegating paginateAll to PaginateAll by @lpcox with @Copilot in #8049

Full Changelog: v0.3.29...v0.3.30

v0.3.29

What's Changed

• [log] log: add debug logging to mcp/pagination.go by @github-actions[bot] in #7950
• 🔄 chore: pin gh-aw schema URL to v0.80.9 by @github-actions[bot] in #7966
• [Repo Assist] feat(tracing): add GenAIOperationName and GenAIAgentName to mcp.tool_call spans by @github-actions[bot] in #7981
• rust-guard: deduplicate repo fallback resolution and private-flag field checks by @lpcox with @Copilot in #7988
• [test] Add tests for oidc.fetchToken by @github-actions[bot] in #7986
• [test-improver] Improve tests for cmd tracing helpers by @github-actions[bot] in #7951
• Add opt-in observed URL domain audit pipeline for tool responses and write sinks by @lpcox with @Copilot in #7987
• Improve OTel GenAI span semantics and DIFC/rate-limit milestone visibility by @lpcox with @Copilot in #7989
• Deduplicate WASM guards env var constant across guard/server packages by @lpcox with @Copilot in #7991
• Refactor duplicated []string→[]interface{} conversions into strutil.StringsToAny by @lpcox with @Copilot in #7990
• Refactor DIFC tool classification placement and extract middleware content-rewrite helpers by @lpcox with @Copilot in #7992
• Refactor DIFC helper placement and extract response content-rewrite helpers from jqschema middleware by @lpcox with @Copilot in #8000
• docs: add internal/urlutil/ to CONTRIBUTING.md project structure by @lpcox with @Copilot in #8004
• [log] Add debug logging to urlutil/domains by @github-actions[bot] in #8005

