Add protected-files support to runtimes and enforce protected file protection in safe outputs#19958

Merged

pelikhan merged 19 commits into

mainfrom

copilot/update-runtime-manager-definitions-again

Mar 7, 2026

Commits on Mar 7, 2026

Initial plan
Copilot
committed
feat: Add manifest-files support to runtime definitions and safe outputs

Copilot
and
pelikhan
committed
docs: document allow-manifest-files for create-pull-request and push-to-pull-request-branch

Copilot
and
Copilot
committed
feat: Surface manifest file protection errors as distinct section in agent failure issue

Copilot
and
pelikhan
committed
fix: Address PR review comments on manifest file helpers and remediation snippet

Copilot
and
pelikhan
committed
feat: add fallback-as-issue, AGENTS.md, and .github/ path protection to manifest file enforcement

Copilot
and
dsyme
committed
feat: rename allow-manifest-files to manifest-files enum, add per-engine AgentFileProvider interface, update security docs

Copilot
and
dsyme
committed
feat: remove allow-manifest-files legacy field, improve manifest protection UX and docs

Copilot
and
pelikhan
committed
feat: add .agents/ as global protected path prefix for supply chain protection

Copilot
and
pelikhan
committed
fix: resolve inconsistencies from iterative development

Copilot
and
pelikhan
committed
refactor: move manifest protection issue text to md templates, use kebab-case config keys

Copilot
and
pelikhan
committed
fix: revert internal config JSON keys back to snake_case

Copilot
and
pelikhan
committed
Update manifest_protection_push_to_pr_fallback.md
dsyme
authored
Update manifest_protection_create_pr_fallback.md
dsyme
authored
fix: update docs and templates to be consistent with code

Copilot
and
pelikhan
committed
feat: rename manifest-files field to protected-files

Copilot
and
pelikhan
committed
docs: update "Manifest File Protection" → "Protected File Protection" terminology throughout

Copilot
and
pelikhan
committed
docs: rename "Protected File Protection" → "Protected Files" throughout

Copilot
and
pelikhan
committed
fix: add missing closing code fence in safe-outputs.md stub for create-pull-request

Copilot
and
pelikhan
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add protected-files support to runtimes and enforce protected file protection in safe outputs#19958

Add protected-files support to runtimes and enforce protected file protection in safe outputs#19958
pelikhan merged 19 commits into
mainfrom
copilot/update-runtime-manager-definitions-again

Commits on Mar 7, 2026

Initial plan

feat: Add manifest-files support to runtime definitions and safe outputs

docs: document allow-manifest-files for create-pull-request and push-to-pull-request-branch

feat: Surface manifest file protection errors as distinct section in agent failure issue

fix: Address PR review comments on manifest file helpers and remediation snippet

feat: add fallback-as-issue, AGENTS.md, and .github/ path protection to manifest file enforcement

feat: rename allow-manifest-files to manifest-files enum, add per-engine AgentFileProvider interface, update security docs

feat: remove allow-manifest-files legacy field, improve manifest protection UX and docs

feat: add .agents/ as global protected path prefix for supply chain protection

fix: resolve inconsistencies from iterative development

refactor: move manifest protection issue text to md templates, use kebab-case config keys

fix: revert internal config JSON keys back to snake_case

Update manifest_protection_push_to_pr_fallback.md

Update manifest_protection_create_pr_fallback.md

fix: update docs and templates to be consistent with code

feat: rename manifest-files field to protected-files

docs: update "Manifest File Protection" → "Protected File Protection" terminology throughout

docs: rename "Protected File Protection" → "Protected Files" throughout

fix: add missing closing code fence in safe-outputs.md stub for create-pull-request