[copilot-pr-merged-report] Daily Copilot PR Merged Report - 2026-07-28

[github-actions[bot]]

🤖 Daily Copilot PR Merged Report - 2026-07-28

Summary

Analysis Period: Last 24 hours (merged PRs only)
Total Merged PRs: 51
Lines Added / Deleted / Test File Counts / Workflow Timing: not available (see note below)

⚠️ Data Availability Note

The gh CLI in this run environment is not authenticated (no GH_TOKEN/GITHUB_TOKEN available), so per-PR details (files, additions, deletions, commits, check-runs, workflow-run timing) could not be fetched via gh pr view / gh api. This report is based solely on the pre-fetched dataset at /tmp/gh-aw/agent/pr-data/copilot-prs.json, which includes PR number, title, author, merge time, and URL, but not diff/line-count or workflow-run data.

💡 Insights

• 51 Copilot-authored PRs merged in the last 24 hours — a high-volume day dominated by CI/workflow reliability fixes (safe-outputs, watchdogs, model fallback), security/CVE remediations (Alpine, Go, brace-expansion, dependency removals), and code-quality refactors (splitting oversized files, extracting helpers).
• A recurring theme is model/pricing consistency work (Claude Sonnet fallback, Copilot SDK billing, model catalog refresh) — several PRs (Set explicit Claude Sonnet fallback when workflow model is unset #48618, fix: use sonnet-level model as copilot default, not opus #48605, Add Copilot SDK billing inventory job #48619, [model-inventory] Refresh mirrored model catalog and add missing gemini-3.6-flash entry #48614, feat: add GitHub Copilot API endpoint as pricing data source in daily model inventory #48451) touch the same subsystem, suggesting active stabilization of AI model configuration this cycle.
• Line-count, test-file, and token/workflow-timing metrics could not be computed this run due to missing GitHub authentication — recommend re-running with a valid GH_TOKEN for full metrics next time.

Merged Pull Requests (51)

