v0.4.3

What's Changed

• Fix clippy/compiler warnings in github-guard rust-guard by @lpcox in #9655
• refactor: centralize outlier functions and deduplicate shared scaffolding by @lpcox with @Copilot in #9654

Full Changelog: v0.4.2...v0.4.3

v0.4.2

What's Changed

• Upgrade gh-aw extension to latest pre-release by @lpcox in #9009
• docs: add MCP_GATEWAY_FORCE_PUBLIC_REPOS and GITHUB_REPOSITORY to ENVIRONMENT_VARIABLES.md by @lpcox with @Copilot in #9013
• refactor: remove dead code and reduce indirection per semantic clustering analysis by @lpcox with @Copilot in #9014
• fix(smoke): use copilot-requests permission instead of COPILOT_GITHUB_TOKEN secret by @lpcox in #9029
• Upgrade gh-aw extension to latest pre-release and recompile workflows by @lpcox in #9049
• refactor(proxy): return remaining header from rateLimitSignal to eliminate duplicate read by @lpcox with @Copilot in #9053
• refactor(logger): eliminate duplicate file-init code in ServerFileLogger by @lpcox with @Copilot in #9054
• rust-guard: downscope pub→pub(crate) for labels/helpers internals; add deploy key test by @lpcox with @Copilot in #9051
• Review go module github.com/itchyny/gojq by @lpcox with @Copilot in #9052
• [Repo Assist] perf(middleware): bypass gojq interpreter for schema inference by @github-actions[bot] in #9071
• [test-improver] Improve tests for githubhttp: 92% to 100% coverage by @github-actions[bot] in #9088
• [test] Add tests for config.expandMapInPlace by @github-actions[bot] in #9084
• [log] Add debug logging to server/middleware_auth.go by @github-actions[bot] in #9087
• [Repo Assist] refactor: simplify TruncateSecret and extract HTTP client clone helper by @github-actions[bot] in #9115
• [test] Add tests for server.HandleHealth and server.HandleReflect by @github-actions[bot] in #9120
• Docs: reconcile README gateway config matrix and env var discoverability by @lpcox with @Copilot in #9133
• Deduplicate logger init/factory wiring across internal/logger with shared generic helpers by @lpcox with @Copilot in #9131
• Refactor HTTP client transport cloning in MCP transport builders by @lpcox with @Copilot in #9132
• [test-improver] Improve tests for launcher.GetOrLaunchForSession by @github-actions[bot] in #9152
• [log] Add debug logger to mcp/connection_logging.go by @github-actions[bot] in #9150
• docs: reconcile 6 documentation discrepancies with implementation by @lpcox with @Copilot in #9169
• refactor: move FormatSessionIDForLog to session.go, rename TruncateSecret→RedactSecret by @lpcox with @Copilot in #9170
• [Repo Assist] perf(proxy): pre-compile GraphQL rewrite regexps at package init by @github-actions[bot] in #9189
• fix: align debug logger variable names with logXxx convention by @lpcox with @Copilot in #9198
• [test] Add tests for server.rate_limit, server.middleware_auth, and server.response_writer by @github-actions[bot] in #9200
• refactor: semantic function clustering — TLS relocation, util consolidation, and documentation by @lpcox with @Copilot in #9205
• [test-improver] Improve tests for config package by @github-actions[bot] in #9210
• rust-guard: collapse duplicate issue-write match arms and add credential keyword test by @lpcox with @Copilot in #9247
• test: replace assert.Equal(len()) with assert.Len and assert.True(errors.As) with assert.ErrorAs by @lpcox with @Copilot in #9248
• Collapse duplicate positive-timeout validation wrappers by @lpcox with @Copilot in #9249
• Add a repository-wide audit for logger namespace conventions by @lpcox with @Copilot in #9250
• Consolidate proxy rejection handling in handler.go for consistent logging/tracing/error responses by @lpcox with @Copilot in #9251
• guard: add Codespaces lifecycle write coverage (create/edit/delete) by @lpcox with @Copilot in #9252
