[ca] CLI/Dependency version check: MCP Gateway v0.4.8 → v0.4.9 (digest pin needs re-resolution)

[github-actions]

Summary

Routine CLI/dependency version check found one update: MCP Gateway (gh-aw-mcpg) v0.4.8 → v0.4.9. All other monitored CLIs/MCP servers and the eight tracked static-analysis Docker images (actionlint, syft, grype, grant, zizmor, poutine, runner-guard, yamllint) are already at their latest stable versions with unchanged digests.

MCP Gateway (gh-aw-mcpg): v0.4.8 → v0.4.9

• Released: 2026-08-09
• Constant: DefaultMCPGatewayVersion in pkg/constants/version_constants.go
• Changelog: https://github.com/github/gh-aw-mcpg/releases/tag/v0.4.9
• Full diff: github/gh-aw-mcpg@v0.4.8...v0.4.9

Security

• Sanitize secrets in file/server log lines: [Repo Assist] fix(logger): sanitize secrets in file/server log lines gh-aw-mcpg#10774
• Enforce a trusted host-path mount policy before launching container MCP servers: Enforce a trusted host-path mount policy before launching container MCP servers gh-aw-mcpg#10928

Fixes

• Fix circuit breaker wedging permanently in HALF-OPEN after transport-error probe: [Repo Assist] Fix circuit breaker wedging permanently in HALF-OPEN after transport-error probe gh-aw-mcpg#10719
• Preserve public secrecy labels for unknown Actions repo visibility: Preserve public secrecy labels for unknown Actions repo visibility gh-aw-mcpg#10873
• Retry late HTTP backend registration: Retry late HTTP backend registration gh-aw-mcpg#10784
• Fix Go network access for test coverage workflow: Fix Go network access for test coverage workflow gh-aw-mcpg#10892
• Fix release workflow timeout and gating failures: Fix release workflow timeout and gating failures gh-aw-mcpg#10944

Other changes

Full changelog (28 PRs)

• Improve tests for proxy TLS certificate generation: [test-improver] Improve tests for proxy TLS certificate generation gh-aw-mcpg#10693
• Add debug logging to IsSingularReadTool in tool_policy.go: [log] Add debug logging to IsSingularReadTool in tool_policy.go gh-aw-mcpg#10692
• Harden Rust guard visibility logging tests: Harden Rust guard visibility logging tests gh-aw-mcpg#10733
• Add regression coverage for pull_request_read DIFC labeling: Add regression coverage for pull_request_read DIFC labeling gh-aw-mcpg#10735
• Upgrade MCP Go SDK to v1.7.0: Upgrade MCP Go SDK to v1.7.0 gh-aw-mcpg#10734
• Add debug logging to guard_visibility.go: [log] Add debug logging to guard_visibility.go gh-aw-mcpg#10749
• Bump pinned gh-aw schema URL to v0.84.3: 🔄 chore: bump pinned gh-aw schema URL to v0.84.3 gh-aw-mcpg#10759
• Upgrade golang.org/x/text to v0.40.0: Upgrade golang.org/x/text to v0.40.0 gh-aw-mcpg#10783
• Deduplicate Rust guard repository secrecy logic: Deduplicate Rust guard repository secrecy logic gh-aw-mcpg#10782
• Upgrade gh-aw extension to latest pre-release and recompile workflows: Upgrade gh-aw extension to latest pre-release and recompile workflows gh-aw-mcpg#10831
• Improve tests for internal/util TruncateRunes: [test-improver] Improve tests for internal/util TruncateRunes gh-aw-mcpg#10793
• Add debug logging to internal/testutil/mcptest/server.go: [log] Add debug logging to internal/testutil/mcptest/server.go gh-aw-mcpg#10837
• Refactor(rust-guard): dedup owner/repo split logic, use label constants in tests: [Repo Assist] refactor(rust-guard): dedup owner/repo split logic, use label constants in tests gh-aw-mcpg#10866
• Update pinned gh-aw schema URL to v0.85.4: 🔄 chore: update pinned gh-aw schema URL to v0.85.4 gh-aw-mcpg#10857
• Recompile all workflows with latest gh-aw pre-release: Recompile all workflows with latest gh-aw pre-release gh-aw-mcpg#10877
• Bump github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3: Bump github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3 gh-aw-mcpg#10874
• Add regression tests locking in DIFC coverage for 8 previously-flagged GitHub MCP tools: Add regression tests locking in DIFC coverage for 8 previously-flagged GitHub MCP tools gh-aw-mcpg#10875
• Repo Assist: allow Go module/toolchain domains in workflow firewall policy: Repo Assist: allow Go module/toolchain domains in workflow firewall policy gh-aw-mcpg#10925
• Add tests for mcp.Connection.callTool: [test] Add tests for mcp.Connection.callTool gh-aw-mcpg#10937

Impact assessment

Risk: Low. This release is dominated by test hardening, logging, and internal refactors. The two security-relevant fixes (log secret sanitization, trusted host-path mount policy) are defensive hardening in the gateway itself and are strictly improvements for gh-aw's sandboxed MCP execution model — no action required from workflow authors. No breaking changes or removed flags were identified in the release notes.

Changes made

• Updated DefaultMCPGatewayVersion from v0.4.8 to v0.4.9 in pkg/constants/version_constants.go.
• Ran make fmt, then make build && make recompile && make recompile (per the doc comment on DefaultMCPGatewayVersion, which requires two recompile passes: the first regenerates lock files with the new version, the second refreshes container SHA pins).
• All 284 workflow lock files recompiled successfully (284/284 succeeded).

Known limitation: container digest not pinned

The container digest for ghcr.io/github/gh-aw-mcpg:v0.4.9 could not be resolved in this workflow's sandbox because the Docker daemon is unavailable here (Docker-in-Docker is not supported in this execution environment). As a result, the regenerated lock files reference ghcr.io/github/gh-aw-mcpg:v0.4.9 by tag only, without an @sha256:... digest pin — unlike the previous v0.4.8 entry, which had digest sha256:38bbea36cdb46a3c9d04d1db05e672966f5239b431a2022eb35881688e5721d8.

Follow-up required: re-run make recompile (twice) in an environment with Docker daemon access to resolve and pin the new digest before merging, or have CI resolve it as part of the PR checks.

Docker image check (no changes)

All eight tracked static-analysis images are at their latest stable release with matching digests — no updates needed:

Image	Version	Released	Digest match
actionlint	1.7.12	2026-03-30	✓ unchanged
syft	v1.50.0	2026-07-28	✓ unchanged
grype	v0.116.1	2026-07-28	✓ unchanged
grant	v0.6.8	2026-07-08	✓ unchanged
zizmor	1.29.0	2026-08-01	✓ unchanged
poutine	1.1.6	2026-05-22	✓ unchanged
runner-guard	3.1.5	2026-04-23	✓ unchanged
yamllint	latest	—	✓ unchanged

CLI versions checked (no changes)

Tool	Current version
Claude Code	2.1.226
GitHub Copilot CLI	1.0.78
OpenAI Codex	0.147.0
GitHub MCP Server	v1.8.0
Playwright MCP	0.0.79
Playwright CLI	0.1.18
Playwright Browser	v1.62.1
Pi	0.84.1

Generated by 🔢 CLI Version Checker · agent · 130.3 AIC · ⌖ 53.1 AIC · ⊞ 11.6K · ◷

• expires on Aug 11, 2026, 10:02 PM UTC-08:00

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 3.54 AIC · ⌖ 6.48 AIC · ⊞ 11.3K · ◷