From d330bd755c701fabc1d59d89db9277363718691a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 16 Oct 2026 00:10:51 +0000 Subject: [PATCH 1/7] Initial plan From ee8d4f92ed8d6480e9c138f5ae54b70b53023944 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 16 Oct 2026 00:22:08 +0000 Subject: [PATCH 2/7] Fix Copilot runtime compatibility contracts Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --- .changeset/patch-copilot-session-id-compatibility.md | 5 +++++ pkg/constants/constants.go | 3 +++ pkg/constants/version_constants.go | 4 ++++ pkg/workflow/awf_command_builder.go | 3 +++ pkg/workflow/awf_config_test.go | 2 +- pkg/workflow/cloud_hypervisor_test.go | 3 ++- pkg/workflow/copilot_engine_installation.go | 2 +- pkg/workflow/copilot_installer.go | 2 +- pkg/workflow/copilot_installer_test.go | 3 +++ pkg/workflow/sandbox.go | 1 + pkg/workflow/sandbox_test.go | 2 +- 11 files changed, 25 insertions(+), 5 deletions(-) create mode 100644 .changeset/patch-copilot-session-id-compatibility.md diff --git a/.changeset/patch-copilot-session-id-compatibility.md b/.changeset/patch-copilot-session-id-compatibility.md new file mode 100644 index 00000000000..cbca53c6016 --- /dev/null +++ b/.changeset/patch-copilot-session-id-compatibility.md @@ -0,0 +1,5 @@ +--- +"gh-aw": patch +--- + +Require a Copilot CLI version that supports harness session selection and preserve Copilot model metadata writes under Cloud Hypervisor. diff --git a/pkg/constants/constants.go b/pkg/constants/constants.go index ac04bab1038..bfc1215b40a 100644 --- a/pkg/constants/constants.go +++ b/pkg/constants/constants.go @@ -578,6 +578,9 @@ const TmpGhAwDirSlash = TmpGhAwDir + "/" // TmpGhAwAgentDir is the agent working directory in the /tmp/gh-aw tree. const TmpGhAwAgentDir = TmpGhAwDir + "/agent/" +// AwInfoPath is the runtime metadata file updated by engine harnesses. +const AwInfoPath = TmpGhAwDir + "/aw_info.json" + // TmpGhAwAssetsDir is the directory the upload_assets job downloads the // safe-outputs assets artifact into. It is the single source of truth shared by // the download step (path:) and the upload_assets.cjs consumer script, so the diff --git a/pkg/constants/version_constants.go b/pkg/constants/version_constants.go index d429375c6de..45de38631c9 100644 --- a/pkg/constants/version_constants.go +++ b/pkg/constants/version_constants.go @@ -41,6 +41,10 @@ const DefaultClaudeCodeVersion Version = "2.1.296" // - /models does not silently fail on PATs (check that model listing works with PAT auth) const DefaultCopilotVersion Version = "1.0.96" +// CopilotSessionIDMinVersion is the minimum Copilot CLI version that supports +// the exact session selector injected by the model-verification harness. +const CopilotSessionIDMinVersion Version = "1.0.35" + // DefaultCopilotSDKVersion is the default version of the @github/copilot-sdk package. const DefaultCopilotSDKVersion Version = "1.0.16" diff --git a/pkg/workflow/awf_command_builder.go b/pkg/workflow/awf_command_builder.go index e1fd62d74a9..8d47d797165 100644 --- a/pkg/workflow/awf_command_builder.go +++ b/pkg/workflow/awf_command_builder.go @@ -317,6 +317,9 @@ func cloudHypervisorAllowWriteHostMkdirTarget(guestPath string) (hostPath string if guestPath == cloudHypervisorWorkspaceWritePath { return "", false } + if guestPath == constants.AwInfoPath { + return "", false + } if rel, ok := strings.CutPrefix(guestPath, cloudHypervisorWorkspaceWritePath+"/"); ok { return "${GITHUB_WORKSPACE}/" + rel, true } diff --git a/pkg/workflow/awf_config_test.go b/pkg/workflow/awf_config_test.go index 19c219c318c..daba7829f53 100644 --- a/pkg/workflow/awf_config_test.go +++ b/pkg/workflow/awf_config_test.go @@ -405,7 +405,7 @@ func TestBuildAWFConfigJSON(t *testing.T) { config.WorkflowData.NetworkPermissions.Firewall.Version = string(constants.AWFCloudHypervisorFilesystemAllowWriteMinVersion) jsonStr, err = BuildAWFConfigJSON(config) require.NoError(t, err) - assert.Contains(t, jsonStr, `"filesystem":{"allowWrite":["/workspace","/workspace/.awf-home","/tmp/gh-aw/agent"]}`) + assert.Contains(t, jsonStr, `"filesystem":{"allowWrite":["/workspace","/workspace/.awf-home","/tmp/gh-aw/agent","/tmp/gh-aw/aw_info.json"]}`) require.NoError(t, validateAWFConfigJSON(jsonStr)) }) diff --git a/pkg/workflow/cloud_hypervisor_test.go b/pkg/workflow/cloud_hypervisor_test.go index 584da305ae3..5ab211dd24a 100644 --- a/pkg/workflow/cloud_hypervisor_test.go +++ b/pkg/workflow/cloud_hypervisor_test.go @@ -160,6 +160,7 @@ func TestCloudHypervisorAWFCommandEmitsAwfHomeMkdirBeforeInvocation(t *testing.T // /workspace already exists (checked out by actions/checkout) and must not be mkdir'd. assert.NotContains(t, command, `mkdir -p "${GITHUB_WORKSPACE}"`+"\n") assert.Contains(t, command, `mkdir -p "${GITHUB_WORKSPACE}/.awf-home" "/tmp/gh-aw/agent"`) + assert.NotContains(t, command, constants.AwInfoPath) assert.Contains(t, command, `if GH_AW_GIT_EXCLUDE="$(git -C "${GITHUB_WORKSPACE}" rev-parse --path-format=absolute --git-path info/exclude 2>/dev/null)"; then`) assert.Contains(t, command, `if ! grep -qxF -- '/.awf-home/' "$GH_AW_GIT_EXCLUDE"`) @@ -356,7 +357,7 @@ func TestCloudHypervisorAWFConfigJSON(t *testing.T) { assert.NotContains(t, jsonStr, "awmg-cli-proxy") assert.Contains(t, jsonStr, `"agentTimeout":60`) assert.Contains(t, jsonStr, `"cloudHypervisor":{"previewEnabled":true,"mountPolicy":"workspace-and-tool-cache","vcpuCount":2,"memoryMib":4096}`) - assert.Contains(t, jsonStr, `"allowWrite":["/tmp/gh-aw/agent","/tmp/gh-aw/sandbox/agent/logs","/workspace","/workspace/.awf-home"]`) + assert.Contains(t, jsonStr, `"allowWrite":["/tmp/gh-aw/agent","/tmp/gh-aw/sandbox/agent/logs","/tmp/gh-aw/aw_info.json","/workspace","/workspace/.awf-home"]`) } func TestCloudHypervisorValidationArcDindIncompatible(t *testing.T) { diff --git a/pkg/workflow/copilot_engine_installation.go b/pkg/workflow/copilot_engine_installation.go index 80f671a2167..510a06aa012 100644 --- a/pkg/workflow/copilot_engine_installation.go +++ b/pkg/workflow/copilot_engine_installation.go @@ -148,7 +148,7 @@ func (e *CopilotEngine) GetInstallationSteps(workflowData *WorkflowData) []GitHu // the rootless location to ${RUNNER_TEMP}/gh-aw/bin/copilot where AWF expects it. rootless := isArcDindTopology(workflowData) compiledVersion := workflowData.CompiledVersion - npmSteps := generateCopilotInstallerSteps(copilotVersion, "Install GitHub Copilot CLI", rootless, compiledVersion, "", getNVXGuestLibc(workflowData)) + npmSteps := generateCopilotInstallerSteps(copilotVersion, "Install GitHub Copilot CLI", rootless, compiledVersion, string(constants.CopilotSessionIDMinVersion), getNVXGuestLibc(workflowData)) if len(inlineDriverWriteStep) > 0 { npmSteps = append(npmSteps, inlineDriverWriteStep) } diff --git a/pkg/workflow/copilot_installer.go b/pkg/workflow/copilot_installer.go index c54211ed235..d970695d445 100644 --- a/pkg/workflow/copilot_installer.go +++ b/pkg/workflow/copilot_installer.go @@ -59,7 +59,7 @@ func generateCopilotInstallerSteps(version, stepName string, rootless bool, comp " env:", " GH_HOST: github.com", } - stepLines = appendCopilotInstallerVersionEnv(stepLines, "", "", guestLibc) + stepLines = appendCopilotInstallerVersionEnv(stepLines, "", copilotMinVersion, guestLibc) return []GitHubActionStep{GitHubActionStep(stepLines)} } diff --git a/pkg/workflow/copilot_installer_test.go b/pkg/workflow/copilot_installer_test.go index 9b6471a4ced..9440a6dea79 100644 --- a/pkg/workflow/copilot_installer_test.go +++ b/pkg/workflow/copilot_installer_test.go @@ -47,6 +47,9 @@ func TestCopilotEngineWithVersion(t *testing.T) { if !strings.Contains(installStep, `install_copilot_cli.sh" `+customVersion) { t.Errorf("Expected user-specified version %q in install step, got:\n%s", customVersion, installStep) } + if !strings.Contains(installStep, "GH_AW_COPILOT_MIN_VERSION: "+string(constants.CopilotSessionIDMinVersion)) { + t.Errorf("Expected Copilot CLI feature minimum in install step, got:\n%s", installStep) + } if strings.Contains(installStep, `install_copilot_cli.sh" `+string(constants.DefaultCopilotVersion)) { t.Errorf("Expected user-specified version, not default version, in install step:\n%s", installStep) } diff --git a/pkg/workflow/sandbox.go b/pkg/workflow/sandbox.go index d74bec655ca..407fd521817 100644 --- a/pkg/workflow/sandbox.go +++ b/pkg/workflow/sandbox.go @@ -338,6 +338,7 @@ func ensureDefaultAgentWritePath(sandboxConfig *SandboxConfig, engineConfig *Eng addAllowWritePathIfMissing(sandboxConfig.Agent.Config.Filesystem, defaultAgentWorkspaceWritePath) if engineConfig != nil && engineConfig.ID == string(constants.CopilotEngine) { addAllowWritePathIfMissing(sandboxConfig.Agent.Config.Filesystem, defaultAgentLogsWritePath) + addAllowWritePathIfMissing(sandboxConfig.Agent.Config.Filesystem, constants.AwInfoPath) } if engineConfig != nil && engineConfig.ID == string(constants.CodexEngine) { // Codex writes runtime state under CODEX_HOME. diff --git a/pkg/workflow/sandbox_test.go b/pkg/workflow/sandbox_test.go index 7be67a0dd77..d1893173d13 100644 --- a/pkg/workflow/sandbox_test.go +++ b/pkg/workflow/sandbox_test.go @@ -271,7 +271,7 @@ func TestApplySandboxDefaults(t *testing.T) { }, engine: &EngineConfig{ID: "copilot"}, expectDefaultWritePath: true, - expectedAllowWrite: []string{defaultAgentWorkspaceWritePath, defaultAgentLogsWritePath, cloudHypervisorWorkspaceWritePath, cloudHypervisorAwfHomeWritePath}, + expectedAllowWrite: []string{defaultAgentWorkspaceWritePath, defaultAgentLogsWritePath, constants.AwInfoPath, cloudHypervisorWorkspaceWritePath, cloudHypervisorAwfHomeWritePath}, expected: &SandboxConfig{ Agent: &AgentSandboxConfig{ Type: SandboxTypeAWF, From 9fe465769e836b8811a2570c7faf798eaebc7598 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 16 Oct 2026 00:28:54 +0000 Subject: [PATCH 3/7] Update Copilot compatibility regressions Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --- pkg/workflow/awf_config_test.go | 2 +- pkg/workflow/copilot_installer_test.go | 12 ++++++------ .../TestWasmGolden_AllEngines/copilot.golden | 1 + .../basic-copilot.golden | 1 + .../playwright-cli-mode.golden | 1 + .../smoke-copilot.golden | 1 + .../with-imports.golden | 1 + 7 files changed, 12 insertions(+), 7 deletions(-) diff --git a/pkg/workflow/awf_config_test.go b/pkg/workflow/awf_config_test.go index daba7829f53..19c219c318c 100644 --- a/pkg/workflow/awf_config_test.go +++ b/pkg/workflow/awf_config_test.go @@ -405,7 +405,7 @@ func TestBuildAWFConfigJSON(t *testing.T) { config.WorkflowData.NetworkPermissions.Firewall.Version = string(constants.AWFCloudHypervisorFilesystemAllowWriteMinVersion) jsonStr, err = BuildAWFConfigJSON(config) require.NoError(t, err) - assert.Contains(t, jsonStr, `"filesystem":{"allowWrite":["/workspace","/workspace/.awf-home","/tmp/gh-aw/agent","/tmp/gh-aw/aw_info.json"]}`) + assert.Contains(t, jsonStr, `"filesystem":{"allowWrite":["/workspace","/workspace/.awf-home","/tmp/gh-aw/agent"]}`) require.NoError(t, validateAWFConfigJSON(jsonStr)) }) diff --git a/pkg/workflow/copilot_installer_test.go b/pkg/workflow/copilot_installer_test.go index 9440a6dea79..1ab57b5b835 100644 --- a/pkg/workflow/copilot_installer_test.go +++ b/pkg/workflow/copilot_installer_test.go @@ -113,7 +113,7 @@ func TestCopilotEngineWithoutVersion(t *testing.T) { } } -func TestCopilotEngineWithWebSearchWithoutPinnedVersionOmitsMinVersion(t *testing.T) { +func TestCopilotEngineWithWebSearchWithoutPinnedVersionIncludesMinVersion(t *testing.T) { engine := NewCopilotEngine() workflowData := &WorkflowData{ Name: "test-workflow", @@ -138,15 +138,15 @@ func TestCopilotEngineWithWebSearchWithoutPinnedVersionOmitsMinVersion(t *testin if installStep == "" { t.Fatal("Could not find install step with install_copilot_cli.sh") } - if strings.Contains(installStep, "GH_AW_COPILOT_MIN_VERSION:") { - t.Errorf("Unavailable web-search must not impose a minimum CLI version, got:\n%s", installStep) + if !strings.Contains(installStep, "GH_AW_COPILOT_MIN_VERSION: "+string(constants.CopilotSessionIDMinVersion)) { + t.Errorf("Copilot model verification requires the session selector minimum, got:\n%s", installStep) } if strings.Contains(installStep, "install_copilot_cli.sh\" "+string(constants.DefaultCopilotVersion)) { t.Errorf("Install step must not embed an explicit version arg when engine.version is unset; got:\n%s", installStep) } } -func TestCopilotEngineWithWebSearchExpressionVersionOmitsMinVersion(t *testing.T) { +func TestCopilotEngineWithWebSearchExpressionVersionIncludesMinVersion(t *testing.T) { engine := NewCopilotEngine() expressionVersion := "${{ inputs.engine-version }}" workflowData := &WorkflowData{ @@ -177,8 +177,8 @@ func TestCopilotEngineWithWebSearchExpressionVersionOmitsMinVersion(t *testing.T if !strings.Contains(installStep, "ENGINE_VERSION: "+expressionVersion) { t.Errorf("Expected ENGINE_VERSION env var with expression, got:\n%s", installStep) } - if strings.Contains(installStep, "GH_AW_COPILOT_MIN_VERSION:") { - t.Errorf("Unavailable web-search must not impose a minimum CLI version, got:\n%s", installStep) + if !strings.Contains(installStep, "GH_AW_COPILOT_MIN_VERSION: "+string(constants.CopilotSessionIDMinVersion)) { + t.Errorf("Copilot model verification requires the session selector minimum, got:\n%s", installStep) } if !strings.Contains(installStep, `"${ENGINE_VERSION}"`) { t.Errorf(`Expected install step to pass resolved ENGINE_VERSION to script, got:\n%s`, installStep) diff --git a/pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden b/pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden index b2716346cf6..b0c3dd17539 100644 --- a/pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden +++ b/pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden @@ -442,6 +442,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Determine automatic lockdown mode for GitHub MCP Server diff --git a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden index 4e007d6e7e1..bad20b9348a 100644 --- a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden +++ b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden @@ -442,6 +442,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Determine automatic lockdown mode for GitHub MCP Server diff --git a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden index 64b5426fd82..0eb442e9fc5 100644 --- a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden +++ b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden @@ -442,6 +442,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Install Playwright CLI diff --git a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden index 73f630168d2..2970a7f3061 100644 --- a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden +++ b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden @@ -522,6 +522,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Install Playwright CLI diff --git a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden index e015a20a365..7baa9a139b3 100644 --- a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden +++ b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden @@ -443,6 +443,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Determine automatic lockdown mode for GitHub MCP Server From c24434101a56cdb2ec2a2073925cd91ea1121c08 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 16 Oct 2026 01:32:01 +0000 Subject: [PATCH 4/7] Enforce Copilot minimum for latest cache lookup Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --- actions/setup/sh/install_copilot_cli.sh | 1 + pkg/cli/install_copilot_cli_test.go | 59 +++++++++++++++++++++++++ pkg/workflow/cloud_hypervisor_test.go | 8 +++- 3 files changed, 66 insertions(+), 2 deletions(-) diff --git a/actions/setup/sh/install_copilot_cli.sh b/actions/setup/sh/install_copilot_cli.sh index 1a88ed5ea50..d885b6738af 100755 --- a/actions/setup/sh/install_copilot_cli.sh +++ b/actions/setup/sh/install_copilot_cli.sh @@ -690,6 +690,7 @@ if [ -z "$VERSION" ]; then REQUESTED_VERSION="$DEFAULT_COPILOT_VERSION" fi else + COMPAT_MATCHED_MIN_AGENT="$(select_effective_min_version "${COMPAT_MATCHED_MIN_AGENT}" "${COPILOT_MIN_VERSION_OVERRIDE}")" if ! validate_explicit_version_minimum "$VERSION" "$COPILOT_MIN_VERSION_OVERRIDE"; then exit 1 fi diff --git a/pkg/cli/install_copilot_cli_test.go b/pkg/cli/install_copilot_cli_test.go index a54664b3040..a35c07b67a8 100644 --- a/pkg/cli/install_copilot_cli_test.go +++ b/pkg/cli/install_copilot_cli_test.go @@ -458,6 +458,65 @@ exit 97 assert.Contains(t, string(wrapperOutput), "copilot "+cachedMinVersion) } +func TestInstallCopilotCLIScriptLatestAppliesCopilotMinVersionToToolcache(t *testing.T) { + t.Parallel() + wd, err := os.Getwd() + require.NoError(t, err) + installScript := filepath.Join(wd, "..", "..", "actions", "setup", "sh", "install_copilot_cli.sh") + + for _, hasCompatibleVersion := range []bool{false, true} { + t.Run(fmt.Sprintf("compatible_cached=%t", hasCompatibleVersion), func(t *testing.T) { + t.Parallel() + tempDir := t.TempDir() + toolcache := filepath.Join(tempDir, "toolcache") + versions := []string{"1.0.34"} + if hasCompatibleVersion { + versions = append(versions, "1.0.35") + } + for _, version := range versions { + binDir := filepath.Join(toolcache, "copilot-cli", version, "x64", "bin") + require.NoError(t, os.MkdirAll(binDir, 0o755)) + require.NoError(t, os.WriteFile(filepath.Join(binDir, "copilot"), []byte("#!/usr/bin/env bash\necho 'copilot "+version+"'\n"), 0o755)) + } + fakeBinDir := filepath.Join(tempDir, "fake-bin") + require.NoError(t, os.MkdirAll(fakeBinDir, 0o755)) + require.NoError(t, os.WriteFile(filepath.Join(fakeBinDir, "sudo"), []byte(`#!/usr/bin/env bash +if [ "${1:-}" = "chown" ]; then exit 0; fi +exec "$@" +`), 0o755)) + curlLog := filepath.Join(tempDir, "curl.log") + require.NoError(t, os.WriteFile(filepath.Join(fakeBinDir, "curl"), []byte("#!/usr/bin/env bash\necho \"$*\" >> \""+curlLog+"\"\nexit 97\n"), 0o755)) + + installDir := filepath.Join(tempDir, "install-bin") + require.NoError(t, os.MkdirAll(installDir, 0o755)) + cmd := exec.Command("bash", installScript, "latest") + cmd.Env = append(os.Environ(), + "RUNNER_TOOL_CACHE="+toolcache, + "GH_AW_COPILOT_MIN_VERSION=1.0.35", + "COPILOT_INSTALL_DIR="+installDir, + "GITHUB_PATH="+filepath.Join(tempDir, "github-path"), + "PATH="+fakeBinDir+":"+os.Getenv("PATH"), + ) + output, err := cmd.CombinedOutput() + assert.Contains(t, string(output), "Skipping candidate (below compat minimum: 1.0.34 < 1.0.35)") + if hasCompatibleVersion { + require.NoError(t, err, "%s", output) + wrapperOutput, err := exec.Command(filepath.Join(installDir, "copilot"), "--version").CombinedOutput() + require.NoError(t, err, "%s", wrapperOutput) + assert.Contains(t, string(wrapperOutput), "copilot 1.0.35") + assert.NoFileExists(t, curlLog) + } else { + require.Error(t, err, "the mocked download must fail: %s", output) + assert.NotContains(t, string(output), "Using cached GitHub Copilot CLI") + curlOutput, err := os.ReadFile(curlLog) + require.NoError(t, err) + assert.Contains(t, string(curlOutput), "/releases/latest/download/") + assert.NoFileExists(t, filepath.Join(installDir, "copilot")) + } + }) + } +} + func TestInstallCopilotCLIScriptRejectsExplicitVersionBelowCopilotMinVersion(t *testing.T) { t.Parallel() diff --git a/pkg/workflow/cloud_hypervisor_test.go b/pkg/workflow/cloud_hypervisor_test.go index 5ab211dd24a..7b6b694bc64 100644 --- a/pkg/workflow/cloud_hypervisor_test.go +++ b/pkg/workflow/cloud_hypervisor_test.go @@ -149,7 +149,7 @@ func TestCloudHypervisorAWFCommandEmitsAwfHomeMkdirBeforeInvocation(t *testing.T Runtime: AgentRuntimeCloudHypervisor, Config: &SandboxRuntimeConfig{ Filesystem: &SRTFilesystemConfig{ - AllowWrite: []string{"/workspace", "/workspace/.awf-home", "/tmp/gh-aw/agent"}, + AllowWrite: []string{"/workspace", "/workspace/.awf-home", "/tmp/gh-aw/agent", constants.AwInfoPath}, }, }, }}, @@ -160,7 +160,11 @@ func TestCloudHypervisorAWFCommandEmitsAwfHomeMkdirBeforeInvocation(t *testing.T // /workspace already exists (checked out by actions/checkout) and must not be mkdir'd. assert.NotContains(t, command, `mkdir -p "${GITHUB_WORKSPACE}"`+"\n") assert.Contains(t, command, `mkdir -p "${GITHUB_WORKSPACE}/.awf-home" "/tmp/gh-aw/agent"`) - assert.NotContains(t, command, constants.AwInfoPath) + assert.NotContains(t, buildCloudHypervisorFilesystemMkdirScript(config.WorkflowData), constants.AwInfoPath) + configJSON, err := BuildAWFConfigJSON(config) + require.NoError(t, err) + assert.Contains(t, configJSON, `"filesystem":{"allowWrite":["/workspace","/workspace/.awf-home","/tmp/gh-aw/agent","`+constants.AwInfoPath+`"]}`) + assert.Contains(t, command, constants.AwInfoPath) assert.Contains(t, command, `if GH_AW_GIT_EXCLUDE="$(git -C "${GITHUB_WORKSPACE}" rev-parse --path-format=absolute --git-path info/exclude 2>/dev/null)"; then`) assert.Contains(t, command, `if ! grep -qxF -- '/.awf-home/' "$GH_AW_GIT_EXCLUDE"`) From 26a6d4ffc38dd773e163df4309e4a0efa7719e2a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 16 Oct 2026 01:33:10 +0000 Subject: [PATCH 5/7] Apply remaining changes Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --- .github/workflows/agent-performance-analyzer.lock.yml | 3 +++ .github/workflows/agent-persona-explorer.lock.yml | 1 + .github/workflows/agentic-token-audit.lock.yml | 3 +++ .github/workflows/agentic-token-optimizer.lock.yml | 2 ++ .github/workflows/agentic-token-trend-audit.lock.yml | 1 + .github/workflows/api-consumption-report.lock.yml | 1 + .github/workflows/archie.lock.yml | 3 +++ .github/workflows/architecture-guardian.lock.yml | 3 +++ .github/workflows/audit-workflows.lock.yml | 1 + .github/workflows/avenger.lock.yml | 3 +++ .github/workflows/aw-issue-clustering.lock.yml | 2 ++ .github/workflows/breaking-change-checker.lock.yml | 3 +++ .github/workflows/changeset.lock.yml | 1 + .github/workflows/ci-coach.lock.yml | 3 +++ .github/workflows/cli-consistency-checker.lock.yml | 3 +++ .github/workflows/cli-version-checker.lock.yml | 1 + .github/workflows/cloclo.lock.yml | 1 + .github/workflows/code-scanning-fixer.lock.yml | 3 +++ .github/workflows/code-simplifier.lock.yml | 3 +++ .github/workflows/commit-changes-analyzer.lock.yml | 1 + .github/workflows/constraint-solving-potd.lock.yml | 3 +++ .github/workflows/contribution-check.lock.yml | 3 +++ .github/workflows/copilot-centralization-optimizer.lock.yml | 1 + .github/workflows/copilot-cli-deep-research.lock.yml | 3 +++ .github/workflows/copilot-opt.lock.yml | 3 +++ .github/workflows/copilot-pr-merged-report.lock.yml | 3 +++ .github/workflows/copilot-pr-nlp-analysis.lock.yml | 3 +++ .github/workflows/copilot-pr-prompt-analysis.lock.yml | 3 +++ .github/workflows/craft.lock.yml | 3 +++ .github/workflows/daily-action-setup-security-audit.lock.yml | 3 +++ .../workflows/daily-agent-of-the-day-blog-writer.lock.yml | 3 +++ .github/workflows/daily-ambient-context-optimizer.lock.yml | 3 +++ .github/workflows/daily-assign-issue-to-user.lock.yml | 3 +++ .github/workflows/daily-awf-spec-compiler-surfacing.lock.yml | 1 + .github/workflows/daily-byok-ollama-test.lock.yml | 2 ++ .github/workflows/daily-cli-performance.lock.yml | 1 + .github/workflows/daily-code-debt-aider.lock.yml | 1 + .github/workflows/daily-code-metrics.lock.yml | 3 +++ .github/workflows/daily-community-attribution.lock.yml | 3 +++ .github/workflows/daily-compiler-quality.lock.yml | 3 +++ .../workflows/daily-compiler-threat-spec-optimizer.lock.yml | 3 +++ .github/workflows/daily-credit-limit-test.lock.yml | 1 + .github/workflows/daily-doc-updater.lock.yml | 1 + .github/workflows/daily-ecosystem-explorer.lock.yml | 3 +++ .github/workflows/daily-evals-report.lock.yml | 1 + .github/workflows/daily-experiment-report.lock.yml | 3 +++ .github/workflows/daily-file-diet.lock.yml | 3 +++ .github/workflows/daily-firewall-report.lock.yml | 3 +++ .github/workflows/daily-formal-spec-verifier.lock.yml | 2 ++ .github/workflows/daily-function-namer.lock.yml | 1 + .github/workflows/daily-geo-optimizer.lock.yml | 3 +++ .github/workflows/daily-github-docs-seo-optimizer.lock.yml | 3 +++ .github/workflows/daily-go-test-parallelizer.lock.yml | 1 + .github/workflows/daily-go-test-stubs-aider.lock.yml | 1 + .github/workflows/daily-graft-intelligence.lock.yml | 3 +++ .github/workflows/daily-hippo-learn.lock.yml | 1 + .github/workflows/daily-issues-report.lock.yml | 3 +++ .github/workflows/daily-malicious-code-scan.lock.yml | 2 ++ .github/workflows/daily-mcp-concurrency-analysis.lock.yml | 5 ++++- .github/workflows/daily-model-inventory.lock.yml | 3 +++ .github/workflows/daily-model-resolution.lock.yml | 2 ++ .github/workflows/daily-multi-device-docs-tester.lock.yml | 1 + .github/workflows/daily-news.lock.yml | 1 + .github/workflows/daily-performance-summary.lock.yml | 1 + .github/workflows/daily-pr-review-cursor.lock.yml | 2 ++ .github/workflows/daily-regression-audit-kiro.lock.yml | 2 ++ .github/workflows/daily-regulatory.lock.yml | 1 + .github/workflows/daily-reliability-review.lock.yml | 3 +++ .github/workflows/daily-repo-chronicle.lock.yml | 1 + .github/workflows/daily-report-dispatcher.lock.yml | 2 ++ .github/workflows/daily-safe-output-integrator.lock.yml | 3 +++ .github/workflows/daily-schema-audit-cursor.lock.yml | 2 ++ .github/workflows/daily-secrets-analysis.lock.yml | 3 +++ .github/workflows/daily-security-observability.lock.yml | 3 +++ .github/workflows/daily-security-red-team.lock.yml | 1 + .github/workflows/daily-spdd-spec-planner.lock.yml | 3 +++ .github/workflows/daily-spec-coverage-kiro.lock.yml | 2 ++ .github/workflows/daily-spending-forecast.lock.yml | 1 + .github/workflows/daily-squid-image-scan.lock.yml | 3 +++ .github/workflows/daily-syntax-error-quality.lock.yml | 3 +++ .github/workflows/daily-team-evolution-insights.lock.yml | 1 + .github/workflows/daily-team-status.lock.yml | 2 ++ .github/workflows/daily-testify-uber-super-expert.lock.yml | 2 ++ .github/workflows/daily-token-consumption-report.lock.yml | 1 + .../workflows/daily-trajectory-grader-implementer.lock.yml | 2 ++ .github/workflows/daily-windows-defender-scan.lock.yml | 1 + .../workflows/daily-work-queue-formal-verification.lock.yml | 2 ++ .github/workflows/daily-work-queues-report.lock.yml | 2 ++ .github/workflows/daily-workflow-security-model.lock.yml | 2 ++ .github/workflows/daily-workflow-updater.lock.yml | 3 +++ .github/workflows/dataflow-pr-discussion-dataset.lock.yml | 3 +++ .github/workflows/dead-code-remover.lock.yml | 2 ++ .github/workflows/delight.lock.yml | 3 +++ .github/workflows/dependabot-burner.lock.yml | 3 +++ .github/workflows/dependabot-go-checker.lock.yml | 1 + .github/workflows/deployment-incident-monitor.lock.yml | 3 +++ .github/workflows/design-decision-gate.lock.yml | 1 + .github/workflows/dev-hawk.lock.yml | 3 +++ .github/workflows/dictation-prompt.lock.yml | 3 +++ .github/workflows/docs-noob-tester.lock.yml | 3 +++ .github/workflows/draft-pr-cleanup.lock.yml | 3 +++ .github/workflows/duplicate-code-detector.lock.yml | 1 + .github/workflows/engine-conformance-copilot.lock.yml | 1 + .github/workflows/engine-conformance-dispatcher.lock.yml | 2 ++ .github/workflows/eslint-factory-dispatcher.lock.yml | 2 ++ .github/workflows/eslint-miner.lock.yml | 3 +++ .github/workflows/eslint-monster.lock.yml | 1 + .github/workflows/evoskill-evolver.lock.yml | 3 +++ .github/workflows/firewall-escape.lock.yml | 2 ++ .github/workflows/firewall.lock.yml | 1 + .github/workflows/front-page-copy-guard.lock.yml | 1 + .github/workflows/github-remote-mcp-auth-test.lock.yml | 1 + .github/workflows/glossary-maintainer.lock.yml | 3 +++ .github/workflows/grumpy-reviewer.lock.yml | 1 + .github/workflows/impeccable-skills-reviewer.lock.yml | 2 ++ .github/workflows/issue-monster.lock.yml | 1 + .github/workflows/issue-triage-agent.lock.yml | 1 + .github/workflows/jsweep.lock.yml | 2 ++ .github/workflows/layout-spec-maintainer.lock.yml | 2 ++ .github/workflows/linter-miner.lock.yml | 2 ++ .github/workflows/mattpocock-skills-reviewer.lock.yml | 2 ++ .github/workflows/mcp-inspector.lock.yml | 2 ++ .github/workflows/mergefest.lock.yml | 2 ++ .github/workflows/metrics-collector.lock.yml | 1 + .github/workflows/necromancer.lock.yml | 1 + .github/workflows/objective-impact-report.lock.yml | 2 ++ .github/workflows/org-health-report.lock.yml | 2 ++ .github/workflows/outcome-collector.lock.yml | 1 + .github/workflows/plan.lock.yml | 3 +++ .github/workflows/poem-bot.lock.yml | 1 + .github/workflows/pr-code-quality-reviewer.lock.yml | 3 +++ .github/workflows/pr-description-caveman.lock.yml | 2 ++ .github/workflows/pr-nitpick-reviewer.lock.yml | 2 ++ .github/workflows/pr-sous-chef.lock.yml | 1 + .github/workflows/pr-triage-agent.lock.yml | 3 +++ .github/workflows/purelock.lock.yml | 1 + .github/workflows/q.lock.yml | 2 ++ .github/workflows/refactoring-cadence.lock.yml | 1 + .github/workflows/refiner.lock.yml | 3 +++ .github/workflows/release.lock.yml | 2 ++ .github/workflows/repo-audit-analyzer.lock.yml | 1 + .github/workflows/repo-tree-map.lock.yml | 1 + .github/workflows/repository-quality-improver.lock.yml | 2 ++ .github/workflows/research.lock.yml | 1 + .github/workflows/schema-feature-coverage.lock.yml | 1 + .github/workflows/security-compliance.lock.yml | 2 ++ .github/workflows/sighthound-security-scan.lock.yml | 1 + .github/workflows/slide-deck-maintainer.lock.yml | 2 ++ .github/workflows/smoke-aider.lock.yml | 1 + .github/workflows/smoke-builtin-ledgers.lock.yml | 2 ++ .github/workflows/smoke-checkout-pr-dispatch.lock.yml | 2 ++ .github/workflows/smoke-claude-on-copilot.lock.yml | 1 + .github/workflows/smoke-claude-routed.lock.yml | 1 + .github/workflows/smoke-copilot-aoai-apikey.lock.yml | 3 +++ .github/workflows/smoke-copilot-aoai-entra.lock.yml | 3 +++ .github/workflows/smoke-copilot-arm.lock.yml | 2 ++ .github/workflows/smoke-copilot-auto.lock.yml | 2 ++ .github/workflows/smoke-copilot-dynamic-workflow.lock.yml | 3 +++ .github/workflows/smoke-copilot-mai.lock.yml | 2 ++ .github/workflows/smoke-copilot-routed-claude.lock.yml | 2 ++ .github/workflows/smoke-copilot-routed-steering.lock.yml | 2 ++ .github/workflows/smoke-copilot-routed.lock.yml | 2 ++ .github/workflows/smoke-copilot-sdk-routed-claude.lock.yml | 2 ++ .github/workflows/smoke-copilot-sdk-routed.lock.yml | 2 ++ .github/workflows/smoke-copilot-sdk.lock.yml | 2 ++ .github/workflows/smoke-copilot-small.lock.yml | 2 ++ .github/workflows/smoke-copilot-sub-agents.lock.yml | 3 +++ .github/workflows/smoke-copilot.lock.yml | 3 +++ .github/workflows/smoke-create-cross-repo-pr.lock.yml | 2 ++ .github/workflows/smoke-crush.lock.yml | 1 + .github/workflows/smoke-cursor.lock.yml | 1 + .github/workflows/smoke-deepseek-harness.lock.yml | 1 + .github/workflows/smoke-gemini.lock.yml | 1 + .github/workflows/smoke-github-claude.lock.yml | 1 + .github/workflows/smoke-goose.lock.yml | 1 + .github/workflows/smoke-issues.lock.yml | 2 ++ .github/workflows/smoke-kiro.lock.yml | 1 + .github/workflows/smoke-multi-pr.lock.yml | 2 ++ .github/workflows/smoke-opencode.lock.yml | 1 + .github/workflows/smoke-otel-backends.lock.yml | 1 + .github/workflows/smoke-pi-routed-claude.lock.yml | 1 + .github/workflows/smoke-pi-routed.lock.yml | 1 + .github/workflows/smoke-pi-sub-agents.lock.yml | 1 + .github/workflows/smoke-pi.lock.yml | 1 + .github/workflows/smoke-project.lock.yml | 3 +++ .github/workflows/smoke-pydantic.lock.yml | 1 + .github/workflows/smoke-repo-memory-ledger.lock.yml | 3 +++ .github/workflows/smoke-service-ports.lock.yml | 1 + .github/workflows/smoke-temporary-id.lock.yml | 1 + .github/workflows/smoke-test-tools.lock.yml | 1 + .github/workflows/smoke-update-cross-repo-pr.lock.yml | 2 ++ .github/workflows/smoke-work-queue.lock.yml | 4 +++- .github/workflows/smoke-workflow-call-with-inputs.lock.yml | 2 ++ .github/workflows/spec-extractor.lock.yml | 2 ++ .github/workflows/spec-librarian.lock.yml | 2 ++ .github/workflows/squad-game-planner.lock.yml | 2 ++ .github/workflows/squad-implement-worker.lock.yml | 2 ++ .github/workflows/squad-plan.lock.yml | 2 ++ .github/workflows/squad.lock.yml | 2 ++ .github/workflows/stale-pr-cleanup.lock.yml | 3 +++ .github/workflows/stale-repo-identifier.lock.yml | 1 + .github/workflows/sub-issue-closer.lock.yml | 1 + .github/workflows/super-linter.lock.yml | 1 + .github/workflows/technical-doc-writer.lock.yml | 3 +++ .github/workflows/terminal-stylist.lock.yml | 1 + .github/workflows/test-quality-sentinel.lock.yml | 3 +++ .github/workflows/tidy.lock.yml | 3 +++ .github/workflows/ubuntu-image-analyzer.lock.yml | 2 ++ .github/workflows/uk-ai-operational-resilience.lock.yml | 2 ++ .github/workflows/unbloat-docs.lock.yml | 1 + .github/workflows/update-astro.lock.yml | 1 + .github/workflows/video-analyzer.lock.yml | 1 + .github/workflows/visual-regression-checker.lock.yml | 2 ++ .github/workflows/weekly-blog-post-writer.lock.yml | 3 +++ .github/workflows/weekly-editors-health-check.lock.yml | 2 ++ .github/workflows/weekly-issue-summary.lock.yml | 1 + .github/workflows/weekly-network-domains-audit.lock.yml | 1 + .github/workflows/weekly-safe-outputs-spec-review.lock.yml | 1 + .github/workflows/windows.lock.yml | 1 + .github/workflows/workflow-generator.lock.yml | 2 ++ .github/workflows/workflow-health-manager.lock.yml | 2 ++ .github/workflows/workflow-skill-extractor.lock.yml | 2 ++ 222 files changed, 434 insertions(+), 2 deletions(-) diff --git a/.github/workflows/agent-performance-analyzer.lock.yml b/.github/workflows/agent-performance-analyzer.lock.yml index 7e29103ded6..5653ae2158a 100644 --- a/.github/workflows/agent-performance-analyzer.lock.yml +++ b/.github/workflows/agent-performance-analyzer.lock.yml @@ -658,6 +658,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -2051,6 +2052,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2320,6 +2322,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/agent-persona-explorer.lock.yml b/.github/workflows/agent-persona-explorer.lock.yml index 26cccd632e7..20899cd8f6a 100644 --- a/.github/workflows/agent-persona-explorer.lock.yml +++ b/.github/workflows/agent-persona-explorer.lock.yml @@ -1928,6 +1928,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/agentic-token-audit.lock.yml b/.github/workflows/agentic-token-audit.lock.yml index 9627f8ba5db..844870519c2 100644 --- a/.github/workflows/agentic-token-audit.lock.yml +++ b/.github/workflows/agentic-token-audit.lock.yml @@ -630,6 +630,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1927,6 +1928,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2189,6 +2191,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/agentic-token-optimizer.lock.yml b/.github/workflows/agentic-token-optimizer.lock.yml index 76c00bbaa22..0050d21ef3e 100644 --- a/.github/workflows/agentic-token-optimizer.lock.yml +++ b/.github/workflows/agentic-token-optimizer.lock.yml @@ -590,6 +590,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1716,6 +1717,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/agentic-token-trend-audit.lock.yml b/.github/workflows/agentic-token-trend-audit.lock.yml index baa03d64010..b4a5d52ca4a 100644 --- a/.github/workflows/agentic-token-trend-audit.lock.yml +++ b/.github/workflows/agentic-token-trend-audit.lock.yml @@ -1883,6 +1883,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/api-consumption-report.lock.yml b/.github/workflows/api-consumption-report.lock.yml index ea9d0cd4bcd..c438b0f5b09 100644 --- a/.github/workflows/api-consumption-report.lock.yml +++ b/.github/workflows/api-consumption-report.lock.yml @@ -1934,6 +1934,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/archie.lock.yml b/.github/workflows/archie.lock.yml index 6bee4168fb2..68f0f25b814 100644 --- a/.github/workflows/archie.lock.yml +++ b/.github/workflows/archie.lock.yml @@ -624,6 +624,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1920,6 +1921,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2183,6 +2185,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/architecture-guardian.lock.yml b/.github/workflows/architecture-guardian.lock.yml index 6bb0c2bf78d..c366bdc9016 100644 --- a/.github/workflows/architecture-guardian.lock.yml +++ b/.github/workflows/architecture-guardian.lock.yml @@ -574,6 +574,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1827,6 +1828,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2090,6 +2092,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/audit-workflows.lock.yml b/.github/workflows/audit-workflows.lock.yml index 6e4385fdecd..3bb13e54702 100644 --- a/.github/workflows/audit-workflows.lock.yml +++ b/.github/workflows/audit-workflows.lock.yml @@ -2115,6 +2115,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/avenger.lock.yml b/.github/workflows/avenger.lock.yml index 7e7b95532e6..3a6ef754c8f 100644 --- a/.github/workflows/avenger.lock.yml +++ b/.github/workflows/avenger.lock.yml @@ -631,6 +631,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1968,6 +1969,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2229,6 +2231,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/aw-issue-clustering.lock.yml b/.github/workflows/aw-issue-clustering.lock.yml index 00d7a8d4674..ac30e857a79 100644 --- a/.github/workflows/aw-issue-clustering.lock.yml +++ b/.github/workflows/aw-issue-clustering.lock.yml @@ -549,6 +549,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1719,6 +1720,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/breaking-change-checker.lock.yml b/.github/workflows/breaking-change-checker.lock.yml index 4aecff65f1c..8088afdee5b 100644 --- a/.github/workflows/breaking-change-checker.lock.yml +++ b/.github/workflows/breaking-change-checker.lock.yml @@ -609,6 +609,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1883,6 +1884,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2152,6 +2154,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/changeset.lock.yml