• refactor: address semantic function clustering outliers — doc comments, rename, dead code removal by @lpcox with @Copilot in #9278
• [test] Add tests for logger.writeJSONToFile and initAndSetGlobalNoFileLogger by @github-actions[bot] in #9276
• [Repo Assist] perf(proxy): dispatch MatchRoute via segment bucket map by @github-actions[bot] in #9321
• Cover missing GitHub CLI-only write operations in the GitHub guard by @lpcox with @Copilot in #9324
• Narrow Rust guard lock helper visibility and cover lock/unlock label inheritance by @lpcox with @Copilot in #9329
• Align gojq test execution with production context handling by @lpcox with @Copilot in #9328
• Refactor duplicate auth/HMAC wrapper helpers in internal/server by @lpcox with @Copilot in #9327
• Deduplicate positive-integer validation rules by @lpcox with @Copilot in #9326
• [test-improver] Improve tests for logger global helpers by @github-actions[bot] in #9287
• Reconcile README gateway config and tracing docs with implemented behavior by @lpcox with @Copilot in #9323
• [test] Add tests for mcp.NewHTTPConnection with OIDC provider by @github-actions[bot] in #9341
• [log] Add debug logging to TLS helper functions in proxy/tls.go by @github-actions[bot] in #9285
• Refactor internal/logger lifecycle scaffolding by @lpcox with @Copilot in #9325
• [log] Add debug logging to vcsTimeFromBuildInfo by @github-actions[bot] in #9361
• [Repo Assist] fix: handle bare-string labels from MCP tool path in rust guard by @github-actions[bot] in #9389
• [test-improver] Improve tests for server/difc_log by @github-actions[bot] in #9362
• refactor: consolidate TLS helpers — move LoadGatewayTLS from server into httputil by @lpcox with @Copilot in #9404
• gate has_promotion_label and has_demotion_label with #[cfg(test)] by @lpcox with @Copilot in #9402
• fix(config): address jsonschema/v6 Go Fan review — Draft hint, errors.New, UnmarshalJSON precision by @lpcox with @Copilot in #9403
• [log] Add debug logging to shell completion command dispatch by @github-actions[bot] in #9419
• [test-improver] Improve tests for mcptest/gateway_integration by @github-actions[bot] in #9420
• Refactor internal file boundaries for util formatting, WASM execution, and DIFC labels by @lpcox with @Copilot in #9437
• [Repo Assist] fix(rust-guard): set baseline_scope=GITHUB for search_users + add label tests by @github-actions[bot] in #9457
• Upgrade gh-aw extension to latest pre-release and recompile workflows by @lpcox in #9458
• Replace remaining plain-string fmt.Errorf calls with errors.New by @lpcox with @Copilot in #9439
• Add missing DIFC labels for synthetic GitHub CLI guard writes by @lpcox with @Copilot in #9438
• rust-guard: add create_agent_task test + use Cow::Owned in project arms by @lpcox with @Copilot in #9472
• fix(cmd): extend detectGuardWasm to check MCP_GATEWAY_WASM_GUARDS_DIR; add MarkFlagsMutuallyExclusive caveat comment by @lpcox with @Copilot in #9473
• [test] Add tests for proxy.writeDIFCForbidden and proxy.isMetadataPassthroughPath by @github-actions[bot] in #9486
• [log] Add debug logging to proxy/router.go dispatch initialization and route matching by @github-actions[bot] in #9490
• Upgrade gh-aw extension to v0.82.12 pre-release and recompile workflows by @lpcox in #9513
• [Repo Assist] perf(logger): eliminate double sanitize pass per RPC hop by @github-actions[bot] in #9521
• [test-improver] Improve tests for WriteSinkGuard (auditURLsInBody) by @github-actions[bot] in #9491
• refactor(rust-guard): eliminate duplicated author_association lookup and raw field-name literals in backend.rs by @lpcox with @Copilot in #9535
• refactor(cmd): deduplicate --guards-mode flag registration, validation, and compl...

