Update GitHub MCP server default to v1.7.0 by Copilot · Pull Request #47923 · github/gh-aw

Copilot · 2026-07-25T05:19:07Z

Bumps DefaultGitHubMCPServerVersion from v1.6.0 → v1.7.0 and regenerates all lock files with updated container SHA pins.

What's new in v1.7.0

Server-to-server auth for GitHub Apps via stdio (enables enterprise/cloud workloads)
Projects tools pagination improvements
MCP 2026-07-28 spec support via go-sdk v1.7.0-pre.3
Lockdown mode improvements

Changes

pkg/constants/version_constants.go: bump DefaultGitHubMCPServerVersion
All 261 workflow .lock.yml files regenerated (double recompile to refresh SHA pins)

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 12.3 AIC · ⌖ 8.43 AIC · ⊞ 7.1K · ◷
_{Comment /souschef to run again}

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-07-25T05:20:16Z

@copilot update container shas and recompile

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-07-25T05:33:47Z

@copilot update container shas and recompile

Done in 3f680b1. Updated the container SHA pin in .github/aw/actions-lock.json for ghcr.io/github/github-mcp-server:v1.7.0 (digest sha256:c491ffdf...), removed the stale v1.6.0 entry, and ran a double recompile. All 261 lock files now embed the digest-pinned image reference.

github-actions · 2026-07-25T05:50:50Z

Great work! 🚀 This PR looks ready for review.

This version bump to GitHub MCP v1.7.0 brings important improvements:

Server-to-server auth for GitHub Apps via stdio (enterprise/cloud workloads)
Projects tools pagination improvements
MCP 2026-07-28 spec support
Lockdown mode improvements

The PR is well-described, focused on a single change (version bump + lock file regeneration), and follows the project's recommended agentic development process (Copilot agent-created). The 261 lock files regenerated with double-recompile are expected for container SHA pin refresh. Ready to move forward! ✅

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

patchdiff.githubusercontent.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "patchdiff.githubusercontent.com"

See Network Configuration for more information.

Generated by ✅ Contribution Check · sonnet46 · 59.5 AIC · ⌖ 7.62 AIC · ⊞ 6.2K · ◷

github-actions · 2026-07-25T07:06:21Z

🤖 PR Triage

Field	Value
Category	chore
Risk	medium
Score	45 / 100
Score breakdown	impact 28 + urgency 10 + quality 7
Action	`fast_track`

Rationale: Bumps GitHub MCP server default from v1.6.0 → v1.7.0, regenerating 260 lock files with updated SHA pins. Large-footprint chore but mechanically generated. Still DRAFT — needs undraft and CI run before merging.

Next step: Undraft and run CI to validate pin regeneration.

Generated by 🔧 PR Triage Agent · sonnet46 · 44.5 AIC · ⌖ 5.13 AIC · ⊞ 5.7K · ◷

github-actions · 2026-07-25T07:49:02Z

✅ Test Quality Sentinel completed test quality analysis.

No test files were added or modified in this PR. Test Quality Sentinel skipped.

github-actions · 2026-07-25T07:49:04Z

✅ Design Decision Gate 🏗️ completed the design decision gate check.

No ADR enforcement needed: PR #47923 does not have the 'implementation' label and has only 11 new lines of code in business logic directories (threshold: >100).

github-actions · 2026-07-25T07:49:11Z

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

github-actions · 2026-07-25T07:49:12Z

✅ PR Code Quality Reviewer completed the code quality review.

Copilot

Pull request overview

Updates the default GitHub MCP server from v1.6.0 to v1.7.0 and refreshes generated container pins.

Changes:

Bumps the default server version.
Updates action-pin registries and generated workflow locks.
Leaves 13 Wasm golden fixtures stale, causing golden-test failures.

