Skip to content

Add basic project view management - #2961

Merged
zwick merged 5 commits into
mainfrom
zwick-plan-project-v2-views
Aug 12, 2026
Merged

Add basic project view management#2961
zwick merged 5 commits into
mainfrom
zwick-plan-project-v2-views

Conversation

@zwick

@zwick zwick commented Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

Adds basic ProjectV2 view lifecycle support to the consolidated Projects tools: list/get views plus create/update/delete with name, layout, and filter. Create supports visible fields by database ID or case-insensitive field name.

Why

Fixes github/planning-tracking#3776.

What changed

  • Added list_project_views and get_project_view with normalized output, pagination, and project-content IFC labels.
  • Added create_project_view, update_project_view, and delete_project_view; create uses the public REST endpoint and can resolve visible_field_names to the required database IDs.
  • Verify update/delete view ownership against the requested owner and project before mutation.
  • Added focused lifecycle tests, tool snapshots, Projects instructions, and generated README docs.

MCP impact

  • No tool or API changes
  • Tool schema or behavior changed - extends the existing consolidated Projects tools with five methods.
  • New tool added

Prompts tested (tool changes only)

  • "List the views in my user project."
  • "Create a table view filtered to status:Todo with Status and Assignees visible."
  • "Get the new view, rename it, switch it to board layout, and filter to assignee:@me."
  • "Clear the view filter, then delete the view and list the views again."

Validated through the built stdio MCP server against the public APIs without preview headers, including visible_field_names resolution, ownership-mismatch rejection, and final cleanup/read-back.

Security / limits

  • No security or limits impact
  • Auth / permissions considered - existing read:project and project scopes are unchanged, and mutations verify the view belongs to the requested project.
  • Data exposure, filtering, or token/size limits considered - read results use project-content IFC labels and list pagination remains capped at 50.

Tool renaming

  • I am renaming tools as part of this PR (e.g. a part of a consolidation effort)
    • I have added the new tool aliases in deprecated_tool_aliases.go
  • I am not renaming tools as part of this PR

Lint & tests

  • Linted locally with ./script/lint
  • Tested locally with ./script/test

Docs

  • Not needed
  • Updated (README / docs / examples)

@zwick
zwick force-pushed the zwick-plan-project-v2-views branch from 861109f to 8fb2181 Compare July 27, 2026 17:26
@zwick zwick self-assigned this Jul 28, 2026
@zwick
zwick marked this pull request as ready for review July 28, 2026 13:40
@zwick
zwick requested a review from a team as a code owner July 28, 2026 13:40
Copilot AI review requested due to automatic review settings July 28, 2026 13:40
Copilot AI reviewed Jul 28, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds complete basic ProjectV2 view lifecycle support to the consolidated Projects tools.

Changes:

  • Adds list/get/create/update/delete view operations with pagination and IFC labeling.
  • Supports layouts, filters, visible fields, and ownership verification.
  • Adds tests, snapshots, instructions, and generated documentation.
Show a summary per file
File Description
README.md Documents view parameters.
pkg/github/toolset_instructions.go Adds view workflow guidance.
pkg/github/projects.go Implements view lifecycle operations.
pkg/github/projects_v2_test.go Tests view behavior and authorization.
pkg/github/projects_test.go Verifies updated tool schemas.
pkg/github/minimal_types.go Adds normalized view output type.
pkg/github/__toolsnaps__/projects_write.snap Updates write schema snapshot.
pkg/github/__toolsnaps__/projects_list.snap Updates list schema snapshot.
pkg/github/__toolsnaps__/projects_get.snap Updates get schema snapshot.

