v0.3.28

What's Changed

• [log] Add debug logging to proxy/response_transform.go by @github-actions[bot] in #7739
• [test] Add tests for middleware.wrapToolHandler by @github-actions[bot] in #7736
• [test-improver] Improve tests for tracing package by @github-actions[bot] in #7740
• chore: recompile all workflows by @lpcox in #7766
• refactor: extract registrationErrors helper to deduplicate error-tracking in tool registration by @lpcox with @Copilot in #7763
• refactor(config): extract applyCommonServerConfigFields to eliminate stdio/HTTP duplication by @lpcox with @Copilot in #7764
• Refactor duplicate label-agent guard initialization into shared helper by @lpcox with @Copilot in #7758
• Deduplicate Phase 5 DIFC collection filtering across unified server and proxy by @lpcox with @Copilot in #7759
• fix(guard): cover 4 DIFC labeling gaps — get_code_quality_finding, ui_get, add_gpg_key, add_ssh_key by @lpcox with @Copilot in #7765
• Refactor DIFC pre-phase error handling into a shared guard helper by @lpcox with @Copilot in #7760
• rust-guard: simplify default_secrecy conditions; remove lifetime noise from integrity helpers by @lpcox with @Copilot in #7762
• [Repo Assist] refactor(rust-guard): consolidate check_file_secrecy into is_sensitive predicate by @github-actions[bot] in #7786
• refactor: semantic function clustering — reduce cross-concern placement and duplication by @lpcox with @Copilot in #7761
• Validate TOML gateway.port and cover config.example.toml by @lpcox with @Copilot in #7792
• Reduce Repo Assist GitHub MCP tool scope by @lpcox with @Copilot in #7794
• Upgrade wazero to v1.12.0 and harden WASM compilation cache shutdown by @lpcox with @Copilot in #7793
• [test] Add tests for config.validateServerAgainstSchema by @github-actions[bot] in #7798
• Refactor duplicated filter validation and localize RPC/launcher helpers by @lpcox with @Copilot in #7802
• [test-improver] Improve tests for cmd/serve package by @github-actions[bot] in #7805
• [Repo Assist] refactor(httputil): centralize TLS min-version policy by @github-actions[bot] in #7834
• Allow Nightly Schema Updater to complete Rust-guard verification by @lpcox with @Copilot in #7839
• Deduplicate command tracing provider lifecycle wiring by @lpcox with @Copilot in #7840
• Centralize TLS config construction behind shared httputil helpers by @lpcox with @Copilot in #7841
• Add debug logging to shared server handlers by @lpcox with @Copilot in #7843
• Close GitHub guard coverage gaps for 4 CLI-only mutating operations by @lpcox with @Copilot in #7842
• [Repo Assist] fix(httputil): remove duplicate TLS declarations by @github-actions[bot] in #7878
• [test-improver] Improve tests for sys package by @github-actions[bot] in #7848
• Remove duplicate TLS declarations in internal/httputil by @lpcox with @Copilot in #7887
• Remove duplicate TLS helpers and consolidate DIFC/proxy utility functions by @lpcox with @Copilot in #7889
• fix: remove duplicate TLS helpers in httputil; add create-issue safe output to nightly schema updater by @lpcox with @Copilot in #7884
• Deduplicate shared config validation across TOML and stdin paths by @lpcox with @Copilot in #7885
• Refactor ServerFileLogger initialization to eliminate duplicated struct construction by @lpcox with @Copilot in #7886
• Add synthetic guard coverage for CLI-only issue, repository, and Projects v2 mutations by @lpcox with @Copilot in #7888
• [test] Add tests for config.unmarshalStringListOrExpression by @github-actions[bot] in #7895
• Tighten Go Logger workflow scope and validation behavior by @lpcox with @Copilot in #7891
• Raise Test Coverage Improver daily AI credit guardrail by @lpcox with @Copilot in #7890
• Raise Repo Assist AI credit budget to 1500 to stop budget-guardrail failure issues by @lpcox with @Copilot in #7883
• [log] Add debug logging to DIFC policy helper functions by @github-actions[bot] in #6501
• 🔄 chore: pin schema URL to v0.79.8 by @github-actions[bot] in #7920
• [log] Add debug logging to proxy/router.go by @github-actions[bot] in #7902
• [test-improver] Improve tests for launcher connection pool by @github-actions[bot] in #7903
• guard: add 11 CLI-only GitHub operations to guard coverage by @lpcox with @Copilot in #7935
• [rust-guard] Hoist commit SHA extraction in commit_integrity and add default-branch commit-context coverage by @lpcox with @Copilot in #7939
• refactor: co-locate sys tool handlers and extract savePayload to payload.go by @lpcox with @Copilot in #7934
• refactor(logger): extract emit helper to eliminate Printf/Print duplication by @lpcox with @Copilot in #7936
• refactor: add strutil.InterfaceToIntString to deduplicate JSON numeric extraction by @lpcox with @Copilot in #7937
• [test] Add tests for guard.FindServerWASMGuardFile and GetWASMGuardsRootDir by @github-actions[bot] in #7941
• feat(guard): wazero security hardening — memory cap, backend call limit, interpreter tests by @lpcox with @Copilot in #7938

Full Changelog: v0.3.27...v0.3.28