Full Changelog: v0.3.28...v0.3.29

v0.3.28

What's Changed

• [log] Add debug logging to proxy/response_transform.go by @github-actions[bot] in #7739
• [test] Add tests for middleware.wrapToolHandler by @github-actions[bot] in #7736
• [test-improver] Improve tests for tracing package by @github-actions[bot] in #7740
• chore: recompile all workflows by @lpcox in #7766
• refactor: extract registrationErrors helper to deduplicate error-tracking in tool registration by @lpcox with @Copilot in #7763
• refactor(config): extract applyCommonServerConfigFields to eliminate stdio/HTTP duplication by @lpcox with @Copilot in #7764
• Refactor duplicate label-agent guard initialization into shared helper by @lpcox with @Copilot in #7758
• Deduplicate Phase 5 DIFC collection filtering across unified server and proxy by @lpcox with @Copilot in #7759
• fix(guard): cover 4 DIFC labeling gaps — get_code_quality_finding, ui_get, add_gpg_key, add_ssh_key by @lpcox with @Copilot in #7765
• Refactor DIFC pre-phase error handling into a shared guard helper by @lpcox with @Copilot in #7760
• rust-guard: simplify default_secrecy conditions; remove lifetime noise from integrity helpers by @lpcox with @Copilot in #7762
• [Repo Assist] refactor(rust-guard): consolidate check_file_secrecy into is_sensitive predicate by @github-actions[bot] in #7786
• refactor: semantic function clustering — reduce cross-concern placement and duplication by @lpcox with @Copilot in #7761
• Validate TOML gateway.port and cover config.example.toml by @lpcox with @Copilot in #7792
• Reduce Repo Assist GitHub MCP tool scope by @lpcox with @Copilot in #7794
• Upgrade wazero to v1.12.0 and harden WASM compilation cache shutdown by @lpcox with @Copilot in #7793
• [test] Add tests for config.validateServerAgainstSchema by @github-actions[bot] in #7798
• Refactor duplicated filter validation and localize RPC/launcher helpers by @lpcox with @Copilot in #7802
• [test-improver] Improve tests for cmd/serve package by @github-actions[bot] in #7805
• [Repo Assist] refactor(httputil): centralize TLS min-version policy by @github-actions[bot] in #7834
• Allow Nightly Schema Updater to complete Rust-guard verification by @lpcox with @Copilot in #7839
• Deduplicate command tracing provider lifecycle wiring by @lpcox with @Copilot in #7840
• Centralize TLS config construction behind shared httputil helpers by @lpcox with @Copilot in #7841
• Add debug logging to shared server handlers by @lpcox with @Copilot in #7843
• Close GitHub guard coverage gaps for 4 CLI-only mutating operations by @lpcox with @Copilot in #7842
• [Repo Assist] fix(httputil): remove duplicate TLS declarations by @github-actions[bot] in #7878
• [test-improver] Improve tests for sys package by @github-actions[bot] in #7848
• Remove duplicate TLS declarations in internal/httputil by @lpcox with @Copilot in #7887
• Remove duplicate TLS helpers and consolidate DIFC/proxy utility functions by @lpcox with @Copilot in #7889
• fix: remove duplicate TLS helpers in httputil; add create-issue safe output to nightly schema updater by @lpcox with @Copilot in #7884
• Deduplicate shared config validation across TOML and stdin paths by @lpcox with @Copilot in #7885
• Refactor ServerFileLogger initialization to eliminate duplicated struct construction by @lpcox with @Copilot in #7886
• Add synthetic guard coverage for CLI-only issue, repository, and Projects v2 mutations by @lpcox with @Copilot in #7888
• [test] Add tests for config.unmarshalStringListOrExpression by @github-actions[bot] in #7895
• Tighten Go Logger workflow scope and validation behavior by @lpcox with @Copilot in #7891
• Raise Test Coverage Improver daily AI credit guardrail by @lpcox with @Copilot in #7890
• Raise Repo Assist AI credit budget to 1500 to stop budget-guardrail failure issues by @lpcox with @Copilot in #7883
• [log] Add debug logging to DIFC policy helper functions by @github-actions[bot] in #6501
• 🔄 chore: pin schema URL to v0.79.8 by @github-actions[bot] in #7920
• [log] Add debug logging to proxy/router.go by @github-actions[bot] in #7902
• [test-improver] Improve tests for launcher connection pool by @github-actions[bot] in #7903
• guard: add 11 CLI-only GitHub operations to guard coverage by @lpcox with @Copilot in #7935
• [rust-guard] Hoist commit SHA extraction in commit_integrity and add default-branch commit-context coverage by @lpcox with @Copilot in #7939
• refactor: co-locate sys tool handlers and extract savePayload to payload.go by @lpcox with @Copilot in #7934
• refactor(logger): extract emit helper to eliminate Printf/Print duplication by @lpcox with @Copilot in #7936
• refactor: add strutil.InterfaceToIntString to deduplicate JSON numeric extraction by @lpcox with @Copilot in #7937
• [test] Add tests for guard.FindServerWASMGuardFile and GetWASMGuardsRootDir by @github-actions[bot] in #7941
• feat(guard): wazero security hardening — memory cap, backend call limit, interpreter tests by @lpcox with @Copilot in #7938