Review details

  • Files reviewed: 9/9 changed files
  • Comments generated: 0
  • Review effort level: Medium

@zwick
zwick marked this pull request as draft July 28, 2026 13:49
@zwick
zwick force-pushed the zwick-plan-project-v2-views branch from cd30e93 to e519780 Compare July 28, 2026 14:26
@zwick
zwick marked this pull request as ready for review July 28, 2026 15:19
@zwick zwick mentioned this pull request Jul 31, 2026
Merged
7 of 13 tasks
@zwick
zwick force-pushed the zwick-plan-project-v2-views branch 2 times, most recently from 4e7e2a5 to daba059 Compare August 7, 2026 12:41
tommaso-moro
tommaso-moro reviewed Aug 7, 2026
View reviewed changes
Comment thread pkg/github/projects.go Outdated
tommaso-moro
tommaso-moro reviewed Aug 7, 2026
View reviewed changes

@tommaso-moro tommaso-moro left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Left two comments, otherwise lgtm!

Comment thread pkg/github/projects.go
case "org":
endpoint = fmt.Sprintf("orgs/%s/projectsV2/%d/views", owner, projectNumber)
case "user":
endpoint = fmt.Sprintf("users/%s/projectsV2/%d/views", owner, projectNumber)

@tommaso-moro tommaso-moro Aug 7, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

owner is a login, but I think this endpoint requires the numeric user_id (octocat → 583231). If so, we should maybe resolve the user ID before building the URL and update the test? source

@zwick zwick Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great catch! This is actually an error in the docs. Verified against production:

POST /users/zwick/projectsV2/7/views
{"name":"Route evidence - login","layout":"table"}

HTTP 201
{"name":"Route evidence - login","project_url":"https://api.github.com/users/zwick/projectsV2/7"}

POST /users/1871037/projectsV2/7/views
{"name":"Route evidence - numeric ID","layout":"table"}

HTTP 404
{"message":"Not Found","status":"404"}

I'll see about getting these docs updated

@zwick
zwick requested a review from tommaso-moro August 7, 2026 17:42
zwick and others added 5 commits August 12, 2026 08:38
@zwick
Add basic project view management
ced0278 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: c6f8ede6-efee-4191-900d-59a1bb0af000
@zwick
Harden project view mutations
52272fc 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: c6f8ede6-efee-4191-900d-59a1bb0af000
@zwick
Resolve project view fields by name
8992ef3 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: c6f8ede6-efee-4191-900d-59a1bb0af000
@zwick
Clear project view filters with explicit null
97ba921 
Align the filter parameter with the nullable-parameter convention: omit
to preserve, pass null to clear. Empty strings are now rejected rather
than treated as a clear sentinel. The GraphQL and REST wire format is
unchanged, since the API still clears a filter with an empty string.

Also replace the "<nil>" string comparison in deleteProjectView with a
direct nil check on the returned ID.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@zwick
Use caller-specific project field hints
b5d7459 
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: c6f8ede6-efee-4191-900d-59a1bb0af000
@zwick
zwick force-pushed the zwick-plan-project-v2-views branch from e949136 to b5d7459 Compare August 12, 2026 12:38
@zwick
zwick merged commit d6cab97 into main Aug 12, 2026
19 checks passed
@zwick
zwick deleted the zwick-plan-project-v2-views branch August 12, 2026 12:41
@github-actions github-actions Bot mentioned this pull request Aug 20, 2026
Closed
Copilot AI mentioned this pull request Aug 21, 2026
Merged
social4hyq pushed a commit to social4hyq/homebrew-core that referenced this pull request Sep 20, 2026
HarmonybrewBot HarmonybrewBot
!17166 merge bump-github-mcp-server-1.10.0 into main
f6385a3 
github-mcp-server 1.10.0

Created-by: HarmonybrewBot
Commit-by: HarmonybrewBot
Merged-by: HarmonybrewBot
Description: Created by `brew bump`

---

Created with `brew bump-formula-pr`.<details>
  <summary>release notes</summary>
  <pre>## Highlights

v1.10.0 is a substantial security, reliability, and compatibility release for the GitHub MCP Server.

