[copilot-pr-merged-report] Daily Copilot PR Merged Report - 2026-02-18

[github-actions[bot]]

37 Copilot coding agent pull requests were merged in the last 24 hours, demonstrating extremely high velocity with a major engine removal driving significant net deletions.

Key Metrics

Metric	Value
🔀 Total Merged PRs	37
➕ Total Lines Added	9,381
➖ Total Lines Deleted	16,255
📊 Net Code Change	-6,874 lines
🧪 Test Files Modified/Added	46

Note: The large net deletion is primarily due to PR #16519 removing the copilot-sdk agent engine (~10,826 lines deleted) and PR #16534 removing dependent workflows (~3,278 lines deleted).

Merged Pull Requests

View All 37 Merged PRs

PR #	Title	+Added	-Deleted	Merged At
#16568	Add compiler version to lock file metadata for release builds	+176	-1	2026-02-18 14:18
#16563	Update CLI tool versions: Claude Code 2.1.45, Copilot 0.0.411, Codex 0.104.0	+454	-448	2026-02-18 13:50
#16554	compiler: show full import chain for cycle errors	+461	-21	2026-02-18 13:27
#16557	Clarify that contributors create agentic plans in issues, not pull requests	+105	-45	2026-02-18 13:26
#16550	Fix nested remote imports to resolve against parent workflowspec base path	+280	-53	2026-02-18 13:22
#16548	Remove dead copilot-client.js code from setup.sh	+0	-14	2026-02-18 12:36
#16542	Add unassign-first option to assign-to-user safe output	+313	-36	2026-02-18 12:25
#16540	Fix engine registry test failures after custom engine re-addition	+0	-0	2026-02-18 12:17
#16538	Add footer with legal links to editor using Primer CSS	+22	-1	2026-02-18 07:08
#16537	Increase button spacing in editor header from 8px to 16px	+1	-1	2026-02-18 07:08
#16536	Register custom engine to fix TestValidateEngine integration test	+173	-0	2026-02-18 07:17
#16534	Fix build: Remove workflows depending on removed custom engine support	+35	-3,278	2026-02-18 06:53
#16531	Fix engine registry tests after copilot-sdk removal	+4	-4	2026-02-18 05:59
#16519	Remove copilot-sdk agent engine	+125	-10,826	2026-02-18 06:03
#16517	Add spacing after title prefixes ending with ] or -	+32	-2	2026-02-18 05:21
#16516	Update safe outputs spec with discussions field from PR #16509	+74	-9	2026-02-18 05:07
#16515	Validate numeric context variables in activation to prevent injection attacks	+1,758	-0	2026-02-18 05:30
#16509	Add optional discussions field to control discussions:write permission	+66	-9	2026-02-18 04:56
#16508	Remove Copy button from playground editor	+0	-54	2026-02-18 03:32
#16506	Cache failed action resolutions per compilation run	+53	-2	2026-02-18 02:41
#16485	Enable LLM gateway support for Copilot engine	+116	-107	2026-02-18 00:58
#16475	Analyze workflows to determine required secrets in bootstrap	+1,346	-207	2026-02-18 02:29
#16470	Enable LLM gateway for Copilot engine and upgrade firewall to v0.20.0	+646	-626	2026-02-18 00:33
#16468	Fix failing GitHub Actions workflow lint-go	+1	-2	2026-02-17 23:52
#16454	Fix SEC-004: Document sanitization status in 6 body-referencing handlers	+41	-0	2026-02-17 22:00
#16452	Fix failing GitHub Actions workflow for integration	+6	-6	2026-02-17 21:46
#16451	Fix testifylint violations in lock_schema_test.go	+11	-11	2026-02-17 21:48
#16429	Add schema versioning to compiled lock files with compatibility validation	+802	-196	2026-02-17 21:21
#16427	Fix: Use token precedence chain for cross-repo create-pull-request and push-to-pull-request-branch	+199	-98	2026-02-17 21:23
#16423	Support listing workflows from remote repositories	+292	-67	2026-02-17 21:24
#16433	Remove unused extractMetadataFromRemoteFile function	+0	-0	2026-02-17 20:33
#16430	Support org-wide GitHub App tokens via wildcard repositories	+149	-11	2026-02-17 20:34
#16421	Add integration test for adding workflows from githubnext/agentics	+145	-0	2026-02-17 18:59
#16386	Add model, custom_agent, and custom_instructions parameters to assign-to-agent	+411	-21	2026-02-17 18:24
#16371	Support GitHub Enterprise hosts for repository operations	+139	-33	2026-02-17 18:23
#16378	Auto-generate sanitized step for issue/discussion/PR/comment contexts	+936	-57	2026-02-17 16:48
#16387	Bundle Dependabot updates: gopls 0.21.1, bubbles 1.0.0	+9	-9	2026-02-17 16:19

Code Generation Metrics

• Total Lines Added: 9,381
• Test Code Added: ~2,400 lines (estimated from test files)
• Production Code Added: ~6,981 lines
• Code-to-Test Ratio: ~74% production / ~26% test

Test Coverage

• Total Test Files Modified/Added: 46
• Test File Types:
  • Go tests (*_test.go): 42 files
  • JavaScript/CJS tests (*.test.cjs, *.test.ts): 4 files

PRs With Test Coverage

PR #	Test Files	Highlights
#16378	15 Go	Sanitized step generation - comprehensive test suite
#16519	9 (8 Go, 1 TS)	Engine removal - cleaned up related tests
#16475	3 Go	Bootstrap secrets analysis - 905 lines of test code
#16430	2 Go	Org-wide GitHub App tokens
#16554	2 Go	Import cycle error display
#16568	2 Go	Compiler version metadata
#16542	2 (1 Go, 1 JS)	Unassign-first option
#16386	1 JS	Assign-to-agent model parameter
#16517	1 JS	Title prefix spacing fix

Workflow Execution

Token consumption data is not directly available via the GitHub API. Workflow execution time data requires individual run ID lookups per PR, which is not feasible within the scope of this report.

Note on Token Usage: GitHub Actions API provides billable_ms per workflow run, but exact LLM token counts are not exposed. Future reports could estimate token usage by correlating workflow run durations with known per-run averages.

Insights

1. Engine Architecture Cleanup: A major refactoring day — the copilot-sdk engine was fully removed (#16519), causing 10,826 deletions. This was followed by 3 fix PRs (Fix build: Remove workflows depending on removed custom engine support #16534, Register custom engine to fix TestValidateEngine integration test #16536, Fix engine registry tests after copilot-sdk removal #16531) to clean up dependent code and tests. This pattern of "large change + fix cascade" is common in rapid Copilot development.

2. Strong Test Culture: 18 out of 37 PRs (49%) included test file changes. PR #16475 added 905 lines of test code for bootstrap secrets analysis, and #16378 updated 15 test files for the sanitized step feature — indicating healthy test-driven practices.

3. Security Focus: Multiple security-related PRs merged: #16515 (injection attack prevention), #16454 (sanitization documentation), and #16509 (permissions control). This reflects active attention to the security surface area of the agentic workflow system.

---

References:

• Repository: github/gh-aw
• Analysis Period: 2026-02-17T15:24Z → 2026-02-18T15:24Z

AI generated by Daily Copilot PR Merged Report

• expires on Feb 25, 2026, 3:30 PM UTC