Skip to content

Bump MCPG to v0.4.37 - #71219

Merged
lpcox merged 2 commits into
mainfrom
copilot/upgrade-mcpg-to-v0437
Oct 22, 2026
Merged

lpcox merged 2 commits into
mainfrom
copilot/upgrade-mcpg-to-v0437

Conversation

Copilot AI commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Upgrade the default MCP gateway from v0.4.36 to v0.4.37 with the verified multi-platform image digest.

  • Dependency pins: Update the canonical version, container digest, and embedded pin data.
  • Generated workflows: Regenerate 346 workflow locks using standard tooling.
  • Related references: Update version/digest regression assertions and the daily PR review prompt’s gateway reference.

Validation

Focused tests, linting, lock synchronization, and secret scanning passed. Fallback review found no issues; CodeQL timed out.

Copilot AI linked an issue Oct 22, 2026 that may be closed by this pull request
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

Thanks @Copilot 👋 — this dependency update is in progress! Before it is ready to merge:

  • Add test coverage — once the implementation changes are applied, ensure affected integration points have tests.
  • Complete the implementation — the PR currently has 0 lines changed. After running the steps in your checklist, the actual diff should appear here.

Generated by ✅ Contribution Check · copilot · auto · ~36 AIC · ⌖ ~1 AIC · ⊞ 9.2K · ◷

Copilot AI changed the title [WIP] Update MCP gateway dependency to v0.4.37 Bump MCPG to v0.4.37 Oct 22, 2026
Copilot AI requested a review from lpcox October 22, 2026 21:03
@lpcox
lpcox marked this pull request as ready for review October 22, 2026 21:28
Copilot AI max review requested due to automatic review settings October 22, 2026 21:28
@github-actions

github-actions Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

✅ PR Code Quality Reviewer completed the code quality review.

🔎 Code quality review by PR Code Quality Reviewer

@github-actions

github-actions Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

✅ Test Quality Sentinel completed test quality analysis.

Test Quality Sentinel

Outcome: reported_no_action

The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible.

Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.

Generated from Test Quality Sentinel · haiku45 · ~6 AIC · ⌖ ~8 AIC · ◇ ~3 AIC · ⊞ 9.2K · ◷

🧪 Test quality analysis by Test Quality Sentinel

@github-actions

github-actions Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer

@github-actions

github-actions Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

✅ Ponytail Reviewer completed successfully!

Ponytail Reviewer

Outcome: reported_no_action

The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible.

Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.

Generated from Ponytail Reviewer · gpt56 · ~6 AIC · ⌖ ~6 AIC · ⊞ 14.8K · ◷

Generated by Ponytail Reviewer for #71219

@github-actions

github-actions Bot commented Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

✅ Design Decision Gate 🏗️ completed the design decision gate check. See the comment below for the result and any generated ADR draft.

Design Decision Gate 🏗️

Outcome: reported_no_action

The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible.

Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.

Generated from Design Decision Gate 🏗️ · opus55 · ~12 AIC · ⌖ ~33 AIC · ◇ ~17 AIC · ⊞ 1.9K · ◷

🏗️ ADR gate enforced by Design Decision Gate 🏗️

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The supplied diffs cover only part of the reported 346-lock regeneration, and the published gateway digest remains independently unverified.

No open issues 🎉

What changed in this PR

Upgrades gh-aw’s default MCP gateway to v0.4.37 for #71217, aligning compiler defaults, image pins, generated workflows, and regression assertions.

Changes:

