|
| 1 | +# gh-aw Intelligence Report — 2026-04-19 |
| 2 | + |
| 3 | +**Period:** 2026-04-18 → 2026-04-19 |
| 4 | +**Sources:** GitHub API (gh-aw, github-mcp-server, agentics, zircote/github-agentic-workflows) |
| 5 | +**Web search:** Blocked by network firewall — GitHub API data only |
| 6 | + |
| 7 | +--- |
| 8 | + |
| 9 | +## 1. gh-aw CLI Updates |
| 10 | + |
| 11 | +### AWF v0.25.25 + MCP Gateway v0.2.25 (2026-04-19) |
| 12 | + |
| 13 | +Routine version bump merged today (PR #27102): |
| 14 | +- **AWF (Actions Workflow Framework):** v0.25.24 → **v0.25.25** |
| 15 | +- **MCP Gateway:** v0.2.24 → **v0.2.25** |
| 16 | + |
| 17 | +Source: https://github.com/github/gh-aw/commit/ca1d545a9b9f1a4623f30cfa1aae322fbf12db77 |
| 18 | + |
| 19 | +--- |
| 20 | + |
| 21 | +## 2. Critical Bug Fix — MCP Gateway Port 8080 |
| 22 | + |
| 23 | +**Severity: High** — Silent production failures |
| 24 | + |
| 25 | +A previous gh-aw change (PR #27058) moved the MCP gateway from **port 80 to port 8080** (non-privileged). However, AWF's `--enable-host-access` flag only whitelists ports 80 and 443 by default. This caused the agent inside AWF to be unable to reach the MCP gateway, resulting in: |
| 26 | + |
| 27 | +- **Silent MCP tool-call failures** (agent receives no tools) |
| 28 | +- **Safe-output timeouts** (safe-outputs communicate via MCP gateway) |
| 29 | + |
| 30 | +**Fix (merged 2026-04-19):** Added `--allow-host-ports 80,443,<gateway-port>` to the compiled AWF command, gated by minimum AWF version. Also respects custom `sandbox.mcp.port` configuration. |
| 31 | + |
| 32 | +Source: https://github.com/github/gh-aw/commit/a77850ea08d6b59e87b5ba41e78a1b5ee60b755d |
| 33 | + |
| 34 | +**Impact:** Any gh-aw version between the port change and v0.25.25 would silently fail MCP calls. Updating to the latest gh-aw (`gh aw upgrade`) resolves this. |
| 35 | + |
| 36 | +--- |
| 37 | + |
| 38 | +## 3. New Workflow — copilot-opt |
| 39 | + |
| 40 | +A new gh-aw internal workflow `copilot-opt` has been added (commit 1378d27) that: |
| 41 | +- Analyzes 14-day session history |
| 42 | +- Generates 3 evidence-backed Copilot optimization issue recommendations |
| 43 | +- Uses lean toolset + Haiku model + pre-aggregation for token efficiency |
| 44 | + |
| 45 | +Token optimizer was also improved with cli-proxy path, lean toolset, and prompt compaction. |
| 46 | + |
| 47 | +Source: https://github.com/github/gh-aw/commit/1378d27a7efc20f30e8fedd484fab57beea7db26 |
| 48 | + |
| 49 | +--- |
| 50 | + |
| 51 | +## 4. Exported Constants — guard-policy, BYOK, AWF Version |
| 52 | + |
| 53 | +New constants exported from `pkg/constants`: |
| 54 | +- `guard-policy` — AWF network guard policy identifiers |
| 55 | +- `BYOK` (Bring Your Own Key) — token configuration constants |
| 56 | +- AWF version string constants |
| 57 | + |
| 58 | +Source: https://github.com/github/gh-aw/commit/c842421a058e688346db5491ce80e44179df6d01 |
| 59 | + |
| 60 | +--- |
| 61 | + |
| 62 | +## 5. API Rename — ResolveLatestActionPin |
| 63 | + |
| 64 | +`GetCachedActionPin` renamed to `ResolveLatestActionPin` in `pkg/actionpins`. This is an internal API change; no impact on workflow authors. |
| 65 | + |
| 66 | +Source: https://github.com/github/gh-aw/commit/7533280119bfffdd4f020ca893dcc818935e4600 |
| 67 | + |
| 68 | +--- |
| 69 | + |
| 70 | +## 6. GitHub MCP Server — v1.0.0 Still Current |
| 71 | + |
| 72 | +No new releases since v1.0.0 (2026-04-16). The stable 1.0 release with: |
| 73 | +- `set_issue_fields` tool (issues_granular toolset) |
| 74 | +- MCP Apps migrated from insiders to `remote_mcp_ui_apps` feature flag |
| 75 | +- granular toolsets: `issues_granular`, `pull_request_granular` |
| 76 | +- `resolve_review_thread` tool (v0.33.0) |
| 77 | +- `list_commits`: `path`, `since`, `until` parameters (v0.33.0) |
| 78 | + |
| 79 | +--- |
| 80 | + |
| 81 | +## 7. githubnext/agentics |
| 82 | + |
| 83 | +Minor formatting fixes (2026-04-17, don Syme). No new workflows or patterns. |
| 84 | + |
| 85 | +--- |
| 86 | + |
| 87 | +## 8. Community |
| 88 | + |
| 89 | +No significant community findings today (web search blocked by network firewall). |
| 90 | + |
| 91 | +--- |
| 92 | + |
| 93 | +## Gap Analysis |
| 94 | + |
| 95 | +### GAP-1 (missing, priority 1): production-gotchas.md — MCP gateway port 8080 |
| 96 | + |
| 97 | +**File:** `skills/aw-author/references/production-gotchas.md` |
| 98 | +**Section:** MCP Server Constraints |
| 99 | +**Issue:** The critical MCP gateway port change (80 → 8080) and AWF firewall blocking issue is not documented. This is a high-impact production failure causing silent MCP tool-call failures and safe-output timeouts. |
| 100 | +**Action:** Add new gotcha entry — implemented in this PR. |
| 101 | + |
| 102 | +### GAP-2 (outdated, priority 2): gh-aw-architecture.md — AWF/MCP Gateway versions |
| 103 | + |
| 104 | +**File:** `.claude/skills/gh-aw-report/references/gh-aw-architecture.md` |
| 105 | +**Section:** MCP Gateway version |
| 106 | +**Issue:** Architecture file still references v0.1.9 (open issue #39). Now bumped to v0.2.25. AWF should be noted as v0.25.25. |
| 107 | +**Action:** Update version references — implemented in this PR. |
| 108 | + |
| 109 | +*Note: Gaps #39–#43 from 2026-04-18 remain open for Copilot implementation.* |
| 110 | + |
| 111 | +--- |
| 112 | + |
| 113 | +## Summary |
| 114 | + |
| 115 | +- **Queries run:** 5 GitHub API (gh-aw, github-mcp-server, agentics, zircote, releases) |
| 116 | +- **Web searches:** 0 (network firewall blocked all outbound requests) |
| 117 | +- **Key findings:** AWF/Gateway bumped to v0.25.25/v0.2.25; critical MCP port 8080 bug fixed; new copilot-opt workflow |
| 118 | +- **Gaps identified:** 2 new (port 8080 gotcha, architecture version) |
| 119 | +- **Files changed:** production-gotchas.md, gh-aw-architecture.md, knowledge-base.md (×2) |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4&size=40){kind=avatar}
0 commit comments