What's Changed

• Refactor: Extract common template sync logic to eliminate 80 lines of duplication by @Copilot in #4256
• [log] Add debug logging to 5 core files for better troubleshooting by @github-actions[bot] in #4277
• Add MCP integration tests with JSON validation for all server tools by @Copilot in #4268
• Add MCP tools JSON schema validation test by @Copilot in #4282
• Add skip-if-match field for conditional workflow execution based on GitHub search queries by @Copilot in #4287
• chore: add projectops docs by @mnkiefer in #4294
• Fix pr transfer command documentation inconsistency by @Copilot in #4292
• Add Playwright and Playwright MCP version checking to cli-version-checker workflow by @Copilot in #4293
• Add tools.json update step to safe output type custom agent instructions by @Copilot in #4297
• Add noop safe output for transparent workflow completion by @Copilot in #4286
• Update CLI tool versions: Claude Code 2.0.44, GitHub MCP Server v0.21.0 by @Copilot in #4291
• Display complete tool list in parse log step summary by @Copilot in #4303
• Fix lint errors by wiring up noop safe output job by @Copilot in #4301
• Rename "Status" documentation page to "Labs" by @Copilot in #4304
• Add update-release safe output for modifying GitHub release descriptions by @Copilot in #4278
• [tidy] Remove trailing whitespace from JavaScript files by @github-actions[bot] in #4310
• [docs] Update documentation for features from 2025-11-19 by @github-actions[bot] in #4317
• Apply bundler to noop.cjs to resolve load_agent_output dependency by @Copilot in #4311
• Move noop processing step from separate job into conclusion job by @Copilot in #4318
• [log] Enhance debug logging in engine and workflow processing files by @github-actions[bot] in #4328
• Define jargon terms on first use in documentation by @Copilot in #4331
• Rename "Status" to "Labs" in docs navigation menu by @Copilot in #4348
• Remove tracked test artifacts and ignore *.tmp files by @Copilot in #4337
• Add glossary maintainer workflow with daily incremental and weekly full scans by @Copilot in #4336
• Fix undefined activation job outputs causing actionlint and schema validation errors by @Copilot in #4332
• Update schema to accept polymorphic types for category and version fields by @Copilot in #4333
• Update codeql-action/upload-sarif SHA for v3 tag by @Copilot in #4350
• Exclude fuzz tests from regular test runs in CI by @Copilot in #4351
• Split expressions.go into focused files (nodes, builder, parser) by @Copilot in #4354
• Display detailed diagnostics for MCP server startup failures in Claude logs by @Copilot in #4356
• Add live server integration test for Playwright MCP inspect command by @Copilot in #4353
• Update smoke test workflows to use add-comment and add comprehensive capability testing by @Copilot in #4352
• Extract MCP initialization and errors in Codex log parser by @Copilot in #4358
• Fix Playwright MCP integration: update --allowed-origins to --allowed-hosts by @Copilot in #4359
• Optimize integration tests by splitting into 5 parallel jobs by @Copilot in #4361
• chore(deps): bump astro from 5.15.6 to 5.15.9 in /docs by @dependabot[bot] in #4360
• Add assign-milestone safe output type by @Copilot in #4334
• Fix test isolation in collect_ndjson_output.test.cjs by @Copilot in #4365