b/.github/workflows/changeset.lock.yml index d7dd87da65a..e129658471d 100644 --- a/.github/workflows/changeset.lock.yml +++ b/.github/workflows/changeset.lock.yml @@ -1853,6 +1853,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/ci-coach.lock.yml b/.github/workflows/ci-coach.lock.yml index e38e70eb60c..04fa4f7927b 100644 --- a/.github/workflows/ci-coach.lock.yml +++ b/.github/workflows/ci-coach.lock.yml @@ -687,6 +687,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -2005,6 +2006,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2274,6 +2276,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/cli-consistency-checker.lock.yml b/.github/workflows/cli-consistency-checker.lock.yml index a8e87d095c9..33c91fbe0a9 100644 --- a/.github/workflows/cli-consistency-checker.lock.yml +++ b/.github/workflows/cli-consistency-checker.lock.yml @@ -559,6 +559,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1792,6 +1793,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2055,6 +2057,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/cli-version-checker.lock.yml b/.github/workflows/cli-version-checker.lock.yml index 2723bd78903..cb118493496 100644 --- a/.github/workflows/cli-version-checker.lock.yml +++ b/.github/workflows/cli-version-checker.lock.yml @@ -1769,6 +1769,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/cloclo.lock.yml b/.github/workflows/cloclo.lock.yml index 072fb81edb9..1f199dd52b1 100644 --- a/.github/workflows/cloclo.lock.yml +++ b/.github/workflows/cloclo.lock.yml @@ -2194,6 +2194,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/code-scanning-fixer.lock.yml b/.github/workflows/code-scanning-fixer.lock.yml index a519b0d51d0..859ac181e15 100644 --- a/.github/workflows/code-scanning-fixer.lock.yml +++ b/.github/workflows/code-scanning-fixer.lock.yml @@ -619,6 +619,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -2007,6 +2008,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2270,6 +2272,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/code-simplifier.lock.yml b/.github/workflows/code-simplifier.lock.yml index 5658daa5c23..c07b19eb975 100644 --- a/.github/workflows/code-simplifier.lock.yml +++ b/.github/workflows/code-simplifier.lock.yml @@ -614,6 +614,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1889,6 +1890,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2150,6 +2152,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/commit-changes-analyzer.lock.yml b/.github/workflows/commit-changes-analyzer.lock.yml index 5aad63fd3aa..07833a6c5e5 100644 --- a/.github/workflows/commit-changes-analyzer.lock.yml +++ b/.github/workflows/commit-changes-analyzer.lock.yml @@ -1707,6 +1707,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/constraint-solving-potd.lock.yml b/.github/workflows/constraint-solving-potd.lock.yml index 4adcb7c2ffd..f527da54c85 100644 --- a/.github/workflows/constraint-solving-potd.lock.yml +++ b/.github/workflows/constraint-solving-potd.lock.yml @@ -557,6 +557,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1753,6 +1754,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2014,6 +2016,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/contribution-check.lock.yml b/.github/workflows/contribution-check.lock.yml index f0f42bf7afc..e688647c074 100644 --- a/.github/workflows/contribution-check.lock.yml +++ b/.github/workflows/contribution-check.lock.yml @@ -645,6 +645,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1897,6 +1898,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2158,6 +2160,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/copilot-centralization-optimizer.lock.yml b/.github/workflows/copilot-centralization-optimizer.lock.yml index 7b5a8c53134..692aed5f6b9 100644 --- a/.github/workflows/copilot-centralization-optimizer.lock.yml +++ b/.github/workflows/copilot-centralization-optimizer.lock.yml @@ -1918,6 +1918,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/copilot-cli-deep-research.lock.yml b/.github/workflows/copilot-cli-deep-research.lock.yml index 384960e194f..652b6f7199d 100644 --- a/.github/workflows/copilot-cli-deep-research.lock.yml +++ b/.github/workflows/copilot-cli-deep-research.lock.yml @@ -572,6 +572,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1784,6 +1785,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2047,6 +2049,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/copilot-opt.lock.yml b/.github/workflows/copilot-opt.lock.yml index 5f00c910b3e..945f37b4d0e 100644 --- a/.github/workflows/copilot-opt.lock.yml +++ b/.github/workflows/copilot-opt.lock.yml @@ -606,6 +606,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1826,6 +1827,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2087,6 +2089,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/copilot-pr-merged-report.lock.yml b/.github/workflows/copilot-pr-merged-report.lock.yml index 7f27ab659dc..a6abf3b23a5 100644 --- a/.github/workflows/copilot-pr-merged-report.lock.yml +++ b/.github/workflows/copilot-pr-merged-report.lock.yml @@ -575,6 +575,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1712,6 +1713,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -1975,6 +1977,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/copilot-pr-nlp-analysis.lock.yml b/.github/workflows/copilot-pr-nlp-analysis.lock.yml index 697e08ad254..971e642322c 100644 --- a/.github/workflows/copilot-pr-nlp-analysis.lock.yml +++ b/.github/workflows/copilot-pr-nlp-analysis.lock.yml @@ -698,6 +698,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1993,6 +1994,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2262,6 +2264,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/copilot-pr-prompt-analysis.lock.yml b/.github/workflows/copilot-pr-prompt-analysis.lock.yml index dad31431448..cf960e2c706 100644 --- a/.github/workflows/copilot-pr-prompt-analysis.lock.yml +++ b/.github/workflows/copilot-pr-prompt-analysis.lock.yml @@ -612,6 +612,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1863,6 +1864,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2126,6 +2128,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/craft.lock.yml b/.github/workflows/craft.lock.yml index 4738a28ac8e..92d753fdabf 100644 --- a/.github/workflows/craft.lock.yml +++ b/.github/workflows/craft.lock.yml @@ -617,6 +617,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1838,6 +1839,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2101,6 +2103,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-action-setup-security-audit.lock.yml b/.github/workflows/daily-action-setup-security-audit.lock.yml index 63a8fd60030..cc1e4c11191 100644 --- a/.github/workflows/daily-action-setup-security-audit.lock.yml +++ b/.github/workflows/daily-action-setup-security-audit.lock.yml @@ -576,6 +576,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1796,6 +1797,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2057,6 +2059,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml b/.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml index cbaf2c88813..4bc662ad8f5 100644 --- a/.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml +++ b/.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml @@ -645,6 +645,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1997,6 +1998,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2258,6 +2260,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-ambient-context-optimizer.lock.yml b/.github/workflows/daily-ambient-context-optimizer.lock.yml index 0a3e0e846f1..cb44e2ccc79 100644 --- a/.github/workflows/daily-ambient-context-optimizer.lock.yml +++ b/.github/workflows/daily-ambient-context-optimizer.lock.yml @@ -597,6 +597,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1829,6 +1830,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2092,6 +2094,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-assign-issue-to-user.lock.yml b/.github/workflows/daily-assign-issue-to-user.lock.yml index 03555bfcfde..09a543540a1 100644 --- a/.github/workflows/daily-assign-issue-to-user.lock.yml +++ b/.github/workflows/daily-assign-issue-to-user.lock.yml @@ -542,6 +542,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1775,6 +1776,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2038,6 +2040,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml b/.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml index 20b07ae1ac3..02ba8e4ade3 100644 --- a/.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml +++ b/.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml @@ -1836,6 +1836,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-byok-ollama-test.lock.yml b/.github/workflows/daily-byok-ollama-test.lock.yml index d6a502570f4..fe3909c21b1 100644 --- a/.github/workflows/daily-byok-ollama-test.lock.yml +++ b/.github/workflows/daily-byok-ollama-test.lock.yml @@ -578,6 +578,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1754,6 +1755,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-cli-performance.lock.yml b/.github/workflows/daily-cli-performance.lock.yml index fd846cb35ca..4e75e86e4a5 100644 --- a/.github/workflows/daily-cli-performance.lock.yml +++ b/.github/workflows/daily-cli-performance.lock.yml @@ -2067,6 +2067,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-code-debt-aider.lock.yml b/.github/workflows/daily-code-debt-aider.lock.yml index 8fc74ac2fe9..c98f18929e1 100644 --- a/.github/workflows/daily-code-debt-aider.lock.yml +++ b/.github/workflows/daily-code-debt-aider.lock.yml @@ -2142,6 +2142,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-code-metrics.lock.yml b/.github/workflows/daily-code-metrics.lock.yml index b7c5776ab51..61e62d79c63 100644 --- a/.github/workflows/daily-code-metrics.lock.yml +++ b/.github/workflows/daily-code-metrics.lock.yml @@ -662,6 +662,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1961,6 +1962,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2230,6 +2232,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-community-attribution.lock.yml b/.github/workflows/daily-community-attribution.lock.yml index 9ac9b844b54..33a9f73e549 100644 --- a/.github/workflows/daily-community-attribution.lock.yml +++ b/.github/workflows/daily-community-attribution.lock.yml @@ -658,6 +658,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -2005,6 +2006,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2272,6 +2274,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-compiler-quality.lock.yml b/.github/workflows/daily-compiler-quality.lock.yml index 52b8343171e..8a499c02a86 100644 --- a/.github/workflows/daily-compiler-quality.lock.yml +++ b/.github/workflows/daily-compiler-quality.lock.yml @@ -667,6 +667,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1799,6 +1800,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2068,6 +2070,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml b/.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml index c901e9c765c..a2e0593cad8 100644 --- a/.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml +++ b/.