[docs] Update documentation for features from 2026-05-16

[github-actions]

Documentation Updates - 2026-05-16

This PR updates the documentation based on user-facing features merged in the last 24 hours.

Features Documented

• Centralized slash-command workflow_dispatch.inputs.required normalization (from Make centralized slash-command workflows emit non-required workflow_dispatch inputs #32480)
• @copilot preserved as a default allowed mention alias in add-comment (from Preserve @copilot in add-comment mention filtering #32487)

📝 Detailed Changes & References

Changes Made

• Updated docs/src/content/docs/reference/command-triggers.md — added a paragraph under Centralized trigger strategy explaining that any workflow_dispatch.inputs.<name>.required: true declared in a centralized slash-command workflow is normalized to required: false in the compiled lock file, so router-dispatched runs remain compatible (PR Make centralized slash-command workflows emit non-required workflow_dispatch inputs #32480).
• Updated docs/src/content/docs/reference/safe-outputs.md — extended the existing parent-author preserved as allowed mention note in the add-comment: section to also document that @copilot is always preserved as a default allowed mention alias and is never neutralized by mention filtering (PR Preserve @copilot in add-comment mention filtering #32487).

Merged PRs Referenced

• Make centralized slash-command workflows emit non-required workflow_dispatch inputs #32480 — Make centralized slash-command workflows emit non-required workflow_dispatch inputs
• Preserve @copilot in add-comment mention filtering #32487 — Preserve @copilot in add-comment mention filtering

PRs Reviewed and Already Documented in Their Own PR

• feat: make E003 file-count error actionable and document max-patch-files #32541 — max-patch-files and max-patch-size were already documented in safe-outputs-pull-requests.md by the PR itself.
• Make OTEL service names workflow-specific in compiled OTLP workflows #32488 — Workflow-specific OTEL service name (gh-aw.<sanitized-workflow-id>) was already documented in open-telemetry.md by the PR itself.
• [docs] Self-healing documentation fixes from issue analysis - 2026-05-16 #32496 — Pi engine was added to engines.md (description, Available Coding Agents, Engine Feature Comparison, and Pinning a Specific Engine Version tables) by the daily doc-healer PR.

PRs Reviewed and Skipped (Not User-Facing)

• chore: enhance otel smoke tests #32601, chore: Update otel smoke tests #32598 — OTEL smoke-test workflow internals only.
• [jsweep] Clean action_input_utils.cjs #32548, [log] Add debug logging to 5 workflow compiler files #32543, [code-simplifier] Simplify sandbox MCP validation - remove redundant variable #32542, Refactor workflow config parser helpers and shared mount validation #32507, Refactor safe-output dispatch logic to use a canonical handler descriptor table #32489 — Internal refactors and logging additions.
• Stabilize Daily Model Inventory Copilot startup by removing fragile quoted jq allow-tool #32505, Raise Daily Observability workflow ET budget to prevent proxy-enforced exhaustion #32506, Prevent Linter Miner runs from completing without a terminal safe output #32531, Add output_format A/B experiment to daily-code-metrics workflow #32535, [WIP] Fix failing GitHub Actions job Integration: CLI Audit Logs & Firewall #32483 — Workflow-internal stabilization and experiment wiring; no user-facing API change.
• [compiler-threat-spec] spec: add CTR-017 Secret Leakage via Env Vars and CTR-018 Version Integrity Bypass #32538 — Internal compiler-threat-detection spec, not user docs.
• [community] Update community contributions in README #32539 — README community attribution.
• Fix docs link-validator failures from stale experiments page URLs #32490 — Internal docs link fixes only (no new user-facing feature).

Skipped Issues

• Provider-based authentication for Claude, Copilot, Codex. #16498 — Provider-based authentication for Claude, Copilot, Codex (CLAUDE_CODE_OAUTH_TOKEN). Out of scope for an automated 24-hour run: requires confirming the supported authentication surface across multiple engines and is not driven by any code change in the last 24 hours.
• Add WorkQueueOps and BatchOps doc pages under design patterns #22001 — Add WorkQueueOps and BatchOps doc pages under design patterns. Out of scope: requires authoring new design-pattern pages and consulting maintainers about navigation placement.
• Meet the workflows points to specific versions, need to keep these up to date #20391 — Meet the workflows points to specific versions, need to keep these up to date. Out of scope: requires either a workflow to keep the page versions in sync or a maintainer decision to switch to main references.
• [deep-report] Quick Start sample workflow defaults to Copilot — Claude-only users will fail their first run #32423 (closed not_planned), [deep-report] Docs: define "frontmatter" and explain .lock.yml in the Quick Start #32421 (closed not_planned), [deep-report] Schema: add pi and opencode to engine_config description (missing built-in engines) #32418 (closed not_planned) — Per the daily-doc-updater rules, not_planned issues are only addressed when a related code change in the same 7-day window exists. No related code change was found, and [deep-report] Schema: add pi and opencode to engine_config description (missing built-in engines) #32418's Pi-engine docs gap has already been resolved by [docs] Self-healing documentation fixes from issue analysis - 2026-05-16 #32496.

Notes

• The local repository is a shallow clone; the analysis was performed against the merged-PR list returned by gh pr list and direct reads of the documentation files at HEAD. All four pre-flight queries succeeded.

Generated by 📝 Daily Documentation Updater · ● 14M · ◷

• expires on May 17, 2026, 11:02 AM UTC

[github-actions]

Copilot: please post a brief completion summary and flag any documentation gaps that still need attention.

Generated by 👨‍🍳 PR Sous Chef · ◷

[pelikhan]

@copilot this is incorrect

[Copilot]

Fixed in 2e79dc1 — I removed that incorrect @copilot preservation statement from safe-outputs.md.