GitHub MCP Server 0.6.0

Highlights

• Backported upstream GitHub MCP Server changes through c36e4e44.
• Added OAuth login support for local and container-based stdio usage.
• Added MCP Apps UI support and refreshed the embedded UI build pipeline.
• Added granular issue and pull request tools.
• Added issue dependencies, reactions, expanded field filtering, Code Quality tools, and refreshed Copilot tooling.
• Preserved Omnigit local Git tools, body filtering, comment write tools, review comment database_id, and fork package identity.

Dependency Updates

• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in #64
• build(deps): bump reproducible-containers/buildkit-cache-dance from 3.3.2 to 3.4.0 by @dependabot[bot] in #65
• build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #66
• build(deps): bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in #70
• build(deps): bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0 by @dependabot[bot] in #68
• build(deps): bump golang from 1.26.0-alpine to 1.26.5-alpine by @dependabot[bot] in #74
• build(deps): bump distroless/base-debian12 from e7e678c to 9c05cfd by @dependabot[bot] in #75

Verification

• ./bin/golangci-lint run ./...
• go test ./internal/oauth ./pkg/github ./pkg/toolvalidation ./pkg/lockdown ./pkg/bodyfilter ./pkg/git ./internal/ghmcp
• docker buildx build --platform linux/amd64 --target build --build-arg VERSION=ci-fix --progress=plain .
• GitHub PR checks passed on PR #76 after the backport and docs updates.

Full Changelog: v0.5.0...v0.6.0