  • Updates the canonical gateway version and synchronized container digest data.
  • Propagates the new image pin through generated workflow locks.
  • Refreshes version/digest assertions and the daily PR review prompt’s gateway reference without changing its instructions.
File Description
scripts/​test_daily_pr_review_integrity.py Updates the expected prompt version.
pkg/​workflow/​data/​action_pins.json Refreshes embedded gateway pin data.
pkg/​constants/​version_constants.go Sets the default gateway to v0.4.37.
pkg/​constants/​version_constants_test.go Updates the default-version assertion.
pkg/​actionpins/​data/​action_pins.json Refreshes embedded gateway pin data.
pkg/​actionpins/​actionpins_internal_test.go Updates the expected gateway digest.
.github/​workflows/​smoke-pi-routed.lock.yml Updates the routed Pi gateway pin.
.github/​workflows/​smoke-pi-auto.lock.yml Updates the Pi auto gateway pin.
.github/​workflows/​smoke-github-codex.lock.yml Updates the GitHub Codex gateway pin.
.github/​workflows/​smoke-copilot-sdk-routed.lock.yml Updates the routed SDK gateway pin.
.github/​workflows/​smoke-copilot-routed-steering.lock.yml Updates the steering smoke-test gateway pin.
.github/​workflows/​smoke-codex-bare-auto.lock.yml Updates the bare Codex gateway pin.
.github/​workflows/​smoke-codex-auto.lock.yml Updates the Codex auto gateway pin.
.github/​workflows/​smoke-claude-dynamic.lock.yml Updates the dynamic Claude gateway pin.
.github/​workflows/​smoke-claude-copilot.lock.yml Updates the Claude Copilot gateway pin.
.github/​workflows/​smoke-claude-copilot-auto.lock.yml Updates the Claude Copilot auto gateway pin.
.github/​workflows/​smoke-claude-auto.lock.yml Updates the Claude auto gateway pin.
.github/​workflows/​smoke-azure-pi.lock.yml Updates the Azure Pi gateway pin.
.github/​workflows/​smoke-azure-codex.lock.yml Updates the Azure Codex gateway pin.
.github/​workflows/​schema-feature-coverage.lock.yml Updates the coverage checker’s gateway pin.
.github/​workflows/​github-remote-mcp-auth-test.lock.yml Updates the authentication test’s gateway pin.
.github/​workflows/​dev.lock.yml Updates the development smoke-test gateway pin.
.github/​workflows/​daily-pr-review-cursor.md Refreshes the gateway version reference.
.github/​workflows/​daily-github-docs-seo-optimizer.lock.yml Updates the optimizer’s gateway pin.
.github/​workflows/​copilot-pr-merged-report.lock.yml Updates the reporting workflow’s gateway pin.
.github/​workflows/​codex-github-remote-mcp-test.lock.yml Updates the remote MCP test’s gateway pin.
.github/​aw/​actions-lock.json Updates the repository gateway image pin.

Review effort: Max

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Skills-Based Review 🧠

Applied /codebase-design and /tdd (via pr-triage fallback classification: mechanical dependency bump). No actionable issues found.

📋 Verification notes
  • Version bump v0.4.36 → v0.4.37 is applied consistently across all canonical sources: pkg/constants/version_constants.go, pkg/actionpins/data/action_pins.json, pkg/workflow/data/action_pins.json, and .github/aw/actions-lock.json.
  • New digest sha256:9c7f242f... matches identically across all 346 regenerated .lock.yml workflow files — no drift detected.
  • Accompanying tests (version_constants_test.go, actionpins_internal_test.go, test_daily_pr_review_integrity.py) and the daily-pr-review-cursor.md prompt reference were updated in lockstep with the version bump.
  • Pre-existing doc references to "v0.4.36 or later" as a minimum-version requirement (not a default-version claim) remain semantically correct and don't need updating.

No deepening opportunities, missing abstractions, or test gaps identified for this change shape — it is a clean, low-risk, fully-synchronized dependency bump.

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · copilot · sonnet50 · ~30 AIC · ⌖ ~15 AIC · ⊞ 10.2K
Comment /matt to run again

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review summary

No actionable blocking issues found in the changed lines. The MCP Gateway version, digest pins, embedded test expectation, and integrity-policy documentation are updated consistently. Static review only; tests were not run.

🔎 Code quality review by PR Code Quality Reviewer · copilot · gpt50 · ~3 AIC · ⌖ ~1 AIC · ⊞ 1.6K
Comment /review to run again

@lpcox
lpcox merged commit fb1cd0f into main Oct 22, 2026
105 of 121 checks passed
@lpcox
lpcox deleted the copilot/upgrade-mcpg-to-v0437 branch October 22, 2026 21:48
@github-actions

Copy link
Copy Markdown
Contributor

🎉 This pull request is included in a new release.

Release: v0.93.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Bump MCPG to v0.4.37

3 participants