[mcp-tools] Sync GitHub MCP toolsets mapping with github-mcp-server main

[github-actions]

Summary

Syncs pkg/workflow/data/github_toolsets_permissions.json (v2.2 → v2.3) with the current github/github-mcp-server main branch. No runtime logic changes — data file and test only.

Changes

pkg/workflow/data/github_toolsets_permissions.json (v2.2 → v2.3)

Change	Detail
Toolset removed	search — keyword/semantic search toolset eliminated upstream
Toolset removed	experiments — dynamic toolset management removed upstream
Tools redistributed	search_code, search_commits, search_repositories → repos
Tools redistributed	search_orgs → orgs
Tools redistributed	search_users → users
Tools removed	semantic_issue_similarity_search, semantic_issues_search, run_secret_scanning, check_dependency_vulnerabilities (removed upstream)
Tool added	create_pull_request_with_copilot → copilot toolset
Tool dual-registered	get_label now also registered in issues (alongside labels)
Tool moved	list_org_repository_security_advisories: orgs → security_advisories

pkg/workflow/permissions_validator_test.go

Updated TestToolsetPermissionsMapping expected-toolsets list to remove experiments and search.

Breaking Changes

Workflows that reference the search or experiments toolsets by name will need to be updated. Search tools are now part of repos, orgs, and users toolsets.

Generated by PR Description Updater for #46604 · 25.3 AIC · ⌖ 5.52 AIC · ⊞ 4.8K · ◷

[github-actions]

✅ Great work on this PR! The agentic workflow effectively synchronizes the GitHub MCP toolsets mapping with the upstream github-mcp-server main branch.

• Well-structured changes — The mapping sync is focused and clear, with tools properly redistributed across toolsets.
• Test coverage — The expected toolsets list in TestToolsetPermissionsMapping is correctly updated.
• Comprehensive description — The PR body clearly explains what changed.

This follows the core team's agentic development process and is ready for merge. 🤖🎉

Generated by ✅ Contribution Check · 56.3 AIC · ⌖ 9.77 AIC · ⊞ 6.2K · ◷

[gh-aw-bot]

@copilot please run the pr-finisher skill, refresh the branch if needed, and summarize the remaining maintainer action after local validation and checks are current.

Run: https://github.com/github/gh-aw/actions/runs/29689386408

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• pi.dev

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "pi.dev"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · 18.5 AIC · ⌖ 5.66 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot please run the pr-finisher skill, refresh the branch if needed, and summarize the remaining maintainer action after local validation and checks are current.

_Run: https://github.com/github...

Validated the current head 762b669 without additional code changes.

• branch refresh not needed (origin/main...HEAD = 0 1)
• local checks passed: make fmt, make lint, make test-unit, make test
• the prior PR workflow runs marked action_required had no jobs, so they are approval-gated/stale rather than reproducible test failures

Remaining maintainer action: re-trigger/approve PR workflows on the current head before merge, since agent pushes do not start CI.

[gh-aw-bot]

@copilot please run the pr-finisher skill, address any unresolved review feedback, confirm the branch is current, and summarize the next concrete maintainer action after checks are current.

Run: https://github.com/github/gh-aw/actions/runs/29691425979

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• pi.dev

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "pi.dev"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · 9.52 AIC · ⌖ 6.01 AIC · ⊞ 7.5K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot please run the pr-finisher skill, address any unresolved review feedback, confirm the branch is current, and summarize the next concrete maintainer action after checks are current.

_Run: h...

Updated the branch with origin/main in 1e11494 and revalidated the refreshed head.

• no unresolved in-scope review threads/comments remain
• branch is current with base (origin/main...HEAD = 0 2)
• local checks passed: make fmt, make lint, make test-unit, make test, make recompile, and make agent-report-progress
• prior branch CI entries marked action_required are still approval-gated/no-job runs rather than reproducible failing jobs

Next maintainer action: approve/re-trigger the PR workflows on the current head before merge.

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.82.14