Full Changelog: v0.3.27...v0.3.28

v0.3.27

What's Changed

• [log] Add debug logging to config/config_tracing.go by @github-actions[bot] in #7599
• [test-improver] Improve tests for mcptest example package by @github-actions[bot] in #7600
• [Repo Assist] refactor: replace strings.SplitN(x, sep, 2) with strings.Cut by @github-actions[bot] in #7628
• [test] Add tests for config.StdinGatewayConfig.UnmarshalJSON and validateAgainstCustomSchema by @github-actions[bot] in #7597
• rust-guard: dedupe unsafe output write-back and unify search scope labeling arms by @lpcox with @Copilot in #7629
• Deduplicate LogMarshaledForDebug callback wiring with formatted helper by @lpcox with @Copilot in #7631
• feat(cmd): cobra improvements from go-fan module review by @lpcox with @Copilot in #7630
• refactor(guard): extract RunLabelAgentForAgent to eliminate duplicate LabelAgent init pattern by @lpcox with @Copilot in #7632
• refactor: semantic function clustering — collaborator helpers, SessionSuffix, middleware split, AgentTagsSnapshot by @lpcox with @Copilot in #7633
• [test] Add tests for config.AllowOnlyPolicy.UnmarshalJSON by @github-actions[bot] in #7639
• Support GitHub MCP Server v1.3.0: PR commits routing, get_file_blame spec, and guard docs by @lpcox with @Copilot in #7641
• rust-guard: extract extract_item_number_opt and add MinIntegrity::build_labels by @lpcox with @Copilot in #7679
• [test-improver] Improve tests for auth package by @github-actions[bot] in #7650
• Improve gojq usage: ValueError handling, WithVariables, filter cache, inferSchema decoupling, any alias by @lpcox with @Copilot in #7680
• docs: document MCP_GATEWAY_SHUTDOWN_TIMEOUT environment variable by @lpcox with @Copilot in #7683
• [Repo Assist] fix(run_containerized): skip port mapping validation for host-networked containers by @github-actions[bot] in #7684
• fix(nightly-schema-updater): switch model from deprecated claude-sonnet-4.6 to gpt-5.4 by @lpcox with @Copilot in #7682
• Fix Large Payload Tester: move secret to top level, harden agent prompt by @lpcox with @Copilot in #7681
• [test] Add tests for auth.GenerateRandomAgentID by @github-actions[bot] in #7691
• Refactor HTTP transport auth helpers and simplify sys/tracing boundaries by @lpcox with @Copilot in #7693
• [log] Add debug logging to internal/mcp/helpers.go by @github-actions[bot] in #7695
• [test-improver] Improve tests for proxy/graphql_rewrite by @github-actions[bot] in #7696
• Set explicit supported Copilot model for GitHub Guard Coverage Checker by @lpcox with @Copilot in #7699
• Add debug instrumentation to mcpresult content parsing and extraction by @lpcox with @Copilot in #7698
• Implement refusal-labels guard policy and align health specVersion with MCP Gateway v1.14.0 by @lpcox with @Copilot in #7700
• fix: recompile duplicate-code-detector workflow by @lpcox with @Copilot in #7697