Full Changelog: v0.30.0...v0.30.1

What's Changed

• 👨‍💻 Add workflow description extraction feature by @dsyme in #4008
• 🤖 Optimize workflow disabling in trial command by @dsyme in #4009
• [docs] Consolidate developer specifications: Add template injection diagrams by @github-actions[bot] in #4012
• [WIP] Implement 'Did You Mean' suggestions for schema validation by @Copilot in #3999
• Standardize MCP command arguments to workflow-id-or-file by @Copilot in #4014
• Add actionable hints to strict mode validation errors by @Copilot in #4013
• Add role validation for workflow_run triggers to prevent privilege escalation by @Copilot in #4015
• [docs] Update documentation for features from November 15, 2025 by @github-actions[bot] in #4016
• Document max-turns engine compatibility in schema by @Copilot in #4031
• Document max parameter limitation for create-pull-request safe-output by @Copilot in #4032
• [log] Add debug logging to 5 additional Go files by @github-actions[bot] in #4037
• Fix timeout-minutes schema documentation: 20 minutes, not 15 by @Copilot in #4030
• Standardize validation error messages with format examples by @Copilot in #4017
• Add /cloclo command workflow with Claude engine and MCP integrations by @Copilot in #4003
• Add unified MCPConfigRenderer to eliminate duplication across engines by @Copilot in #4023
• [tidy] Fix Go code formatting in Tools struct by @github-actions[bot] in #4044
• Fix control characters in compiled workflows from backslash sequences in bash commands by @Copilot in #4038
• Add daily-file-diet workflow for automated Go file refactoring analysis by @Copilot in #4040
• [tidy] Fix Go formatting in shell_backslash_integration_test.go by @github-actions[bot] in #4055
• Investigation: Error reference documentation already exists and exceeds requirements by @Copilot in #4042
• Simplify cloclo workflow name and add concurrency control by @Copilot in #4054
• Add type information to validation errors using %T by @Copilot in #4056
• Refactor ClaudeEngine to use unified MCPConfigRenderer by @Copilot in #4043
• Standardize CLI error/warning messages to use console formatting helpers by @Copilot in #4057
• Refactor frontmatter.go: Extract 4 focused modules (39% size reduction) by @Copilot in #4059
• Update Claude Code CLI to v2.0.42 by @Copilot in #4066
• Refactor CodexEngine and CustomEngine to use unified MCPConfigRenderer by @Copilot in #4063
• Add concrete examples to repository format validation errors by @Copilot in #4068
• Improve MCP configuration error messages with YAML examples and type information by @Copilot in #4067
• [WIP] Refactor CopilotEngine to use unified MCPConfigRenderer by @Copilot in #4062
• Fix compiler to emit runtime steps before imported steps and deduplicate with field preservation by @Copilot in #4060
• Prevent workflow_run triggers from executing in forked repositories by @Copilot in #4070
• Add inline examples to schema validation errors by @Copilot in #4080
• Enhance engine validation error messages with examples and valid options by @Copilot in #4077
• Improve MCP configuration error messages with complete YAML examples by @Copilot in #4079
• Add automated error message quality linter by @Copilot in #4078
• Remove redundant error wrappers in compiler validation by @Copilot in #4081
• Rename update_reaction job to conclusion and improve condition logic by @Copilot in #4083
• Improve runtime_setup.go error messages with context and examples by @Copilot in #4097
• Remove prescriptive examples from repository-quality-improver workflow to encourage creative focus area selection by @Copilot in #4087
• Pin Playwright to 1.56.1 and add NPM package update tracking by @Copilot in #4103
• Add daily documentation testing workflow with beginner perspective by @Copilot in #4088
• Refactor: Extract duplicate log metrics finalization logic by @Copilot in #4105
• Add update tool to MCP server by @Copilot in #4110
• [docs] Consolidate developer specifications - Add refactoring case study by @github-actions[bot] in #4116
• [docs] Update dictation prompt instructions by @github-actions[bot] in #4117
• [docs] Update documentation for features from 2025-11-16 by @github-actions[bot] in #4118
• feat: add campaign capability update-project by @mnkiefer in #3524
• [log] Add debug logging to workflow compiler components by @github-actions[bot] in #4123
• fix: update default project by @mnkiefer in #4125
• Optimize daily-team-status workflow with data pre-fetching and caching by @Copilot in #4126
• chore: update project URL fallback by @mnkiefer in #4131
• chore: disable scheduled trigger for AI Triage Campaign workflow by @mnkiefer in #4137
• Fix template injection vulnerabilities in cloclo workflow by @Copilot in #4140
• Update actions/github-script to v8 in dev and test-ollama workflows by @Copilot in #4141
• Add missing issues and pull-requests read permissions to docs-noob-tester workflow by @Copilot in #4139
• Configure Q workflow to skip PR creation when no changes exist by @Copilot in #4128
• Generate zizmor annotations for workflow_run triggers by @Copilot in #4129
• Use GitHub API for lock file timestamp checks instead of repository checkout by @Copilot in #4142
• [log] Add debug logging to CLI log parsing and analysis files by @github-actions[bot] in #4147
• Remove deprecated displayMissingToolsAnalysis function that didn't populate Display fields by @Copilot in #4146
• Extract DomainBuckets to eliminate duplicate accessor methods by @Copilot in #4150
• Add semantic types to constants for type safety and clarity by @Copilot in #4160
• Consolidate duplicate GitHub tools lists into shared constant by @Copilot in #4159
• Add unified ToolsConfig struct to replace map[string]any pattern by @Copilot in #4158
• Standardize interface{} to any syntax across codebase by @Copilot in #4161
• Remove obsolete MCP test cases for unimplemented features by @Copilot in #4176
• Fix CHANGELOG v0.21.0: discussion field is optional, not removed by @Copilot in #4179
• Standardize CLI workflow identifier terminology to workflow-id by @Copilot in #4210
• Fix help text formatting: remove dashes, align spacing consistently by @Copilot in #4204
• Migrate to local prettier installation using npm scripts by @Copilot in #4201
• Fix Playwright version confusion between MCP package and browser image by @Copilot in #4205
• Add Node.js 24+ requirement with Makefile validation by @Copilot in #4217
• Fix safe-output jobs failing on agent output parse errors by @Copilot in #4214
• Add deprecated field detection to strict mode validation by @Copilot in #4202
• Isolate test temp directories to prevent conflicts by @Copilot in #4203
• Update github.com/stretchr/testify from v1.8.1 to v1.11.1 by @Copilot in #4206
• chore(deps): bump glob and @vitest/coverage-v8 in /pkg/workflow/js by @dependabot[bot] in #4215
• Update github.com/modelcontextprotocol/go-sdk from v0.4.0 t...

