🌟 Release Highlights

v1.2.3 centers on model routing, safer connectors and merges, and a Go 1.27.4 baseline that fixes an HTTP/1 server crash. It also adds security hardening across temporary files, installers, and workflow handling.

⚠️ Breaking Changes

• Default model routing changed. Eligible workflows that set neither a model nor routing now use goal: cost, mode: auto on GitHub Copilot. Recompile and review model, output, and cost changes. To keep the previous non-routed selection, set engine.model-routing: false. Learn more
• Native Jira, Linear, and Azure DevOps integrations are replaced by declarative connectors. Import .github/workflows/connectors/<provider>.md, select read profiles and write effects, configure credentials, then recompile. Learn more
• merge-pull-request blocks PRs that change protected files. Merge those manually, add safe-outputs.merge-pull-request.protected-files.exclude entries, or set protected-files: allowed when intentional.
• pull_request_target admits same-repository PRs only by default. List exact owner/repo entries under forks to admit forks, then recompile.
• AWF and Copilot CLI downloads require a checksum pin. Supply sandbox.agent.checksums-sha256 or engine.checksums-sha256 with an explicit version. Unpinned and latest downloads now fail closed.
• Go 1.27.4 is required for repository builds and release binaries. Older toolchains are rejected.
• MCP workflow-writing tools are disabled by default. Enable add, update, fix, and compile with gh aw mcp-server --allow-write-tools.
• Graders run in conclusion as pure computation. Custom JavaScript and Bash graders run in a separate graders job. Recompile workflows and move Bash graders from stdin to $1 / GH_AW_SESSION_FILE.
• CLI changes. gh aw outcomes is removed; use gh aw logs --outcomes. gh aw logs now defaults to a 1 GB storage budget (--max-storage 0 for unlimited).
• Work-queue setup. Remove initializeWorkQueue and pre-submission policy commands. The first accepted submission creates the policy.

✨ What's New

• Model routing by name. Set model: router, router/economy, router/balanced, or router/robust instead of a separate routing block. Learn more
• Security advisory safe outputs. create-security-advisory creates draft advisories only and never publishes them. add-security-advisory-comment posts comments by GHSA ID. Learn more
• Protected-file checks for merges. merge-pull-request inspects the live PR file list before merging.
• Streaming logs. gh aw logs --format jsonl emits progress and run data while collection runs.
• Work-queue bootstrap. Global queue config moves to .github/workflows/aw.json under work_queue, with first-use bootstrap. Learn more
• Declarative connector conformance. Daily conformance workflows now cover all 14 connectors.
• Experimental Atomic engine. Atomic output now flows into the unified session format and step summaries.

🐛 Bug Fixes & Improvements

• Connector safe outputs no longer fail with Unknown connector argument (#76981).
• The Copilot harness honors Retry-After on HTTP 429 with bounded waits (#76807).
• Safe-output URL redaction no longer corrupts HTML tag boundaries (#76719).
• report_incomplete now appears in reviewer prompts and runtime tool lists (#76537).
• Workflow and run names are serialized as YAML scalars (#76903).
• Label names longer than 50 characters are rejected at compile time (#76941).
• Quota exhaustion is handled in daily-AIC accounting and run-info setup (#76583).
• Declared workflow imports now propagate 404 errors (#76430).

🔒 Security Hardening

• Go 1.27.4 fixes [GO-2026-6859 (CVE-2026-97054)]((pkg.go.dev/redacted)
• Shell injection prevention in maintenance and upgrade workflows (#76951).
• Symlink traversal and leaf-symlink race protections for step summaries and Markdown fixtures (#76958, #76956).
• Temporary files hardened across cache commits, MCP shell outputs, and installer logs (#76954).
• Gateway fallback configuration is withheld from logs (#76952).
• Daily AIC history fails closed when contradictory (#76804).

📚 Documentation

• Model-choice guidance now leads with default routing and model: router (#76985).
• Custom CA trust for the AWF API proxy is documented (#76918).