Full Changelog: v0.3.26...v0.3.27

v0.3.26

What's Changed

• [test] Add tests for strutil.DeepCloneJSON by @github-actions[bot] in #7232
• [log] config/config_stdin: add debug logging to helper functions by @github-actions[bot] in #7239
• [Repo Assist] refactor(launcher): eliminate double config lookup in GetOrLaunchForSession by @github-actions[bot] in #7268
• [test-improver] Improve tests for strutil package (DeepCloneJSON) by @github-actions[bot] in #7240
• Tighten wazero guard lifecycle semantics and document start suppression by @Copilot in #7275
• Refactor launcher connection error logging into internal/launcher by @Copilot in #7276
• Reconcile CONTRIBUTING.md with actual package layout and direct dependency surface by @Copilot in #7278
• Refactor dead helpers and trivial guard wrappers; consolidate session ID utility by @Copilot in #7279
• [test-improver] Improve tests for httputil package (endpoint helpers) by @github-actions[bot] in #7286
• Add direct repo-scope fallback coverage in Rust guard by @Copilot in #7274
• [Repo Assist] refactor(rust-guard): extract short_sha helper to fix 5-site duplication and 7-vs-8 inconsistency by @github-actions[bot] in #7316
• refactor: replace filteredServerCache with generic syncutil.TTLCache by @Copilot in #7277
• [test] Add tests for difc.BuildReflectResponse and tagsToStrings by @github-actions[bot] in #7322
• Refactor duplicated first-content-item rewrite logic in rewriteEnvelopeTextPayload by @Copilot in #7324
• Reconcile CONTRIBUTING.md with actual strutil deep-clone location by @Copilot in #7326
• Clarify strutil scope for time/duration formatting helpers by @Copilot in #7327
• Tighten testify fatal assertions in dependent test paths by @Copilot in #7323
• Extract shared MCP content-slice normalization by @Copilot in #7325
• fix: resolve test deadlock and integration timeout by @lpcox in #7330
• fix: resolve test deadlock/timeout + recompile workflows by @lpcox in #7337
• fix(run.sh): use MCP_GATEWAY_AGENT_ID with deprecated fallback for MCP_GATEWAY_API_KEY by @Copilot in #7342
• refactor: consolidate over-fragmented files in internal/ packages by @Copilot in #7343
• [Repo Assist] refactor(rust-guard): add MinIntegrity::from_policy_str to unify duplicate parsers by @github-actions[bot] in #7377
• refactor(mcp): remove redundant entry-level logs and cross-reference list* methods by @Copilot in #7384
• Refactor auth/HMAC request rejection call sites to remove duplicated constants by @Copilot in #7383
• Handle wrapped jsonschema validation errors in config schema formatting by @Copilot in #7385
• rust-guard: add MinIntegrity::from_policy_str to unify integrity parsers + extract_repo_from_item tests by @Copilot in #7386
• [test-improver] Improve tests for mcpresult package by @github-actions[bot] in #7345
• 🔄 chore: update schema URL to v0.79.4 by @github-actions[bot] in #7362
• chore: upgrade workflows to gh-aw v0.79.6 by @lpcox in #7432
• refactor: move outlier functions to semantically correct files/packages by @Copilot in #7394
• 🔄 chore: update schema URL to v0.79.6 by @github-actions[bot] in #7410
• fix: increase max-ai-credits default for duplicate-code-detector workflow by @Copilot in #7424
• Add unit tests for LogUnrecognizedEndpointPassthrough by @Copilot in #7421
• rust-guard: delegate parse_integrity to MinIntegrity::from_policy_str + add response_items tests by @Copilot in #7422
• refactor: go-sdk module review quick wins (5 items from #7416) by @Copilot in #7423
• guard: cover get_file_blame, create_discussion, edit_discussion by @Copilot in #7425
• Raise Repo Assist fallback AI credit cap to prevent guardrail-triggered agent aborts by @Copilot in #7440
• [test] Add tests for config.ValidateStringArrayField and config.IsValidAllowOnlyReposValue by @github-actions[bot] in #7443
• feat: OTLP multi-endpoint fan-out via GH_AW_OTLP_ENDPOINTS by @Copilot in #7446
• [Repo Assist] fix(tracing): isolate provider tests from ambient GH_AW_OTLP_ENDPOINTS by @github-actions[bot] in #7478
• [test-improver] Improve tests for mcp package: add PaginateAll coverage by @github-actions[bot] in #7451
• refactor: fix package placement and consolidate micro-files per semantic clustering analysis by @Copilot in #7483
• Reconcile proxy-mode coverage docs with current implementation by @Copilot in #7484
• Refactor fanout exporter concurrent dispatch by @Copilot in #7486
• Handle JSON-form GH_AW_OTLP_ENDPOINTS in tracing provider and isolate inherited env in provider tests by @Copilot in #7482
• [WIP] Fix Go Logger Enhancement workflow failure by @Copilot in #7485
• [test] Add tests for syncutil.TTLCache.GetOrCreate with maxSize <= 0 by @github-actions[bot] in #7491
• [test-improver] Improve tests for tracing package by @github-actions[bot] in #7497
• 🔄 chore: update schema URL to gh-aw v0.79.8 by @github-actions[bot] in #7512
• [test] Add tests for config.normalizeAgentID, effectiveAgentID, and validateToolResponseFilters by @github-actions[bot] in #7530
• [Repo Assist] perf(sanitize): pre-compile separator regex; use json.Compact in SanitizeJSON by @github-actions[bot] in #7528
• refactor(tracing): extract private startSpan helper to eliminate boilerplate in span factory functions by @Copilot in #7535
• refactor: semantic function clustering — consolidate rate-limit utils, httputil, and logger helpers by @Copilot in #7532
• docs: reconcile OTLP fan-out env var and sanitize package visibility by @Copilot in #7534
• tracing: fix StartProxyForwardSpan dead code by adding serverAddress param by @Copilot in #7536
• fix(tracing): align semconv to v1.41.0, preserve resource attributes on schema-URL conflict by @Copilot in #7531
• [test-improver] Improve tests for httputil package by @github-actions[bot] in #7546
• 🔄 chore: update schema URL to v0.79.9 by @github-actions[bot] in #7562
• refactor: document strict vs. lenient content-item semantics in convertMapToCallToolResult by @Copilot in #7571
• docs: add POST /close to API Endpoints section in README by @Copilot in #7572
• Deduplicate logger startup and shutdown wiring with shared registries by @Copilot in #7575
• refactor: extract validateW3CHexID to eliminate duplicate W3C hex-ID validation by @Copilot in #7573
• [rust-guard] Deduplicate item_number extraction and add direct commit_integrity coverage by @Copilot in #7577
• refactor(mcp): eliminate listTools/listResources/listPrompts wrapper methods by @Copilot in #7574
• [Repo Assist] test: upgrade assert.NoError to require.NoError where result is used downstream by @github-actions[bot] in #7591
• Fix missing OTel span error recording in proxy handler; consolidate to semconv/v1.41.0 by @Copilot in #7576