This release brings important security improvements and enhanced offline capabilities. Key updates include an import cache system for offline workflow compilation with SHA-based storage, a critical fix for template injection vulnerability in the copilot-session-insights workflow, and a new --repo option for improved workflow management across repositories.

AI generated by Dev

What's Changed

• Add import cache for offline workflow compilation with SHA-based storage by @Copilot in #3981
• Fix template injection risk in copilot-session-insights workflow by @Copilot in #4001
• 🚀 Add --repo option to workflow management commands by @dsyme in #4007

Full Changelog: v0.29.0...v0.29.1

What's Changed

• Fix table CSS to span full width in documentation by @Copilot in #3908
• 🚀 Improve trial command with direct repository mode by @dsyme in #3914
• Refactor: Extract duplicate compilation loops into shared helper by @Copilot in #3911
• Remove hardcoded action pins lists from tests by @Copilot in #3922
• agentics copy by @pelikhan in #3924
• Add --dir flag to update command for custom workflow directories by @Copilot in #3925
• Add GitHub Copilot agent detection and specialized log parser to audit command by @Copilot in #3913
• [docs] Update CLI documentation for features from 2025-11-14 by @github-actions[bot] in #3930
• Add --dir flag and deprecate --workflows-dir in compile command by @Copilot in #3928
• [WIP] Update workflows and recompile scripts after update by @Copilot in #3929
• Migrate interactive workflow creation from add to new command by @Copilot in #3940
• [log] Enhance workflow and job management logging (session 4) by @github-actions[bot] in #3946
• Validate local modifications when workflow source is up-to-date by @Copilot in #3932
• Unify action_pins.json schema and sync generated cache to embedded data by @Copilot in #3933
• Revert changeset workflow to pull_request trigger (9e0ba6b) by @Copilot in #3948
• [WIP] Add helper to wrap 'gh' calls using Exec by @Copilot in #3952
• Organize CLI commands into logical groups in help text by @Copilot in #3935
• daily team status with imports by @pelikhan in #3938
• Add --no-stop-after and --stop-after flags to manage stop-after field in workflows by @Copilot in #3951
• Fix stop-after time preservation during workflow recompilation by @Copilot in #3950
• [tidy] Fix syntax errors in stop_after_test.go by @github-actions[bot] in #3967
• Sort action pins JSON entries alphabetically by key by @Copilot in #3974
• Clean up action cache files left behind by tests by @Copilot in #3976
• Add ghhelper package for consistent GH_TOKEN/GITHUB_TOKEN handling in gh CLI calls by @Copilot in #3977
• chore(deps): bump js-yaml from 4.1.0 to 4.1.1 in /docs by @dependabot[bot] in #3979
• Consolidate ghhelper into pkg/workflow and use go-gh/v2 by @Copilot in #3992
• Update CLI versions: Claude Code 2.0.37→2.0.41, Copilot CLI 0.0.355→0.0.358 by @Copilot in #3991
• Enable stop-time recomputation during workflow updates by @Copilot in #3993
• Add missing -e shorthand to logs command engine flag by @Copilot in #3996
• Extract shared utilities from log parsers to eliminate duplication by @Copilot in #3997
• Add missing permissions to workflows with GitHub toolsets by @Copilot in #3998
• Refactor: Extract shared helpers for safe output config parsing by @Copilot in #3995
• 🚦 Improve Workflow Polling and Signal Handling by @dsyme in #4002
• [WIP] Update permissions in ci-doctor.md for least privilege by @Copilot in #4000
• 🔧 Fix workflow disabling logic in trial command by @dsyme in #4004

