GitHub MCP Server 1.12.0

Highlights

• New governance tools for agents. Read and manage repository rulesets and custom properties across repository, organization, and enterprise levels.
• Faster, safer feature flags. Functional availability rules evaluate lazily after static filtering, deduplicate checks per request, and preserve precise availability errors.
• Safer write operations. Pin merge HEADs, recover file SHAs, use least-privilege public-repository access, and detect silently dropped labels.
• Richer review and discovery support. Adds review range coordinates, thread resolution reasons, projected-header preflights, Server Card support, and Agent Plugins.
• Better content fidelity. Markdown bodies, titles, release notes, comments, and commit messages preserve visible content while filtering unsafe invisible characters.

What's Changed

• Remove documentation for unavailable tool-search command by @tommaso-moro in #3162
• Expose Copilot review thread resolution reasons by @cagesellchen in #3123
• fix(repos): give create_or_update_file callers a SHA they can actually get by @dylanpulver in #3131
• fix: allow public_repo for public contribution tools by @paulcakeface in #3140
• Enable feature flags via URL query parameter (?features=) for headerless hosted connections by @CAOShurong in #3146
• Add expectedHeadSha pinning to merge_pull_request by @jcosta1970 in #3182
• Fix e2e harness compilation against go-github v89 and go-sdk v1.7 by @ppoffice in #3187
• Return range coordinates for review comments by @yiheng-kkk in #3193
• Fix issue_write silently dropped label errors by @SamMorrowDrums in #3195
• fix(http): allow projected MCP headers in preflights by @SamMorrowDrums in #3167
• Spell perPage the same way in every paginated tool by @karpovantonme in #3142
• Add MCP Server Card (SEP-2127) types + handler by @SamMorrowDrums in #2768
• Refactor feature flags to use functional availability rules by @SamMorrowDrums in #3166
• feat(governance): add repository ruleset tools with multi-level scope challenge by @SamMorrowDrums in #2991
• feat(governance): add custom properties tools by @SamMorrowDrums in #2992
• Fix HTML entities in sanitized titles by @SamMorrowDrums in #3216
• build(deps): bump fast-uri from 3.1.5 to 3.1.7 in /ui in the npm_and_yarn group across 1 directory by @dependabot[bot] in #3208
• build(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #3217
• build(deps): bump github/codeql-action from 4.37.4 to 4.37.9 by @dependabot[bot] in #3192
• feat: add Agent Plugins 1.0 package by @777genius in #3169
• fix(sanitize): preserve Markdown body fidelity on read surfaces by @SamMorrowDrums in #3177
• build(deps): bump actions/stale from 10 to 11 by @dependabot[bot] in #3003
• Fix main CI sanitizer integration by @SamMorrowDrums in #3219

New Contributors

• @cagesellchen made their first contribution in #3123
• @paulcakeface made their first contribution in #3140
• @CAOShurong made their first contribution in #3146
• @jcosta1970 made their first contribution in #3182
• @ppoffice made their first contribution in #3187
• @yiheng-kkk made their first contribution in #3193
• @karpovantonme made their first contribution in #3142
• @777genius made their first contribution in #3169

Full Changelog: v1.11.0...v1.12.0