v0.4.1

What's Changed

• [Repo Assist] build(makefile): add -parallel=8 and -timeout flags to test targets by @github-actions[bot] in #8934
• [Repo Assist] fix(rust-guard): remove dead .or_else() fallback in notifications arm by @github-actions[bot] in #8935
• feat: enforce repos="public" when workflow runs in a public repository by @lpcox with @Copilot in #8933
• feat: add force-public-repos runtime check to proxy mode by @lpcox in #8948
• Refactor schema validation error construction to remove duplicated invariant arguments by @lpcox with @Copilot in #8955
• 🤖 chore: sync protected gh-aw templates to v0.82.6 by @lpcox with @Copilot in #8954
• Refactor collaborator permission fetch to use unified response-body guards by @lpcox with @Copilot in #8957
• Tighten testify assertions in reviewed test cases by @lpcox with @Copilot in #8958
• [test] Add tests for server guard_init sink visibility functions by @github-actions[bot] in #8964
• Docs: add missing internal/jqutil entry to CONTRIBUTING project structure by @lpcox with @Copilot in #8959
• Refactor server validation failures through a shared log-and-return helper by @lpcox with @Copilot in #8956
• fix: make force-public-repos decisions observable and fix flaky tests by @lpcox in #8981

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

• [log] Add debug logging to difc/path_labels.go by @github-actions[bot] in #8538
• docs: fix unsupported headers in JSON stdin OpenTelemetry example, clarify MCP_GATEWAY_PORT behavior by @lpcox with @Copilot in #8564
• Deduplicate jq filter compile/cache pipeline in jqschema without changing public behavior by @lpcox with @Copilot in #8565
• rust-guard: extract apply_issue_read_enrichment helper + add limit_items_with_log tests by @lpcox with @Copilot in #8566
• Fix ToolAnnotations drop in routed mode; document SDK upgrade gate by @lpcox with @Copilot in #8567
• [test-improver] Improve tests for middleware jqschema by @github-actions[bot] in #8540
• [Repo Assist] test(config): add JSON schema validation tests for opentelemetry config by @github-actions[bot] in #8588
• [Repo Assist] fix(config): add headers field to JSON stdin opentelemetry config by @github-actions[bot] in #8587
• [test] Add tests for httputil.ReadResponseBody and ReadResponseBodyStrict by @github-actions[bot] in #8601
• [log] Add debug logging to difc path_labels resolve paths by @lpcox in #8608
• Use newValidationError() consistently in string validation rules by @lpcox with @Copilot in #8646
• Add coverage for serveAndWait shutdown-timeout fallback by @lpcox with @Copilot in #8650
• refactor: scatter reduction across server, config, and cmd packages by @lpcox with @Copilot in #8649
• [log] Add debug logging to BaseResponseWriter by @github-actions[bot] in #8616
• Fix stale common.go reference in Log-Level Quad-Function Pattern comments by @lpcox with @Copilot in #8647
• Refactor shared HTTP response body read path in httputil by @lpcox with @Copilot in #8648
• [Repo Assist] refactor(config): route all ValidationError constructors through newValidationError by @github-actions[bot] in #8651
• [log] Add debug logging to guard_policy_validation.go by @github-actions[bot] in #8675
