[WIP] Update GitHub MCP Server and Gateway dependencies

[Copilot]

Thanks for asking me to work on this. I will get started on it and keep this PR's description up to date as I form a plan and make progress.

---

This section details on the original issue you should resolve

<issue_title>[ca] Update GitHub MCP Server v0.31.0 → v0.32.0 and MCP Gateway v0.1.8 → v0.1.9</issue_title>
<issue_description>### Summary

Two CLI/MCP dependency updates were detected and applied to pkg/constants/constants.go. Workflows have been recompiled (166 lock files updated).

Tool	Previous	New	Risk
GitHub MCP Server	v0.31.0	v0.32.0	Low
MCP Gateway (gh-aw-mcpg)	v0.1.8	v0.1.9	Low

Update GitHub MCP Server v0.31.0 → v0.32.0

• Released: 2026-03-06
• Changelog: github/github-mcp-server@v0.31.0...v0.32.0

Breaking Changes

None.

Key Features

• Context Reduction: Tool outputs trimmed for get_files, get_pull_request_review_comments, get_pull_request_reviews, add_issue_comments, list_pull_requests, list_tags, list_releases, list_issues — reduces token usage in LLM interactions
• Copilot Tools in Default Toolset: Copilot-specific tools moved into the default copilot toolset, available out of the box without additional configuration
• MCP Apps UI Improvements: Better client support detection, clearer user confirmation prompts for issue/PR creation, smarter form skipping when issue updates include a state change
• New get_check_runs tool added (Get check runs github-mcp-server#1953)
• Fix: Handle empty files in get_file_contents (fix: Handle empty files in get_file_contents github-mcp-server#2042)
• Fix: Gracefully handle numeric parameters passed as strings (Gracefully handle numeric parameters passed as strings github-mcp-server#2130)
• Fix: Fix SHA validation in create_or_update_file (Fix SHA validation in create_or_update_file github-mcp-server#2134)
• Fix: Stricter matching for github.com and ghe.com URLs (Stricter matching for github.com and ghe.com URLs github-mcp-server#2127)
• Fix: Panic fix when fetching resources fails due to network error (Fix panic when fetching resources fails due to network error github-mcp-server#1506)

View Full Changelog (all PRs)

PR	Author	Description
github/github-mcp-server#2039	@SamMorrowDrums	feat: move copilot tools to default copilot toolset
github/github-mcp-server#2059	@tommaso-moro	Optimize context usage for get_files in pull_request_read
github/github-mcp-server#2062	@tommaso-moro	Reduce context usage for get_pull_request_review_comments using pull_request_read
github/github-mcp-server#2063	@tommaso-moro	Reduce context for add_issue_comments using minimal types
github/github-mcp-server#2066	@tommaso-moro	Reduce context usage for get_pull_request_reviews
github/github-mcp-server#2087	@kerobbi	Reduce context usage for list_pull_requests
github/github-mcp-server#2088	@kerobbi	Reduce context usage for list_tags
github/github-mcp-server#2091	@kerobbi	Reduce context usage for list_releases
github/github-mcp-server#2098	@kerobbi	Reduce context usage for list_issues
github/github-mcp-server#1953	@kaitlin-duolingo	Get check runs (new tool)
github/github-mcp-server#2042	@kubajanusz	fix: Handle empty files in get_file_contents
github/github-mcp-server#2127	@almaleksia	Stricter matching for github.com and ghe.com URLs
github/github-mcp-server#2130	@almaleksia	Gracefully handle numeric parameters passed as strings
github/github-mcp-server#2134	@almaleksia	Fix SHA validation in create_or_update_file
github/github-mcp-server#2149	@almaleksia	Correctly wrap GraphQL error
github/github-mcp-server#1506	@SamMorrowDrums	Fix panic when fetching resources fails due to network error
github/github-mcp-server#2051	@mattdholloway	Enhance client support checks for MCP Apps UI rendering
github/github-mcp-server#2094	@mattdholloway	Clarify user confirmation requirement in issue and pull request creation messages
github/github-mcp-server#2163	@Copilot	Skip MCP Apps UI form when issue_write update includes a state change
github/github-mcp-server#2054	@dependabot	build(deps): bump hono from 4.11.7 to 4.12.0 in /ui
github/github-mcp-server#2056	@dependabot	build(deps): bump ajv from 8.17.1 to 8.18.0 in /ui
github/github-mcp-server#2046	@atharva1051	chore: gh-host as oauth auth server
github/github-mcp-server#2157	@SamMorrowDrums	Add JavaScript support to code scanning workflow