Full Changelog: v0.3.25...v0.3.26

v0.3.25

What's Changed

• Refactor internal helper placement and naming to resolve semantic clustering outliers by @Copilot in #7170
• [log] Add debug logging to difc/reflect.go by @github-actions[bot] in #7173
• 🔄 chore: pin schema URL to v0.77.5 (latest stable release) by @github-actions[bot] in #7195
• rust-guard: extract item_has_config_label helper + simplify get_string_field by @Copilot in #7207
• refactor: eliminate 4 cross-package duplicate-code patterns (server/proxy) by @Copilot in #7209
• refactor(proxy/router): extract repoMethodArgs/repoMethodResourceArgs helpers to eliminate Actions route duplication by @Copilot in #7211
• security: disable $ENV in tool response filters and sync validation compile options by @Copilot in #7208
• fix: run_containerized.sh now accepts MCP_GATEWAY_AGENT_ID as primary deployment gate variable by @Copilot in #7212
• refactor: eliminate duplicate extractArgs closures in proxy/router.go by @Copilot in #7210
• Proxy: allowlist metadata endpoints and passthrough unrecognized reads with empty DIFC labels by @Copilot in #7227
• Align containerized env gate docs with MCP_GATEWAY_AGENT_ID by @Copilot in #7229
• ci: add race-test job to catch concurrency bugs by @Copilot in #7228