• refactor: implement 7 semantic function clustering improvements by @lpcox with @Copilot in #8689
• [test] Add tests for logger.atomicWriteFile and logger.syncFileWithWarning by @github-actions[bot] in #8673
• [test-improver] Improve tests for proxy response transform by @github-actions[bot] in #8676
• refactor: eliminate duplicate empty-string validator by delegating NonEmptyString to RequiredStringField by @lpcox with @Copilot in #8705
• refactor: have TimeoutPositive delegate to PositiveInteger by @lpcox with @Copilot in #8706
• [Repo Assist] perf(logger): sanitize RPC payload once for text+markdown previews by @github-actions[bot] in #8722
• [test] Add tests for logger.SlogHandler.Handle via attrKeyString helper by @github-actions[bot] in #8730
• refactor(config): eliminate duplicate validation rules in internal/config by @lpcox with @Copilot in #8731
• [test-improver] Improve tests for cmd/output.go by @github-actions[bot] in #8746
• refactor(config): eliminate duplicate validation rules in internal/config by @lpcox in #8741
• [log] Add debug logging to difc/capabilities.go by @github-actions[bot] in #8744
• Refactor duplicated helper logic for session logging, rate-limit parsing, and routed server setup by @lpcox with @Copilot in #8762
• Model gh codespace stop as a guarded write operation by @lpcox with @Copilot in #8764
• Update nightly docs reconciler prompt for split config package layout by @lpcox with @Copilot in #8763
• Upgrade gh-aw to v0.82.2 pre-release and recompile workflows by @lpcox in #8786
• rust-guard: dedupe PR/issue response-path setup and add gist/notification path-label tests by @lpcox with @Copilot in #8778
• Add load-time WASM guard ABI checks and align guard unit runtime config by @lpcox with @Copilot in #8779
• refactor(difc): extract tagSet to deduplicate concurrent map logic from Label and Capabilities by @lpcox with @Copilot in #8780
• [test-improver] Improve tests for server SystemTools handlers by @github-actions[bot] in #8815
• [test] Add tests for githubhttp.ParseRateLimitResetFromText by @github-actions[bot] in #8811
• [log] Add debug logging to middleware/content_rewrite.go by @github-actions[bot] in #8813
• rust-guard: flatten commit integrity branch logic and expand trusted bot variant coverage by @lpcox with @Copilot in #8842
• refactor: semantic function clustering – remove wrapper, relocate helpers by @lpcox with @Copilot in #8840
• feat(tracing): OTel improvements from go-fan review by @lpcox with @Copilot in #8841
• [Repo Assist] refactor: centralise SecureCompileOpts into internal/jqutil by @github-actions[bot] in #8867
• [test-improver] Improve tests for tracing/span_helpers by @github-actions[bot] in #8876
• refactor: rename newHTTPConnection→assembleHTTPConnection, getItems→extractRawItems; extract writeJSONToFile helper by @lpcox with @Copilot in #8873
• [log] Add debug logging to resolveGuardPolicyOverride in flags_difc.go by @github-actions[bot] in #8875
• Add sink-visibility to write-sink guard policy to prevent GitLost exfiltration by @lpcox in #8895
• Add sink-visibility runtime verification and integration tests by @lpcox in #8903
• Address sink-visibility runtime check review feedback by @lpcox in #8907