Impact Assessment

• Risk: Low
• Affects: All workflows using the GitHub MCP Server (github tool in local Docker mode)
• Token savings: Context reduction across multiple tools will reduce token consumption in agent runs
• New tool: get_check_runs is now available but not yet in DefaultReadOnlyGitHubTools — add if needed

Package Links

• Docker Image: ghcr.io/github/github-mcp-server:v0.32.0
• Repository: https://github.com/github/github-mcp-server
• Release Notes: https://github.com/github/github-mcp-server/releases/tag/v0.32.0

---

Update MCP Gateway v0.1.8 → v0.1.9

• Released: 2026-03-06
• Changelog: github/gh-aw-mcpg@v0.1.8...v0.1.9

Breaking Changes

None.

Key Features

• MCP Protocol 2025-11-25: Gateway now negotiates using the latest protocol version, improving compatibility with up-to-date MCP clients and servers (Resolve isHTTPConnectionError TODO and update MCPProtocolVersion to 2025-11-25 gh-aw-mcpg#1619)
• go-sdk v1.4.0: Upgraded MCP Go SDK, consolidating protocol constants and removing deprecated HTTPTransport (go-sdk v1.4.0 upgrade + protocol constant consolidation + HTTPTransport removal gh-aw-mcpg#1598)
• Config Schema v0.53.6: Gateway configuration validated against the latest spec schema (🔄 chore: update schema URL to v0.53.6 gh-aw-mcpg#1640)
• customSchemas Documentation: New docs clarify custom schema URLs and uppercase domain constraint (docs: add customSchemas documentation and clarify domain uppercase constraint gh-aw-mcpg#1606)
• Fix: Removed duplicate TestWithResponseLogging that caused lint failures during CI (fix: remove duplicate TestWithResponseLogging causing lint failure on merge gh-aw-mcpg#1599)

View Full Changelog (all PRs)

PR	Author	Description
github/gh-aw-mcpg#1619	@Copilot	Resolve isHTTPConnectionError TODO and update MCPProtocolVersion to 2025-11-25
github/gh-aw-mcpg#1598	@Copilot	go-sdk v1.4.0 upgrade + protocol constant consolidation + HTTPTransport removal
github/gh-aw-mcpg#1592	@github-actions[bot]	chore: update schema URL to v0.53.2
github/gh-aw-mcpg#1610	@github-actions[bot]	chore: update schema URL to v0.53.4
github/gh-aw-mcpg#1640	@github-actions[bot]	chore: update schema URL to v0.53.6
github/gh-aw-mcpg#1606	@Copilot	docs: add customSchemas documentation and clarify domain uppercase constraint
github/gh-aw-mcpg#1599	@Copilot	fix: remove duplicate TestWithResponseLogging causing lint failure on merge
github/gh-aw-mcpg#1630	@lpcox	Fix test GitHub mcp session
github/gh-aw-mcpg#1585	@Copilot	refactor: eliminate three duplicate code patterns in launcher, config, and server packages
github/gh-aw-mcpg#1567	@Copilot	refactor: eliminate duplicate RPCMessageInfo construction and document flag-default pattern
github/gh-aw-mcpg#1620	@Copilot	Eliminate duplicate constants: centralize DefaultLogDir, DefaultPayloadDir, DefaultPayloadSizeThreshold in config package
github/gh-aw-mcpg#1641	@Claude	Refactor: Consolidate micro-files and extract Docker helpers

Impact Assessment

• Risk: Low — maintenance and quality release, no breaking changes
• Affects: All workflows using MCP Gateway (mcp-gateway feature flag)
• Protocol upgrade: Negotiates MCP 2025-11-25 for improved client/server compatibility

Package Links

• Docker Image: ghcr.io/github/gh-aw-mcpg:v0.1.9
• Repository: https://github.com/github/gh-aw-mcpg
• Release Notes: https://github.com/github/gh-aw-mcpg/releases/tag/v0.1.9

---

Changes Applied

• pkg/constants/constants.go: Updated DefaultGitHubMCPServerVersion to v0.32.0 and DefaultMCPGatewayVersion to v0.1.9
• make recompile: Successfully compiled 166 workflow files with updated lock files

References:

• §22818586640

Generated by CLI Version Checker · ◷

• expires on Mar 10, 2026, 9:55 AM UTC

Comments on the Issue (you are @copilot in this section)

@pelikhan@copilot ignore gateway, update GitHub MCP server

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.