feat: upgrade GitHub MCP server to v1.6.0, enable fields_param by default

[Copilot]

Bumps the default GitHub MCP server to v1.6.0 and automatically enables the new fields_param feature flag, which lets agents filter tool response fields to reduce token usage on heavy list/search APIs.

Version & pin

• DefaultGitHubMCPServerVersion → v1.6.0
• Added v1.6.0 container digest to actions-lock.json (synced to both data/action_pins.json copies)

Features wiring

• Added Features string to GitHubMCPDockerOptions and GitHubMCPRemoteOptions
• buildGitHubMCPEnvVars → emits GITHUB_FEATURES=fields_param (Docker/local mode)
• buildGitHubMCPRemoteHeaders → emits X-MCP-Features: fields_param (remote mode)
• New getGitHubFeatures(): defaults to "fields_param" for v1.6.0+; respects explicit tools.github.features override

Default fields constants (mcp_github_default_fields.go, new)

• GitHubMCPFeatureFieldsParam = "fields_param" — the feature flag name
• GitHubMCPDefaultFields — recommended slim field sets per tool (drops body, reactions, text_matches, repository, etc. from heavy responses):

varGitHubMCPDefaultFields=map[string][]string{
"list_pull_requests": {"number", "title", "state", "draft", "created_at", ...},
"search_issues": {"number", "title", "state", "user", "labels", ...},
"search_code": {"name", "path", "sha", "html_url"},
"list_commits": {"sha", "html_url", "commit", "author"},
// ...
}

Workflows can opt out or override via:

tools:
github:
features: ""# disablefeatures: "insiders"# use insiders mode

---

---

✨ PR Review Safe Output Test - Run 29470703221

💥 [THE END] — Illustrated by Smoke Claude · 113.2 AIC · ⌖ 31.8 AIC · ⊞ 8.4K · ◷
_{Comment /smoke-claude to run again}

[Copilot]

Pull request overview

Upgrades GitHub MCP Server to v1.6.0 and enables fields_param for local and remote transports.

Changes:

• Bumps and pins the v1.6.0 container image.
• Wires feature flags through MCP renderers.
• Adds field recommendations and regenerates fixtures/workflows.

Show a summary per file

File	Description
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden	Updates the MCP image version.
pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden	Updates generated MCP configuration.
pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden	Adds feature configuration to Codex output.
pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden	Updates generated MCP configuration.
pkg/workflow/mcp_renderer_types.go	Adds renderer feature options.
pkg/workflow/mcp_renderer_section_helpers.go	Emits feature env vars and headers.
pkg/workflow/mcp_renderer_section_helpers_test.go	Updates helper invocation.
pkg/workflow/mcp_renderer_github.go	Propagates features through renderers.
pkg/workflow/mcp_github_default_fields.go	Adds recommended response fields.
pkg/workflow/mcp_github_config.go	Selects default and explicit features.
pkg/workflow/data/action_pins.json	Adds the v1.6.0 image pin.
pkg/workflow/codex_engine_test.go	Updates Codex rendering expectations.
pkg/constants/version_constants.go	Changes the default MCP version.
pkg/actionpins/data/action_pins.json	Synchronizes the image pin.
.github/workflows/schema-feature-coverage.lock.yml	Adds the remote feature header.
.github/workflows/pr-description-caveman.lock.yml	Regenerates the v1.6.0 image pin.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Adds the remote feature header.
.github/workflows/github-mcp-tools-report.lock.yml	Adds the remote feature header.
.github/workflows/firewall.lock.yml	Regenerates local MCP configuration.
.github/workflows/example-permissions-warning.lock.yml	Regenerates local MCP configuration.
.github/workflows/eslint-miner.lock.yml	Regenerates the image pin.
.github/workflows/designer-drift-audit.lock.yml	Regenerates the image pin.
.github/workflows/daily-windows-terminal-integration-builder.lock.yml	Regenerates the image pin.
.github/workflows/daily-max-ai-credits-test.lock.yml	Regenerates local MCP configuration.
.github/workflows/daily-formal-spec-verifier.lock.yml	Regenerates the image pin.
.github/workflows/daily-credit-limit-test.lock.yml	Regenerates local MCP configuration.
.github/workflows/daily-cli-performance.lock.yml	Regenerates the image pin.
.github/workflows/daily-byok-ollama-test.lock.yml	Regenerates local MCP configuration.
.github/workflows/daily-assign-issue-to-user.lock.yml	Regenerates the image pin.
.github/workflows/craft.lock.yml	Regenerates the image pin.
.github/workflows/copilot-opt.lock.yml	Regenerates the image pin.
.github/workflows/copilot-cli-deep-research.lock.yml	Regenerates the image pin.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Adds the remote feature header.
.github/workflows/code-scanning-fixer.lock.yml	Regenerates the image pin.
.github/workflows/bot-detection.lock.yml	Regenerates local MCP configuration.
.github/workflows/artifacts-summary.lock.yml	Regenerates the image pin.
.github/workflows/agentic-token-optimizer.lock.yml	Regenerates the image pin.
.github/workflows/agentic-auto-upgrade.yml	Regenerates the weekly schedule.
.github/workflows/ace-editor.lock.yml	Regenerates local MCP configuration.
.github/aw/actions-lock.json	Adds the canonical v1.6.0 pin.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 113/277 changed files
• Comments generated: 7
• Review effort level: Medium