Full Changelog: v0.28.7...v0.29.0

What's Changed

• [docs] Update documentation for features from 2025-11-07 by @github-actions[bot] in #3432
• Migrate workflows from deprecated timeout_minutes to timeout-minutes by @Copilot in #3433
• Enable direct file editing in developer-docs-consolidator workflow by @Copilot in #3444
• Update github.com/spf13/cobra from v1.9.1 to v1.10.1 by @Copilot in #3445
• Prevent adding workflows from current repository by @Copilot in #3443
• [WIP] Update frontmatter docs generator to skip deprecated fields by @Copilot in #3446
• Add super-linter agentic workflow for automated code quality analysis by @Copilot in #3442
• docs: more professional appearance by @mnkiefer in #3329
• Add 'add' tool to mcp-server command by @Copilot in #3447
• Add enterprise GitHub support with centralized host resolution by @Copilot in #3441
• Update Claude Code CLI to v2.0.35 by @Copilot in #3453
• Add "help all" command and fix init command Copilot agent usage pattern by @Copilot in #3454
• Render docs for iPhone 16 and fix CSS issues for multiple form factors by @Copilot in #3452
• fix(docs): feature card and grid alignment by @mnkiefer in #3455
• Add support for full GitHub actions specification in jobs field and automatic job dependencies by @Copilot in #3451
• Make feature cards fully clickable on docs landing page by @Copilot in #3456
• Add --dir flag to specify subfolder for workflow installation by @Copilot in #3459
• Auto-add activation dependency to custom jobs without explicit needs by @Copilot in #3458
• [WIP] Fix super linter log issue related to temp folder by @Copilot in #3463
• Fix super-linter LOG_FILE configuration and remove unnecessary setup steps by @Copilot in #3467
• [docs] docs: Remove bloat from MCP Server documentation by @github-actions[bot] in #3466
• [docs] Update documentation for features from 2025-11-08 by @github-actions[bot] in #3477
• [docs] Consolidate developer specifications and fix marketing tone by @github-actions[bot] in #3476
• [log] Add debug logging to 5 workflow files by @github-actions[bot] in #3481
• Fix: Quote cron expressions in schedule sections to prevent YAML parsing ambiguity by @Copilot in #3468
• Refactor: Extract shared log aggregation logic into generic helper by @Copilot in #3465
• Consolidate strict mode validation into strict_mode_validation.go by @Copilot in #3492
• Refactor: Extract engine validation methods to dedicated file by @Copilot in #3491
• Fix npm URL format in cli-version-checker workflow by @Copilot in #3496
• Refactor: Extract detection and validation methods from compiler.go by @Copilot in #3497
• Enhance CLI version checker to fetch and parse GitHub release notes by @Copilot in #3495
• Consolidate duplicate config parsing functions with generic helper by @Copilot in #3490
• Fix super-linter configuration: validate Markdown only by @Copilot in #3469
• [docs] docs: unbloat CLI commands documentation (43% reduction) by @github-actions[bot] in #3501
• Refactor: Extract shared MCP config renderer to eliminate duplication by @Copilot in #3504
• Add comprehensive tests for refactored config parsing and validation functions by @Copilot in #3506
• [log] Add debug logging to CLI utility functions by @github-actions[bot] in #3529
• Update activation comment with PR link after create_pull_request by @Copilot in #3502
• Add default value annotations to JSON schema for engine and reaction fields by @Copilot in #3520