Full Changelog: v0.3.33...v0.4.0

v0.3.33

What's Changed

• [log] Add debug logging to FilterAndConvertLabeledData by @github-actions[bot] in #8250
• docs: fix three documentation discrepancies from nightly reconciliation by @lpcox with @Copilot in #8264
• [test-improver] Improve tests for proxy handler by @github-actions[bot] in #8251
• Fix test-improver workflow AI credits rate limit by @lpcox in #8265
• [Repo Assist] test(guards): add unit tests for issue_integrity and pr_integrity by @github-actions[bot] in #8291
• Upgrade gh-aw to v0.82.2 pre-release and recompile workflows by @lpcox in #8277
• refactor(rust-guard): replace reaction_kind: &str with ReactionKind enum; collapse issue_dependency_read double guard by @lpcox with @Copilot in #8279
• feat(middleware): gojq improvements — caching, panic-on-broken-init, secureCompileOpts by @lpcox with @Copilot in #8280
• fix: add roles: all to smoke-copilot workflow by @lpcox in #8301
• Upgrade gh-aw to v0.82.0 pre-release and recompile workflows by @lpcox in #8329
• [log] tracing: add debug logging to config_resolver.go by @github-actions[bot] in #8306
• Replace deprecated api_key with agent_id in example config by @lpcox in #8342
• refactor: consolidate single-function files in strutil, difc, and middleware by @lpcox in #8348
• fix: deduplicate write paths in label_response by @lpcox in #8345
• refactor: use NewLabeledResource constructor instead of inline struct literals by @lpcox in #8344
• [test-improver] Improve tests for registerPromptsFromBackend by @github-actions[bot] in #8307
• Extract shared HTTP response body read helpers to httputil package by @lpcox in #8346
• Replace raw fmt.Errorf with RequiredStringField and NonEmptyString validators by @lpcox in #8356
• [Repo Assist] refactor(guard): deduplicate label_response write paths and extract get_author_association by @github-actions[bot] in #8343
• Apply cobra best practices for testability and conventions by @lpcox in #8347
• [log] difc/labels: add debug logging to FormatViolationError, StringsToTags, TagsToStrings by @github-actions[bot] in #8385
• [test-improver] Improve tests for version.BuildVersionString by @github-actions[bot] in #8386
• [Repo Assist] refactor(rust-guard): extract extract_items_slice and is_pr_merged helpers by @github-actions[bot] in #8417
• Tighten TOML config test coverage for unknown keys and dynamic guard config by @lpcox with @Copilot in #8423
• fix: add missing WASM compilation cache cleanup in run() by @lpcox with @Copilot in #8424
• Deduplicate /close lifecycle logging and align shutdown event messages by @lpcox with @Copilot in #8425
• Upgrade .github/aw prompt templates to gh-aw v0.82.0 by @lpcox with @Copilot in #8428
• [test] Add tests for guard.WasmGuard.LabelResponse by @github-actions[bot] in #8383
• Refactor Rust guard response item extraction and PR merged detection by @lpcox with @Copilot in #8422
• Deduplicate proxy startup logging via logger.StartupInfo by @lpcox with @Copilot in #8426
• refactor: inline Close*Logger closures and rename syncutil.GetOrCreate → MapGetOrCreate by @lpcox with @Copilot in #8427
• [test] Add tests for guard.NewWasmGuardWithOptions coverage paths by @github-actions[bot] in #8455
• [log] Add debug logging to httputil response body readers by @github-actions[bot] in #8463
• [test-improver] Improve tests for proxy.New and proxy.Handler by @github-actions[bot] in #8464
• [Repo Assist] perf(logger): reduce allocations in formatLogLine with sync.Pool by @github-actions[bot] in #8493
• docs: add log volume mount to Docker dev examples in CONTRIBUTING.md by @lpcox with @Copilot in #8501
• Upgrade gh aw prerelease by @lpcox in #8515
• fix: remove headers from OTEL JSON stdin config (spec §4.1.3.7 v1.14.0 breaking change) by @lpcox with @Copilot in #8500
• config: use ParseError.ErrorWithUsage() for richer TOML startup diagnostics by @lpcox with @Copilot in #8505
• refactor(logger): extract syncFileWithWarning to eliminate duplicated sync boilerplate by @lpcox with @Copilot in #8504
• refactor: extract newValidationError helper to deduplicate log+return pattern in validation functions by @lpcox with @Copilot in #8503
• refactor(logger): replace 12 boilerplate log-level wrappers with var aliases by @lpcox with @Copilot in #8502
• refactor(rust-guard): extract resolve_integrity_level helper + add promotion/demotion label tests by @lpcox with @Copilot in #8506
• refactor: semantic function clustering improvements (Finding 1–4) by @lpcox with @Copilot in #8507