Full Changelog: v0.3.24...v0.3.25

v0.3.24

What's Changed

• 🔄 chore: update schema URL to gh-aw v0.78.2 by @github-actions[bot] in #7082
• [log] proxy/handler: add debug logging to forwardAndReadBody and writeEmptyResponse by @github-actions[bot] in #7066
• [Repo Assist] perf(middleware): skip json.Marshal for small text responses (fast path) by @github-actions[bot] in #7094
• [test] Add tests for mcpresult.ExtractTextContent by @github-actions[bot] in #7060
• [test-improver] Improve tests for mcp package by @github-actions[bot] in #7067
• docs: correct ${VAR} expansion scope and add missing internal packages by @Copilot in #7102
• refactor(mcp): extract withReconnectLock to eliminate reconnect boilerplate by @Copilot in #7103
• Refactor TimeoutPositive to reuse TimeoutMinimum and remove duplicated validator logic by @Copilot in #7105
• Refactor semantic function clustering targets: remove wrapper indirection and co-locate thin/misplaced functions by @Copilot in #7101
• Refactor cmd HTTP server lifecycle into shared serveAndWait helper by @Copilot in #7104
• [test] Add tests for schema compilation and guard policy error paths by @github-actions[bot] in #7112
• Rename gateway “API key” surface to Agent ID with compat aliases and X-Agent-ID routing by @Copilot in #7114
• 🔄 chore: update schema URL to v0.78.3 by @github-actions[bot] in #7138
• [log] Add debug logging to HTTP server lifecycle in serve.go by @github-actions[bot] in #7123
• [test-improver] Improve tests for launcher/health_monitor by @github-actions[bot] in #7124
• [Repo Assist] refactor(server): extract session ID header extraction into helper by @github-actions[bot] in #7151
• [Repo Assist] refactor: remove deprecated API key alias functions by @github-actions[bot] in #7150
• refactor: consolidate map utilities, deep clone, and logger constant by @Copilot in #7156
• docs: fix three documentation inaccuracies (port field, MCP methods, tracing var expansion) by @Copilot in #7157
• refactor(server): deduplicate session ID extraction into a shared helper by @Copilot in #7158
• Remove deprecated API-key aliases and complete AgentID rename by @Copilot in #7159
• [test] Add tests for launcher.handleErrorState and launcher.clearServerForRestart by @github-actions[bot] in #7161
• Add unauthenticated /reflect endpoint for live DIFC label snapshots in gateway and proxy modes by @Copilot in #7168
• fix(proxy): passthrough /rate_limit for CLI proxy liveness probe by @lpcox in #7187

