You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
New opt-in parameter update-branch: true in the update-pull-request safe-output. When enabled, syncs the PR branch with its base branch (calls updateBranch API) before applying title/body updates. Default: false.
New opt-out parameter. When a push fails because the target branch has diverged (non-fast-forward), gh-aw now automatically creates a fallback PR by default. To disable: fallback-as-pull-request: false. Note: because this defaults to true, pull-requests: write is now requested even if you don't explicitly configure it.
🔒 SEC-005 allowlist validation for workflow_dispatch (PR #27242)
Cross-repo workflow_dispatch target repo overrides are now validated against the SEC-005 allowlist. The target repo must appear in allowed-repos on the safe-output config.
The reference documented "comment" and "skip" as valid if-no-changes values for push-to-pull-request-branch. The actual valid values are "warn" (default), "error", and "ignore". This has been corrected.
🛠️ MCP CLI SSE tools/list fix (PR #27207)
MCP servers mounted as CLI tools now correctly handle SSE-formatted tools/list responses, resolving a silent enumeration failure.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
-
Intelligence Summary
Date: 2026-04-20 | Sources: github/gh-aw, github/github-mcp-server commits
Key Findings
🔧
update-pull-requestgetsupdate-branchparameter (PR #27244)New opt-in parameter
update-branch: truein theupdate-pull-requestsafe-output. When enabled, syncs the PR branch with its base branch (callsupdateBranchAPI) before applying title/body updates. Default:false.🔧
push-to-pull-request-branchgetsfallback-as-pull-request(PR #27220)New opt-out parameter. When a push fails because the target branch has diverged (non-fast-forward), gh-aw now automatically creates a fallback PR by default. To disable:
fallback-as-pull-request: false. Note: because this defaults totrue,pull-requests: writeis now requested even if you don't explicitly configure it.🔒 SEC-005 allowlist validation for
workflow_dispatch(PR #27242)Cross-repo
workflow_dispatchtarget repo overrides are now validated against the SEC-005 allowlist. The target repo must appear inallowed-reposon the safe-output config.if-no-changesvaluesThe reference documented
"comment"and"skip"as validif-no-changesvalues forpush-to-pull-request-branch. The actual valid values are"warn"(default),"error", and"ignore". This has been corrected.🛠️ MCP CLI SSE
tools/listfix (PR #27207)MCP servers mounted as CLI tools now correctly handle SSE-formatted
tools/listresponses, resolving a silent enumeration failure.Gaps Addressed
if-no-changeshas wrong valuessafe-outputs.mdupdate-branchparam missingsafe-outputs.mdfallback-as-pull-requestparam missingsafe-outputs.mdsafe-outputs.mdproduction-gotchas.mdOpen Issues (Prior Runs, Pending Copilot Implementation)
Issues #39–#43 from 2026-04-18 and #32–#34 from 2026-04-17 remain open for Copilot implementation.
Automated by Daily Intelligence Pipeline · engine: copilot · 2026-04-20
Beta Was this translation helpful? Give feedback.
All reactions