Show a summary per file

File	Description
`pkg/constants/version_constants.go`	Bumps the default version.
`pkg/workflow/data/action_pins.json`	Updates the image digest.
`pkg/actionpins/data/action_pins.json`	Updates the image digest.
`.github/aw/actions-lock.json`	Updates the shared image pin.
`.github/workflows/smoke-github-claude.lock.yml`	Refreshes generated pin.
`.github/workflows/smoke-copilot-small.lock.yml`	Refreshes generated pin/config.
`.github/workflows/smoke-copilot-mai.lock.yml`	Refreshes generated pin.
`.github/workflows/smoke-claude-on-copilot.lock.yml`	Refreshes generated pin.
`.github/workflows/smoke-antigravity.lock.yml`	Refreshes generated pin.
`.github/workflows/pr-description-caveman.lock.yml`	Refreshes generated pin.
`.github/workflows/outcome-collector.lock.yml`	Refreshes generated pin.
`.github/workflows/firewall.lock.yml`	Refreshes generated pin/config.
`.github/workflows/example-permissions-warning.lock.yml`	Refreshes generated pin/config.
`.github/workflows/example-failure-category-filter.lock.yml`	Refreshes generated pin/config.
`.github/workflows/eslint-miner.lock.yml`	Refreshes generated pin.
`.github/workflows/designer-drift-audit.lock.yml`	Refreshes generated pin.
`.github/workflows/daily-windows-terminal-integration-builder.lock.yml`	Refreshes generated pin.
`.github/workflows/daily-team-status.lock.yml`	Refreshes generated pin/config.
`.github/workflows/daily-safeoutputs-git-simulator.lock.yml`	Refreshes generated pin.
`.github/workflows/daily-max-ai-credits-test.lock.yml`	Refreshes generated pin/config.
`.github/workflows/daily-formal-spec-verifier.lock.yml`	Refreshes generated pin.
`.github/workflows/daily-credit-limit-test.lock.yml`	Refreshes generated pin/config.
`.github/workflows/daily-byok-ollama-test.lock.yml`	Refreshes generated pin/config.
`.github/workflows/daily-assign-issue-to-user.lock.yml`	Refreshes generated pin.
`.github/workflows/copilot-cli-deep-research.lock.yml`	Refreshes generated pin.
`.github/workflows/copilot-centralization-optimizer.lock.yml`	Refreshes generated pin/config.
`.github/workflows/agentic-token-optimizer.lock.yml`	Refreshes generated pin.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 112/260 changed files
Comments generated: 1
Review effort level: Medium

@@ -60,7 +60,7 @@ const DefaultPiVersion Version = "0.80.10"
 const DefaultOpenCodeVersion Version = "1.2.14"

 // DefaultGitHubMCPServerVersion is the default version of the GitHub MCP server Docker image
-const DefaultGitHubMCPServerVersion Version = "v1.6.0"
+const DefaultGitHubMCPServerVersion Version = "v1.7.0"


github-actions

The changes are a consistent, digest-pinned version bump of ghcr.io/github/github-mcp-server from v1.6.0 to v1.7.0. All references across both changed files are updated in lockstep with the new digest. No issues found.

🧵 Reviewed using Impeccable skills by Impeccable Skills Reviewer · sonnet46 · 20.8 AIC · ⌖ 5.2 AIC · ⊞ 5K

…n changes Add normalization for DefaultGitHubMCPServerVersion in both the Go wasm_golden_test.go and the JS test-wasm-golden.mjs so that future bumps to DefaultGitHubMCPServerVersion don't break golden tests. The default github-mcp-server image version is now replaced with GH_MCP_VERSION placeholder during golden comparison, mirroring the existing treatment of DefaultFirewallVersion and DefaultMCPGatewayVersion. Regenerate all 13 affected golden fixtures to use the new placeholder. Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-07-25T08:17:08Z

@copilot run pr-finisher skill
Fix wasm golden tests to be resilient to gh MCP server changes

Done in the latest commit. Instead of just updating the golden files for v1.7.0, I've made the tests resilient to future DefaultGitHubMCPServerVersion bumps:

pkg/workflow/wasm_golden_test.go: Added testDefaultGitHubMCPServerImageRE regex and normalization step in normalizeOutput — replaces the current default version with GH_MCP_VERSION placeholder, mirroring the existing treatment of DefaultFirewallVersion/DefaultMCPGatewayVersion.
scripts/test-wasm-golden.mjs: Added the same normalization in normalizeDefaultRuntimeVersions for the Node.js wasm binary golden tests.
All 13 affected golden fixtures regenerated to use GH_MCP_VERSION instead of a hardcoded version. Pinned non-default versions (e.g. v0.30.3 in smoke-test-tools) are left unchanged.