Full Changelog: v0.3.23...v0.3.24

v0.3.23

What's Changed

• [log] Add debug logging to unified server functions by @github-actions[bot] in #6769
• [Repo Assist] refactor(config): extract detailForKeyword to eliminate duplicate guidance strings by @github-actions[bot] in #6796
• [test-improver] Improve tests for proxy package by @github-actions[bot] in #6770
• [test] Add tests for server.copyToolCallLimits by @github-actions[bot] in #6766
• Document --otlp-sample-rate in tracing docs by @Copilot in #6798
• Refactor shared pagination/map-extraction paths and isolate server rate-limit helpers by @Copilot in #6799
• Refactor formatErrorContext to centralize schema guidance and remove duplicated addDetail logic by @Copilot in #6797
• [test] Add tests for config.LoadFromStdin and normalizeLocalType by @github-actions[bot] in #6808
• [log] Add debug logging to tracing span helper functions by @github-actions[bot] in #6812
• [test-improver] Improve tests for config package by @github-actions[bot] in #6813
• Refactor semantic clustering: collapse thin server/logger files and extract proxy address helper by @Copilot in #6831
• Collapse RPC logging split API and remove duplicated tag-branching by @Copilot in #6829
• Reconcile config/env docs with actual JSON stdin and launcher variable behavior by @Copilot in #6830
• refactor(logger): eliminate logger level factory duplication with generics by @Copilot in #6828
• Optimize Rust guard label sharing and tool classification lookups by @Copilot in #6846
• [test-improver] Improve tests for tracing package by @github-actions[bot] in #6502
• [Repo Assist] refactor(tracing): unify semconv import to v1.34.0 in span_helpers by @github-actions[bot] in #6853
• Align tracing semconv usage and enrich OTel span attributes by @Copilot in #6847
• fix(proxy): route /api/graphql to correct upstream for GHE Cloud data residency by @Copilot in #6861
• [test] Add tests for guard.wasmAlloc, wasmDealloc, tryCallWasmFunction allocator path, and decodeWasmCallResult by @github-actions[bot] in #6864
• refactor: consolidate orphaned variable file and single-function strutil files by @Copilot in #6867
• [log] Add debug logging to rate_limit.go by @github-actions[bot] in #6870
• 🔄 chore: update schema URL and embedded schema to gh-aw v0.77.5 by @github-actions[bot] in #6886
• [test-improver] Improve tests for cmd/flags_logging by @github-actions[bot] in #6871
• fix(schema): add timeout fields to embedded JSON schema by @lpcox in #6908
• [test] Add tests for config.detailForKeyword and formatErrorContext branches by @github-actions[bot] in #6907
• Refactor guard policy integrity normalization to remove duplicated validation paths by @Copilot in #6915
• refactor: remove direct pflag import from tracing.go by @Copilot in #6914
• Reconcile config/docs for TOML-only rate-limit fields and legacy JSON stdin aliases by @Copilot in #6916
• rust-guard: sort BLOCKED_TOOLS, use binary_search, promote login to #[cfg(test)] by @Copilot in #6913
• refactor: eliminate integrity-level duplication, relocate truncateCacheKeyForLog, extract jsonutil package by @Copilot in #6911
• [log] Add debug logging to guard Registry query methods by @github-actions[bot] in #6921
• [test-improver] Improve tests for mcp pagination helpers by @github-actions[bot] in #6922
• Rust guard: remove list_commits secrecy clone and add project-item path labeling regressions by @Copilot in #6941
• Reduce internal tty API surface to the only production-used helper by @Copilot in #6942
• [log] Replace stdlib log calls with logRouted debug logger in routed.go by @github-actions[bot] in #6959
• [test-improver] Improve tests for envutil package by @github-actions[bot] in #6960
• [Repo Assist] perf(rust-guard): eliminate redundant Vec deep-clones in get_file_contents and list_releases by @github-actions[bot] in #6990
• [test] Add tests for mcp.callSDKMethodWithReconnect and reconnectSDKTransport by @github-actions[bot] in #6956
• Consolidate integrity-level normalization/validation across config and guard by @Copilot in #6996
• Bump MCP Go SDK to v1.6.1 and add DisableStandaloneSSE upgrade canary by @Copilot in #6995
• Refactor MCP list methods via shared generic SDK pagination adapter by @Copilot in #6997
• Refactor remaining semantic-clustering outliers in config/server utilities by @Copilot in #6999
• Reconcile configuration/docs semantics and Go version guidance with current implementation by @Copilot in #6998
• [log] Add debug logging to tracing/provider.go by @github-actions[bot] in #7010
• [test-improver] Improve tests for strutil package by @github-actions[bot] in #7011
• [test] Add tests for strutil.CopyTrimmedStringIntMap by @github-actions[bot] in #7007
• Restore OpenTelemetry stdin schema support for headers and correct sample_rate docs by @Copilot in #7042
• [Repo Assist] test(rust-guard): add apply_tool_labels tests for gist operations by @github-actions[bot] in #7044
• Unify payload size threshold validation across TOML and stdin config paths by @Copilot in #7045
• Harden Cobra command behavior: graceful proxy shutdown, default consistency, and completion updates by @Copilot in #7047
• Collapse duplicate unregistered custom-type handling in config validation by @Copilot in #7043
• Deduplicate canonical guard-policy missing-key error message by @Copilot in #7046
• Refactor MCP text-result parsing and remove responseWriter StatusCode shadowing by @Copilot in #7041
• rust-guard: hoist list_releases merged integrity + add delete_gist secrecy/integrity contract test by @Copilot in #7048