• [docs] Update dictation prompt instructions by @github-actions[bot] in #3523
• Enhance runs-on and concurrency schema descriptions with type variants and examples by @Copilot in #3521
• Remove obsolete safe-jobs backwards compatibility references by @Copilot in #3522
• Add gh-aw MCP server to python-data-charts workflow by @Copilot in #3533
• Rename ValidatePermissions to ValidateIncludedPermissions in imports.go by @Copilot in #3546
• Add shellcheck disable directives for heredoc markdown backticks by @Copilot in #3548
• Optimize SC2002 useless cat patterns in analysis workflows by @Copilot in #3547
• chore: restructure docs following modern DX best practices by @Copilot in #3526
• Update golang.org/x/sys from v0.37.0 to v0.38.0 by @Copilot in #3563
• Fix bundler generating invalid JavaScript for multi-line module.exports by @Copilot in #3566
• Standardize prompt generation pattern - move scattered functions to dedicated files by @Copilot in #3564
• Remove empty network.go file by @Copilot in #3569
• build(deps): bump @sentry/mcp-server from 0.20.0 to 0.21.0 in /.github/workflows by @dependabot[bot] in #3562
• Fix SC2215 shellcheck warnings in Playwright prompt heredoc by @Copilot in #3568
• Refactor: Extract duplicate comment helpers into separate modules by @Copilot in #3565
• [docs] docs: Remove bloat from permissions.md by @github-actions[bot] in #3575
• Fix PR link formatting in cli-version-checker workflow by @Copilot in #3586
• Refactor: Extract duplicate error aggregation logic in logs_report.go by @Copilot in #3587
• Refactor: Extract shared domain aggregation logic in logs_report.go by @Copilot in #3588
• Extract workflow metadata env setup to shared helper by @Copilot in #3580
• Consolidate scattered validation functions into dedicated validation files by @Copilot in #3581
• Remove unsupported docker-image field from cache-memory schema by @Copilot in #3597
• Fix cache-memory classification in frontmatter documentation by @Copilot in #3598
• Refactor: Extract generic aggregation helper to eliminate duplicate code in logs report by @Copilot in #3591
• Refactor: Extract scattered helper functions into dedicated files by @Copilot in #3601
• Update Claude Code CLI from 2.0.35 to 2.0.37 by @Copilot in #3611
• Daily Test Coverage Improver - Add tests for packages.go include dependency functions by @github-actions[bot] in #3590
• Add debug logging to expression extraction, strict mode validation, metrics, PR review comments, and notification workflows by @Copilot in #3612
• Add optional fingerprint field for asset tracking by @Copilot in #3602
• Update GitHub MCP Server version to v0.20.2 by @Copilot in #3625
• Bump actions/download-artifact from v5 to v6 by @Copilot in #3629
• Refactor logs.go: split 2,812-line monolith into focused modules by @Copilot in #3628
• Rename generic utility files in pkg/cli to reflect their specific purpose by @Copilot in #3627
• Consolidate duplicate string extraction functions in pkg/workflow by @Copilot in #3626
• [audit] Document npm registry access in firewall-enabled workflows by @Copilot in #3637
• Add action SHA validation to compile --validate command by @Copilot in #3631
• Add python ecosystem identifier to workflows needing PyPI access by @Copilot in #3641
• Fix Docker registry access blocking in mcp-inspector workflow by @Copilot in #3640
• Add daily code metrics workflow with persistent trend tracking by @Copilot in #3639
• Fix SC2086 shellcheck...