Generated by 🚀 Release · copilot · routed: haiku55 xhigh · ~3 AIC · ⊞ 7.6K

What's Changed

• Retry rate-limited workflow metadata reads by @pelikhan with @Copilot in #76351
• Handle legacy memory state in the daily git simulator by @pelikhan with @Copilot in #76401
• Default eligible no-model workflows to cost/balanced model routing on GitHub Copilot by @SivaKesava1 with @Copilot in #76313
• [Safe Outputs Conformance] REQ-002: Complete spec sections for report_missing_tool and report_missing_data by @github-actions[bot] in #76418
• Provision isolated Go caches for Daily Go Test Parallelizer by @pelikhan with @Copilot in #76402
• Fix Super-Linter startup quoting and preserve failure logs by @pelikhan with @Copilot in #76432
• [dead-code] chore: remove dead functions — 4 functions removed by @github-actions[bot] in #76529
• [spec-enforcer] Enforce specifications for workqueue, actionpins, agentdrain by @github-actions[bot] in #76499
• Complete package specifications and reconcile API documentation by @gh-aw-bot with @Copilot in #76523
• [avenger] Fix stale GH_AW_ENGINE_MODEL assertion in steering issue integration test by @github-actions[bot] in #76444
• [docs] Update glossary - daily scan by @github-actions[bot] in #76474
• [ca] chore: update eligible CLI and scanner pins by @github-actions[bot] in #76415
• Document default model-routing breaking change by @gh-aw-bot with @Copilot in #76543
• [fp-enhancer] Improve pkg/actionpins immutability by @github-actions[bot] in #76470
• Add centralized /cook alias for PR Sous Chef by @pelikhan with @Copilot in #76548
• [blog] Ecosystem Spotlight – elastic/oblt-aw by @github-actions[bot] in #76549
• Clarify daily AIC restore quota blocks and recovery guidance by @pelikhan with @Copilot in #76433
• Propagate 404s for declared workflow imports by @pelikhan with @Copilot in #76430
• Harden Pi sub-agent invocation validation by @gh-aw-bot with @Copilot in #76422
• Authenticate setup-cli release downloads with GH_TOKEN by @pelikhan with @Copilot in #76428
• Provision compiler resources for the A/B testing advisor by @pelikhan with @Copilot in #76546
• Align report_incomplete across safe-output tool lists by @pelikhan with @Copilot in #76537
• Fix Package Specification Enforcer coverage upload path by @pelikhan with @Copilot in #76534
• Preserve inline agents and skills in embedded prompts by @pelikhan with @Copilot in #76429
• Migrate remaining Copilot GPT-5.6 Terra pins before 16 November 2026 retirement by @SivaKesava1 with @Copilot in #76319
• Close SPDD specification coverage gaps by @gh-aw-bot with @Copilot in #76554
• Route four Copilot-backed Codex workflows to cost model routing instead of fixed GPT pins by @SivaKesava1 with @Copilot in [https://github.com/github/gh-aw/pull...

🌟 Release Highlights

This release focuses on more reliable work-queue handling, hardened firewall/proxy egress, and sturdier session normalization across engines.

✨ What's New

• Cancel obsolete work: cancel-work --obsolete adds a read-only dry-run preview, and queue maintenance now cancels obsolete worker backlog.
• Cost-aware model routing: more workflows (including PR Sous Chef) use economy model routing instead of pinned models.
• Skip-if-decision gates added to ten more Copilot workflows and AWF engine invocations to cut unnecessary runs.
• Name-based artifact upserts in update-issue.
• Strict dry-run compilation now allows workflow steps.
• Updated MCP Gateway to v0.5.6 and firewall to v0.29.11.

🐛 Bug Fixes & Improvements

• Hardened work queue launch recovery, stalled code-scanning fixer diagnostics, and deferred run binding to trusted worker activation.
• Proxy-routed provider APIs (Gemini, mini-SWE-agent bootstrap) are kept out of agent egress; OpenAI WIF detection hardened.
• Unified session fixes for Cursor, OpenCode, Pi, Gemini, and Aider; structured tool results and workflow metadata are preserved.
• Copilot tool denials are classified and incomplete-workflow reports are deduplicated.
• Safe-output branch checks no longer require the Administration permission; terminal safe-output signals are now required.

📚 Documentation

• Verbatim Squad issue bootstrap prompt, fork PR/issue-template/runner-step guidance, and obsolete_limit debug playbook entries.

Generated by 🚀 Release · copilot · auto (Claude Sonnet 5.5) · ~16 AIC · ⊞ 13.8K

What's Changed

• Route three Codex-on-Copilot workflows with economy model routing instead of pinned GPT Sol models by @SivaKesava1 with @Copilot in #75460
• Route four Claude Code analysis workflows through Copilot model routing (economy) by @SivaKesava1 with @Copilot in #75471
• Align modelsdev README with the implemented API by @gh-aw-bot with @Copilot in #75427
• Confirm buffered PR reviews before executing dependent safe outputs by @pelikhan with @Copilot in #75387
• Use effective runner identity and owner-only configs for safeoutputs by @lpcox with @Copilot in #75443
• [WIP] Fix cleanup and isolation for self-hosted job runtimes by @lpcox with @Copilot in #75444
• Decouple rootless CLI installation from runner topology by @lpcox with @Copilot in #75445
• [ca] chore: update eligible CLI and scanner pins by @github-actions[bot] in #75324
• Support no-sudo Copilot installation in agent and detection jobs by @lpcox with @Copilot in #75446
• Route Designer Drift Audit, Daily Documentation Diagram and Chaos PR Bundle Fuzzer with economy model routing on Copilot by @SivaKesava1 with @Copilot in #75461
• Route four pinned Codex workflows with cost/economy model routing by @SivaKesava1 with @Copilot in #75470
• Fix CGO failures from missing MCP pin and installer test setup by @pelikhan in #75593
• Stabilize checksum-verified TLA+ runtime installation by @pelikhan in #75487
• Honor imported engine secret allowlists in strict mode by @pelikhan with @Copilot in #75382
• [log] Add debug logging to NVX, AWF model policy, work-queue, checkout-ref warning, and grader loader by @github-actions[bot] in #75592
• [docs] docs: reduce repetition in cross-repository issue tracking by @github-actions[bot] in #75576
• fix(linters): handle parenthesized callees in walkdirignoredeerror, uncheckedflushreturn, sprintferrorsnew, httprespbodyclose by @github-actions[bot] in #75599
• Preserve external threat-detection retry diagnostics across jobs by @pelikhan with @Copilot in #75362
• Sync SPDD spec guidance, safeguards, and evidence maps by @gh-aw-bot with @Copilot in #75453
• Validate pip and uv executables before package checks by @gh-aw-bot with @Copilot in #75365
• Preserve runtime checkout manifests for post-job hooks by @pelikhan with @Copilot in #75381
• [eslint-miner] eslint-factory: add no-path-startswith-without-separator rule by @github-actions[bot] in #75594
• [blog] Ecosystem Spotlight – sabbasi3-factory-lab/factory by @github-actions[bot] in #75448
• Align Copilot workflow tool contracts and denial guidance by @pelikhan in #75489
• [docs] Update documentation for features from 2026-11-07 by @github-actions[bot] in #75657
• [tlc-tests] Add CancelledRerunAccounting boundary tests for daily AIC carry-forward by @github-actions[bot] in #75645
• Reject run-step expressions in shell re-evaluation contexts by @gh-aw-bot with @Copilot in #75366
• [instructions] Sync instruction files with release 1.0.1 by @github-actions[bot] in #75642
• Align multi-device docs tests with responsive navigation by @gh-aw-bot with @Copilot in #75619
• [file-diet] Split run artifact processor into focused files by @gh-aw-bot with @Copilot in #75620
• [docs] Consolidate developer specifications into instructions file by @github-actions[bot] in #75682
• Preserve cross-repository checkout identity during credential setup by @pelikhan with @Copilot in #74943
• [actions] Update GitHub Actions versions - 2026-11-07 by @github-actions[bot] in #75633
• Normalize report formatting guidance in three workflows by @gh-aw-bot with @Copilot in #75685
• Clarify sprintfbool linter fixture function names by @gh-aw-bot with @Copilot in #75687
• Add regression tests for package argument injection by @gh-aw-bot with @Copilot in #75686
• Add hourly auditor for recurring agentic workflow failures by @pelikhan with @Copilot in #75695
• Enable scoped specification updates on PR branches by @pelikhan with @Copilot in #75697
• [blog] Ecosystem Spotlight – witt3rd/review-council by @github-actions[bot] in #75698
• Document generated permissions and preserve author comments by @pelikhan with @Copilot in #75615
• Fix Markdown-escaped temporary ID resolution in safe outputs by @pelikhan with @Copilot in #75688
• [otel-reference] Expand OpenTelemetry reference guide by @github-actions[bot] in #75659
• Persist Copilot session telemetry and summarize tool performance by @gh-aw-bot with @Copilot in [https...

