[ca] Update MCP Gateway to v0.2.9

[github-actions]

Summary

• MCP Gateway (gh-aw-mcpg): v0.2.8 → v0.2.9 (released 2026-03-29)
• All other tracked tools are current (GitHub MCP Server v0.32.0, Playwright MCP 0.0.68, Playwright Browser v1.58.2, APM v0.8.6)
• Claude Code, Copilot CLI, Codex are pinned to latest — no version update needed

Update MCP Gateway v0.2.8 → v0.2.9

• Previous: v0.2.8 → New: v0.2.9
• Released: 2026-03-29
• Docker image: ghcr.io/github/gh-aw-mcpg:v0.2.9

Breaking Changes

None

Key Features & Fixes

Security & Guard Improvements

• pin_issue and unpin_issue now classified as write operations; transfer_repository unconditionally blocked — Guard coverage: add pin_issue/unpin_issue write ops; unconditionally block transfer_repository gh-aw-mcpg#2750
• copilot-swe-agent recognized as a trusted first-party bot — fix(guard): add copilot-swe-agent to trusted first-party bots gh-aw-mcpg#2777

Bug Fixes

• Fixed duplicate log entries in session.go and logUnified misuse — Remove duplicate logging in session.go, fix logUnified misuse gh-aw-mcpg#2788
• Removed redundant io.Writer type annotation (staticcheck QF1011) — fix: remove redundant io.Writer type annotation (staticcheck QF1011) gh-aw-mcpg#2780

Documentation

• New reference doc for AWF pipeline environment variable lifecycle — docs: add AWF pipeline environment variable lifecycle reference gh-aw-mcpg#2781
• --trusted-bots, --trusted-users, and PORT fallback now documented — docs: document trusted-users, --trusted-bots/--trusted-users flags, and PORT fallback gh-aw-mcpg#2789

View Full Changelog

• Guard coverage: add pin_issue/unpin_issue write ops; unconditionally block transfer_repository — Guard coverage: add pin_issue/unpin_issue write ops; unconditionally block transfer_repository gh-aw-mcpg#2750
• Add debug logger to cmd/proxy.go — [log] Add debug logger to cmd/proxy.go gh-aw-mcpg#2752
• Improve tests for logger/FileLogger — [test-improver] Improve tests for logger/FileLogger gh-aw-mcpg#2760
• Add tests for config.ParsePolicyMap, ParseServerGuardPolicy, BuildAllowOnlyPolicy — [test] Add tests for config.ParsePolicyMap, ParseServerGuardPolicy, BuildAllowOnlyPolicy gh-aw-mcpg#2761
• fix(guard): add copilot-swe-agent to trusted first-party bots — fix(guard): add copilot-swe-agent to trusted first-party bots gh-aw-mcpg#2777
• fix: remove redundant io.Writer type annotation (staticcheck QF1011) — fix: remove redundant io.Writer type annotation (staticcheck QF1011) gh-aw-mcpg#2780
• docs: add AWF pipeline environment variable lifecycle reference — docs: add AWF pipeline environment variable lifecycle reference gh-aw-mcpg#2781
• Remove duplicate logging in session.go, fix logUnified misuse — Remove duplicate logging in session.go, fix logUnified misuse gh-aw-mcpg#2788
• docs: document trusted-users, --trusted-bots/--trusted-users flags, and PORT fallback — docs: document trusted-users, --trusted-bots/--trusted-users flags, and PORT fallback gh-aw-mcpg#2789
• refactor: reduce duplicate code in loggers, validation, and session handling — refactor: reduce duplicate code in loggers, validation, and session handling gh-aw-mcpg#2790
• refactor: extract shared httputil, remove trivial wrappers in mcp and cmd — refactor: extract shared httputil, remove trivial wrappers in mcp and cmd gh-aw-mcpg#2794
• test: add unit tests for internal/httputil package — test: add unit tests for internal/httputil package gh-aw-mcpg#2800

Full Changelog: github/gh-aw-mcpg@v0.2.8...v0.2.9

Impact Assessment

• Risk: Low — bug fixes, security hardening, and internal refactoring; no breaking changes
• Affects: MCP gateway container used as default sandbox.agent container
• Migration: No changes required; drop-in replacement

Package Links

• Repository: https://github.com/github/gh-aw-mcpg
• Release Notes: https://github.com/github/gh-aw-mcpg/releases/tag/v0.2.9

References:

• §23727814704

Generated by CLI Version Checker · ◷

• expires on Apr 1, 2026, 4:27 AM UTC

[github-actions]

🍪 Issue Monster has assigned this to Copilot!

I've identified this issue as a good candidate for automated resolution and assigned it to the Copilot coding agent.

The Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · ◷