Full Changelog: v0.3.32...v0.3.33

v0.3.32

What's Changed

• [Repo Assist] fix(guard): add reaction operations to WRITE_OPERATIONS and DIFC rules by @github-actions[bot] in #8235
• [test] Add tests for logger.MarkdownLogger.Log by @github-actions[bot] in #8239
• [test-improver] Improve tests for guard package (normalizeLabelListField) by @github-actions[bot] in #8210
• 🔄 chore: pin MCP Gateway schema URL to v0.81.6 by @github-actions[bot] in #8223
• [log] Add debug logging to guard policy helpers by @github-actions[bot] in #8208
• refactor: Semantic function clustering — split strutil.go, extract githubhttp package, fix validation.go placement, rename logger/common.go by @lpcox with @Copilot in #8244

Full Changelog: v0.3.31...v0.3.32

v0.3.31

What's Changed

• [test] Add tests for logger.ObservedURLDomainsLogger by @github-actions[bot] in #8054
• Migrate jsonschema v5→v6, eliminate fixSchemaBytes() workaround by @lpcox with @Copilot in #8048
• refactor: extract WASM cache helpers and split validation errors/rules by @lpcox with @Copilot in #8056
• [test-improver] Improve tests for server session path-validation by @github-actions[bot] in #8060
• [Repo Assist] refactor: consolidate UnsupportedField and remove dead type normalization by @github-actions[bot] in #8090
• [log] Add debug logging to nonce cache in server/hmac.go by @github-actions[bot] in #8059
• refactor(config): centralize stdio server type helpers by @lpcox with @Copilot in #8098
• rust-guard: eliminate Vec<&Value> in issues arm; extract try_write_json_output helper by @lpcox with @Copilot in #8094
• go-sdk: fix context propagation through SDK calls and add prompt passthrough by @lpcox with @Copilot in #8095
• config: remove dead server type re-normalization in convertStdinServerConfig by @lpcox with @Copilot in #8096
• config: eliminate duplicate body between UnsupportedField and InvalidValue by @lpcox with @Copilot in #8097
• [test-improver] Improve tests for mcp package by @github-actions[bot] in #8109
• [test] Add tests for logger.atomicWriteFile and setupObservedURLDomainsLogger by @github-actions[bot] in #8104
• [log] Add debug logging to config validation error factories by @github-actions[bot] in #8108
• 🔄 chore: update gh-aw schema URL to v0.81.3 by @github-actions[bot] in #8124
• [Repo Assist] refactor(rust-guard): remove PathLabelEntry, use PathLabel directly; simplify secrecy conditions by @github-actions[bot] in #8139
• [test] Add tests for guard.WasmGuard dispatch methods by @github-actions[bot] in #8148
• Deduplicate streamable transport setup and tighten go-sdk upgrade guards by @lpcox with @Copilot in #8151
• 🔄 Pin schema URL to gh-aw v0.81.5 by @github-actions[bot] in #8174
• [test-improver] Improve tests for middleware package by @github-actions[bot] in #8157
• [log] Add debug logging to config/config_stdin.go by @github-actions[bot] in #8156
• Refactor duplicated backend list handling in tool and prompt registration by @lpcox with @Copilot in #8152
• docs: reconcile AGENTS.md package list and jsonschema version by @lpcox with @Copilot in #8154
• Refactor validation, DIFC, tracing, and logger helpers around semantic clustering findings by @lpcox with @Copilot in #8150
• refactor: extract generic executeBackendRequest[T] to eliminate duplicate backend call pattern by @lpcox with @Copilot in #8153
• Refactor MountFormat to use a shared mount validation error helper by @lpcox with @Copilot in #8192
• Refactor ServerFileLogger.Close to reuse shared file-close helper by @lpcox with @Copilot in #8193
• Refactor duplicated DIFC LabeledResource parsing in WASM guard response handling by @lpcox with @Copilot in #8194
• [guard-coverage] Close issue dependency guard gaps in tool classification and DIFC labeling by @lpcox with @Copilot in #8195
• Fix DIFC proxy GHEC data-residency REST API host derivation by @lpcox in #8203
• [test] Add tests for difc.IsSingularReadTool by @github-actions[bot] in #8201