What's Changed

• Filter non-workflow markdown files in add command listing by @Copilot in #3388
• [docs] Consolidate developer specifications into instructions file by @github-actions[bot] in #3390
• Standardize frontmatter across instruction files by @Copilot in #3393
• Merge JavaScript template filtering into interpolation step by @Copilot in #3381
• Refactor log parser entry points to eliminate duplicate bootstrap logic by @Copilot in #3394
• [docs] docs: unbloat CLI commands documentation by @github-actions[bot] in #3395
• Add JavaScript refactoring instructions for .cjs module extraction by @Copilot in #3401
• Bundle is_truthy.cjs and log_parser_bootstrap.cjs dependencies by @Copilot in #3400
• Show available workflows when workflow not found in add command by @Copilot in #3402
• Emit warning instead of error when wildcard adds encounter existing workflows by @Copilot in #3404
• Add Typist workflow for Go type analysis by @Copilot in #3410
• Update github.com/spf13/pflag from v1.0.7 to v1.0.10 by @Copilot in #3425
• Update golang.org/x standard library extensions to latest patch versions by @Copilot in #3417
• Add timeout-minutes field and deprecate timeout_minutes by @Copilot in #3405
• Display workflow list as table with ID, Name, and Description by @Copilot in #3406
• Remove bash wildcard restriction in strict mode by @Copilot in #3407
• [WIP] Fix dependabot-go-checker to link to correct Go module repositories by @Copilot in #3427
• Update github.com/charmbracelet/huh from v0.6.0 to v0.8.0 by @Copilot in #3418
• Add Mermaid diagram for safe output message flow by @Copilot in #3428
• Simplify agentic task description format and add conversational summarization by @Copilot in #3430

Full Changelog: v0.28.5...v0.28.6

What's Changed

• List workflows when only repo name provided to add command by @Copilot in #3373
• Add wildcard support for workflow names in add command by @Copilot in #3374
• Use JavaScript for prompt variable interpolation instead of shell expansion by @Copilot in #3379

Full Changelog: v0.28.4...v0.28.5

What's Changed

• Fix NPM package URL template in cli-version-checker to prevent backtick injection by @Copilot in #3359
• Add edit and bash tools to Q agentic workflow by @Copilot in #3363
• Fix PROMPT_EOF heredoc quoting to enable variable interpolation by @Copilot in #3362
• Bundle push_to_pull_request_branch.cjs to inline staged_preview dependency by @Copilot in #3366
• Allow releases without changeset files with automatic patch default and --yes flag by @Copilot in #3367
• [WIP] Create agentic workflow for reviewing pull requests by @Copilot in #3370
• Add daily workflow for consolidating specs/ markdown into developer instructions by @Copilot in #3369
• Add Dependabot Go module dependency checker workflow by @Copilot in #3371