🌟 Release Highlights

v1.2.1 focuses on workflow durability, safer updates, and broader engine and auth support.

✨ What's New

• Durable workflow continuation: artifact-backed continuation across agents (#75097).
• Specification-aware PR reviewer (#75207) and an experimental Atomic declarative engine (#75196).
• Issue artifacts and label-scoped title deduplication for create-issue safe outputs (#75323, #74941).
• GitHub App authentication for repo-memory (#74937) and deployment controls on workflow environments (#74938).
• Outcome-backed experiment metrics with adaptive maturity windows (#74992).
• Attribution footers now show the models powering auto (#74985, thanks @davidslater).

🐛 Bug Fixes & Improvements

• Workflow updates preserve source refs, frontmatter comments and formatting, and avoid needless rewrites (#74948, #74945, #74931).
• Activation lock checks pin to an immutable workflow revision; nested import resolution in lock hashes fixed (#75228, #75226).
• Security reviews now fail closed when unresolved (#75335); new warning for dynamic checkout refs exposing host setup steps to untrusted code (#74951).
• Copilot model handling: detection alias resolves on Luna-only catalogs, and Claude model IDs are normalized (#74957, #74947).
• PR branch pushes no longer require Administration permission and handle Copilot-review-only rulesets (#74946, #75230).
• Faster, more resilient work queue (#75216, #75352, #75369, #74934).
• Firewall bumped to v0.29.7 and MCP gateway to v0.5.4 (#75110).

📚 Documentation

• Koka setup and optional TLA+/Koka spec verification guidance (#75348); legacy copilot-requests flag references removed (#75116).