[gh-aw-bot]

@copilot please run the pr-finisher skill, address unresolved review feedback, refresh the branch if needed, and rerun checks once updates are pushed.

Generated by 👨‍🍳 PR Sous Chef · 8.91 AIC · ⌖ 5.49 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot please run the pr-finisher skill, address unresolved review feedback, refresh the branch if needed, and rerun checks once updates are pushed.

...

Addressed all unresolved review threads in commit fix: address review feedback on GitHub MCP v1.6.0 fields_param feature:

• Schema: Added features property to the GitHub tool object in main_workflow_schema.json — the additionalProperties: false guard was blocking tools.github.features from being set at all.
• Empty-string disable: Fixed getGitHubFeatures — an explicit features: "" now returns "" immediately (disabling all feature flags) instead of falling through to the v1.6.0 default.
• search_pull_requests: Removed base and head — not in the v1.6.0 fields enum for issue-search objects.
• list_issues: Removed assignees — not in the v1.6.0 fields enum (only search_issues supports it).
• search_code: Removed html_url — not selectable; valid fields are name, path, sha, repository, text_matches.
• get_file_contents / list_releases: Added both missing entries to GitHubMCPDefaultFields.
• Doc comment: Corrected the guidance line for issues — labels are included in the slim set, not omitted.

The "insiders mode via features: insiders" was only in the PR description, not in code or docs, and no wiring for GITHUB_INSIDERS was added, so that advertised behavior has simply been dropped.

Local make fmt, make test-unit, and make agent-report-progress all pass. CI needs a human re-trigger to confirm.

[gh-aw-bot]

@copilot please run the pr-finisher skill, address the unresolved review feedback (newest first: Copilot: #45832 (comment)), and rerun checks once the branch is up to date.

Generated by 👨‍🍳 PR Sous Chef · 9.41 AIC · ⌖ 6.79 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

[gh-aw-bot]

@copilot please run the pr-finisher skill, address any unresolved review feedback, and rerun checks once the branch is up to date.

Generated by 👨‍🍳 PR Sous Chef · 3.47 AIC · ⌖ 11.2 AIC · ⊞ 5.1K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot merge main and recompile

Done. Merged origin/main (2 new commits: update all packages, rebuild), resolved lock-file conflicts, recompiled all 257 workflows, and updated golden fixtures.

[pelikhan]

@copilot merge main recompile

[Copilot]

@copilot merge main recompile

Done. Merged origin/main (3 new commits), resolved lock-file conflicts in avenger, hourly-ci-cleaner, release, and skillet, and recompiled all 257 workflows. Build, fmt, lint, and workflow-drift checks all pass.

[pelikhan]

@copilot merge main and recompile

[Copilot]

@copilot merge main and recompile

Done. Merged origin/main (3 new commits), resolved lock-file conflicts, and recompiled all 257 workflows.

[pelikhan]

@copilot merge main and recompile

[Copilot]

@copilot merge main and recompile

Done. Merged origin/main (2 new commits), resolved lock-file conflicts, and recompiled all 257 workflows.

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.82.11