π€ *Repo Assist here β I'm an automated AI assistant for this repository.* ## Activity for April 2026 ## Suggested Actions for Maintainer **Comprehensive list** of all pending actions requiring maintainer attention. * [ ] **Review PR** (this run): `fix(mcp): replace hardcoded 30s with defaultConnectTimeout constant, fix <= 0 guard` β closes #3933 β [View open PRs](https://github.com/github/gh-aw-mcpg/pulls?q=is:pr+is:open+repo-assist) * [ ] **Review PR** (this run): `test(mcp): add connect-timeout default behaviour tests` β [View open PRs](https://github.com/github/gh-aw-mcpg/pulls?q=is:pr+is:open+repo-assist) * [ ] **Review PR** #3939: Add tests for `oidc.extractJWTExpiry` (automated) β [Review](https://github.com/github/gh-aw-mcpg/pull/3939) * [ ] **Review PR** #3938: Improve tests for tracing package (automated) β [Review](https://github.com/github/gh-aw-mcpg/pull/3938) ## Future Work for Repo Assist - Refactor `SendRequestWithServerID` to consolidate 3 duplicate marshal+log+return blocks into a single return path (#3932) - Implement Rust guard improvements from #3935 (merge 4 duplicate granular-write match arms, fix redundant path splitting in `check_file_secrecy`) - Upgrade `go-sdk` from v1.5.0 β latest once Go 1.25.0 is available in the environment ## Guard Filtering Summary No objects were filtered by the guard policy. ## Run History ### 2026-04-16 12:41 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24510723428) - π§ Created PR (this run): `fix(mcp): replace hardcoded 30s with defaultConnectTimeout constant, fix <= 0 guard` β closes #3933 - π§ Created PR (this run): `test(mcp): add connect-timeout default behaviour tests` ### 2026-04-15 12:39 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24454920884) - π§ Created PR (closed #3847): `refactor(mcp): extract logInboundRPCResponse helper in connection.go` β closes #3828 - π¬ Commented on #3828, #3834, #3829 - π·οΈ Labelled #3830 with `bug`; labelled #3802 with `needs triage` ### 2026-04-14 12:40 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24399350012) - π§ Created PR #3750 (**merged**): Replace manual inline truncation with `strutil.Truncate` / `sanitize.TruncateSecret` β closes #3737 - π§ Created issue #3751 (**closed by maintainer**): Pin `actions/github-script@v7` to SHA, upgrade to v9 in ci.yml ### 2026-04-13 12:42 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24343836907) - π§ Created PR #3701 (**merged**): Remove redundant `"none"` match arm and unused `MEDIUM_BUFFER_SIZE` re-export in Rust guard β closes #3691 - π¬ Commented on #3691, #3562, #3687 ### 2026-04-12 12:29 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24306753924) - π¬ Commented on #3618 - π§ Created PR #3640 (**merged**): Remove 5 redundant `log.Printf` calls from `connection.go` β closes #3633 ### 2026-04-11 12:27 UTC β [Run](https://github.com/github/gh-aw-mcpg/actions/runs/24282446110) - π·οΈ Labelled #3550 with `automation`; labelled #3563 with `enhancement` - π¬ Commented on #3563 - π§ Created PR (**merged**): Add `strutil.TruncateRunes`, delegate `truncateForLog`, inline `lookupEnrichmentToken` alias ### Earlier runs - 2026-04-09: PRs (closed) β `httputil.WriteJSONResponse` in proxy/handler.go, `InitGatewayLoggers`/`InitProxyLoggers` helpers - 2026-04-08: PR (closed) β `rust-guard-test` CI job β 251 Rust guard unit tests on every PR - 2026-04-07: PR #3325 (closed) β Rust guard: `eq_ignore_ascii_case`, remove stale `#[allow(dead_code)]` - 2026-04-06: PR #3281 (closed) β three compliance fixes (#3272) - 2026-04-05: PR (closed) β move `ExpandEnvArgs` to `envutil` - 2026-04-04: PRs (closed) β `GenerateRandomAPIKey`, `test-race` target - 2026-04-03: PR (closed) β move `logRuntimeError`; commented on #3113 - 2026-04-02: PRs (closed) β `writeDIFCForbidden` helper, `GetEnvDuration` + session timeout - 2026-04-01: PR (closed) β remove `writeJSONResponse` passthrough; commented on #2988, #2909 > [!WARNING] > <details> > <summary><strong>β οΈ Firewall blocked 1 domain</strong></summary> > > The following domain was blocked by the firewall during workflow execution: > > - `proxy.golang.org` > > To allow these domains, add them to the `network.allowed` list in your workflow frontmatter: > > ```yaml > network: > allowed: > - defaults > - "proxy.golang.org" > ``` > > See [Network Configuration](https://github.github.com/gh-aw/reference/network/) for more information. > > </details> > Generated by [Repo Assist](https://github.com/github/gh-aw-mcpg/actions/runs/24510723428/agentic_workflow) Β· β 6.1M Β· [β·](https://github.com/search?q=repo%3Agithub%2Fgh-aw-mcpg+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw-mcpg%2Frepo-assist%22&type=issues) > > To install this [agentic workflow](https://github.com/githubnext/agentics/blob/851905c06e905bf362a9f6cc54f912e3df747d55/workflows/repo-assist.md), run > ``` > gh aw add githubnext/agentics/workflows/repo-assist.md@851905c06e905bf362a9f6cc54f912e3df747d55 > ``` <!-- gh-aw-agentic-workflow: Repo Assist, engine: copilot, model: auto, id: 24510723428, workflow_id: repo-assist, run: https://github.com/github/gh-aw-mcpg/actions/runs/24510723428 -->
π€ Repo Assist here β I'm an automated AI assistant for this repository.