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml @@ -580,6 +580,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1888,6 +1889,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2149,6 +2151,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-credit-limit-test.lock.yml b/.github/workflows/daily-credit-limit-test.lock.yml index 030766bd762..a043633d73b 100644 --- a/.github/workflows/daily-credit-limit-test.lock.yml +++ b/.github/workflows/daily-credit-limit-test.lock.yml @@ -1646,6 +1646,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-doc-updater.lock.yml b/.github/workflows/daily-doc-updater.lock.yml index 32deeb4521a..88e91951bf5 100644 --- a/.github/workflows/daily-doc-updater.lock.yml +++ b/.github/workflows/daily-doc-updater.lock.yml @@ -1920,6 +1920,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-ecosystem-explorer.lock.yml b/.github/workflows/daily-ecosystem-explorer.lock.yml index 0ef8a5e5f92..2eb7f38cd31 100644 --- a/.github/workflows/daily-ecosystem-explorer.lock.yml +++ b/.github/workflows/daily-ecosystem-explorer.lock.yml @@ -579,6 +579,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1860,6 +1861,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2123,6 +2125,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-evals-report.lock.yml b/.github/workflows/daily-evals-report.lock.yml index fcd38a02358..4e3943ad9c3 100644 --- a/.github/workflows/daily-evals-report.lock.yml +++ b/.github/workflows/daily-evals-report.lock.yml @@ -1649,6 +1649,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-experiment-report.lock.yml b/.github/workflows/daily-experiment-report.lock.yml index 069c66efd01..35d7801fcbb 100644 --- a/.github/workflows/daily-experiment-report.lock.yml +++ b/.github/workflows/daily-experiment-report.lock.yml @@ -607,6 +607,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1878,6 +1879,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2141,6 +2143,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-file-diet.lock.yml b/.github/workflows/daily-file-diet.lock.yml index f82d3b174b9..c2814c5e44d 100644 --- a/.github/workflows/daily-file-diet.lock.yml +++ b/.github/workflows/daily-file-diet.lock.yml @@ -567,6 +567,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1873,6 +1874,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2136,6 +2138,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-firewall-report.lock.yml b/.github/workflows/daily-firewall-report.lock.yml index 678b02b70ed..e3c49b5294a 100644 --- a/.github/workflows/daily-firewall-report.lock.yml +++ b/.github/workflows/daily-firewall-report.lock.yml @@ -660,6 +660,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1728,6 +1729,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -1989,6 +1991,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-formal-spec-verifier.lock.yml b/.github/workflows/daily-formal-spec-verifier.lock.yml index bc14ea7f3da..961edf906af 100644 --- a/.github/workflows/daily-formal-spec-verifier.lock.yml +++ b/.github/workflows/daily-formal-spec-verifier.lock.yml @@ -604,6 +604,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1857,6 +1858,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-function-namer.lock.yml b/.github/workflows/daily-function-namer.lock.yml index f368a07af8b..9e7307d2afc 100644 --- a/.github/workflows/daily-function-namer.lock.yml +++ b/.github/workflows/daily-function-namer.lock.yml @@ -1777,6 +1777,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-geo-optimizer.lock.yml b/.github/workflows/daily-geo-optimizer.lock.yml index 52a076994cf..7e68bac146f 100644 --- a/.github/workflows/daily-geo-optimizer.lock.yml +++ b/.github/workflows/daily-geo-optimizer.lock.yml @@ -563,6 +563,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1783,6 +1784,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2046,6 +2048,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-github-docs-seo-optimizer.lock.yml b/.github/workflows/daily-github-docs-seo-optimizer.lock.yml index b9ac31f336f..fefe9e6fdf7 100644 --- a/.github/workflows/daily-github-docs-seo-optimizer.lock.yml +++ b/.github/workflows/daily-github-docs-seo-optimizer.lock.yml @@ -526,6 +526,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1650,6 +1651,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI @@ -1950,6 +1952,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-go-test-parallelizer.lock.yml b/.github/workflows/daily-go-test-parallelizer.lock.yml index 8a2728ab366..1896551e07f 100644 --- a/.github/workflows/daily-go-test-parallelizer.lock.yml +++ b/.github/workflows/daily-go-test-parallelizer.lock.yml @@ -1823,6 +1823,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-go-test-stubs-aider.lock.yml b/.github/workflows/daily-go-test-stubs-aider.lock.yml index 6d7b6a7fc47..29895d8b2fc 100644 --- a/.github/workflows/daily-go-test-stubs-aider.lock.yml +++ b/.github/workflows/daily-go-test-stubs-aider.lock.yml @@ -2142,6 +2142,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-graft-intelligence.lock.yml b/.github/workflows/daily-graft-intelligence.lock.yml index 9af7c0d1b3e..aabdeedb159 100644 --- a/.github/workflows/daily-graft-intelligence.lock.yml +++ b/.github/workflows/daily-graft-intelligence.lock.yml @@ -568,6 +568,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1797,6 +1798,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2060,6 +2062,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-hippo-learn.lock.yml b/.github/workflows/daily-hippo-learn.lock.yml index 827cca65586..f40ce773e0a 100644 --- a/.github/workflows/daily-hippo-learn.lock.yml +++ b/.github/workflows/daily-hippo-learn.lock.yml @@ -1868,6 +1868,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-issues-report.lock.yml b/.github/workflows/daily-issues-report.lock.yml index 938dc03200d..f1a51b2004c 100644 --- a/.github/workflows/daily-issues-report.lock.yml +++ b/.github/workflows/daily-issues-report.lock.yml @@ -872,6 +872,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1945,6 +1946,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2212,6 +2214,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-malicious-code-scan.lock.yml b/.github/workflows/daily-malicious-code-scan.lock.yml index 11e9023240f..2fae75ca737 100644 --- a/.github/workflows/daily-malicious-code-scan.lock.yml +++ b/.github/workflows/daily-malicious-code-scan.lock.yml @@ -550,6 +550,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1702,6 +1703,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-mcp-concurrency-analysis.lock.yml b/.github/workflows/daily-mcp-concurrency-analysis.lock.yml index f7133039f6f..b29886659ee 100644 --- a/.github/workflows/daily-mcp-concurrency-analysis.lock.yml +++ b/.github/workflows/daily-mcp-concurrency-analysis.lock.yml @@ -601,6 +601,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Grant runner access to KVM run: bash "${RUNNER_TEMP}/gh-aw/actions/cloud_hypervisor_kvm_access.sh" - name: Check host eligibility for cloud-hypervisor @@ -1315,7 +1316,7 @@ jobs: if [[ ! "$GH_AW_MAX_AI_CREDITS" =~ ^[0-9]+$ ]]; then GH_AW_MAX_AI_CREDITS="1000" fi - printf '%s\n' "{\"\$schema\":\"https://github.com/github/gh-aw-firewall/releases/download/v0.28.59/awf-config.schema.json\",\"network\":{\"allowDomains\":[\"*.grafana.net\",\"*.sentry.io\",\"api.snapcraft.io\",\"archive.ubuntu.com\",\"azure.archive.ubuntu.com\",\"crl.geotrust.com\",\"crl.globalsign.com\",\"crl.identrust.com\",\"crl.sectigo.com\",\"crl.thawte.com\",\"crl.usertrust.com\",\"crl.verisign.com\",\"crl3.digicert.com\",\"crl4.digicert.com\",\"crls.ssl.com\",\"json-schema.org\",\"json.schemastore.org\",\"keyserver.ubuntu.com\",\"ocsp.digicert.com\",\"ocsp.geotrust.com\",\"ocsp.globalsign.com\",\"ocsp.identrust.com\",\"ocsp.sectigo.com\",\"ocsp.ssl.com\",\"ocsp.thawte.com\",\"ocsp.usertrust.com\",\"ocsp.verisign.com\",\"packagecloud.io\",\"packages.cloud.google.com\",\"packages.microsoft.com\",\"ppa.launchpad.net\",\"s.symcb.com\",\"s.symcd.com\",\"security.ubuntu.com\",\"ts-crl.ws.symantec.com\",\"ts-ocsp.ws.symantec.com\",\"www.googleapis.com\"],\"isolation\":true,\"topologyAttach\":[\"awmg-mcpg\"]},\"filesystem\":{\"allowWrite\":[\"/tmp/gh-aw/agent\",\"/tmp/gh-aw/sandbox/agent/logs\",\"/workspace\",\"/workspace/.awf-home\",\"/tmp/gh-aw/cache-memory\"]},\"apiProxy\":{\"enabled\":true,\"enableTokenSteering\":true,\"maxRuns\":500,\"maxAiCredits\":${GH_AW_MAX_AI_CREDITS},\"maxCacheMisses\":5,\"models\":{\"agent\":[\"sonnet-6x\",\"gpt-6\",\"gpt-5.4\",\"gpt-5.5\",\"gpt-5.6\",\"gpt-5.3\",\"gemini-pro\",\"any\"],\"antigravity\":[\"copilot/antigravity*\",\"google/antigravity*\",\"gemini/antigravity*\"],\"any\":[\"copilot/*\",\"anthropic/*\",\"openai/*\",\"google/*\",\"gemini/*\"],\"auto\":[\"copilot/auto\",\"large\"],\"claude\":[\"agent\"],\"codex\":[\"agent\"],\"coding\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\",\"gpt-5-codex\",\"kimi\"],\"computer-use\":[\"copilot/*computer-use*\",\"google/*computer-use*\",\"gemini/*computer-use*\",\"openai/*computer-use*\"],\"copilot\":[\"agent\"],\"deep-research\":[\"copilot/deep-research*\",\"copilot/o3-deep-research*\",\"copilot/o4-mini-deep-research*\",\"google/deep-research*\",\"gemini/deep-research*\",\"openai/o3-deep-research*\",\"openai/o4-mini-deep-research*\"],\"detection\":[\"small\"],\"evals\":[\"small\"],\"fable\":[\"copilot/*fable*\",\"anthropic/*fable*\"],\"gemini\":[\"agent\"],\"gemini-3-flash\":[\"copilot/gemini-3*flash*\",\"google/gemini-3*flash*\",\"gemini/gemini-3*flash*\"],\"gemini-3-pro\":[\"copilot/gemini-3*pro*\",\"google/gemini-3*pro*\",\"google/nano-banana*\",\"gemini/gemini-3*pro*\"],\"gemini-3.1-flash\":[\"copilot/gemini-3.1*flash*\",\"google/gemini-3.1*flash*\",\"gemini/gemini-3.1*flash*\"],\"gemini-3.1-pro\":[\"copilot/gemini-3.1*pro*\",\"google/gemini-3.1*pro*\",\"gemini/gemini-3.1*pro*\"],\"gemini-3.5-flash\":[\"copilot/gemini-3.5*flash*\",\"google/gemini-3.5*flash*\",\"gemini/gemini-3.5*flash*\"],\"gemini-3.6-flash\":[\"copilot/gemini-3.6*flash*\",\"google/gemini-3.6*flash*\",\"gemini/gemini-3.6*flash*\"],\"gemini-3.7-flash\":[\"copilot/gemini-3.7*flash*\",\"google/gemini-3.7*flash*\",\"gemini/gemini-3.7*flash*\"],\"gemini-3.8-flash\":[\"copilot/gemini-3.8*flash*\",\"google/gemini-3.8*flash*\",\"gemini/gemini-3.8*flash*\"],\"gemini-flash\":[\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"],\"gemini-flash-lite\":[\"copilot/gemini-*flash*lite*\",\"google/gemini-*flash*lite*\",\"gemini/gemini-*flash*lite*\"],\"gemini-omni\":[\"copilot/gemini-omni*\",\"google/gemini-omni*\",\"gemini/gemini-omni*\"],\"gemini-pro\":[\"copilot/gemini-*pro*\",\"google/gemini-*pro*\",\"gemini/gemini-*pro*\"],\"gemma\":[\"copilot/gemma*\",\"google/gemma*\",\"gemini/gemma*\"],\"gpt-5\":[\"copilot/gpt-5*\",\"openai/gpt-5*\"],\"gpt-5-codex\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\"],\"gpt-5-mini\":[\"copilot/gpt-5*mini*\",\"openai/gpt-5*mini*\"],\"gpt-5-nano\":[\"copilot/gpt-5*nano*\",\"openai/gpt-5*nano*\"],\"gpt-5-pro\":[\"copilot/gpt-5*pro*\",\"openai/gpt-5*pro*\"],\"gpt-5.1\":[\"copilot/gpt-5.1*\",\"openai/gpt-5.1*\"],\"gpt-5.2\":[\"copilot/gpt-5.2*\",\"openai/gpt-5.2*\"],\"gpt-5.3\":[\"copilot/gpt-5.3*\",\"openai/gpt-5.3*\"],\"gpt-5.4\":[\"copilot/gpt-5.4*\",\"openai/gpt-5.4*\"],\"gpt-5.5\":[\"copilot/gpt-5.5*\",\"openai/gpt-5.5*\"],\"gpt-5.6\":[\"copilot/gpt-5.6*\",\"openai/gpt-5.6*\"],\"gpt-6\":[\"copilot/gpt-6*\",\"openai/gpt-6*\"],\"grok\":[\"copilot/*grok*\",\"openai/*grok*\"],\"haiku\":[\"copilot/*haiku*\",\"anthropic/*haiku*\"],\"image-generation\":[\"copilot/gpt-image*\",\"openai/gpt-image*\",\"openai/chatgpt-image*\",\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"google/imagen*\"],\"kimi\":[\"copilot/kimi*\",\"openai/kimi*\"],\"kiwi\":[\"copilot/kiwi*\",\"openai/kiwi*\"],\"large\":[\"sonnet\",\"gpt-6\",\"gpt-5-pro\",\"gpt-5\",\"gemini-pro\"],\"lyria\":[\"google/lyria*\",\"gemini/lyria*\",\"copilot/lyria*\"],\"mai-code\":[\"copilot/MAI-Code*\",\"copilot/mai-code*\",\"openai/MAI-Code*\"],\"mai-code-1-flash-picker\":[\"copilot/MAI-Code-1-Flash-picker*\",\"copilot/mai-code-1-flash-picker*\",\"openai/MAI-Code-1-Flash-picker*\"],\"mini\":[\"haiku\",\"gpt-5-mini\",\"gpt-5-nano\",\"gemini-flash-lite\"],\"nano-banana\":[\"copilot/nano-banana*\",\"google/nano-banana*\",\"gemini/nano-banana*\"],\"opus\":[\"copilot/*opus*\",\"anthropic/*opus*\"],\"opusplan\":[\"opus?effort=high\"],\"raptor-mini\":[\"copilot/raptor*\",\"openai/raptor*\"],\"reasoning\":[\"copilot/o1*\",\"copilot/o3*\",\"copilot/o4*\",\"openai/o1*\",\"openai/o3*\",\"openai/o4*\"],\"robotics\":[\"copilot/*robotics*\",\"google/*robotics*\",\"gemini/*robotics*\"],\"small\":[\"mini\"],\"small-agent\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash\"],\"sonnet\":[\"copilot/*sonnet*\",\"anthropic/*sonnet*\"],\"sonnet-6x\":[\"copilot/*sonnet-4.5*\",\"copilot/*sonnet-4.6*\",\"copilot/*sonnet-5*\",\"copilot/*sonnet-4-5-*\",\"anthropic/*sonnet-4-5-*\",\"copilot/*sonnet-4-6*\",\"anthropic/*sonnet-4-6*\",\"anthropic/*sonnet-5*\"],\"summarization\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash-lite\",\"mini\"],\"veo\":[\"google/veo*\",\"gemini/veo*\"],\"vision\":[\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"]}},\"container\":{\"imageTag\":\"0.28.59,squid=sha256:e815a456d6050564666cb2a8bb04ff11a4babc2bfa746d611e895b87e59f9af0,agent=sha256:63a1cba05e97ede7fc08cc8abb91167045c998d4415433e9c87377e9266ec291,api-proxy=sha256:f3d7842f34ff1778ac024a8918519b12436d6437b82d6d1d8cee1d01b2ac87e2,cli-proxy=sha256:c95928680eb65a5257b45370af0b79c04224d2a37a508b6401d552914aaf8dbe\",\"agentTimeout\":45},\"cloudHypervisor\":{\"previewEnabled\":true,\"mountPolicy\":\"workspace-and-tool-cache\",\"vcpuCount\":2,\"memoryMib\":4096},\"logging\":{\"proxyLogsDir\":\"/tmp/gh-aw/sandbox/firewall/logs\",\"auditDir\":\"/tmp/gh-aw/sandbox/firewall/audit\"}}" > "${RUNNER_TEMP}/gh-aw/awf-config.json" + printf '%s\n' "{\"\$schema\":\"https://github.com/github/gh-aw-firewall/releases/download/v0.28.59/awf-config.schema.json\",\"network\":{\"allowDomains\":[\"*.grafana.net\",\"*.sentry.io\",\"api.snapcraft.io\",\"archive.ubuntu.com\",\"azure.archive.ubuntu.com\",\"crl.geotrust.com\",\"crl.globalsign.com\",\"crl.identrust.com\",\"crl.sectigo.com\",\"crl.thawte.com\",\"crl.usertrust.com\",\"crl.verisign.com\",\"crl3.digicert.com\",\"crl4.digicert.com\",\"crls.ssl.com\",\"json-schema.org\",\"json.schemastore.org\",\"keyserver.ubuntu.com\",\"ocsp.digicert.com\",\"ocsp.geotrust.com\",\"ocsp.globalsign.com\",\"ocsp.identrust.com\",\"ocsp.sectigo.com\",\"ocsp.ssl.com\",\"ocsp.thawte.com\",\"ocsp.usertrust.com\",\"ocsp.verisign.com\",\"packagecloud.io\",\"packages.cloud.google.com\",\"packages.microsoft.com\",\"ppa.launchpad.net\",\"s.symcb.com\",\"s.symcd.com\",\"security.ubuntu.com\",\"ts-crl.ws.symantec.com\",\"ts-ocsp.ws.symantec.com\",\"www.googleapis.com\"],\"isolation\":true,\"topologyAttach\":[\"awmg-mcpg\"]},\"filesystem\":{\"allowWrite\":[\"/tmp/gh-aw/agent\",\"/tmp/gh-aw/sandbox/agent/logs\",\"/tmp/gh-aw/aw_info.json\",\"/workspace\",\"/workspace/.awf-home\",\"/tmp/gh-aw/cache-memory\"]},\"apiProxy\":{\"enabled\":true,\"enableTokenSteering\":true,\"maxRuns\":500,\"maxAiCredits\":${GH_AW_MAX_AI_CREDITS},\"maxCacheMisses\":5,\"models\":{\"agent\":[\"sonnet-6x\",\"gpt-6\",\"gpt-5.4\",\"gpt-5.5\",\"gpt-5.6\",\"gpt-5.3\",\"gemini-pro\",\"any\"],\"antigravity\":[\"copilot/antigravity*\",\"google/antigravity*\",\"gemini/antigravity*\"],\"any\":[\"copilot/*\",\"anthropic/*\",\"openai/*\",\"google/*\",\"gemini/*\"],\"auto\":[\"copilot/auto\",\"large\"],\"claude\":[\"agent\"],\"codex\":[\"agent\"],\"coding\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\",\"gpt-5-codex\",\"kimi\"],\"computer-use\":[\"copilot/*computer-use*\",\"google/*computer-use*\",\"gemini/*computer-use*\",\"openai/*computer-use*\"],\"copilot\":[\"agent\"],\"deep-research\":[\"copilot/deep-research*\",\"copilot/o3-deep-research*\",\"copilot/o4-mini-deep-research*\",\"google/deep-research*\",\"gemini/deep-research*\",\"openai/o3-deep-research*\",\"openai/o4-mini-deep-research*\"],\"detection\":[\"small\"],\"evals\":[\"small\"],\"fable\":[\"copilot/*fable*\",\"anthropic/*fable*\"],\"gemini\":[\"agent\"],\"gemini-3-flash\":[\"copilot/gemini-3*flash*\",\"google/gemini-3*flash*\",\"gemini/gemini-3*flash*\"],\"gemini-3-pro\":[\"copilot/gemini-3*pro*\",\"google/gemini-3*pro*\",\"google/nano-banana*\",\"gemini/gemini-3*pro*\"],\"gemini-3.1-flash\":[\"copilot/gemini-3.1*flash*\",\"google/gemini-3.1*flash*\",\"gemini/gemini-3.1*flash*\"],\"gemini-3.1-pro\":[\"copilot/gemini-3.1*pro*\",\"google/gemini-3.1*pro*\",\"gemini/gemini-3.1*pro*\"],\"gemini-3.5-flash\":[\"copilot/gemini-3.5*flash*\",\"google/gemini-3.5*flash*\",\"gemini/gemini-3.5*flash*\"],\"gemini-3.6-flash\":[\"copilot/gemini-3.6*flash*\",\"google/gemini-3.6*flash*\",\"gemini/gemini-3.6*flash*\"],\"gemini-3.7-flash\":[\"copilot/gemini-3.7*flash*\",\"google/gemini-3.7*flash*\",\"gemini/gemini-3.7*flash*\"],\"gemini-3.8-flash\":[\"copilot/gemini-3.8*flash*\",\"google/gemini-3.8*flash*\",\"gemini/gemini-3.8*flash*\"],\"gemini-flash\":[\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"],\"gemini-flash-lite\":[\"copilot/gemini-*flash*lite*\",\"google/gemini-*flash*lite*\",\"gemini/gemini-*flash*lite*\"],\"gemini-omni\":[\"copilot/gemini-omni*\",\"google/gemini-omni*\",\"gemini/gemini-omni*\"],\"gemini-pro\":[\"copilot/gemini-*pro*\",\"google/gemini-*pro*\",\"gemini/gemini-*pro*\"],\"gemma\":[\"copilot/gemma*\",\"google/gemma*\",\"gemini/gemma*\"],\"gpt-5\":[\"copilot/gpt-5*\",\"openai/gpt-5*\"],\"gpt-5-codex\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\"],\"gpt-5-mini\":[\"copilot/gpt-5*mini*\",\"openai/gpt-5*mini*\"],\"gpt-5-nano\":[\"copilot/gpt-5*nano*\",\"openai/gpt-5*nano*\"],\"gpt-5-pro\":[\"copilot/gpt-5*pro*\",\"openai/gpt-5*pro*\"],\"gpt-5.1\":[\"copilot/gpt-5.1*\",\"openai/gpt-5.1*\"],\"gpt-5.2\":[\"copilot/gpt-5.2*\",\"openai/gpt-5.2*\"],\"gpt-5.3\":[\"copilot/gpt-5.3*\",\"openai/gpt-5.3*\"],\"gpt-5.4\":[\"copilot/gpt-5.4*\",\"openai/gpt-5.4*\"],\"gpt-5.5\":[\"copilot/gpt-5.5*\",\"openai/gpt-5.5*\"],\"gpt-5.6\":[\"copilot/gpt-5.6*\",\"openai/gpt-5.6*\"],\"gpt-6\":[\"copilot/gpt-6*\",\"openai/gpt-6*\"],\"grok\":[\"copilot/*grok*\",\"openai/*grok*\"],\"haiku\":[\"copilot/*haiku*\",\"anthropic/*haiku*\"],\"image-generation\":[\"copilot/gpt-image*\",\"openai/gpt-image*\",\"openai/chatgpt-image*\",\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"google/imagen*\"],\"kimi\":[\"copilot/kimi*\",\"openai/kimi*\"],\"kiwi\":[\"copilot/kiwi*\",\"openai/kiwi*\"],\"large\":[\"sonnet\",\"gpt-6\",\"gpt-5-pro\",\"gpt-5\",\"gemini-pro\"],\"lyria\":[\"google/lyria*\",\"gemini/lyria*\",\"copilot/lyria*\"],\"mai-code\":[\"copilot/MAI-Code*\",\"copilot/mai-code*\",\"openai/MAI-Code*\"],\"mai-code-1-flash-picker\":[\"copilot/MAI-Code-1-Flash-picker*\",\"copilot/mai-code-1-flash-picker*\",\"openai/MAI-Code-1-Flash-picker*\"],\"mini\":[\"haiku\",\"gpt-5-mini\",\"gpt-5-nano\",\"gemini-flash-lite\"],\"nano-banana\":[\"copilot/nano-banana*\",\"google/nano-banana*\",\"gemini/nano-banana*\"],\"opus\":[\"copilot/*opus*\",\"anthropic/*opus*\"],\"opusplan\":[\"opus?effort=high\"],\"raptor-mini\":[\"copilot/raptor*\",\"openai/raptor*\"],\"reasoning\":[\"copilot/o1*\",\"copilot/o3*\",\"copilot/o4*\",\"openai/o1*\",\"openai/o3*\",\"openai/o4*\"],\"robotics\":[\"copilot/*robotics*\",\"google/*robotics*\",\"gemini/*robotics*\"],\"small\":[\"mini\"],\"small-agent\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash\"],\"sonnet\":[\"copilot/*sonnet*\",\"anthropic/*sonnet*\"],\"sonnet-6x\":[\"copilot/*sonnet-4.5*\",\"copilot/*sonnet-4.6*\",\"copilot/*sonnet-5*\",\"copilot/*sonnet-4-5-*\",\"anthropic/*sonnet-4-5-*\",\"copilot/*sonnet-4-6*\",\"anthropic/*sonnet-4-6*\",\"anthropic/*sonnet-5*\"],\"summarization\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash-lite\",\"mini\"],\"veo\":[\"google/veo*\",\"gemini/veo*\"],\"vision\":[\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"]}},\"container\":{\"imageTag\":\"0.28.59,squid=sha256:e815a456d6050564666cb2a8bb04ff11a4babc2bfa746d611e895b87e59f9af0,agent=sha256:63a1cba05e97ede7fc08cc8abb91167045c998d4415433e9c87377e9266ec291,api-proxy=sha256:f3d7842f34ff1778ac024a8918519b12436d6437b82d6d1d8cee1d01b2ac87e2,cli-proxy=sha256:c95928680eb65a5257b45370af0b79c04224d2a37a508b6401d552914aaf8dbe\",\"agentTimeout\":45},\"cloudHypervisor\":{\"previewEnabled\":true,\"mountPolicy\":\"workspace-and-tool-cache\",\"vcpuCount\":2,\"memoryMib\":4096},\"logging\":{\"proxyLogsDir\":\"/tmp/gh-aw/sandbox/firewall/logs\",\"auditDir\":\"/tmp/gh-aw/sandbox/firewall/audit\"}}" > "${RUNNER_TEMP}/gh-aw/awf-config.json" cp "${RUNNER_TEMP}/gh-aw/awf-config.json" /tmp/gh-aw/awf-config.json export GH_AW_MODELS_JSON_PATH="/tmp/gh-aw/models.json" GH_AW_DOCKER_HOST="" @@ -2159,6 +2160,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2422,6 +2424,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-model-inventory.lock.yml b/.github/workflows/daily-model-inventory.lock.yml index fdb63ed2db9..97c6dce0303 100644 --- a/.github/workflows/daily-model-inventory.lock.yml +++ b/.github/workflows/daily-model-inventory.lock.yml @@ -569,6 +569,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -2102,6 +2103,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2365,6 +2367,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-model-resolution.lock.yml b/.github/workflows/daily-model-resolution.lock.yml index 1204136bc76..db5a5a8da68 100644 --- a/.github/workflows/daily-model-resolution.lock.yml +++ b/.github/workflows/daily-model-resolution.lock.yml @@ -591,6 +591,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1782,6 +1783,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-multi-device-docs-tester.lock.yml b/.github/workflows/daily-multi-device-docs-tester.lock.yml index fffd84c1b13..8028dcb63f7 100644 --- a/.github/workflows/daily-multi-device-docs-tester.lock.yml +++ b/.github/workflows/daily-multi-device-docs-tester.lock.yml @@ -1782,6 +1782,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-news.lock.yml b/.github/workflows/daily-news.lock.yml index 78f859b14f4..938eddb2e6f 100644 --- a/.github/workflows/daily-news.lock.yml +++ b/.github/workflows/daily-news.lock.yml @@ -2010,6 +2010,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-performance-summary.lock.yml b/.github/workflows/daily-performance-summary.lock.yml index 47446768013..74b8d82c320 100644 --- a/.github/workflows/daily-performance-summary.lock.yml +++ b/.github/workflows/daily-performance-summary.lock.yml @@ -2426,6 +2426,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-pr-review-cursor.lock.yml b/.github/workflows/daily-pr-review-cursor.lock.yml index c1d967e7288..32819ff1532 100644 --- a/.github/workflows/daily-pr-review-cursor.lock.yml +++ b/.github/workflows/daily-pr-review-cursor.lock.yml @@ -552,6 +552,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1753,6 +1754,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-regression-audit-kiro.lock.yml b/.github/workflows/daily-regression-audit-kiro.lock.yml index c269bc6c82d..9f648c58612 100644 --- a/.github/workflows/daily-regression-audit-kiro.lock.yml +++ b/.github/workflows/daily-regression-audit-kiro.lock.yml @@ -553,6 +553,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1756,6 +1757,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-regulatory.lock.yml b/.github/workflows/daily-regulatory.lock.yml index a86cf646bab..b429fcfa5f0 100644 --- a/.github/workflows/daily-regulatory.lock.yml +++ b/.github/workflows/daily-regulatory.lock.yml @@ -2255,6 +2255,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-reliability-review.lock.yml b/.github/workflows/daily-reliability-review.lock.yml index 0f1cfbdef94..250741ad72e 100644 --- a/.github/workflows/daily-reliability-review.lock.yml +++ b/.github/workflows/daily-reliability-review.lock.yml @@ -563,6 +563,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1794,6 +1795,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2055,6 +2057,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-repo-chronicle.lock.yml b/.github/workflows/daily-repo-chronicle.lock.yml index f8e37e167b1..ac1a36a8520 100644 --- a/.github/workflows/daily-repo-chronicle.lock.yml +++ b/.github/workflows/daily-repo-chronicle.lock.yml @@ -1628,6 +1628,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-report-dispatcher.lock.yml b/.github/workflows/daily-report-dispatcher.lock.yml index 2663a7a139b..4fef3980835 100644 --- a/.github/workflows/daily-report-dispatcher.lock.yml +++ b/.github/workflows/daily-report-dispatcher.lock.yml @@ -584,6 +584,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1602,6 +1603,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-safe-output-integrator.lock.yml b/.github/workflows/daily-safe-output-integrator.lock.yml index 073e04fcd24..a606e3d9753 100644 --- a/.github/workflows/daily-safe-output-integrator.lock.yml +++ b/.github/workflows/daily-safe-output-integrator.lock.yml @@ -575,6 +575,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1824,6 +1825,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2087,6 +2089,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-schema-audit-cursor.lock.yml b/.github/workflows/daily-schema-audit-cursor.lock.yml index 56ea0b5d55e..c075c637243 100644 --- a/.github/workflows/daily-schema-audit-cursor.lock.yml +++ b/.github/workflows/daily-schema-audit-cursor.lock.yml @@ -551,6 +551,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1752,6 +1753,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-secrets-analysis.lock.yml b/.github/workflows/daily-secrets-analysis.lock.yml index 36732a0f330..90c1489ee22 100644 --- a/.github/workflows/daily-secrets-analysis.lock.yml +++ b/.github/workflows/daily-secrets-analysis.lock.yml @@ -614,6 +614,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1630,6 +1631,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -1893,6 +1895,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-security-observability.lock.yml b/.github/workflows/daily-security-observability.lock.yml index e6cd0cdaf0f..fb74ed01491 100644 --- a/.github/workflows/daily-security-observability.lock.yml +++ b/.github/workflows/daily-security-observability.lock.yml @@ -690,6 +690,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1936,6 +1937,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2197,6 +2199,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-security-red-team.lock.yml b/.github/workflows/daily-security-red-team.lock.yml index 26010949837..6d6cebc8e5b 100644 --- a/.github/workflows/daily-security-red-team.lock.yml +++ b/.github/workflows/daily-security-red-team.lock.yml @@ -1989,6 +1989,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-spdd-spec-planner.lock.yml b/.github/workflows/daily-spdd-spec-planner.lock.yml index 