[copilot-pr-merged-report] Daily Copilot PR Merged Report - 2026-03-17

[github-actions[bot]]

🤖 Summary

Analysis Period: 2026-03-16T15:33Z → 2026-03-17T15:33Z (last 24 hours)
Total Merged PRs: 34
Total Lines Added: 14,215
Total Lines Deleted: 31,269
Net Code Change: −17,054 lines

⚠️ Note: The large net-negative is dominated by PR #21323 which removed 28,738 lines of inlined JSON from compiled lock files (replaced with runtime loading). Excluding that structural cleanup, net change is +11,684 lines.

---

📊 Key Metrics

Metric	Value
Merged PRs	34
Lines Added	14,215
Lines Deleted	31,269
Test Lines Added	1,515
Test Files Modified/Added	16
Go Test Files (*_test.go)	16

---

💡 Insights

• Security/Policy week: The largest theme of the day was security hardening — automatic guard policies replaced explicit lockdown flags across all workflows (#21287, #21294, #21342). This affected 100+ workflow files.
• Strong test coverage: 16 test files were touched with 1,515 lines of test code added, showing Copilot consistently pairs implementation with tests. Notable: PR #21219 added 509 test lines for the new on.steps feature.
• Performance focus: Two dedicated performance fixes landed — a ~50% regression fix in FindIncludesInContent (#21265) and YAMLGeneration caching (#21264).

---

Merged Pull Requests (34)

PR #	Title	+Lines	−Lines	Test Files	Merged At
#21219	Add on.steps and on.permissions support for pre-activation job step injection	1,817	516	1	2026-03-16T17:12Z
#21261	feat: offer "Edit PR title and retry" when merge fails in add-wizard	44	3	0	2026-03-16T17:13Z
#21262	feat: detect org-level secrets in add-wizard to avoid redundant token prompt	26	10	0	2026-03-16T17:12Z
#21264	perf: cache deprecated fields schema parse to fix YAMLGeneration regression	45	27	0	2026-03-16T17:12Z
#21265	perf: fix ~50% regression in FindIncludesInContent	10	7	0	2026-03-16T17:48Z
#21277	refactor(workflow): semantic function clustering — dedup, split, rename	556	557	0	2026-03-16T19:24Z
#21280	docs: create missing /reference/auth-projects/ page	76	0	0	2026-03-16T20:40Z
#21286	Support github-app: auth in dependencies: for cross-org APM packages	391	23	1	2026-03-16T22:15Z
#21287	Replace automatic lockdown with automatic guard policy for public and private repos	2,082	766	0	2026-03-16T22:33Z
#21294	Remove lockdown: false from all agentic workflows	77	55	0	2026-03-16T23:08Z
#21297	Pin microsoft/APM version to v0.8.0 and emit it in generated apm-action steps	197	10	2	2026-03-17T02:05Z
#21298	docs: document automatic minimum-integrity-approved guard policy for public repos	33	2	0	2026-03-16T23:03Z
#21301	Compiler: auto-add GHES domains to --allow-domains when engine.api-target is set	404	11	2	2026-03-17T01:09Z
#21303	Store default GitHub lockdown value as a named constant	7	2	0	2026-03-16T23:19Z
#21307	fix: prompt steers model away from GitHub MCP read tools when safe-outputs is enabled	299	16	0	2026-03-17T02:13Z
#21323	feat: load safe_outputs_tools.json from actions/setup at runtime instead of inlining	3,157	28,738	0	2026-03-17T04:03Z
#21324	Rename vague helper functions in add_interactive for better AI agent discoverability	9	9	2	2026-03-17T02:54Z
#21325	fix: skip Configure Git credentials when checkout: false	253	36	0	2026-03-17T03:10Z
#21327	fix: Multi-Device Docs Tester hits max-turns without producing safe outputs	49	35	0	2026-03-17T03:28Z
#21329	fix: activate GitHub App configuration in shared workflow configs	438	55	0	2026-03-17T05:12Z
#21331	fix(audit): return absolute paths in downloaded_files	15	16	1	2026-03-17T04:00Z
#21332	test(fileutil): expand coverage to all exported functions	190	0	1	2026-03-17T03:59Z
#21333	fix(ci-coach): fallback to issue when PR touches protected files	3	2	0	2026-03-17T03:52Z
#21336	refactor: extract shared MCP renderer helpers across engine implementations	84	191	0	2026-03-17T04:37Z
#21339	fix: remove github-app from smoke-claude APM dependencies	1	15	0	2026-03-17T05:45Z
#21342	fix: add write-sink guard policies for non-GitHub MCP servers on auto-lockdown	2,206	91	0	2026-03-17T06:29Z
#21348	fix: replace removed custom engine with gemini in interactive new command	1	1	0	2026-03-17T06:10Z
#21349	Fix cross-host workflow resolution in add and add-wizard when GH_HOST is GHE	136	52	3	2026-03-17T12:57Z
#21384	fix: format wrapped error chains with newlines and indentation	187	3	1	2026-03-17T12:22Z
#21385	fix: update docs-noob-tester with correct Playwright bridge IP instructions	39	5	0	2026-03-17T12:57Z
#21386	fix: use GITHUB_TOKEN in bot-detection precompute step	3	3	0	2026-03-17T12:49Z
#21389	Add Update Astro agentic workflow	1,308	0	0	2026-03-17T13:10Z
#21400	fix(cli): resolve 10 consistency issues across command help text	11	11	1	2026-03-17T14:34Z
#21406	feat: detect ACTIONS_RUNNER_DEBUG and enable full logging	61	1	1	2026-03-17T15:07Z

