What's Changed
- 🔄 chore: update schema URL to v0.76.1 by @github-actions[bot] in #6565
- [Repo Assist] refactor(rust-guard): merge identical security-alert match arms and add actions_get tests by @github-actions[bot] in #6583
- Refactor duplicated backend registration failure reporting in tool registry by @Copilot in #6589
- rust-guard: collapse duplicated repo-write match arms and add pre-emptive tool coverage by @Copilot in #6587
- Clarify logger fallback contract and add direct fallback-handler coverage by @Copilot in #6590
- Improve OTel trace signal quality: stack traces, route cardinality, rate-limit status, and container resource metadata by @Copilot in #6588
- [test] Add tests for server.enforceToolCallLimit by @github-actions[bot] in #6598
- [Repo Assist] refactor: extract RecordSpanError helper to eliminate duplicate span error recording by @github-actions[bot] in #6632
- [test-improver] Improve tests for server HMAC middleware by @github-actions[bot] in #6601
- Refactor tracing expansion placement and extract shared JSON deep-clone utility by @Copilot in #6636
- rust-guard: remove per-item secrecy Vec clones in PR/issue labeling by @Copilot in #6641
- Strengthen TOML parse-error guarantees and clarify tracing key precedence by @Copilot in #6640
- refactor(difc): extract EvaluateCoarseAccess to eliminate duplicated Phase 2 logic by @Copilot in #6639
- [log] Add debug logging to launcher.go by @github-actions[bot] in #6600
- Add explicit DIFC labeling for
list_issue_fieldsin GitHub guard by @Copilot in #6637 - Refactor span error recording into tracing helper and unify error-path instrumentation by @Copilot in #6638
- [log] Add logging to EvaluateCoarseAccess in difc/pipeline_decisions.go by @github-actions[bot] in #6650
- [test-improver] Improve tests for tracing span helpers by @github-actions[bot] in #6651
- [test] Add tests for logger error paths: MarkdownLogger.Close, FileLogger.Log, Logger.Print by @github-actions[bot] in #6647
- fix(proxy): use RecordSpanError for DIFC access-denied spans by @lpcox in #6679
- perf(rust-guard): eliminate wasted allocations in apply_tool_labels and project-item loop by @lpcox in #6680
- rust-guard: add issue_write_ff_remote_mcp_issue_fields to WRITE_OPERATIONS and tool_rules by @lpcox in #6678
- fix(tracing): semconv v1.27.0→v1.34.0, fix mcp.tool_call attribute misuse, add server.address by @Copilot in #6683
- refactor: extract shared DIFC enforcement pipeline to internal/guard/pipeline.go by @Copilot in #6685
- docs: reconcile documentation with implementation (9 discrepancies) by @Copilot in #6686
- refactor: move collaborator_permission to proxy, add strutil.RandomBytes by @Copilot in #6687
- refactor: extract repeated OTEL span-start patterns into named tracing helpers by @Copilot in #6684
- [Repo Assist] refactor: move TruncateSessionID from auth to strutil by @github-actions[bot] in #6704
Full Changelog: v0.3.20...v0.3.21