gh-aw Intelligence Report — 2026-04-16

[zircote]

gh-aw Ecosystem Intelligence Report — 2026-04-16

Executive Summary

Active day in the gh-aw ecosystem. Most significant findings: three new frontmatter schema fields confirmed via upstream PR #26607 in github/gh-aw (v0.68.3 sync: pre-steps:, run-install-scripts:, on.stale-check:). Multiple security fixes merged today including steganographic injection channel closure in markdown link titles and XPIA gap in create_issue @mentions. GitHub MCP Server released v0.33.0 and v0.33.1 on April 14. The gh-aw repo shows high volume activity (20+ issues, 20+ PRs today) primarily automated workflows running on the repo itself. Claude Code Remote Tasks (March 2026) not yet captured in architecture reference.

---

1. gh-aw Core

• Current CLI version: v0.68.3 (confirmed by PR #26607 "Sync github-agentic-workflows.md with v0.68.3")
• New fields in v0.68.3:
  • pre-steps: — Top-level field, runs custom steps before checkout in the agent job. Use for token minting or pre-checkout setup. Step outputs available via ${{ steps.<id>.outputs.<name> }} for use in checkout.github-token.
  • run-install-scripts: — Boolean, default false. Allows npm pre/post install scripts to run. By default --ignore-scripts is added to all npm install commands (supply chain protection). Setting true disables this globally. Per-runtime scope: runtimes.node.run-install-scripts: true. Emits supply chain security warning at compile time (error in strict mode).
  • on.stale-check: — Boolean (nested under on:), default true. When false, disables the frontmatter hash check in the activation job. Needed for cross-repo org ruleset deployments.
• Security fixes merged today (github/gh-aw):
  • PR #26570 (merged): Prevent false CLI Version Checker failures when safe outputs were already produced
  • PR #26572 (merged): Fix Auto-Triage Issues pre-agent auth failure causing no-op failed runs
  • PR #26573 (merged): Refactor MCP validation into focused sub-validators
  • PR #26587 (open): cache-memory — add pre-agent working-tree sanitization to neutralize planted executables and disallowed files
  • PR #26589 (open): Sanitize @mentions in create_issue body to close XPIA gap
  • PR #26596 (open): Strip markdown link title text to close steganographic injection channel
  • PR #26594 (open): Extend lock file integrity check to detect post-compilation YAML tampering (schema v4)
• Architecture update (PR #26591 open): Architecture diagram updated 2026-04-16
• Refactoring active: Multiple [refactoring] issues and PRs for shared components, pkg/workflow cleanup

---

2. GitHub Actions AI

• Copilot cloud agent per-org control (April 15, 2026): Copilot cloud agent access can now be selectively enabled per-organization via the AI Controls page → "Agent" → "Copilot Cloud Agent" → "Enabled for selected organizations". Previously it was all-or-nothing at the enterprise level.
• Copilot code review agentic architecture (March 5, 2026): Now runs on agentic tool-calling architecture, gathering broader repository context before feedback. Generally available for Pro, Pro+, Business, Enterprise.
• Enterprise AI Controls & Agent Control Plane (GA: February 26, 2026): Search for agentic session activity filtered by specific agents, track usage by organization, agents page audit log.

---

3. Copilot Workspace

• Waitlist removed for all Pro/Business/Enterprise subscribers
• Powered primarily by GPT-5.2 (Codex Gen 3); Enterprise users can toggle between Claude 4.5 and Gemini 3 Ultra
• Now integrates with GitHub Codespaces: agent runs build command, self-corrects on failure
• Custom agents as .agent.md files supported
• Remote Copilot CLI sessions: monitor and steer from GitHub web or GitHub Mobile (public preview)
• Data residency: US and EU regions; FedRAMP Moderate support for US government

---

4. GitHub Copilot Agent Mode

• Agent mode GA: VS Code (earlier) + JetBrains (March 2026) — now available to all IDE users
• Coding agent GA: Assign issue to Copilot → autonomous background work → PR opened for review. Available on Pro, Pro+, Business, Enterprise.
• Agentic code review (March 2026): Gathers full project context → suggests changes → can spawn fix PR via coding agent automatically
• GitHub Copilot SDK (technical preview January 22, 2026): Production-grade execution loop, multi-language support (Node.js, Python, Go, .NET), multi-model routing, MCP server integration

---

5. GitHub Models API

• Model deprecations:
  • Selected Anthropic + OpenAI models deprecated across Copilot experiences: February 17, 2026
  • Gemini 3 Pro + GPT-5.1 deprecation announced: March 2, 2026
  • Gemini 3 Pro deprecated: March 26, 2026 (already captured in KB 2026-04-14)
• REST API version 2026-03-10 now available (introduces breaking changes to REST API)
• Azure endpoint for GitHub Models: Deprecated July 2025 (use models.github.ai instead)
• GitHub Models API (billable/enterprise-ready): launched May 2025

---

6. GitHub MCP Server

• v0.33.0 (April 14, 2026): Granular PRs/issues toolsets, resolve_review_thread tool, list_commits adds path/since/until params, configurable server name/title via translation strings, OSS HTTP logging adapter, static CLI flags as per-request filter upper bound
• v0.33.1 (April 14, 2026): Hotfix release
• Previous: v0.32.0 (March 6, 2026), v0.31.0 (February 19, 2026)
• Container: ghcr.io/github/github-mcp-server