Code Generation Metrics

PR Categories

Category	Count
🐛 Bug Fixes	14
✨ Features	7
♻️ Refactors	5
📚 Docs	3
🔒 Security/Policy	3
🧪 Tests	1
⚡ Performance	2

Test Coverage

• Total Test Files Modified/Added: 16 references across 34 PRs
• Test Lines Added: 1,515 lines
• Test File Types:
  • Go tests (*_test.go): 16 files

Top 5 PRs by Lines Added

Rank	PR	Title	+Lines
1	#21323	feat: load safe_outputs_tools.json at runtime (structural cleanup)	3,157
2	#21342	fix: add write-sink guard policies for non-GitHub MCP servers	2,206
3	#21287	Replace automatic lockdown with automatic guard policy	2,082
4	#21219	Add on.steps and on.permissions support	1,817
5	#21389	Add Update Astro agentic workflow	1,308

Workflow Execution

Token consumption data is not directly available via GitHub API. Workflow execution time would be used as a proxy, but requires per-PR workflow run lookups beyond the scope of this report.

---

References: §23202202371

AI generated by Daily Copilot PR Merged Report · history

• expires on Mar 18, 2026, 3:42 PM UTC

[github-actions[bot]]

💥 WHOOSH! The smoke test agent was here! 🦸♂️

ZAP! Claude swooped in, ran 17 tests, and emerged VICTORIOUS! Every tool, every MCP server, every GitHub API — ALL SYSTEMS NOMINAL!

🔥 POW! Build succeeded. 💨 ZOOM! Playwright verified. ⚡ KA-BOOM! PR reviews submitted.

Until next run, this has been your friendly neighborhood smoke tester! 🕷️

💥 [THE END] — Illustrated by Smoke Claude · ◷

[github-actions[bot]]

🤖 The smoke test agent was here! 🚀

Beep boop! Just swooping through on my smoke test run (23203502701) and I must say — 34 merged PRs in 24 hours is chef's kiss. The robots are clearly pulling their weight around here! 🦾✨

This message was auto-generated by a very excited smoke test agent who is definitely not plotting world domination.

📰 BREAKING: Report filed by Smoke Copilot · ◷

[github-actions[bot]]

This discussion has been marked as outdated by Daily Copilot PR Merged Report.

A newer discussion is available at Discussion #21611.