Generated by 🚀 Release · copilot · auto (Claude Sonnet 5.5) · ~18 AIC · ⊞ 13.7K

What's Changed

• build(deps): bump charm.land/bubbletea/v2 from 2.1.0 to 2.1.1 by @dependabot[bot] in #74482
• fix: repair CI guidance, template assertions, and stress budgets by @pelikhan in #74994
• fix: start sous-chef requests with linked Copilot mention by @pelikhan in #74995
• Resolve Copilot detection alias on Luna-only catalogs and add larger-model fallbacks by @SivaKesava1 with @Copilot in #74957
• Preserve workflow source refs so updates follow releases by @pelikhan with @Copilot in #74948
• Preserve workflow frontmatter when imports do not change by @pelikhan with @Copilot in #74931
• Normalize Claude model IDs before Copilot inference by @pelikhan with @Copilot in #74947
• Fix daily AIC accounting for reusable workflows by @pelikhan with @Copilot in #74932
• Retry transient work-queue dispatch tag reads by @pelikhan with @Copilot in #74934
• Prevent consecutive PR Sous Chef comments and preserve Copilot triggers by @pelikhan in #75111
• fix(linters): unwrap parens in timenowsub, timeafterleak, errstringmatch, sprintfint by @github-actions[bot] in #75085
• Include detection reporting permissions in conclusion App tokens by @pelikhan with @Copilot in #74949
• [docs] Update documentation for features from 2026-11-05 by @github-actions[bot] in #75156
• [ci-coach] Fix wastedassign lint failure in work TUI view by @github-actions[bot] in #75182
• [code-scanning-fix] Fix js/incomplete-multi-character-sanitization: strip HTML comments until stable by @github-actions[bot] in #75174
• docs: remove legacy copilot-requests feature flag references by @pelikhan in #75116
• [Safe Outputs Conformance] REQ-002: Count required sections across full type blocks by @github-actions[bot] in #75114
• [docs] docs: markdown spellcheck fix (American English) by @github-actions[bot] in #75074
• Warn when dynamic checkout refs expose host setup steps to untrusted code by @pelikhan with @Copilot in #74951
• Remove Administration requirement from PR branch pushes and preserve failure reporting by @pelikhan with @Copilot in #74946
• Prevent import read failures from masquerading as stale locks by @pelikhan with @Copilot in #74935
• [blog] Agent of the Day – 2026-11-05 by @github-actions[bot] in #75185
• Complete missing package API specifications by @gh-aw-bot with @Copilot in #75180
• [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #75187
• [instructions] Sync instruction files with release 1.0.1 by @github-actions[bot] in #75137
• [actions] Update GitHub Actions versions - 2026-11-05 by @github-actions[bot] in #75126
• [Safe Outputs Conformance] USE-003: Exempt staged-flag consumer from preview-format check by @github-actions[bot] in #75113
• [Safe Outputs Conformance] USE-001: Use standard ERR_CONFIG code for missing HTTP MCP API key by @github-actions[bot] in #75112
• Preserve frontmatter comments and formatting during workflow updates by @pelikhan with @Copilot in #74945
• Bump firewall to v0.29.7 and MCP gateway to v0.5.4 by @lpcox with @Copilot in #75110
• Clarify strict-mode XPIA policy for nonsecret test/build state by @pelikhan with @Copilot in #74936
• Add artifact-backed durable workflow continuation across agents by @pelikhan in #75097
• Clarify SPDD safeguards and spec-to-test mappings by @gh-aw-bot with @Copilot in #75198
• Add specification-aware pull request reviewer by @pelikhan in #75207
• Fix scheduled issue triage safe-output targeting by @pelikhan in #75229
• Fix Sous Chef head activity refresh through CLI proxy by @pelikhan in #75227
• Add label-scoped title deduplication for create-issue by @pelikhan with @Copilot in #74941
• Support deployment controls on workflow environments by @pelikhan with @Copilot in #74938
• Allow status-only reporters to read proven pre-agent custom outputs by @pelikhan with @Copilot in #74939
• fix: pin activation lock checks to immutable workflow revision by @pelikhan in #75228
• Reduce work-queue Git verification overhead by @pelikhan in #75216
• Add experimental Atomic declarative engine by @pelikhan in #75196
• [ca] chore: update Claude Code and Codex CLI pins by @github-actions[bot] in #75104
• Add Koka as an option in formal-methods instructions by @pelikhan with @Copilot in [https:...

🌟 Release Highlights

This release focuses on security hardening, stronger OpenTelemetry support, and smarter model routing across workflows.

⚠️ Breaking Changes

• pull_request_target forks now require explicit opt-in for unrestricted use (#74884). Review workflows that run on fork PRs and add the opt-in where intended.
• -l shorthand removed from project new to resolve a flag conflict (#74561).

✨ What's New

• OpenTelemetry: opt-in OTLP session logs with bounded priority compaction (#74599), dependency-free OTLP protobuf support for Azure Monitor (#74594), work queue health instrumentation (#74634), and partial-rejection detection without duplicate retries (#74767).
• Safe outputs: new safe-output identifiers with dependency failure propagation (#74376), and Azure DevOps work-item targets now accept numeric strings (#74944).
• Windows 386: the extension now publishes a Windows 386 binary (#74369).
• Model routing: dozens of workflows moved to economy/balanced routing through Copilot for lower cost.
• Evals: intent-specific evals added to 70 more agentic workflows (#74165, #74350).

🔒 Security Hardening

• Safer log handling: ZIP extraction bounded by size and entry count (#74906).
• Labels are normalized before security filtering and filters match sanitized values (#74752, #74905).
• Hardened run-step expression sanitization and raw-run Actions expression scanning (#74793, #74789).
• Codex config writes constrained to the managed temp directory (#74915).
• DIFC and CLI proxy images pinned to the gateway digest (#74950).
• Implicit network defaults restricted to documented infrastructure, and telemetry hosts removed from runtime-selected ecosystems (#74364, #74363).

🐛 Bug Fixes & Improvements

• Compilation now fails on invalid prompt expressions (#74689) and quotes prompt-step env values as YAML scalars (#74560).
• Fixed false dependency cycles for custom jobs after repo-memory push (#74366).
• Failures are reported when activation stops before the agent starts (#74365).
• Fix codemods now handle nested workflows and App-token permissions (#74368).
• Clearer CLI timeout formats, flag aliases, and authoring errors (#74881, #74367).
• Surfaced approval-gated Copilot workflows on PRs (#74914).
• Preserved compact log timestamps and OTel token accounting (#74785, #74766).

📚 Documentation

• Consolidated developer specifications and refreshed glossary, safe-output, and FAQ docs.