Full Changelog: v0.28.3...v0.28.4

What's Changed

• Update init command help text to reference Copilot /agent command by @Copilot in #3275
• Improve workflow lock file warning rendering in step summary by @Copilot in #3279
• [docs] docs: remove bloat from DailyOps guide by @github-actions[bot] in #3291
• Add validation to JavaScript bundler for uninlined local requires by @Copilot in #3281
• Refactor: Extract duplicate staged mode preview rendering into shared utility by @Copilot in #3277
• Optimize workflows based on live log analysis: MCP pagination and JSON parsing by @Copilot in #3293
• Fix SC2086: Quote ${GITHUB_WORKSPACE} in generated workflow steps by @Copilot in #3288
• Remove AWF cleanup steps from workflow generation by @Copilot in #3297
• [test-coverage] Add comprehensive tests for collectPackagesFromWorkflow (+70.3% function coverage, +0.1% overall) by @github-actions[bot] in #3301
• Daily Perf Improver - Optimize TestAllCommandsExist (98% speedup) by @github-actions[bot] in #3303
• [docs] docs: unbloat index.mdx landing page by @github-actions[bot] in #3304
• Refactor: Extract duplicate agent file path quoting to shared helper by @Copilot in #3300
• Eliminate duplicate GitHub MCP Docker config in CustomEngine by @Copilot in #3308
• Add grumpy code reviewer workflow with cache-memory persistence by @Copilot in #3306
• [docs] Update dictation prompt instructions by @github-actions[bot] in #3309
• [docs] Update documentation for features from 2025-11-06 by @github-actions[bot] in #3310
• [instructions] Sync github-agentic-workflows.instructions.md with release v0.28.2 by @github-actions[bot] in #3323
• fix: adjust wo(r)kflow typo by @JanDeDobbeleer in #3321
• Refactor: Extract Python package validation to dedicated pip_validation.go by @Copilot in #3319
• Move Docker validation to dedicated file by @Copilot in #3327
• Fix SC2016 shellcheck warnings in daily-news workflow GraphQL queries by @Copilot in #3335
• Move FormatFileSize to console package by @Copilot in #3341
• Add GitHub Actions security best practices specification by @Copilot in #3344
• Move package validation functions to dedicated validation files by @Copilot in #3328
• Fix SC2086: Quote variable expansions in daily-news workflow gh api calls by @Copilot in #3347
• Fix Serena workspace path references in workflow instructions by @Copilot in #3346
• Unify GitHub URL parsing logic into pkg/parser/github_urls.go by @Copilot in #3318
• Move architecture docs to specs/ folder and update references by @Copilot in #3342
• Consolidate script generation functions into scripts.go by @Copilot in #3343
• [docs] docs: streamline status page content by @github-actions[bot] in #3349
• Refactor safe output job builders to eliminate 300+ lines of duplicate code by @Copilot in #3348
• [log] Add debug logging to artifacts, expression safety, shell, features, and engine helpers by @github-actions[bot] in #3353
• Consolidate MCP validation functions into dedicated file by @Copilot in #3354
• Rename "Print prompt to step summary" step and add workflow log output by @Copilot in #3355
• Add specialized error message for Codespace 403 permission errors by @Copilot in #3352
• Fix NPM package URL template to prevent broken markdown links by @Copilot in #3357

New Contributors

• @JanDeDobbeleer made their first contribution in #3321

Full Changelog: v0.28.2...v0.28.3

What's Changed

• Extract codemod sections from changesets into copyable prompt and CHANGELOG Migration Guide by @Copilot in #3217
• [docs] Update documentation for features from 2025-11-05 by @github-actions[bot] in #3218
• [log] Add debug logging to 5 additional Go files by @github-actions[bot] in #3230
• Fix SC2002: Replace useless cat with input redirection in copilot-pr-nlp-analysis by @Copilot in #3231
• Fix SC2236: Replace ! -z with -n in copilot-session-insights workflow by @Copilot in #3232
• Add wrap attribute to all code blocks for mobile rendering by @Copilot in #3220
• Remove redundant allowed list from weekly-issue-summary workflow by @Copilot in #3237
• Use env_vars for Codex MCP config instead of embedding secrets in TOML by @Copilot in #3235
• Fix gh pr view field filtering to avoid errors from non-existent fields by @Copilot in #3239
• Add wrap attribute to YAML code block in frontmatter reference docs by @Copilot in #3243
• Prevent duplicate footers in safe-outputs.add-comment workflows by @Copilot in #3245
• Eliminate 1,155+ redundant MCP calls in daily-news workflow with cache-memory optimization by @Copilot in #3249
• Add DailyOps documentation for scheduled incremental improvement workflows by @Copilot in #3251
• Fix token fallback for gh agent-task CLI in copilot-session-insights workflow by @Copilot in #3255
• Update CLI versions: Claude Code 2.0.33, Codex 0.55.0 by @Copilot in #3261
• Define constant for activation/pre-activation jobs runner image by @Copilot in #3260
• Add write permissions for githubnext/gh-aw in devcontainer.json by @Copilot in #3259
• Add contents:read permission to activation job for checkout step by @Copilot in #3266
• Use COPILOT_GITHUB_TOKEN for assign/review copilot operations with legacy token support by @Copilot in #3267
• [WIP] Add gh agent-task extension installation to copilot-session-insights by @Copilot in #3268
• Add Codespace permissions documentation for gh aw run by @Copilot in #3269
• Fix AWF argument generation to use runtime paths instead of compile-time paths by @Copilot in #3264
• Fix Codex engine token test to validate environment variable pattern by @Copilot in #3271

Full Changelog: v0.28.1...v0.28.2