Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: github/gh-aw
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.53.0
Choose a base ref
...
head repository: github/gh-aw
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.53.1
Choose a head ref
  • 12 commits
  • 197 files changed
  • 6 contributors

Commits on Mar 4, 2026

  1. fix: update action pin test expectations for actions/setup-node v6.3.0 ( 

    #19537)

* Initial plan

* fix: update action pin test expectations for setup-node v6.3.0

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
    @pelikhan
    Copilot and pelikhan authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    f2570f2 View commit details
    Browse the repository at this point in the history

  2. SEC-004: Sanitize body content in update_handler_factory before GitHu… 

    …b API writes (#19538)
    Copilot authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    2979a2e View commit details
    Browse the repository at this point in the history

  3. Improve compile-time error message for write permissions on agent job (… 

    …#19546)

* Initial plan

* Improve error message for write permissions on agent job to mention safe-outputs pattern

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan
    3 people authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    1fa4f3f View commit details
    Browse the repository at this point in the history

  4. docs: add Security Posture section to .github/aw/create-agentic-workf… 

    …low.md (#19548)

* Initial plan

* docs: add Security Posture section to create-agentic-workflow.md

Add a dedicated '🔐 Security Posture: Agent Job Must Stay Read-Only'
section with ✅/❌ examples near the top of the file (before the
Architectural Constraints section). This makes the safe-outputs-only
write pattern explicit and prominent for agents reading the file.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan
    3 people authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    aaa4078 View commit details
    Browse the repository at this point in the history

  5. Add scope/constraint guidance to developer.instructions to prevent co… 

    …mplex workflow timeouts (#19549)

* Initial plan

* Add scope/constraint guidance to developer.instructions to prevent complex workflow timeouts

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan
    3 people authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    6643aa1 View commit details
    Browse the repository at this point in the history

  6. fix: allow expr || 'literal' default patterns in expression validat… 

    …ion (#19550)

* Initial plan

* fix: allow simple default values in expressions (inputs.* || 'default')

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* test: add more expression default-value tests (number, boolean, all context types)

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan
    3 people authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    0ec30e5 View commit details
    Browse the repository at this point in the history

  7. [WIP] Fix context is not defined error in safe output MCP server (#19544 

    )

* Initial plan

* Add plan for guarding global context accesses in safe-outputs MCP server

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Guard global context accesses in safe-outputs MCP server JS files

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan
    3 people authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    4861bef View commit details
    Browse the repository at this point in the history

  8. [WIP] Fix double escaping of text in titles (#19545) 

    * Initial plan

* fix: decode &gt;, &lt;, &amp; HTML entities in sanitize pipeline to prevent literal &gt; in issue titles

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan
    3 people authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    c9f8a54 View commit details
    Browse the repository at this point in the history

  9. chore: update projectops docs (#19387)

    @mnkiefer
    mnkiefer authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    c681fab View commit details
    Browse the repository at this point in the history

  10. Display secrecy and integrity fields in safe output step summary rend… 

    …erer (#19552)

* Initial plan

* Display secrecy and integrity fields in safe output step summary renderer

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Add changeset [skip-ci]

* ci: trigger checks

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Codex Bot <codex@example.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>
    @pelikhan @github-actions
    5 people authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    4e5e198 View commit details
    Browse the repository at this point in the history

  11. [WIP] Update schema pattern for allowed GitHub references (#19554) 

    * Initial plan

* relax allowed-github-references schema pattern to support GitHub Actions macros

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
    @pelikhan
    Copilot and pelikhan authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    cf3be2e View commit details
    Browse the repository at this point in the history

  12. Fix buildCustomJobs() to extract 7 silently-dropped job fields (#19539)

    Copilot authored Mar 4, 2026
    Configuration menu
    Copy the full SHA
    3ee4953 View commit details
    Browse the repository at this point in the history
Loading