Future version bumps to DefaultGitHubMCPServerVersion will no longer require golden file updates.

pelikhan · 2026-07-25T08:19:54Z

@copilot resolve the merge conflicts on this branch.

Copilot · 2026-07-25T08:23:47Z

@copilot please run the pr-finisher skill, address any unresolved review feedback, fix any failing checks listed below, and rerun checks once the branch is up to date.
Failed checks:

[test](https:...

Both CI failures (test and build-wasm) are the stale wasm golden test failures already fixed in the previous commit. The runs were triggered before my normalization fix was pushed. CI needs to be re-triggered (close/reopen the PR or a maintainer push) to pick up the fix.

…-mcp-server # Conflicts: # .github/workflows/daily-multi-device-docs-tester.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

… after conflict resolution Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-07-25T08:40:34Z

@copilot resolve the merge conflicts on this branch.

Done. Merged origin/main into the branch. There was one conflict in daily-multi-device-docs-tester.lock.yml (main updated the .md source while our branch updated the container pin to v1.7.0) — resolved by keeping our v1.7.0 pin and running make recompile to regenerate the correct metadata hashes from the updated source.

Done

pelikhan · 2026-07-25T08:45:37Z

/smoke-copilot

github-actions · 2026-07-25T08:46:23Z

📰 BREAKING: Smoke Copilot is now investigating this issue comment. Sources say the story is developing...

pelikhan · 2026-07-25T08:48:11Z

@copilot fix flaky tests https://github.com/github/gh-aw/actions/runs/30151521618/job/89662875069#step:4:1

github-actions · 2026-07-25T08:59:02Z

Smoke: Update GitHub MCP server default to v1.7.0
1❌ 2✅ 3✅ 4❌ 5❌ 6✅
7✅ 8✅ 9✅ 10❌ 11✅
12✅ 13✅ 14❌ 15✅ 16❌
Overall: FAIL
Author: app/copilot-swe-agent
Assignees: pelikhan, Copilot

📰 BREAKING: Report filed by Smoke Copilot · gpt54 · 75.7 AIC · ⌖ 8.29 AIC · ⊞ 21K · ◷
_{Comment /smoke-copilot to run again}
_{Add label smoke to run again}

github-actions · 2026-07-25T08:59:03Z

Comment Memory

Steel bot tap stone
Tiny tests wake sleeping gears
Smoke sing in night sky

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

📰 BREAKING: Report filed by Smoke Copilot · gpt54 · 75.7 AIC · ⌖ 8.29 AIC · ⊞ 21K · ◷
_{Comment /smoke-copilot to run again}
_{Add label smoke to run again}

github-actions

Smoke review. Test marks left on diff.

📰 BREAKING: Report filed by Smoke Copilot · gpt54 · 75.7 AIC · ⌖ 8.29 AIC · ⊞ 21K
_{Comment /smoke-copilot to run again}
_{Add label smoke to run again}

…ieldsAreSorted Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-07-25T09:00:49Z

@copilot fix flaky tests https://github.com/github/gh-aw/actions/runs/30151521618/job/89662875069#step:4:1

Fixed in the latest commit. ghcr.io/github/github-mcp-server:v1.7.0 was appended at the end of the containers section in .github/aw/actions-lock.json instead of inserted in sorted order. The entry is now in the correct lexicographic position (between ghcr.io/github/gh-aw-node and ghcr.io/github/serena-mcp-server:latest), and TestActionsLockJSONFieldsAreSorted/root_actions_lock passes locally.

github-actions · 2026-07-25T11:49:52Z

🎉 This pull request is included in a new release.