Full Changelog: v0.3.30...v0.3.31

v0.3.30

What's Changed

• [Repo Assist] refactor: extract SortedSetKeys and atomicWriteFile to eliminate code duplication by @github-actions[bot] in #8042
• [test-improver] Improve tests for urlutil package by @github-actions[bot] in #8008
• fix: widen gateway.domain validation to accept RFC-1123 topology hostnames by @lpcox with @Copilot in #8044
• rust-guard: extract first_matching_label helper and add label-check unit tests by @lpcox with @Copilot in #8047
• refactor(mcp): eliminate duplicate cursor cycle detection by delegating paginateAll to PaginateAll by @lpcox with @Copilot in #8049

Full Changelog: v0.3.29...v0.3.30

v0.3.29

What's Changed

• [log] log: add debug logging to mcp/pagination.go by @github-actions[bot] in #7950
• 🔄 chore: pin gh-aw schema URL to v0.80.9 by @github-actions[bot] in #7966
• [Repo Assist] feat(tracing): add GenAIOperationName and GenAIAgentName to mcp.tool_call spans by @github-actions[bot] in #7981
• rust-guard: deduplicate repo fallback resolution and private-flag field checks by @lpcox with @Copilot in #7988
• [test] Add tests for oidc.fetchToken by @github-actions[bot] in #7986
• [test-improver] Improve tests for cmd tracing helpers by @github-actions[bot] in #7951
• Add opt-in observed URL domain audit pipeline for tool responses and write sinks by @lpcox with @Copilot in #7987
• Improve OTel GenAI span semantics and DIFC/rate-limit milestone visibility by @lpcox with @Copilot in #7989
• Deduplicate WASM guards env var constant across guard/server packages by @lpcox with @Copilot in #7991
• Refactor duplicated []string→[]interface{} conversions into strutil.StringsToAny by @lpcox with @Copilot in #7990
• Refactor DIFC tool classification placement and extract middleware content-rewrite helpers by @lpcox with @Copilot in #7992
• Refactor DIFC helper placement and extract response content-rewrite helpers from jqschema middleware by @lpcox with @Copilot in #8000
• docs: add internal/urlutil/ to CONTRIBUTING.md project structure by @lpcox with @Copilot in #8004
• [log] Add debug logging to urlutil/domains by @github-actions[bot] in #8005