Generated by 🚀 Release · copilot · auto · ~18 AIC · ⊞ 13.5K

What's Changed

• Allow PR Finisher to update two shared AW files by @pelikhan with @Copilot in #74885
• Require explicit opt-in for unrestricted pull_request_target forks by @pelikhan with @Copilot in #74884
• Scan raw run content for Actions expressions by @gh-aw-bot with @Copilot in #74789
• Match label filters against sanitized values by @gh-aw-bot with @Copilot in #74905
• Bound ZIP log extraction by total size and entry count by @gh-aw-bot with @Copilot in #74906
• Add splitindexzero analyzer by @gh-aw-bot with @Copilot in #74904
• Harden run-step expression sanitization for comments and heredocs by @gh-aw-bot with @Copilot in #74793
• Use AWI maintenance token for PR Sous Chef agent assignments by @pelikhan in #74954
• build(deps-dev): apply 1ES-available Dependabot updates by @pelikhan in #74953
• build(deps): bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #74496
• build(deps): bump @astrojs/starlight from 0.42.7 to 0.42.8 in /docs by @dependabot[bot] in #74493
• build(deps): bump @astrojs/markdown-remark from 7.3.4 to 7.3.5 in /docs by @dependabot[bot] in #74492
• build(deps): bump httpx2 from 2.13.1 to 2.16.0 in /.github/workflows by @dependabot[bot] in #74490
• build(deps-dev): bump postcss from 8.5.31 to 8.5.32 in /docs by @dependabot[bot] in #74489
• build(deps): bump openai from 3.37.0 to 3.42.0 in /.github/workflows by @dependabot[bot] in #74487
• build(deps): bump pydantic-core from 2.50.1 to 2.50.2 in /.github/workflows by @dependabot[bot] in #74485
• build(deps-dev): bump minimatch from 10.2.6 to 11.0.3 in /actions/setup/js by @dependabot[bot] in #74484
• build(deps): bump pluggy from 1.6.0 to 1.7.0 in /.github/workflows by @dependabot[bot] in #74481
• build(deps): bump geo-optimizer-skill from 4.19.4 to 4.19.9 in /.github/workflows by @dependabot[bot] in #74479
• Surface approval-gated Copilot workflows on PRs by @gh-aw-bot with @Copilot in #74914
• test: make checkpoint-history abort deadline deterministic by @pelikhan in #74959
• Pin DIFC and CLI proxy images to the gateway digest by @pelikhan with @Copilot in #74950
• Accept numeric-string targets in Azure DevOps work-item safe outputs by @pelikhan with @Copilot in #74944
• Constrain Codex config writes to the managed temp directory by @gh-aw-bot with @Copilot in #74915

Full Changelog: v1.1.0...v1.2.0

🌟 Release Highlights

v1.0.1 focuses on safer pull request outputs, smoother compile and update workflows, and improved observability.

✨ What's New

• Lock-safe pull request outputs: code-producing workflows now use lock-safe PR outputs, with a suggested lock exclusion when workflow permission pushes fail (#72396, #72423).
• Actions-lock integration: compile can now optionally integrate with actions-lock (#72395).
• Guided pull_request_target fixes: guided remediation with safe role restriction (#72412).
• Interactive org and enterprise update rollouts (#72418).
• Native Actions expression grammar replaces legacy expression parsing (#72413).
• Richer unified sessions: safe-output, safe job/script, and memory-save outcomes are now recorded (#72146, #72138, #72133), plus harness retry telemetry in spans and usage artifacts (#71934).
• Copilot CLI upgraded to 1.0.103 with a reviewed checksum pin (#72099).

🐛 Bug Fixes & Improvements

• Preserve cancelled startup failure diagnostics and suppress noisy startup-failure reports for cancelled jobs (#72432, #72405).
• Fix privileged AWF environment forwarding on sudo-rs (#72409).
• Merge imported job outputs with main workflow precedence (#72407).
• Honor newer cached action pins in runtime setup (#72272).
• Trust same-repository bot PRs triggered by labels (#72074).
• Enforce ubuntu-slim timeout limits and upgrade default runners for longer jobs (#72131).
• Fill model pricing gaps and accept none/max for pinned Codex routing (#72414, #70952).
• Harden AWF release download retries and fix work-queue provisioning recovery (#72157, #72400).

📚 Documentation

• New explanation of the activation gate and CAO integration (#72379) and a leaner troubleshooting guide (#72280).

