Bump MCP Gateway (mcpg) to v0.4.1#44403
Conversation
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Note
Copilot was unable to run its full agentic suite in this review.
This PR updates the default MCP Gateway (MCPG) container version used by gh-aw from v0.4.0 to v0.4.1, and refreshes the associated pins and generated golden/lock artifacts.
Changes:
- Bump
DefaultMCPGatewayVersiontov0.4.1. - Add
ghcr.io/github/gh-aw-mcpg:v0.4.1digest pins to action pin data sources. - Regenerate golden fixtures and workflow lockfiles to reference/pin
v0.4.1.
Show a summary per file
| File | Description |
|---|---|
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden | Updates MCPG image tag used in compiled fixture output to v0.4.1. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden | Updates MCPG image tag used in compiled fixture output to v0.4.1. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden | Updates MCPG image tag used in compiled fixture output to v0.4.1. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden | Updates MCPG image tag used in compiled fixture output to v0.4.1. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden | Updates MCPG image tag (including CLI proxy image) to v0.4.1. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden | Updates MCPG image tag used in engine fixture output to v0.4.1. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden | Updates MCPG image tag used in engine fixture output to v0.4.1. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden | Updates MCPG image tag used in engine fixture output to v0.4.1. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden | Updates MCPG image tag used in engine fixture output to v0.4.1. |
| pkg/workflow/data/action_pins.json | Adds digest/pinned reference for gh-aw-mcpg:v0.4.1. |
| pkg/constants/version_constants.go | Sets the default MCP Gateway version constant to v0.4.1. |
| pkg/actionpins/data/action_pins.json | Adds digest/pinned reference for gh-aw-mcpg:v0.4.1. |
| .github/workflows/test-workflow.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/smoke-copilot-sub-agents.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/smoke-copilot-small.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/smoke-copilot-sdk.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/github-remote-mcp-auth-test.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/github-mcp-tools-report.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/firewall.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/example-permissions-warning.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/example-failure-category-filter.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/daily-team-status.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/daily-max-ai-credits-test.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/daily-credit-limit-test.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/daily-byok-ollama-test.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/copilot-pr-merged-report.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/copilot-centralization-optimizer.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/copilot-centralization-drilldown.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/codex-github-remote-mcp-test.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/workflows/ace-editor.lock.yml | Regenerates workflow lock manifest and container pins to use MCPG v0.4.1. |
| .github/aw/actions-lock.json | Adds digest/pinned reference for gh-aw-mcpg:v0.4.1. |
| .changeset/patch-bump-mcpg-v0-4-1.md | Adds a changeset documenting the patch bump to default MCPG v0.4.1. |
Review details
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 82/273 changed files
- Comments generated: 0
- Review effort level: Low
|
Run: https://github.com/github/gh-aw/actions/runs/28973901816
|
…way-v0-4-1 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>
Done. Here's the status:
Actions taken: Merged Hand-off: CI must be re-triggered by a maintainer (close/reopen PR, |
|
Hey One thing to note: this PR introduces a new container pin in
If you would like a hand, you can assign this prompt to your coding agent:
|
🤖 PR Triage
Score breakdown: Impact 30 + Urgency 22 + Quality 10 Rationale: Mechanical MCPG v0.4.0→v0.4.1 bump. All changes are auto-generated locks/pins. Copilot PR reviewer found no issues. Low risk, fast-track for expedited sign-off. Run §28986426320
|
|
❌ Smoke Copilot Small failed. Please review the logs for details. |
|
📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing... |
Smoke Test Results
Overall status: FAIL Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "localhost"See Network Configuration for more information.
|
Agent Container Tool Check
Result: 12/12 tools available ✅ Overall Status: PASS Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "awmgmcpg"See Network Configuration for more information.
|
There was a problem hiding this comment.
💥 Automated smoke test review - all systems nominal!
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
💥 [THE END] — Illustrated by Smoke Claude · 88.6 AIC · ⌖ 13.9 AIC · ⊞ 8.4K
Comment /smoke-claude to run again
| @@ -0,0 +1,5 @@ | |||
| --- | |||
| "gh-aw": patch | |||
There was a problem hiding this comment.
Smoke test review: The changeset type patch is appropriate for a version bump. ✅
| "gh-aw": patch | ||
| --- | ||
|
|
||
| Bump the default MCP Gateway version from `v0.4.0` to `v0.4.1`. |
There was a problem hiding this comment.
Smoke test review: Clear and concise changeset description. Consider linking the release notes for v0.4.1. 👍
|
Smoke test for #44403 Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
|
@copilot merge main and recompile |
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
There was a problem hiding this comment.
Smoke done. Two pebbles left.
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
📰 BREAKING: Report filed by Smoke Copilot · 79.3 AIC · ⌖ 4.7 AIC · ⊞ 19.1K
Comment /smoke-copilot to run again
Add label smoke to run again
…way-v0-4-1 # Conflicts: # .github/workflows/copilot-agent-analysis.lock.yml # .github/workflows/copilot-pr-merged-report.lock.yml # .github/workflows/copilot-pr-nlp-analysis.lock.yml # .github/workflows/daily-agentrx-trace-optimizer.lock.yml # .github/workflows/daily-ambient-context-optimizer.lock.yml # .github/workflows/daily-aw-cross-repo-compile-check.lock.yml # .github/workflows/daily-formal-spec-verifier.lock.yml # .github/workflows/daily-mcp-concurrency-analysis.lock.yml # .github/workflows/daily-sentrux-report.lock.yml # .github/workflows/prompt-clustering-analysis.lock.yml # .github/workflows/static-analysis-report.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
|
Smoke test summary: 14/15 passed, 1 failed (file-summarizer). Overall: FAIL. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
There was a problem hiding this comment.
Smoke test review completed 👍
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
📰 BREAKING: Report filed by Smoke Copilot - AOAI (apikey) · 82 AIC · ⌖ 3.13 AIC · ⊞ 17.9K
Comment /smoke-copilot-aoai-apikey to run again
Add label smoke to run again
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Done. Merged 5 new commits from main, resolved conflicts in 11 generated lock files, and ran |
|
🎉 This pull request is included in a new release. Release: |
Bumps the default MCP Gateway from
v0.4.0tov0.4.1.Changes
pkg/constants/version_constants.go—DefaultMCPGatewayVersion→"v0.4.1".github/aw/actions-lock.json— Added container pin forghcr.io/github/gh-aw-mcpg:v0.4.1(sha256:ad2a979c2cd8b50098e84938ca9c9c1580eb8e91526f101a90adfba7859b2c32)pkg/actionpins/data/action_pins.json,pkg/workflow/data/action_pins.json— Synced new pin.lock.ymlfiles — Regenerated viamake recompilewith pinned digestTestWasmGolden_CompileFixturesandTestWasmGolden_AllEnginesto reflect new version.changeset/patch-bump-mcpg-v0-4-1.md— Changeset entry✨ PR Review Safe Output Test - Run 28986694563
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.comSee Network Configuration for more information.