### Safer by default

- Added confirmed repository deletion with form elicitation and protected multi-round-trip state ([#3076](github/github-mcp-server#3076)).
- Restricted bearer credentials to configured GitHub authorities ([#3056](github/github-mcp-server#3056)).
- Enforced HTTPS for GitHub Enterprise hosts ([#3069](github/github-mcp-server#3069)).
- Made invalid static `--tools` configuration fail closed ([#3050](github/github-mcp-server#3050)).
- Hardened lockdown, request limits, cache isolation, URL traversal, and response sanitization ([#3109](github/github-mcp-server#3109), [#3112](github/github-mcp-server#3112), [#3113](github/github-mcp-server#3113), [#3111](github/github-mcp-server#3111), [#3108](github/github-mcp-server#3108), [#3114](github/github-mcp-server#3114), [#3110](github/github-mcp-server#3110)).

### Better GitHub Enterprise Server compatibility

- `list_issues` and `search_issues` now degrade safely when issue custom-field GraphQL types are unavailable ([#3086](github/github-mcp-server#3086), [#2897](github/github-mcp-server#2897)).
- `list_issues` now returns assignee logins and stable empty arrays for unassigned issues ([#3064](github/github-mcp-server#3064)).
- Validation failures expose safe ruleset details when supplied by the GitHub API ([#3081](github/github-mcp-server#3081)).

### Safer repository file operations

- `get_file_contents` now identifies symbolic links and clearly labels dereferenced content.
- Symbolic-link writes require explicit `allow_symlink_write: true` opt-in ([#3071](github/github-mcp-server#3071)).
- Fixed binary MCP resources being base64-encoded twice ([#3098](github/github-mcp-server#3098)).

### More reliable tool contracts

- Corrected `add_issue_comment` input modes ([#3085](github/github-mcp-server#3085)).
- `issue_write.issue_fields[].delete: false` is now a valid no-op for strict-schema clients ([#3077](github/github-mcp-server#3077)).
- Zero-parameter tools accept an omitted `arguments` property while rejecting explicit `null` and malformed JSON ([#3099](github/github-mcp-server#3099)).
- Notification subscription tools explicitly advertise destructive behavior ([#2936](github/github-mcp-server#2936)).
- Copilot review-request denials now return actionable guidance instead of a bare 404 ([#3119](github/github-mcp-server#3119)).

### Projects, Actions, and efficiency

- Added Project view lifecycle operations and visible-field configuration ([#2961](github/github-mcp-server#2961), [#2988](github/github-mcp-server#2988)).
- Reduced Actions and other successful response payloads ([#3047](github/github-mcp-server#3047), [#3055](github/github-mcp-server#3055)).
- Improved sanitization performance and refreshed UI/build dependencies ([#3120](github/github-mcp-server#3120), [#3100](github/github-mcp-server#3100)).

### Behavior changes to note

- Unknown static `--tools` names now prevent startup.
- Symbolic-link updates require explicit opt-in.
- Requests cannot relax server-enforced lockdown.
- Oversized HTTP request bodies are rejected early.
- `add_issue_comment` performs stricter mutually exclusive mode validation.
- Repository deletion requires an eligible modern MCP client, form elicitation support, and the appropriate scopes.