Release: v0.83.3

Update GitHub MCP server to v1.7.0

232ab69

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI assigned Copilot and pelikhan Jul 25, 2026

Copilot AI changed the title ~~Update GitHub MCP server to v1.7.0~~ Update GitHub MCP server default to v1.7.0 Jul 25, 2026

Copilot created this pull request from a session on behalf of pelikhan July 25, 2026 05:19 View session

Copilot finished work on behalf of pelikhan July 25, 2026 05:19

Copilot AI requested a review from pelikhan July 25, 2026 05:19

Copilot started work on behalf of pelikhan July 25, 2026 05:21 View session

Update container SHA pins for github-mcp-server v1.7.0 and recompile

6de55c4

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan July 25, 2026 05:34

github-actions Bot mentioned this pull request Jul 25, 2026

[Contribution Check Report] Contribution Check — 2026-07-25 #47889

Closed

github-actions Bot added pr-action:fast_track pr-agent:copilot pr-priority:medium pr-risk:medium pr-type:chore labels Jul 25, 2026

pelikhan marked this pull request as ready for review July 25, 2026 07:47

Copilot AI review requested due to automatic review settings July 25, 2026 07:47

Copilot started reviewing on behalf of pelikhan July 25, 2026 07:48 View session

Copilot AI reviewed Jul 25, 2026

View reviewed changes

github-actions Bot approved these changes Jul 25, 2026

View reviewed changes

github-actions Bot mentioned this pull request Jul 25, 2026

[aw] No-Op Runs #43499

Open

github-actions Bot mentioned this pull request Jul 25, 2026

[pr-sous-chef] PR Sous Chef run report - 2026-07-25T00:16:35Z #47879

Closed

Copilot finished work on behalf of pelikhan July 25, 2026 08:17

Copilot started work on behalf of gh-aw-bot July 25, 2026 08:18 View session

Copilot finished work on behalf of gh-aw-bot July 25, 2026 08:24

Copilot AI requested a review from gh-aw-bot July 25, 2026 08:24

Copilot started work on behalf of pelikhan July 25, 2026 08:24 View session

Copilot AI and others added 2 commits July 25, 2026 08:36

Merge remote-tracking branch 'origin/main' into copilot/update-github…

a7dbdf6

…-mcp-server # Conflicts: # .github/workflows/daily-multi-device-docs-tester.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

fix: merge main and fix daily-multi-device-docs-tester lock file hash…

a5d0c42

… after conflict resolution Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan July 25, 2026 08:41

Copilot started work on behalf of pelikhan July 25, 2026 08:49 View session

github-actions Bot mentioned this pull request Jul 25, 2026

Smoke Test: Copilot - 30151690498 #47964

Closed

github-actions Bot reviewed Jul 25, 2026

View reviewed changes

fix: sort containers in actions-lock.json to fix TestActionsLockJSONF…

4c0d113

…ieldsAreSorted Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan July 25, 2026 09:01

pelikhan merged commit ca0f9f6 into main Jul 25, 2026
22 checks passed

pelikhan deleted the copilot/update-github-mcp-server branch July 25, 2026 09:49

github-actions Bot mentioned this pull request Jul 25, 2026

Smoke Test: MAI-Code-1-Flash - 30162378433 #48022

Closed

Uh oh!

Conversation

Copilot AI commented Jul 25, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What's new in v1.7.0

Changes

Uh oh!

pelikhan commented Jul 25, 2026

Uh oh!

Copilot AI commented Jul 25, 2026

Uh oh!

github-actions Bot commented Jul 25, 2026

Uh oh!

github-actions Bot commented Jul 25, 2026

🤖 PR Triage

Uh oh!

github-actions Bot commented Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI commented Jul 25, 2026

Uh oh!

pelikhan commented Jul 25, 2026

Uh oh!

Copilot AI commented Jul 25, 2026

Uh oh!

Copilot AI commented Jul 25, 2026

Uh oh!

pelikhan commented Jul 25, 2026

Uh oh!

github-actions Bot commented Jul 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pelikhan commented Jul 25, 2026

Uh oh!

github-actions Bot commented Jul 25, 2026

Uh oh!

github-actions Bot commented Jul 25, 2026

Comment Memory

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI commented Jul 25, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jul 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Jul 25, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jul 25, 2026 •

edited

Loading

github-actions Bot commented Jul 25, 2026 •

edited

Loading

github-actions Bot commented Jul 25, 2026 •

edited

Loading

github-actions Bot commented Jul 25, 2026 •

edited

Loading

github-actions Bot commented Jul 25, 2026 •

edited

Loading