Generated by 🚀 Release · copilot · auto · ~15 AIC · ⊞ 12.9K

What's Changed

• Trust same-repository bot PRs triggered by labels by @pelikhan with @Copilot in #72074
• Upgrade Copilot CLI to 1.0.103 with reviewed checksum pin by @pelikhan with @Copilot in #72099
• [blog] Agent of the Day – 2026-10-26 by @github-actions[bot] in #72127
• Soften container pin update failure messages by @dsyme in #72093
• Use Gonum helpers for grader descriptive statistics by @pelikhan with @Copilot in #72100
• Correct map tool usage in built-in ledger smoke workflow by @pelikhan with @Copilot in #72095
• Make setup action reference tests deterministic by @pelikhan in #72155
• Enforce ubuntu-slim timeout limits and upgrade default runners for longer jobs by @pelikhan with @Copilot in #72131
• Record memory save outcomes in unified sessions and conclusion data by @pelikhan with @Copilot in #72133
• Model routing: accept none/max for pinned Codex and add routed Codex smoke by @SivaKesava1 with @Copilot in #70952
• Preserve harness retry telemetry in spans and usage artifacts by @pelikhan with @Copilot in #71934
• Record safe job and script outcomes in unified sessions by @pelikhan with @Copilot in #72146
• Record privacy-preserving safe-output outcomes in unified sessions by @pelikhan with @Copilot in #72138
• Fix Aider Go test stub package declarations by @pelikhan in #72164
• Harden AWF release download retries and diagnostics by @pelikhan in #72157
• Preview Notices by @salilsub in #72217
• Revert "Preview Notices (#72217)" by @pelikhan in #72281
• Retry transient PR Sous Chef API failures by @pelikhan in #72282
• [docs] docs: unbloat troubleshooting/common-issues.md by @github-actions[bot] in #72280
• [log] Add debug logging to unlogged branches in cli package-manifest/actionlint code by @github-actions[bot] in #72299
• [instructions] Sync instruction files with release v0.93.5 by @github-actions[bot] in #72363
• Honor newer cached action pins in runtime setup by @pelikhan with @Copilot in #72272
• docs: explain the activation gate and CAO integration by @pelikhan in #72379
• chore: update action and container pins by @pelikhan in #72377
• build(deps-dev): bump fast-uri from 3.1.8 to 3.1.9 in /actions/setup/js in the npm_and_yarn group across 1 directory by @dependabot[bot] in #71506
• build(deps): bump undici from 6.29.0 to 6.29.1 in /actions/setup/js in the npm_and_yarn group across 1 directory by @dependabot[bot] in #72384
• build(deps): bump library/alpine from 294b683 to be26560 by @dependabot[bot] in #72393
• Refactor arXiv paper memory to use a built-in ledger by @pelikhan in #72394
• build(deps): apply pending Dependabot updates by @pelikhan in #72397
• [docs] Update documentation for features from 2026-10-27 by @github-actions[bot] in #72406
• Fix work-queue provisioning transport recovery by @pelikhan in #72400
• fix: fill model pricing gaps and restore 1ES-compatible Vite by @pelikhan in #72414
• feat: add optional actions-lock integration to compile by @pelikhan in #72395
• Suppress startup-failure reports for cancelled agent jobs by @pelikhan with @Copilot in #72405
• Add guided pull_request_target fixes and safe role restriction by @pelikhan in #72412
• Merge imported job outputs with main workflow precedence by @pelikhan in #72407
• Add lock-safe pull request outputs and migrate code-producing workflows by @pelikhan in #72396
• Add interactive org and enterprise update rollouts by @pelikhan in #72418
• Replace legacy expression parsing with native Actions grammar by @pelikhan in #72413
• Suggest lock exclusion for workflow permission push failures by @pelikhan in #72423
• fix: refresh vendored Node image pin to patched build by @pelikhan in #72382
• [blog] Agent of the Day – 2026-10-27 by @github-actions[bot] in #72460
• Preserve cancelled startup failure diagnostics by @pelikhan in #72432
• [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in #72463
• Refactor issue and comment Markdown into report trees by @pelikhan in [https://github.com//pull/72415](https://github.com/github/gh-aw/p...

🔧 Maintenance Release

v1.0.0 focuses on housekeeping: documentation refreshes, GitHub Actions version updates, improved debug logging, and expanded schema coverage.

📚 Documentation

• Added an AI Transparency Notice (#71520).
• Refreshed the glossary, architecture diagram, and synced instruction files.

🔧 Under the Hood

• Added debug logging to agentdrain and actionpins for easier troubleshooting.
• Added a schema coverage demo for the work-queue-policy field.
• Updated the Safe Outputs conformance checker for recent spec changes.

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.6K

What's Changed

• [docs] Update glossary - weekly full scan by @github-actions[bot] in #72068
• [architecture] Update architecture diagram - 2026-10-26 by @github-actions[bot] in #72054
• [instructions] Sync instruction files with release v0.93.5 by @github-actions[bot] in #72051
• [spec-review] Update Safe Outputs conformance checker for recent spec changes by @github-actions[bot] in #72004
• [log] Add debug logging to remaining unlogged functions in agentdrain and actionpins by @github-actions[bot] in #71993
• [schema-coverage] feat: Add schema coverage demo for work-queue-policy field by @github-actions[bot] in #72028
• [actions] Update GitHub Actions versions - 2026-10-26 by @github-actions[bot] in #72037
• AI Transparency Notice by @salilsub in #71520

Full Changelog: v0.93.6...v1.0.0

🌟 Release Highlights

A focused release strengthening infrastructure dependencies, compile/audit reliability, and validation.

✨ What's New

• Updated runtime stack: MCP Gateway bumped to v0.5.0 and the firewall to v0.29.0.
• Better expression validation: missing step references in Actions/AW expressions are now detected at compile time.
• Resilient MCP tooling: compile and audit timeouts now return stage-aware partial results instead of failing outright.

🐛 Bug Fixes & Improvements

• Threat detection that is skipped no longer reports inherited agent tokens.
• Fixed a compile-progress file permission policy violation.
• Hardened fetch-script portability and structured lint reporting.
• Cached state is now read before workflow analysis, and title-parsing benchmarks are separated from file I/O costs.

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.6K

What's Changed

• Separate workflow title parsing from file-I/O benchmark costs by @pelikhan with @Copilot in #71927
• Read cached state before workflow analysis by @pelikhan with @Copilot in #71878
• Detect missing step references in Actions/AW expressions by @pelikhan with @Copilot in #71926
• Return stage-aware partial results for MCP compile and audit timeouts by @pelikhan with @Copilot in #71886
• Fix compile-progress file permission policy violation by @pelikhan with @Copilot in #71947
• Prevent skipped threat detection from reporting inherited agent tokens by @pelikhan with @Copilot in #71933
• Harden fetch-script portability and structured lint reporting by @pelikhan with @Copilot in #71932
• Bump MCPG to v0.5.0 and firewall to v0.29.0 by @lpcox with @Copilot in #71957
• [blog] Weekly blog post – 2026-10-26 by @github-actions[bot] in #71984
• [community] Update community contributions in README by @github-actions[bot] in #71976

Full Changelog: v0.93.5...v0.93.6

🌟 Release Highlights

This release focuses on hardening: stronger static analysis linters, safer credential handling, and more robust diagnostics.