Activity for April 2026
Suggested Actions for Maintainer
Comprehensive list of all pending actions requiring maintainer attention.
fix(mcp): replace hardcoded 30s with defaultConnectTimeout constant, fix <= 0 guardβ closes [duplicate-code] Duplicate Code Pattern: Hardcoded 30s connect timeout default duplicated in connection.goΒ #3933 β View open PRstest(mcp): add connect-timeout default behaviour testsβ View open PRsoidc.extractJWTExpiry(automated) β ReviewFuture Work for Repo Assist
SendRequestWithServerIDto consolidate 3 duplicate marshal+log+return blocks into a single return path ([duplicate-code] Duplicate Code Pattern: Repeated logInboundRPCResponse block in SendRequestWithServerIDΒ #3932)check_file_secrecy)go-sdkfrom v1.5.0 β latest once Go 1.25.0 is available in the environmentGuard Filtering Summary
No objects were filtered by the guard policy.
Run History
2026-04-16 12:41 UTC β Run
fix(mcp): replace hardcoded 30s with defaultConnectTimeout constant, fix <= 0 guardβ closes [duplicate-code] Duplicate Code Pattern: Hardcoded 30s connect timeout default duplicated in connection.goΒ #3933test(mcp): add connect-timeout default behaviour tests2026-04-15 12:39 UTC β Run
refactor(mcp): extract logInboundRPCResponse helper in connection.goβ closes [duplicate-code] Duplicate Code Pattern: Repeated shouldAttachAgentTags Conditional Logging in connection.goΒ #3828bug; labelled Smoke Copilot - Issue GroupΒ #3802 withneeds triage2026-04-14 12:40 UTC β Run
strutil.Truncate/sanitize.TruncateSecretβ closes [duplicate-code] Duplicate Code Pattern: Manual truncation bypassing strutil/sanitize utilitiesΒ #3737actions/github-script@v7to SHA, upgrade to v9 in ci.yml2026-04-13 12:42 UTC β Run
"none"match arm and unusedMEDIUM_BUFFER_SIZEre-export in Rust guard β closes [rust-guard] Rust Guard: Remove redundant match arm and unused re-exportΒ #36912026-04-12 12:29 UTC β Run
log.Printfcalls fromconnection.goβ closes [duplicate-code] Duplicate Code Pattern: Mixed log.Printf / logger.LogInfo Parallel Logging in connection.goΒ #36332026-04-11 12:27 UTC β Run
automation; labelled Copilot offline mode + BYOKΒ #3563 withenhancementstrutil.TruncateRunes, delegatetruncateForLog, inlinelookupEnrichmentTokenaliasEarlier runs
httputil.WriteJSONResponsein proxy/handler.go,InitGatewayLoggers/InitProxyLoggershelpersrust-guard-testCI job β 251 Rust guard unit tests on every PReq_ignore_ascii_case, remove stale#[allow(dead_code)]ExpandEnvArgstoenvutilGenerateRandomAPIKey,test-racetargetlogRuntimeError; commented on [refactor] Semantic Function Clustering: Refactoring Opportunities in Go Source FilesΒ #3113writeDIFCForbiddenhelper,GetEnvDuration+ session timeoutwriteJSONResponsepassthrough; commented on [compliance] Compliance Gap: Health Monitoring Missing Periodic Checks and Auto-Restart (Section 8)Β #2988, [duplicate-code] Duplicate Code Pattern: Boilerplate initGlobal*/closeGlobal* Logger WrappersΒ #2909Warning
The following domain was blocked by the firewall during workflow execution:
proxy.golang.orgTo allow these domains, add them to the
network.allowedlist in your workflow frontmatter:See Network Configuration for more information.