Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: github/gh-aw
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.38.1
Choose a base ref
...
head repository: github/gh-aw
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.38.2
Choose a head ref
  • 12 commits
  • 15 files changed
  • 8 contributors

Commits on Jan 29, 2026

  1. Add documentation for missing safe-output types (#12612)

    @github-actions
    github-actions[bot] authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    f67ae4d View commit details
    Browse the repository at this point in the history

  2. chore: add campaign orchestrator core rules and guidelines (#12607)

    @mnkiefer
    mnkiefer authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    4cf6cf7 View commit details
    Browse the repository at this point in the history

  3. chore: add scheduling and skip-if-no-match conditions (#12624)

    @mnkiefer
    mnkiefer authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    ae68934 View commit details
    Browse the repository at this point in the history

  4. chore: minimal campaign instuctions (#12629)

    @mnkiefer
    mnkiefer authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    e4349d9 View commit details
    Browse the repository at this point in the history

  5. chore: add workflow dispatch to campaign (#12631)

    @mnkiefer
    mnkiefer authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    24bc5c3 View commit details
    Browse the repository at this point in the history

  6. chore: recompile dependabot burndown (#12633)

    @mnkiefer
    mnkiefer authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    8ace1c7 View commit details
    Browse the repository at this point in the history

  7. chore: simplify campaign orchestrator core rules description (#12634)

    @mnkiefer
    mnkiefer authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    a0d2a9a View commit details
    Browse the repository at this point in the history

  8. Allow Deno firewall access to JSR registry (#12399) 

    * Initial plan

* Add jsr.io domains for deno

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>
Co-authored-by: Jiaxiao Zhou <duibao55328@gmail.com>
    @Mossaka
    3 people authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    f94a16e View commit details
    Browse the repository at this point in the history

  9. Expand Java ecosystem allowlist for firewall-enabled workflows (#12400) 

    * Initial plan

* chore: plan domain additions for java profile

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

* feat: expand java ecosystem allowed domains

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>
Co-authored-by: Jiaxiao Zhou <duibao55328@gmail.com>
    @Mossaka
    3 people authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    9ef4b52 View commit details
    Browse the repository at this point in the history

  10. Remove RESEARCH PROTOTYPE badge from docs homepage (#12621) 

    * Initial plan

* Initial plan for removing RESEARCH PROTOTYPE text

Co-authored-by: eaftan <4733401+eaftan@users.noreply.github.com>

* Remove RESEARCH PROTOTYPE badge and unused CSS from docs homepage

Co-authored-by: eaftan <4733401+eaftan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: eaftan <4733401+eaftan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @eaftan @pelikhan
    3 people authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    ece1068 View commit details
    Browse the repository at this point in the history

  11. Fix release workflow: clarify MCP tool call syntax to prevent agent b… 

    …ypass (#12613)

* Initial plan

* Initial investigation of MCP safe outputs update_release tool issue

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Fix release workflow: clarify MCP tool call syntax for update_release

The agent was not calling the update_release MCP tool because the example
syntax was ambiguous. Changed from `update_release({...})` to the explicit
`safeoutputs/update_release(...)` format used in other workflows.

This should help the agent understand it needs to make a direct MCP tool
call rather than writing scripts or files manually.

Also added stronger warnings against creating workaround scripts.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan
    3 people authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    2484edd View commit details
    Browse the repository at this point in the history

  12. Add W3C-style security architecture specification for replication in … 

    …other CI/CD platforms (#12453)

* Initial plan

* Add W3C-style security architecture specification v1.0.0

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Add security architecture specification summary

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Add validation document comparing spec with compiled lock files

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Add concurrency control section to security specification

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Add comprehensive markdown sanitization, URL filtering, and HTML tag filtering documentation

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Clarify SG-01 scope: template injection vs runtime MCP data access

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan
    3 people authored Jan 29, 2026
    Configuration menu
    Copy the full SHA
    fad19a0 View commit details
    Browse the repository at this point in the history
Loading