[copilot-agent-analysis] Daily Copilot Agent Analysis - 2026-04-28

[github-actions[bot]]

🤖 Copilot Agent PR Analysis - 2026-04-28

Analysis Period: Last 24 hours
Total PRs (agent_prs_total): 58 | Merged (agent_prs_merged): 45 (77.6%) | Avg Duration: 79 min

Performance Metrics

Date	PRs	Merged	Success Rate	Avg Duration
2026-04-28	58	45	81.8%	79 min
2026-04-27	22	18	81.8%	225 min
2026-04-26	44	35	79.5%	98 min

Trend: Success rate ➡️ Stable (~82%). Duration 📈 improved significantly today (79 min vs 225 min yesterday).

Agent Task Texts

PR #	Status	Task Text (first 100 chars)
#28927	Open	removeXmlComments used a lazy regex that only consumed the innermost comment pair in nested input...
#28925	Merged	The hardenUnicodeText normalization layer handled lowercase Cyrillic dze (U+0455→s) and Ukrainia...
#28916	Closed	Eight correctness bugs across agentic-optimization-kit.md, copilot-token-optimizer.md, and agen...
#28913	Closed	Adds a new pkg/yamlpostcheck package — a builtin post-generation YAML validation and safety engine...
#28900	Merged	Extends the checkout frontmatter object with a new wiki: true/false field (default false)...
#28899	Merged	When an agentic workflow fails, the failure issue/comment now includes a 🔑 Credential alert section...
#28897	Merged	parseMCPScriptsMap and the inner loop of mergeMCPScripts contained identical ~100-line blocks...
#28896	Merged	GitHub's REST-to-GraphQL bridge can take 30–60+ seconds to resolve a newly-created PR's node ID...
#28894	Merged	push_repo_memory ran even when the agent failed or timed out, writing incomplete/corrupt state...
#28890	Merged	The Squid firewall proxy truncates blocked_requests at 50, inflating severity to "high" incorrectly...
#28880	Merged	The analyzer was flagging any cache key containing run_id as 🔴 Critical, incorrectly treating...
#28873	Closed	smoke-ci.md calls safeoutputs directly in engine.command, but tools.cli-proxy: true was never...
#28872	Merged	Workflows using engine.command that call safeoutputs or mcpscripts directly as shell commands...
#28865	Merged	findIncludesInContent called parser.ParseImportDirective per line, running a complex regex per...
#28860	Merged	The Extension Upgrade Test workflow on windows-latest had two separate failures around install/upgrade...
#28854	Merged	slash_command: events: [pull_request_comment] compiles to issue_comment (the actual GitHub event)...
#28853	Closed	TestAddWorkflowWithDispatchWorkflowFromSharedImport was pinned to commit 15af946 where `serena-g...
#28851	Merged	The integration test was pinned to commit 15af946 where serena-go.md imports serena.md as a no...
#28843	Merged	8 feature topics required 2–3 closed-PR re-submissions in a 14-day window, each consuming a full agent...
#28842	Merged	The features.mcp-cli flag was a redundant gate on top of tools.mount-as-clis. This removes the flag...
#28841	Merged	The test TestTaskJobGenerationFix/task_job_for_if_condition was asserting the wrong format for if...
#28840	Merged	When an agent job exits non-zero due to a transient post-processing error after terminal_reason:completed...
#28839	Merged	The Daily Syntax Error Quality Check was consuming ~3.4M tokens/run across 56 turns — 40–60% above budget...
#28838	Merged	The Schema Feature Coverage Checker was 100% blocked because demo files it creates went to a protected...
#28837	Merged	Adds digest pins for gh-aw-mcpg:v0.3.0 and github-mcp-server:v1.0.3 referenced in CI run...
#28834	Merged	gh aw add silently dropped transitive shared imports — when a top-level workflow imported shared/ files...
#28833	Merged	The Schema Consistency Checker was consuming 8.1M tokens/run across 138 unconstrained turns (~14.9% budget)...
#28832	Merged	The Phase 6 discussion template in copilot-agent-analysis.md used #/## top-level headers...
#28831	Merged	Two daily workflows covered the same security domain — consolidates into a unified Daily Security workflow...
#28828	Merged	spec-extractor was consuming ~3.2M tokens/run (~49 avg turns) due to 24 turns on file discovery...
#28827	Merged	The copilot-token-optimizer Phase 2 analysis matrix lacks specific anti-pattern detection guidance...
#28824	Merged	sanitize_content_core.cjs recently gained core.debug() calls but several test files lacked the mock...
#28818	Merged	The Daily Community Attribution Updater had no guard against creating duplicate failure issues...
#28817	Merged	Two sites in mcp_scripts_parser.go silently discarded fmt.Sscanf errors when parsing string timeouts...
#28816	Merged	MCP connections time out after ~5 minutes of inactivity. Replaces end-of-session MCP validation with bash...
#28815	Closed	Intermittent node: command not found / codex: command not found failures were killing agent jobs...
#28814	Merged	29 workflows identified as carrying duplicated audit scaffolding — migrates 21 to shared/daily-audit-base.md...
#28813	Merged	IsMCPScriptsEnabled carried a dead workflowData *WorkflowData parameter — the body always ignored it...
#28809	Merged	Improves upgrade integration test coverage by switching the Linux matrix runner to ubuntu-slim...
#28794	Merged	Smoke CI had a 100% error rate (22/22 runs in Apr 20–27) due to triggering on every push regardless of paths...
#28793	Merged	pkg/parser/schedule_time_utils_test.go used only the stdlib testing package — migrates to testify...
#28792	Closed	Two step names used informal abbreviations inconsistent with the project convention of complete English words...
#28788	Closed	[WIP] Add max-turns: 25 and bash pre-steps to spec-extractor.md and pkg-spec-extractor.md...
#28787	Closed	A prior refactoring converted string-form engines into builtin import injections, causing a 17.1% benchmark regression...
#28786	Merged	Two low-impact warnings from the multi-device docs report: mobile table cells fell below the 44px touch target...
#28778	Open	Workflows that fail repeatedly continue to trigger and consume resources. Adds a circuit breaker (ASI-08)...
#28777	Open	Persisted memory content was injected into the agent prompt without sanitization — adds sanitization (ASI-06)...
#28772	Merged	Renames the "copilot driver" concept to "copilot harness" across Go, JavaScript, frontmatter schema...
#28771	Merged	The Integration: CMD Tests job was failing because the audit command's Use field placed ... incorrectly...
#28745	Merged	Two pairs of dead/duplicate code identified by semantic function clustering — consolidates provider extraction...
#28744	Merged	BenchmarkValidation was 119.3% above historical average due to repeated calls to validateWorkflow...
#28743	Closed	Concurrent handleMessage calls derived their temp file index from _allResults.length before push...
#28741	Closed	The compiler was silently appending $\{\{ github.run_id }} to every user-provided custom cache key...
#28739	Merged	sendJobConclusionSpan captured awInfo.model but only pushed it onto agentAttributes — missing from span...
#28738	Merged	The shared apm job had permissions: {}, causing actions/checkout to fail with a misleading error...
#28737	Merged	pull_request_target had no native label-name filter — adds first-class labels filter...
#28736	Merged	neutralizeTemplateDelimiters was applying regex replacements globally, including inside fenced code blocks...
#28735	Merged	After gh aw fix --write migrates a workflow from tools.serena to imports:, the scaffolded serena.md was broken...