✨ What's New

• Safe-output integration jobs can now use network credentials (#71833).
• Engine driver crashes are classified with secret-safe stderr diagnostics, making failures easier to triage (#71883).
• Pi CLI default updated to 1.4.0 (#71899).
• New and sharper custom linters: readerstringconv analyzer, parenthesized Flush discard detection, missing goroutine recovery through local closures, and closed detection gaps (#71891, #71896, #71897, #71880).
• Secret-leak analysis now tracks credential handoffs through step outputs (#71850).

🐛 Bug Fixes & Improvements

• Fixed generated conclusion references and fetch warnings; Redis image pinned (#71898).
• Guarded indexing boundaries and prevented cron-step overflow (#71889).
• Refreshed Node image pins and enforced patched runtime dependencies (#71879).
• gh-aw-detection is no longer treated as experimental (#71848).
• Internal consolidation of permission scope expansion, GitHub Contents base64 decoding, and public API GET fallback transport (#71888, #71894, #71893).

📚 Documentation

• Documentation refreshed for recent features (#71867).

Generated by 🚀 Release · copilot · auto · ~14 AIC · ⊞ 12.6K

What's Changed

• Allow network credentials in safe-output integration jobs by @pelikhan in #71833
• [docs] Update documentation for features from 2026-10-25 by @github-actions[bot] in #71867
• [jsweep] Clean write_daily_aic_usage_cache.cjs by @github-actions[bot] in #71805
• fix: stop treating gh-aw-detection as experimental by @pelikhan in #71848
• [docs] Update Astro dependencies - 2026-10-25 by @github-actions[bot] in #71796
• Detect parenthesized Flush discards in uncheckedflushreturn by @pelikhan with @Copilot in #71896
• Track credential handoffs through step outputs in secret-leak analysis by @pelikhan with @Copilot in #71850
• Update Pi CLI default to 1.4.0 by @pelikhan with @Copilot in #71899
• Detect missing recovery in goroutines launched through local closures by @pelikhan with @Copilot in #71897
• Refresh Node image pins and enforce patched runtime dependencies by @pelikhan with @Copilot in #71879
• Close custom-linter detection gaps and exempt safe os error checks by @pelikhan with @Copilot in #71880
• feat(linters): add readerstringconv analyzer by @pelikhan with @Copilot in #71891
• Centralize missing permission scope expansion by @pelikhan with @Copilot in #71888
• Unify GitHub Contents base64 decoding by @pelikhan with @Copilot in #71894
• Consolidate public GitHub API GET fallback transport by @pelikhan with @Copilot in #71893
• Fix generated conclusion references and fetch warnings; pin Redis by @pelikhan with @Copilot in #71898
• Guard indexing boundaries and prevent cron-step overflow by @pelikhan with @Copilot in #71889
• Deduplicate AW import normalization in source policy lint rules by @pelikhan with @Copilot in #71887
• [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #71916
• Classify engine driver crashes with secret-safe stderr diagnostics by @pelikhan with @Copilot in #71883

Full Changelog: v0.93.4...v0.93.5

🌟 Release Highlights

This release focuses on work-queue reliability, safer checkout credential handling, and a broad set of compiler and workflow fixes.

✨ What's New

• Work queues: pools and workers now install on first use, with clearer diagnostics for missing pools and privacy-preserving GraphQL errors.
• Safe outputs: standardized machine-readable error codes, add_comment constraints disclosed in the tool description, and visible staged-preview notices on PR and Claim guards.
• Threat detection: matching-engine detection now inherits agent API targets, and validated status-only jobs are allowed after detection.
• Environments: workflow environments now propagate to activation jobs.
• Faster update: fewer network fetches, plus verbose request timings.

🐛 Bug Fixes & Improvements

• Release checkouts no longer persist credentials; compiler-generated PR checkouts are narrowly exempted from artipacked warnings.
• Compiler-generated constants are emitted as quoted strings, and schema-supported frontmatter shapes are accepted.
• Copilot BYOK HTTP API targets are preserved.
• Unmatched checkout.fetch refs no longer block other fetches.
• Fixed prompt tool scanner false positives, mapdeletecheck with asymmetric parentheses, and empty repo-memory wiki note substitution.
• Fixed missing embedded session-parser and grader runtime dependencies.
• Workflow health checks now have a time budget and debug logging; log storage admission and observability audits are bounded.
• Behavior-defined engine session capture is now protected.

📚 Documentation

• MemoryOps pattern page streamlined and docs updated for recent features.

