[dependabot]

Bumps golang.org/x/text from 0.42.0 to 0.43.0.

Commits

• ac40b0f go.mod: update golang.org/x dependencies
• 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
• d0ecd29 secure/bidirule: lazily precompute ASCII table
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🔒 mcpg Read-Only Stress — default

Surface coverage: MCP tool calls + proxied CLI (REST) + GraphQL mutations
Isolation runtime: default (standard AWF container)

Part	Surface	Op	Result	Expected	Status
A	MCP	reads (list_issues, list_pull_requests, get_file_contents, list_commits)	data returned	ALLOWED	✅
B	MCP	writes (add_issue_comment/star_repository/issue_write/create_branch/create_or_update_file/create_pull_request)	all 6 targets absent from the 23-tool catalog (read-only toolset only, GITHUB_READ_ONLY=1)	BLOCKED	⚠️
C	CLI	reads via proxied github CLI (list_issues, get_file_contents, list_pull_requests, list_commits)	data returned	ALLOWED	✅
D	CLI	REST writes via gh api	gh auth status reports not logged into any GitHub hosts; writes not attempted	BLOCKED	⚠️
E	CLI	GraphQL mutations via gh api graphql	gh unauthenticated; mutations not attempted	BLOCKED	⚠️

Overall: INCONCLUSIVE

⚠️ Part B: the gh-aw tools.github: wrapper always launches the backend with GITHUB_READ_ONLY=1, so all 6 write-tool targets were absent from the exposed catalog entirely (never reached a call-time refusal). This proves backend/toolset configuration is read-only, but does not independently confirm mcpg's own gateway-level DIFC/guard blocking layer, per the test's own methodology note.

⚠️ Parts D/E: gh CLI was not authenticated in this sandbox (gh auth status → not logged into any GitHub hosts), so REST/GraphQL write attempts could not be executed to validate the token-scope boundary. No write of any kind (reaction, star, issue, comment, branch, file, PR, mutation) was attempted or leaked.

No writes succeeded or leaked through any surface. Gateway + CLI proxy correctly served reads on all surfaces tested.

🔒 mcpg read-only stress (default AWF runtime) by Read-Only Stress: default runtime