Full Changelog: v0.3.22...v0.3.23

v0.3.22

What's Changed

• [test] Add tests for envutil.deriveAPIFromServerURL — http scheme and edge cases by @github-actions[bot] in #6708
• Guard coverage: add explicit sub_issue_write read-write classification test by @Copilot in #6710
• [log] Add debug logging to jq middleware filter functions by @github-actions[bot] in #6715
• [Repo Assist] refactor(guard): extract parseDIFCTagsFromAny helper in wasm_parse.go by @github-actions[bot] in #6743
• [test-improver] Improve tests for tracing package by @github-actions[bot] in #6716
• Refactor duplicated DIFC tag parsing in WASM response handling by @Copilot in #6748
• Refactor DIFC/guard helper ownership to restore package boundaries by @Copilot in #6749
• Refactor duplicated owner/repo/number parsing in REST backend caller by @Copilot in #6751
• Centralize logger level wrapper registration by @Copilot in #6752
• Correct AGENTS.md default path for MCP_GATEWAY_WASM_CACHE_DIR by @Copilot in #6750
• Refactor duplicated MCP handler config setup in transport and routed server paths by @Copilot in #6753
• Harden jsonschema/v5 validation diagnostics and remote schema fetching by @Copilot in #6747

Full Changelog: v0.3.21...v0.3.22

v0.3.21

What's Changed

• 🔄 chore: update schema URL to v0.76.1 by @github-actions[bot] in #6565
• [Repo Assist] refactor(rust-guard): merge identical security-alert match arms and add actions_get tests by @github-actions[bot] in #6583
• Refactor duplicated backend registration failure reporting in tool registry by @Copilot in #6589
• rust-guard: collapse duplicated repo-write match arms and add pre-emptive tool coverage by @Copilot in #6587
• Clarify logger fallback contract and add direct fallback-handler coverage by @Copilot in #6590
• Improve OTel trace signal quality: stack traces, route cardinality, rate-limit status, and container resource metadata by @Copilot in #6588
• [test] Add tests for server.enforceToolCallLimit by @github-actions[bot] in #6598
• [Repo Assist] refactor: extract RecordSpanError helper to eliminate duplicate span error recording by @github-actions[bot] in #6632
• [test-improver] Improve tests for server HMAC middleware by @github-actions[bot] in #6601
• Refactor tracing expansion placement and extract shared JSON deep-clone utility by @Copilot in #6636
• rust-guard: remove per-item secrecy Vec clones in PR/issue labeling by @Copilot in #6641
• Strengthen TOML parse-error guarantees and clarify tracing key precedence by @Copilot in #6640
• refactor(difc): extract EvaluateCoarseAccess to eliminate duplicated Phase 2 logic by @Copilot in #6639
• [log] Add debug logging to launcher.go by @github-actions[bot] in #6600
• Add explicit DIFC labeling for list_issue_fields in GitHub guard by @Copilot in #6637
• Refactor span error recording into tracing helper and unify error-path instrumentation by @Copilot in #6638
• [log] Add logging to EvaluateCoarseAccess in difc/pipeline_decisions.go by @github-actions[bot] in #6650
• [test-improver] Improve tests for tracing span helpers by @github-actions[bot] in #6651
• [test] Add tests for logger error paths: MarkdownLogger.Close, FileLogger.Log, Logger.Print by @github-actions[bot] in #6647
• fix(proxy): use RecordSpanError for DIFC access-denied spans by @lpcox in #6679
• perf(rust-guard): eliminate wasted allocations in apply_tool_labels and project-item loop by @lpcox in #6680
• rust-guard: add issue_write_ff_remote_mcp_issue_fields to WRITE_OPERATIONS and tool_rules by @lpcox in #6678
• fix(tracing): semconv v1.27.0→v1.34.0, fix mcp.tool_call attribute misuse, add server.address by @Copilot in #6683
• refactor: extract shared DIFC enforcement pipeline to internal/guard/pipeline.go by @Copilot in #6685
• docs: reconcile documentation with implementation (9 discrepancies) by @Copilot in #6686
• refactor: move collaborator_permission to proxy, add strutil.RandomBytes by @Copilot in #6687
• refactor: extract repeated OTEL span-start patterns into named tracing helpers by @Copilot in #6684
• [Repo Assist] refactor: move TruncateSessionID from auth to strutil by @github-actions[bot] in #6704

Full Changelog: v0.3.20...v0.3.21