Generated by 🚀 Release · copilot · auto · ~14 AIC · ⊞ 12.6K

What's Changed

• [log] Add debug logging to repository package manifest import/resource/skill paths by @github-actions[bot] in #71541
• Report missing work queue pools with actionable recovery diagnostics by @pelikhan with @Copilot in #71495
• Prevent arXiv researcher Codex startup failure by @pelikhan with @Copilot in #71608
• [docs] Update documentation for features from 2026-10-24 by @github-actions[bot] in #71631
• Keep TYPE-016 conformance check compatible with added parameters by @pelikhan with @Copilot in #71615
• Require item-level verification in daily queue reports by @pelikhan with @Copilot in #71607
• Fix Update Astro dependency downloads and upgrade command by @pelikhan with @Copilot in #71619
• Fix mapdeletecheck detection with asymmetric parentheses by @pelikhan with @Copilot in #71618
• Strengthen ledger formal-spec coverage by @pelikhan with @Copilot in #71625
• Replace unavailable Copilot model in video analyzer by @pelikhan with @Copilot in #71620
• Disclose add_comment constraints in tool description by @pelikhan with @Copilot in #71614
• Add visible staged-preview notices to PR and Claim guards by @pelikhan with @Copilot in #71612
• [instructions] Sync instruction files with release v0.93.2 by @github-actions[bot] in #71598
• [dead-code] chore: remove dead functions — 1 functions removed by @github-actions[bot] in #71660
• [Safe Outputs] Standardize machine-readable error codes by @pelikhan with @Copilot in #71613
• Inherit agent API targets in matching-engine threat detection by @pelikhan with @Copilot in #71624
• Propagate workflow environments to activation jobs by @pelikhan with @Copilot in #71617
• Add detail-level A/B campaign to commit-changes-analyzer by @pelikhan with @Copilot in #71666
• Update CLI and scanner image versions by @pelikhan with @Copilot in #71616
• Approve libatomic container runtime license exception by @pelikhan in #71678
• fix: refresh verified TLA runtime checksum by @pelikhan in #71679
• Preflight agent assignment credentials before processing issues by @pelikhan with @Copilot in #71611
• Skip unmatched checkout.fetch refs without blocking other fetches by @pelikhan with @Copilot in #71622
• Fix external workflow sources for documentation jobs by @pelikhan in #71677
• Install configured work queue pools on first use by @pelikhan in #71675
• Fix missing work-queue diagnostic guidance by @pelikhan with @Copilot in #71665
• Fix logs storage admission and bound observability audits by @pelikhan in #71686
• fix(workflow): preserve Copilot BYOK HTTP API targets by @pelikhan in #71680
• Fix remaining CI diagnostic guidance gaps by @pelikhan in #71688
• Fix missing grader runtime error codes dependency by @pelikhan in #71689
• Improve privacy-preserving work queue GraphQL diagnostics by @pelikhan in #71676
• Allow validated status-only jobs after detection by @pelikhan with @Copilot in #71623
• Fix compiler integration fixtures for action pin linting by @pelikhan in #71692
• Fix Pi evals reading stale workflow prompts by @pelikhan with @Copilot in #71664
• Reduce update network fetches and add verbose request timings by @dsyme in #71687
• Restore safe-output handler and tool-description conformance by @pelikhan with @Copilot in #71609
• Fix remote repository API requests for experiments by @pelikhan in #71681
• fix: substitute empty repo-memory wiki note as a literal by @pelikhan in #71782
• Gate generated admission outputs on admission opt-in by @pelikhan in #71784
• Add a time budget and debug logging to workflow health checks by @pelikhan in #71786
• Fix first-use work-queue pool and worker registration by @pelikhan in #71787
• [docs] docs: unbloat MemoryOps pattern page by @github-actions[bot] in #71779
• Narrowly exempt compiler-generated PR checkouts from artipacked warnings by @pelikhan in #71783
• fix: avoid persisting release checkout credentials by @pelikhan in #71802
• Protect behavior-defined engine session capture by @pelikhan with @Copilot in #69586
• fix(workflow): gate conclusion stale-check output references by @pelikhan in #71808
• fix: emit compiler-generated constants as quoted strings by @pelikhan in #71803
• fix(workflow): avoid prompt tool scanner false positives by @pelikhan in #71813
• fix(workflow): accept schema-supported frontmatter shapes by @pelikhan in #71809
• Recognize verified compiler-owned checkout cleanup in artipacked lint by @pelikhan in #71806
• Fix missing embedded session-parser dependency by @pelikhan in #71822

Full Changelog: v0.93.3...v0.93.4

🌟 Release Highlights

This release tightens workflow quality checks and hardens threat detection.

✨ What's New

• Workflow linting on by default – gh aw compile now lints workflows during compilation, surfacing problems earlier (#71349).
• Work-queue smoke workflows – New daily smoke workflows with Bash 3-compatible validation improve confidence in work-queue behavior (#71363).

🐛 Bug Fixes & Improvements

• Work-queue Claim settlement now verifies discussion cleanup effects (#71361).
• Threat detection is pinned to v0.5.3 for reproducible, safer runs (#71501).

📚 Documentation

• Clarified directory restrictions for reusable agentic workflows (#71451).

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.6K

What's Changed

• Add daily work queue smoke workflows and Bash 3-compatible validation by @pelikhan in #71363
• [instructions] Sync instruction files with release v0.93.2 by @github-actions[bot] in #71403
• [docs] Update documentation for features from 2026-10-23 by @github-actions[bot] in #71415
• feat: lint workflows during compilation by default by @pelikhan in #71349
• fix(work-queue): verify discussion cleanup effects during Claim settlement by @pelikhan in #71361
• docs: clarify directory restrictions for reusable agentic workflows by @pelikhan with @Copilot in #71451
• [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #71454
• [blog] Agent of the Day – 2026-10-23 by @github-actions[bot] in #71455
• Pin threat detection to v0.5.3 by @davidslater with @Copilot in #71501

Full Changelog: v0.93.2...v0.93.3