PR #	Title	Merged At
#48654	Add daily agentic spending forecast report	2026-07-28T14:52:05Z
#48636	daily-model-inventory: log raw responses in collect steps, drop copilot-api job	2026-07-28T13:57:21Z
#48619	Add Copilot SDK billing inventory job	2026-07-28T13:36:11Z
#48618	Set explicit Claude Sonnet fallback when workflow model is unset	2026-07-28T14:41:18Z
#48614	[model-inventory] Refresh mirrored model catalog and add missing gemini-3.6-flash entry	2026-07-28T13:19:01Z
#48607	compiler: error on inputs declared under custom jobs	2026-07-28T13:11:04Z
#48605	fix: use sonnet-level model as copilot default, not opus	2026-07-28T12:29:04Z
#48602	Fix safeoutputs gateway registering zero tools error	2026-07-28T14:36:38Z
#48599	feat: shared Azure OIDC auth, Azure DevOps MCP, and Azure MCP network/docs improvements	2026-07-28T14:36:06Z
#48598	Fix cross-repo dynamic target-repo silently dropping PR (forward GH_AW_INPUT_* to agent step env)	2026-07-28T13:09:05Z
#48597	Add cookie label to create-issue safe outputs in security/static-analysis workflows	2026-07-28T11:54:58Z
#48595	fix: wrap fork push sequences in withGitHubHostToken to prevent duplicate Authorization (HTTP 400)	2026-07-28T13:27:08Z
#48594	fix: full pricing snippet and suppress engine error on missing model pricing	2026-07-28T12:42:44Z
#48591	fix: suppress internal AWF sidecar hostnames from blocked-domain warnings	2026-07-28T14:13:58Z
#48569	fix: introduce options structs for over-parameterized CLI functions	2026-07-28T11:41:29Z
#48568	Split oversized engine_validation.go (521 lines) into domain-focused files	2026-07-28T12:02:58Z
#48561	fix: remove docker.io/mcp/brave-search — Critical/High CVEs, no upstream fix available	2026-07-28T10:07:31Z
#48551	fix: constrain list_code_scanning_alerts with state:open and severity:critical,high in structural analysis prompt	2026-07-28T07:35:27Z
#48550	fix: remove ghcr.io/chopratejas/headroom due to 67 CVEs and 131 license violations	2026-07-28T07:30:40Z
#48535	Refactor six non-workflow large functions via targeted helper extraction	2026-07-28T11:28:20Z
#48521	fix: update brace-expansion to 5.0.8 and upgrade Alpine base image to 3.22	2026-07-28T07:29:20Z
#48520	fix: resolve three targeted lint-monster diagnostics (defer-in-loop, excess params, hardcoded path)	2026-07-28T08:55:33Z
#48519	feat: honor engine.version for copilot; add version tests for copilot and gemini	2026-07-28T10:07:59Z
#48516	Stabilize smoke-copilot-auto lock output by skipping dynamic auto pricing injection	2026-07-28T07:28:13Z
#48514	Retry Copilot startup no-output watchdog failures in scheduled/push runs	2026-07-28T10:09:22Z
#48506	Add focused unit coverage for pre-activation job compiler helpers	2026-07-28T04:08:29Z
#48502	Strengthen persona workflow guidance for path scoping, escalation dedup, and toolset selection	2026-07-28T03:34:37Z
#48499	fix: add post-result watchdog to codex_harness to prevent CLI hang-on-exit	2026-07-28T10:08:43Z
#48497	Strengthen actionpins spec tests for cache keys, fallback auditing, and container digest validation	2026-07-28T03:34:57Z
#48496	Restore safe-outputs MCP startup by staging data_schema_normalizer.cjs	2026-07-28T03:07:28Z
#48487	fix: propagate download errors through StartDockerImageDownload join function	2026-07-28T03:07:45Z
#48486	refactor: replace duplicate experimentStateJSON/experimentRunRecord with exported ExperimentState/ExperimentRunRecord	2026-07-28T02:46:07Z
#48485	refactor: introduce named type LLMProvider string to replace bare string threading	2026-07-28T02:50:54Z
#48482	Fix imported engine.model silently dropped when max-ai-credits is set	2026-07-28T03:15:38Z
#48479	Propagate command context through logs processing and extension upgrade release checks	2026-07-28T02:49:52Z
#48478	Log warning instead of silently skipping invalid JSON in mergeSafeJobsFromIncludedConfigs	2026-07-28T02:37:30Z
#48477	Reduce redundant gh pr view polling in PR finisher skills	2026-07-28T02:04:30Z
#48455	refactor: split pkg/cli/token_usage.go (1141 lines) into 6 focused modules	2026-07-28T02:17:52Z
#48454	perf: add 20 KB large-file guard to prevent MCP file read token spikes	2026-07-28T01:57:25Z
#48453	fix: upgrade Go to 1.26.5 to resolve stdlib CVEs in gh-aw-mcpg container	2026-07-28T01:45:19Z
#48451	feat: add GitHub Copilot API endpoint as pricing data source in daily model inventory	2026-07-28T02:07:08Z
#48448	optimize pr-code-quality-reviewer: trim prompts to cut ~34–51 AIC/run	2026-07-28T01:30:57Z
#48447	specs: implement SPDD daily work plan 2026-07-27 (9 tasks across 5 spec files)	2026-07-28T01:29:54Z
#48423	Add smoke-copilot-auto workflow: auto-post haiku on PRs	2026-07-27T20:53:30Z
#48422	Detect and report "missing model AI credits pricing" as a specialized failure	2026-07-28T02:10:06Z
#48420	fix(cli): resolve three high-severity CLI consistency issues	2026-07-28T01:43:34Z
#48416	Bump Copilot BYOK fallback model to Claude Sonnet 5 and regenerate workflow lockfiles	2026-07-28T01:43:14Z
#48398	Handle workflow_dispatch PR targeting in deterministic safe-output sample replay	2026-07-27T20:55:58Z
#48397	Default runs-on for non-reusable custom jobs when omitted	2026-07-28T01:26:09Z
#48363	Add sanitization-safe metadata channel for body-based safe outputs	2026-07-28T02:07:34Z
#48098	fix: legacy-security mode installs awf non-rootless, uses plain sudo for log parsing	2026-07-28T13:25:35Z

---

Generated by Copilot PR Merged Report

Generated by 📊 Daily Copilot PR Merged Report · sonnet50 · 29.8 AIC · ⌖ 14.7 AIC · ⊞ 8.3K · ◷

• expires on Jul 29, 2026, 8:00 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by Daily Copilot PR Merged Report.

A newer discussion is available at Discussion #48932.