## What's Changed
* Reduce Actions workflow list response payloads by @tommaso-moro in github/github-mcp-server#3047
* Use minimal response types for tool results by @tommaso-moro in github/github-mcp-server#3055
* Add basic project view management by @zwick in github/github-mcp-server#2961
* Add visible fields to project views by @zwick in github/github-mcp-server#2988
* fix(actions): avoid malformed response on log download failure by @SamMorrowDrums in github/github-mcp-server#3066
* fix(security): enforce HTTPS for gh-host/GITHUB_HOST to prevent cleartext credentials by @SamMorrowDrums in github/github-mcp-server#3069
* Reject unsupported subscription streams by @SamMorrowDrums in github/github-mcp-server#3073
* build(deps): bump distroless/base-debian12 from `348dac1` to `76b3162` by @dependabot[bot] in github/github-mcp-server#3088
* build(deps): bump golang from 1.25.12-alpine to 1.25.13-alpine by @dependabot[bot] in github/github-mcp-server#3087
* build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by @dependabot[bot] in github/github-mcp-server#3089
* build(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in github/github-mcp-server#3007
* build(deps): bump docker/login-action from 4.4.0 to 4.6.0 by @dependabot[bot] in github/github-mcp-server#3005
* Add confirmed repository deletion tool by @SamMorrowDrums in github/github-mcp-server#3076
* fix(issues): validate add_issue_comment input modes by @SamMorrowDrums in github/github-mcp-server#3085
* Fix static --tools validation fallback by @Mahmoud772122777 in github/github-mcp-server#3050
* Attach GitHub token only to configured GitHub hosts by @SyedAnas01 in github/github-mcp-server#3056
* Show ruleset violation details when create_branch fails by @Hashim1999164 in github/github-mcp-server#3081
* fix(notifications): mark subscription tools destructive by @SamMorrowDrums in github/github-mcp-server#2936
* Fix binary resource blob encoding by @SamMorrowDrums in github/github-mcp-server#3098
* Return assignees from list_issues by @tgockel in github/github-mcp-server#3064
* Fix list_issues on GHES schemas without issue fields by @SamMorrowDrums in github/github-mcp-server#3086
* Fix omitted tool arguments by @SamMorrowDrums in github/github-mcp-server#3099
* Clarify symlink behavior for repository file reads and writes by @theinfosecguy in github/github-mcp-server#3071
* fix(issues): allow delete:false in issue_write issue_fields by @tgockel in github/github-mcp-server#3077
* Handle unsupported issueFieldValues enrichment in search_issues by @kerobbi in github/github-mcp-server#2897
* build(deps): clear UI dependency alerts by @SamMorrowDrums in github/github-mcp-server#3100
* fix(lockdown): harden pull_request_read get_commits handling by @SamMorrowDrums in github/github-mcp-server#3109
* fix(http): make server lockdown mode an upper bound over requests by @SamMorrowDrums in github/github-mcp-server#3112
* Centralize sanitization of untrusted GitHub response fields by @SamMorrowDrums in github/github-mcp-server#3114
* Filter invisible Unicode after HTML entity normalization by @SamMorrowDrums in github/github-mcp-server#3110
* fix(raw): reject traversal segments when constructing raw content URLs by @SamMorrowDrums in github/github-mcp-server#3108
* refactor: condense lockdown comments in GetPullRequestCommits by @SamMorrowDrums in github/github-mcp-server#3115
* Limit HTTP request bodies before MCP middleware parsing by @SamMorrowDrums in github/github-mcp-server#3111
* fix(lockdown): isolate repo-access cache per caller identity by @SamMorrowDrums in github/github-mcp-server#3113
* perf(sanitize): make clean text allocation-free on the hot path by @SamMorrowDrums in github/github-mcp-server#3120
* test(sanitize): drop the optimization scaffolding by @SamMorrowDrums in github/github-mcp-server#3121
* fix(copilot): explain review request denials instead of forwarding a bare 404 by @dylanpulver in github/github-mcp-server#3119
* build(deps): bump the npm_and_yarn group across 1 directory with 4 updates by @dependabot[bot] in github/github-mcp-server#3091

## New Contributors
* @Mahmoud772122777 made their first contribution in github/github-mcp-server#3050
* @SyedAnas01 made their first contribution in github/github-mcp-server#3056
* @Hashim1999164 made their first contribution in github/github-mcp-server#3081
* @tgockel made their first contribution in github/github-mcp-server#3064
* @theinfosecguy made their first contribution in github/github-mcp-server#3071
* @dylanpulver made their first contribution in github/github-mcp-server#3119

**Full Changelog**: https://github.com/github/github-mcp-

See merge request: Harmonybrew/homebrew-core!17166
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Balanced
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments
@tommaso-moro tommaso-moro tommaso-moro approved these changes

Assignees

@zwick zwick

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@zwick @tommaso-moro @SamMorrowDrums