Full Changelog: v0.3.28...v0.3.29

v0.3.28

What's Changed

• [log] Add debug logging to proxy/response_transform.go by @github-actions[bot] in #7739
• [test] Add tests for middleware.wrapToolHandler by @github-actions[bot] in #7736
• [test-improver] Improve tests for tracing package by @github-actions[bot] in #7740
• chore: recompile all workflows by @lpcox in #7766
• refactor: extract registrationErrors helper to deduplicate error-tracking in tool registration by @lpcox with @Copilot in #7763
• refactor(config): extract applyCommonServerConfigFields to eliminate stdio/HTTP duplication by @lpcox with @Copilot in #7764
• Refactor duplicate label-agent guard initialization into shared helper by @lpcox with @Copilot in #7758
• Deduplicate Phase 5 DIFC collection filtering across unified server and proxy by @lpcox with @Copilot in #7759
• fix(guard): cover 4 DIFC labeling gaps — get_code_quality_finding, ui_get, add_gpg_key, add_ssh_key by @lpcox with @Copilot in #7765
• Refactor DIFC pre-phase error handling into a shared guard helper by @lpcox with @Copilot in #7760
• rust-guard: simplify default_secrecy conditions; remove lifetime noise from integrity helpers by @lpcox with @Copilot in #7762
• [Repo Assist] refactor(rust-guard): consolidate check_file_secrecy into is_sensitive predicate by @github-actions[bot] in #7786
• refactor: semantic function clustering — reduce cross-concern placement and duplication by @lpcox with @Copilot in #7761
• Validate TOML gateway.port and cover config.example.toml by @lpcox with @Copilot in #7792
• Reduce Repo Assist GitHub MCP tool scope by @lpcox with @Copilot in #7794
• Upgrade wazero to v1.12.0 and harden WASM compilation cache shutdown by @lpcox with @Copilot in #7793
• [test] Add tests for config.validateServerAgainstSchema by @github-actions[bot] in #7798
• Refactor duplicated filter validation and localize RPC/launcher helpers by @lpcox with @Copilot in #7802
• [test-improver] Improve tests for cmd/serve package by @github-actions[bot] in #7805
• [Repo Assist] refactor(httputil): centralize TLS min-version policy by @github-actions[bot] in #7834
• Allow Nightly Schema Updater to complete Rust-guard verification by @lpcox with @Copilot in #7839
• Deduplicate command tracing provider lifecycle wiring by @lpcox with @Copilot in #7840
• Centralize TLS config construction behind shared httputil helpers by @lpcox with @Copilot in #7841
• Add debug logging to shared server handlers by @lpcox with @Copilot in #7843
• Close GitHub guard coverage gaps for 4 CLI-only mutating operations by @lpcox with @Copilot in #7842
• [Repo Assist] fix(httputil): remove duplicate TLS declarations by @github-actions[bot] in #7878
• [test-improver] Improve tests for sys package by @github-actions[bot] in #7848
• Remove duplicate TLS declarations in internal/httputil by @lpcox with @Copilot in #7887
• Remove duplicate TLS helpers and consolidate DIFC/proxy utility functions by @lpcox with @Copilot in #7889
• fix: remove duplicate TLS helpers in httputil; add create-issue safe output to nightly schema updater by @lpcox with @Copilot in #7884
• Deduplicate shared config validation across TOML and stdin paths by @lpcox with @Copilot in #7885
• Refactor ServerFileLogger initialization to eliminate duplicated struct construction by @lpcox with @Copilot in #7886
• Add synthetic guard coverage for CLI-only issue, repository, and Projects v2 mutations by @lpcox with @Copilot in #7888
• [test] Add tests for config.unmarshalStringListOrExpression by @github-actions[bot] in #7895
• Tighten Go Logger workflow scope and validation behavior by @lpcox with @Copilot in #7891
• Raise Test Coverage Improver daily AI credit guardrail by @lpcox with @Copilot in #7890
• Raise Repo Assist AI credit budget to 1500 to stop budget-guardrail failure issues by @lpcox with @Copilot in #7883
• [log] Add debug logging to DIFC policy helper functions by @github-actions[bot] in #6501
• 🔄 chore: pin schema URL to v0.79.8 by @github-actions[bot] in #7920
• [log] Add debug logging to proxy/router.go by @github-actions[bot] in #7902
• [test-improver] Improve tests for launcher connection pool by @github-actions[bot] in #7903
• guard: add 11 CLI-only GitHub operations to guard coverage by @lpcox with @Copilot in #7935
• [rust-guard] Hoist commit SHA extraction in commit_integrity and add default-branch commit-context coverage by @lpcox with @Copilot in #7939
• refactor: co-locate sys tool handlers and extract savePayload to payload.go by @lpcox with @Copilot in #7934
• refactor(logger): extract emit helper to eliminate Printf/Print duplication by @lpcox with @Copilot in #7936
• refactor: add strutil.InterfaceToIntString to deduplicate JSON numeric extraction by @lpcox with @Copilot in #7937
• [test] Add tests for guard.FindServerWASMGuardFile and GetWASMGuardsRootDir by @github-actions[bot] in #7941
• feat(guard): wazero security hardening — memory cap, backend call limit, interpreter tests by @lpcox with @Copilot in #7938

Full Changelog: v0.3.27...v0.3.28