---

7. Claude Code × GitHub

• Remote Tasks (launched March 20, 2026): Define a GitHub repo + prompt + schedule → Claude runs autonomously on Anthropic's cloud infrastructure. Cron scheduling available.
• Remote Sessions: Start a task, close laptop, session continues on Anthropic infrastructure
• Claude Code open-sourced: Agent layer available at anthropics/claude-code
• Version 2.1.76 (March 14, 2026): Enhanced MCP elicitation support, improved tool discovery
• MCP lazy loading: Tool search uses lazy loading — only loads relevant tools based on context, reduces initialization overhead

---

8. Agentic CI/CD Community

• InfoQ coverage (Feb 2026): gh-aw recognized as bringing "continuous AI" into CI/CD loop
• The New Stack / devclass / The Register coverage: Significant mainstream tech press coverage of gh-aw launch
• githubnext/awesome-continuous-ai: Active curated list of Continuous AI Actions and Frameworks
• Medium tutorials emerging on building first gh-aw workflows
• gh-aw security architecture getting coverage: defense in depth, don't trust agents with secrets, stage and vet all writes, log everything

---

GitHub Activity Since 2026-04-14

github/gh-aw (today, April 16)

• 20+ new issues: workflow failures (Copilot Session Insights, Duplicate Code Detector, Typist, Copilot PR Analysis), multiple refactoring extraction issues for shared components
• Key open PRs: steganographic injection fix, XPIA @mentions fix, cache-memory sanitization, lock file integrity schema v4, architecture diagram update
• Bug report (PR #26621): Two different actions sharing the exact same commit SHA after gh aw update
• [instructions] PR #26607: Sync github-agentic-workflows.md with v0.68.3 (open, expires 2026-04-18)

github/github-mcp-server

• v0.33.0 and v0.33.1 released April 14, 2026 (same day as last KB entry)

zircote/github-agentic-workflows

• Issue [aw] Daily Intelligence Pipeline failed #23: [aw] Daily Intelligence Pipeline failed (today — automated gh-aw run failed; this scheduled task run is the recovery)
• PR fix: add PR review loop, Copilot lifecycle workflow, remove assign-to-agent #22 (merged): fix: add PR review loop, Copilot lifecycle workflow, remove assign-to-agent
• PR docs(references): daily intelligence update 2026-04-15 (run 2) #20 (merged): docs(references): daily intelligence update 2026-04-15 (run 2)
• Issues [aw-daily] GAP-001: Mark Gemini 3 Pro as deprecated in orchestration.md Engine Model Selection table #18, [aw-daily] GAP-002: Mark Gemini 3 Pro as deprecated in gh-aw-architecture.md Copilot CLI section #19 (closed): Gemini 3 Pro deprecation in orchestration.md and gh-aw-architecture.md

---

Deprecation Watch

Item	Status	Migration	Date
plugins: frontmatter field	DEPRECATED	Use dependencies: + gh aw fix --write	Early 2026
npm @modelcontextprotocol/server-github	DEPRECATED	Use Docker or HTTP GitHub MCP Server	April 2025
Gemini 3 Pro (GitHub Models)	DEPRECATED	Use GPT-5.3-Codex or Claude models	March 26, 2026
Azure endpoint for GitHub Models	DEPRECATED	Use models.github.ai	July 2025
Selected Anthropic + OpenAI Copilot models	DEPRECATED	See GitHub Changelog Feb 17, 2026	Feb 17, 2026

---

Gap Analysis

Confirmed Gaps (top 5)

ID	Type	File	Description	Source
GAP-001	missing	frontmatter-schema.md	pre-steps: field not in Quick Index or Steps section	PR #26607 github/gh-aw
GAP-002	missing	frontmatter-schema.md	run-install-scripts: field not documented	PR #26607 github/gh-aw
GAP-003	missing	frontmatter-schema.md	on.stale-check: sub-field not in Triggers section	PR #26607 github/gh-aw
GAP-004	missing	tools-reference.md	cache-memory pre-agent working-tree sanitization not documented	PR #26587 github/gh-aw
GAP-005	missing	gh-aw-architecture.md	Claude Code Remote Tasks not documented in Claude Code section	computeleap.com, claude changelog

---

Recommended Actions

1. Add pre-steps: to frontmatter-schema.md Quick Index + Section 8
2. Add run-install-scripts: to frontmatter-schema.md (near checkout field)
3. Add on.stale-check: to frontmatter-schema.md Triggers section
4. Add working-tree sanitization note to tools-reference.md cache-memory section
5. Add Claude Code Remote Tasks to architecture reference Claude Code section

---

Sources

• GitHub Agentic Workflows Technical Preview
• Enable Copilot cloud agent via custom properties
• Copilot code review agentic architecture
• Enterprise AI Controls GA
• Gemini 3 Pro deprecated
• GitHub MCP Server Releases
• Claude Code Remote Tasks
• gh-aw PR #26607 — v0.68.3 sync
• Introducing Agent HQ
• April 2026 GitHub Changelog