Notable PRs

Closed Without Merge ⚠️

• #28788: [WIP] Add max_turns to spec-extractor — marked WIP, superseded by merged optimize spec-extractor: pre-agent-steps + toolset trim + prompt slim (~1.6M tokens/run) #28828
• #28787: perf: fix 17.1% BenchmarkParseWorkflow regression — likely superseded or needs rework
• #28916: fix: count caps / trim-by-date / upload-asset limit — closed 8 min after creation (quick rejection)
• #28913: feat: add pkg/yamlpostcheck — closed 12 min after creation (quick rejection)

Open PRs ⏳ (>12 hours)

• #28778: feat(ASI-08): Circuit breaker for failing workflows — open ~18 hours
• #28777: ASI-06: Sanitize repo-memory before prompt injection — open ~18 hours

Key Insights

• Volume spike: 58 PRs today vs 22 yesterday (+164%) with stable ~82% success rate — high output day.
• Security PRs pending: ASI-06 and ASI-08 security improvement PRs (ASI-06: Sanitize repo-memory and cache-memory content before prompt injection #28777, feat(ASI-08): Add circuit breaker for repeatedly failing workflows #28778) have been open ~18 hours without merge; these address memory sanitization and circuit breaking for failing workflows.

---

Generated by Copilot Agent Analysis (Run: §25051365333)

Generated by Copilot Agent PR Analysis · ● 217.1K · ◷

• expires on Apr 29, 2026, 12:04 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Copilot Agent PR Analysis.

A newer discussion is available at Discussion #29090.