2895b03032b..c94a11d4882 100644 --- a/.github/workflows/daily-spdd-spec-planner.lock.yml +++ b/.github/workflows/daily-spdd-spec-planner.lock.yml @@ -580,6 +580,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1801,6 +1802,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2064,6 +2066,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-spec-coverage-kiro.lock.yml b/.github/workflows/daily-spec-coverage-kiro.lock.yml index 74ca3add38a..854987540a1 100644 --- a/.github/workflows/daily-spec-coverage-kiro.lock.yml +++ b/.github/workflows/daily-spec-coverage-kiro.lock.yml @@ -552,6 +552,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1753,6 +1754,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-spending-forecast.lock.yml b/.github/workflows/daily-spending-forecast.lock.yml index f83ffa6a89b..29fb5d432d1 100644 --- a/.github/workflows/daily-spending-forecast.lock.yml +++ b/.github/workflows/daily-spending-forecast.lock.yml @@ -1901,6 +1901,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-squid-image-scan.lock.yml b/.github/workflows/daily-squid-image-scan.lock.yml index 66dd9fc1aa4..83a9850c0c4 100644 --- a/.github/workflows/daily-squid-image-scan.lock.yml +++ b/.github/workflows/daily-squid-image-scan.lock.yml @@ -560,6 +560,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1903,6 +1904,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2166,6 +2168,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-syntax-error-quality.lock.yml b/.github/workflows/daily-syntax-error-quality.lock.yml index 3c6ab3e0a0d..83f25378723 100644 --- a/.github/workflows/daily-syntax-error-quality.lock.yml +++ b/.github/workflows/daily-syntax-error-quality.lock.yml @@ -559,6 +559,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1756,6 +1757,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2019,6 +2021,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-team-evolution-insights.lock.yml b/.github/workflows/daily-team-evolution-insights.lock.yml index 7cdee46c39e..a9ab294e73c 100644 --- a/.github/workflows/daily-team-evolution-insights.lock.yml +++ b/.github/workflows/daily-team-evolution-insights.lock.yml @@ -1675,6 +1675,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-team-status.lock.yml b/.github/workflows/daily-team-status.lock.yml index 1d443fa2908..7e4dfd77fa1 100644 --- a/.github/workflows/daily-team-status.lock.yml +++ b/.github/workflows/daily-team-status.lock.yml @@ -551,6 +551,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1764,6 +1765,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-testify-uber-super-expert.lock.yml b/.github/workflows/daily-testify-uber-super-expert.lock.yml index cde6406f380..ad2db9e0170 100644 --- a/.github/workflows/daily-testify-uber-super-expert.lock.yml +++ b/.github/workflows/daily-testify-uber-super-expert.lock.yml @@ -589,6 +589,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1838,6 +1839,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-token-consumption-report.lock.yml b/.github/workflows/daily-token-consumption-report.lock.yml index 7fb75fa4d7b..4d5ab817db4 100644 --- a/.github/workflows/daily-token-consumption-report.lock.yml +++ b/.github/workflows/daily-token-consumption-report.lock.yml @@ -1781,6 +1781,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-trajectory-grader-implementer.lock.yml b/.github/workflows/daily-trajectory-grader-implementer.lock.yml index 6b98431fe36..9cda6f2a926 100644 --- a/.github/workflows/daily-trajectory-grader-implementer.lock.yml +++ b/.github/workflows/daily-trajectory-grader-implementer.lock.yml @@ -583,6 +583,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1874,6 +1875,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-windows-defender-scan.lock.yml b/.github/workflows/daily-windows-defender-scan.lock.yml index ed58fa8a212..cb69893ff9e 100644 --- a/.github/workflows/daily-windows-defender-scan.lock.yml +++ b/.github/workflows/daily-windows-defender-scan.lock.yml @@ -2200,6 +2200,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-work-queue-formal-verification.lock.yml b/.github/workflows/daily-work-queue-formal-verification.lock.yml index dcb06324782..e28ffc6fbac 100644 --- a/.github/workflows/daily-work-queue-formal-verification.lock.yml +++ b/.github/workflows/daily-work-queue-formal-verification.lock.yml @@ -546,6 +546,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1678,6 +1679,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-work-queues-report.lock.yml b/.github/workflows/daily-work-queues-report.lock.yml index c7fc7829685..4085ba7d54f 100644 --- a/.github/workflows/daily-work-queues-report.lock.yml +++ b/.github/workflows/daily-work-queues-report.lock.yml @@ -566,6 +566,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1767,6 +1768,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-workflow-security-model.lock.yml b/.github/workflows/daily-workflow-security-model.lock.yml index 33471e8159e..03429aed126 100644 --- a/.github/workflows/daily-workflow-security-model.lock.yml +++ b/.github/workflows/daily-workflow-security-model.lock.yml @@ -583,6 +583,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1851,6 +1852,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/daily-workflow-updater.lock.yml b/.github/workflows/daily-workflow-updater.lock.yml index 385d142ea5f..c3d00d85769 100644 --- a/.github/workflows/daily-workflow-updater.lock.yml +++ b/.github/workflows/daily-workflow-updater.lock.yml @@ -569,6 +569,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1787,6 +1788,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2050,6 +2052,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/dataflow-pr-discussion-dataset.lock.yml b/.github/workflows/dataflow-pr-discussion-dataset.lock.yml index 4c4d3b81a3b..e0ee855b89e 100644 --- a/.github/workflows/dataflow-pr-discussion-dataset.lock.yml +++ b/.github/workflows/dataflow-pr-discussion-dataset.lock.yml @@ -924,6 +924,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -2181,6 +2182,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2448,6 +2450,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/dead-code-remover.lock.yml b/.github/workflows/dead-code-remover.lock.yml index 923b1177e57..e6f9dc38faa 100644 --- a/.github/workflows/dead-code-remover.lock.yml +++ b/.github/workflows/dead-code-remover.lock.yml @@ -622,6 +622,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1869,6 +1870,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/delight.lock.yml b/.github/workflows/delight.lock.yml index 31db80917e3..d106654f1c8 100644 --- a/.github/workflows/delight.lock.yml +++ b/.github/workflows/delight.lock.yml @@ -573,6 +573,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1852,6 +1853,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2115,6 +2117,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/dependabot-burner.lock.yml b/.github/workflows/dependabot-burner.lock.yml index c11d31c47fd..b0d6ffa6a3b 100644 --- a/.github/workflows/dependabot-burner.lock.yml +++ b/.github/workflows/dependabot-burner.lock.yml @@ -668,6 +668,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1997,6 +1998,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2258,6 +2260,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/dependabot-go-checker.lock.yml b/.github/workflows/dependabot-go-checker.lock.yml index 7f1ad2808f2..d381f126e14 100644 --- a/.github/workflows/dependabot-go-checker.lock.yml +++ b/.github/workflows/dependabot-go-checker.lock.yml @@ -1836,6 +1836,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/deployment-incident-monitor.lock.yml b/.github/workflows/deployment-incident-monitor.lock.yml index 2460a7dcd9e..7226304b82b 100644 --- a/.github/workflows/deployment-incident-monitor.lock.yml +++ b/.github/workflows/deployment-incident-monitor.lock.yml @@ -564,6 +564,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1729,6 +1730,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -1989,6 +1991,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/design-decision-gate.lock.yml b/.github/workflows/design-decision-gate.lock.yml index 4f4cc5e3d49..1f6b6f2c183 100644 --- a/.github/workflows/design-decision-gate.lock.yml +++ b/.github/workflows/design-decision-gate.lock.yml @@ -1815,6 +1815,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/dev-hawk.lock.yml b/.github/workflows/dev-hawk.lock.yml index 2def01567ef..011a9630f41 100644 --- a/.github/workflows/dev-hawk.lock.yml +++ b/.github/workflows/dev-hawk.lock.yml @@ -615,6 +615,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1854,6 +1855,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2116,6 +2118,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/dictation-prompt.lock.yml b/.github/workflows/dictation-prompt.lock.yml index 4bcf4f28a39..7eb94101fa4 100644 --- a/.github/workflows/dictation-prompt.lock.yml +++ b/.github/workflows/dictation-prompt.lock.yml @@ -569,6 +569,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1781,6 +1782,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2044,6 +2046,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/docs-noob-tester.lock.yml b/.github/workflows/docs-noob-tester.lock.yml index c0727e605d7..aa00c3420d8 100644 --- a/.github/workflows/docs-noob-tester.lock.yml +++ b/.github/workflows/docs-noob-tester.lock.yml @@ -558,6 +558,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1802,6 +1803,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2065,6 +2067,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/draft-pr-cleanup.lock.yml b/.github/workflows/draft-pr-cleanup.lock.yml index 53add5dc13b..daeae10df10 100644 --- a/.github/workflows/draft-pr-cleanup.lock.yml +++ b/.github/workflows/draft-pr-cleanup.lock.yml @@ -541,6 +541,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1769,6 +1770,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2032,6 +2034,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/duplicate-code-detector.lock.yml b/.github/workflows/duplicate-code-detector.lock.yml index a7ff989e8af..1ae06faf94a 100644 --- a/.github/workflows/duplicate-code-detector.lock.yml +++ b/.github/workflows/duplicate-code-detector.lock.yml @@ -1718,6 +1718,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/engine-conformance-copilot.lock.yml b/.github/workflows/engine-conformance-copilot.lock.yml index 264b9f68347..0d70d19ecbb 100644 --- a/.github/workflows/engine-conformance-copilot.lock.yml +++ b/.github/workflows/engine-conformance-copilot.lock.yml @@ -542,6 +542,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Restore agent config folders from base branch diff --git a/.github/workflows/engine-conformance-dispatcher.lock.yml b/.github/workflows/engine-conformance-dispatcher.lock.yml index 70342c97827..10205f80d60 100644 --- a/.github/workflows/engine-conformance-dispatcher.lock.yml +++ b/.github/workflows/engine-conformance-dispatcher.lock.yml @@ -586,6 +586,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1604,6 +1605,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/eslint-factory-dispatcher.lock.yml b/.github/workflows/eslint-factory-dispatcher.lock.yml index 7ba8138f7a1..cdaf5463959 100644 --- a/.github/workflows/eslint-factory-dispatcher.lock.yml +++ b/.github/workflows/eslint-factory-dispatcher.lock.yml @@ -583,6 +583,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1600,6 +1601,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/eslint-miner.lock.yml b/.github/workflows/eslint-miner.lock.yml index 3bcf9dc1442..8d6430fc504 100644 --- a/.github/workflows/eslint-miner.lock.yml +++ b/.github/workflows/eslint-miner.lock.yml @@ -636,6 +636,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1690,6 +1691,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -1953,6 +1955,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/eslint-monster.lock.yml b/.github/workflows/eslint-monster.lock.yml index 35d22d317b0..457269d22aa 100644 --- a/.github/workflows/eslint-monster.lock.yml +++ b/.github/workflows/eslint-monster.lock.yml @@ -1770,6 +1770,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/evoskill-evolver.lock.yml b/.github/workflows/evoskill-evolver.lock.yml index 134029320b3..b293c0cd535 100644 --- a/.github/workflows/evoskill-evolver.lock.yml +++ b/.github/workflows/evoskill-evolver.lock.yml @@ -597,6 +597,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1858,6 +1859,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2121,6 +2123,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/firewall-escape.lock.yml b/.github/workflows/firewall-escape.lock.yml index 64d24f30f0f..8b7ee12ca17 100644 --- a/.github/workflows/firewall-escape.lock.yml +++ b/.github/workflows/firewall-escape.lock.yml @@ -625,6 +625,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1829,6 +1830,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/firewall.lock.yml b/.github/workflows/firewall.lock.yml index 186fd702fb3..043faef2cb3 100644 --- a/.github/workflows/firewall.lock.yml +++ b/.github/workflows/firewall.lock.yml @@ -543,6 +543,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/front-page-copy-guard.lock.yml b/.github/workflows/front-page-copy-guard.lock.yml index a6e9e41cb82..9f5efa4ccc5 100644 --- a/.github/workflows/front-page-copy-guard.lock.yml +++ b/.github/workflows/front-page-copy-guard.lock.yml @@ -1687,6 +1687,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/github-remote-mcp-auth-test.lock.yml b/.github/workflows/github-remote-mcp-auth-test.lock.yml index 759628509a5..076c8db64f3 100644 --- a/.github/workflows/github-remote-mcp-auth-test.lock.yml +++ b/.github/workflows/github-remote-mcp-auth-test.lock.yml @@ -1689,6 +1689,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/glossary-maintainer.lock.yml b/.github/workflows/glossary-maintainer.lock.yml index 132bf823427..b9cd430fb02 100644 --- a/.github/workflows/glossary-maintainer.lock.yml +++ b/.github/workflows/glossary-maintainer.lock.yml @@ -656,6 +656,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1985,6 +1986,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2246,6 +2248,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/grumpy-reviewer.lock.yml b/.github/workflows/grumpy-reviewer.lock.yml index 81c2b60ec5a..703980048e1 100644 --- a/.github/workflows/grumpy-reviewer.lock.yml +++ b/.github/workflows/grumpy-reviewer.lock.yml @@ -1878,6 +1878,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/impeccable-skills-reviewer.lock.yml b/.github/workflows/impeccable-skills-reviewer.lock.yml index 37586fc917a..e3f91202482 100644 --- a/.github/workflows/impeccable-skills-reviewer.lock.yml +++ b/.github/workflows/impeccable-skills-reviewer.lock.yml @@ -638,6 +638,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1928,6 +1929,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/issue-monster.lock.yml b/.github/workflows/issue-monster.lock.yml index bb5d4f3e1a9..54d465cc56d 100644 --- a/.github/workflows/issue-monster.lock.yml +++ b/.github/workflows/issue-monster.lock.yml @@ -2222,6 +2222,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/issue-triage-agent.lock.yml b/.github/workflows/issue-triage-agent.lock.yml index 4d39da77ac5..fd31ba44229 100644 --- a/.github/workflows/issue-triage-agent.lock.yml +++ b/.github/workflows/issue-triage-agent.lock.yml @@ -1929,6 +1929,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/jsweep.lock.yml b/.github/workflows/jsweep.lock.yml index f8ad1530ab3..cf6f8f8b041 100644 --- a/.github/workflows/jsweep.lock.yml +++ b/.github/workflows/jsweep.lock.yml @@ -588,6 +588,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1824,6 +1825,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/layout-spec-maintainer.lock.yml b/.github/workflows/layout-spec-maintainer.lock.yml index 212f7f14798..1583bd1de20 100644 --- a/.github/workflows/layout-spec-maintainer.lock.yml +++ b/.github/workflows/layout-spec-maintainer.lock.yml @@ -587,6 +587,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1830,6 +1831,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/linter-miner.lock.yml b/.github/workflows/linter-miner.lock.yml index 8d98221f4b9..61da257387f 100644 --- a/.github/workflows/linter-miner.lock.yml +++ b/.github/workflows/linter-miner.lock.yml @@ -612,6 +612,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1911,6 +1912,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/mattpocock-skills-reviewer.lock.yml b/.github/workflows/mattpocock-skills-reviewer.lock.yml index 5390ebf5314..b704b3c2d0a 100644 --- a/.github/workflows/mattpocock-skills-reviewer.lock.yml +++ b/.github/workflows/mattpocock-skills-reviewer.lock.yml @@ -742,6 +742,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -2057,6 +2058,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/mcp-inspector.lock.yml b/.github/workflows/mcp-inspector.lock.yml index 43d4c90092b..13b83721ea8 100644 --- a/.github/workflows/mcp-inspector.lock.yml +++ b/.github/workflows/mcp-inspector.lock.yml @@ -652,6 +652,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -2131,6 +2132,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/mergefest.lock.yml b/.github/workflows/mergefest.lock.yml index f8f676e5080..ded8b677ccd 100644 --- a/.github/workflows/mergefest.lock.yml +++ b/.github/workflows/mergefest.lock.yml @@ -614,6 +614,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1816,6 +1817,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/metrics-collector.lock.yml b/.github/workflows/metrics-collector.lock.yml index 094ce28f711..385573da843 100644 --- a/.github/workflows/metrics-collector.lock.yml +++ b/.github/workflows/metrics-collector.lock.yml @@ -1859,6 +1859,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/necromancer.lock.yml b/.github/workflows/necromancer.lock.yml index cece3d5d33e..4f7a71a2df5 100644 --- a/.github/workflows/necromancer.lock.yml +++ b/.github/workflows/necromancer.lock.yml @@ -1777,6 +1777,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/objective-impact-report.lock.yml b/.github/workflows/objective-impact-report.lock.yml index afbd16832ff..235a74fea16 100644 --- a/.github/workflows/objective-impact-report.lock.yml +++ b/.github/workflows/objective-impact-report.lock.yml @@ -554,6 +554,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1796,6 +1797,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/org-health-report.lock.yml b/.github/workflows/org-health-report.lock.yml index 4c377ae95c9..bb0ec4b62f0 100644 --- a/.github/workflows/org-health-report.lock.yml +++ b/.github/workflows/org-health-report.lock.yml @@ -616,6 +616,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1848,6 +1849,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/outcome-collector.lock.yml b/.github/workflows/outcome-collector.lock.yml index 4413db54c0a..e0a53374330 100644 --- a/.github/workflows/outcome-collector.lock.yml +++ b/.github/workflows/outcome-collector.lock.yml @@ -1902,6 +1902,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/plan.lock.yml b/.github/workflows/plan.lock.yml index 19f1e1e3e07..30961f3c4c5 100644 --- a/.github/workflows/plan.lock.yml +++ b/.github/workflows/plan.lock.yml @@ -663,6 +663,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1953,6 +1954,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2220,6 +2222,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/poem-bot.lock.yml b/.github/workflows/poem-bot.lock.yml index 4c6bfeda9e3..f963e613d4b 100644 --- a/.github/workflows/poem-bot.lock.yml +++ b/.github/workflows/poem-bot.lock.yml @@ -2208,6 +2208,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/pr-code-quality-reviewer.lock.yml b/.github/workflows/pr-code-quality-reviewer.lock.yml index ed49922d24f..6fd34eacb0f 100644 --- a/.github/workflows/pr-code-quality-reviewer.lock.yml +++ b/.github/workflows/pr-code-quality-reviewer.lock.yml @@ -654,6 +654,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1992,6 +1993,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2255,6 +2257,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/pr-description-caveman.lock.yml b/.github/workflows/pr-description-caveman.lock.yml index 0701c524a84..c67ff551d02 100644 --- a/.github/workflows/pr-description-caveman.lock.yml +++ b/.github/workflows/pr-description-caveman.lock.yml @@ -582,6 +582,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1754,6 +1755,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/pr-nitpick-reviewer.lock.yml b/.github/workflows/pr-nitpick-reviewer.lock.yml index cc04c0b6f44..c1cf9c0d70b 100644 --- a/.github/workflows/pr-nitpick-reviewer.lock.yml +++ b/.github/workflows/pr-nitpick-reviewer.lock.yml @@ -621,6 +621,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1945,6 +1946,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/pr-sous-chef.lock.yml b/.github/workflows/pr-sous-chef.lock.yml index 3747ac67ac7..809ed603a1e 100644 --- a/.github/workflows/pr-sous-chef.lock.yml +++ b/.github/workflows/pr-sous-chef.lock.yml @@ -3473,6 +3473,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/pr-triage-agent.lock.yml b/.github/workflows/pr-triage-agent.lock.yml index fd5f1780b4a..f82b8b8e26a 100644 --- a/.github/workflows/pr-triage-agent.lock.yml +++ b/.github/workflows/pr-triage-agent.lock.yml @@ -581,6 +581,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -2261,6 +2262,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2522,6 +2524,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/purelock.lock.yml b/.github/workflows/purelock.lock.yml index be83a62ce3b..74268604704 100644 --- a/.github/workflows/purelock.lock.yml +++ b/.github/workflows/purelock.lock.yml @@ -1946,6 +1946,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/q.lock.yml b/.github/workflows/q.lock.yml index 344fc2a6156..af141fd0bdf 100644 --- a/.github/workflows/q.lock.yml +++ b/.github/workflows/q.lock.yml @@ -705,6 +705,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -2031,6 +2032,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/refactoring-cadence.lock.yml b/.github/workflows/refactoring-cadence.lock.yml index 1dd369462e2..6383e77bf96 100644 --- a/.github/workflows/refactoring-cadence.lock.yml +++ b/.github/workflows/refactoring-cadence.lock.yml @@ -1694,6 +1694,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/refiner.lock.yml b/.github/workflows/refiner.lock.yml index 10c7cae9382..0ed4dd8f9b2 100644 --- a/.github/workflows/refiner.lock.yml +++ b/.github/workflows/refiner.lock.yml @@ -623,6 +623,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -2026,6 +2027,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2287,6 +2289,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/release.lock.yml b/.github/workflows/release.lock.yml index 97e62127b4b..fc0b891ec9f 100644 --- a/.github/workflows/release.lock.yml +++ b/.github/workflows/release.lock.yml @@ -584,6 +584,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -2286,6 +2287,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/repo-audit-analyzer.lock.yml b/.github/workflows/repo-audit-analyzer.lock.yml index d8e057a9854..79125386671 100644 --- a/.github/workflows/repo-audit-analyzer.lock.yml +++ b/.github/workflows/repo-audit-analyzer.lock.yml @@ -1763,6 +1763,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/repo-tree-map.lock.yml b/.github/workflows/repo-tree-map.lock.yml index 6c358618a95..2e746fe47ad 100644 --- a/.github/workflows/repo-tree-map.lock.yml +++ b/.github/workflows/repo-tree-map.lock.yml @@ -1527,6 +1527,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/repository-quality-improver.lock.yml b/.github/workflows/repository-quality-improver.lock.yml index 40d3695d038..817b0fb7d85 100644 --- a/.github/workflows/repository-quality-improver.lock.yml +++ b/.github/workflows/repository-quality-improver.lock.yml @@ -592,6 +592,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1753,6 +1754,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/research.lock.yml b/.github/workflows/research.lock.yml index da386a8e411..c550da5287f 100644 --- a/.github/workflows/research.lock.yml +++ b/.github/workflows/research.lock.yml @@ -1683,6 +1683,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/schema-feature-coverage.lock.yml b/.github/workflows/schema-feature-coverage.lock.yml index 809ccd1a79a..a398bc40e02 100644 --- a/.github/workflows/schema-feature-coverage.lock.yml +++ b/.github/workflows/schema-feature-coverage.lock.yml @@ -1724,6 +1724,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/security-compliance.lock.yml b/.github/workflows/security-compliance.lock.yml index 853d3fda0de..daf9204fada 100644 --- a/.github/workflows/security-compliance.lock.yml +++ b/.github/workflows/security-compliance.lock.yml @@ -591,6 +591,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1784,6 +1785,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/sighthound-security-scan.lock.yml b/.github/workflows/sighthound-security-scan.lock.yml index b57d019579f..8647c244465 100644 --- a/.github/workflows/sighthound-security-scan.lock.yml +++ b/.github/workflows/sighthound-security-scan.lock.yml @@ -1835,6 +1835,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/slide-deck-maintainer.lock.yml b/.github/workflows/slide-deck-maintainer.lock.yml index f5ac6ffc5e6..e85749c45f5 100644 --- a/.github/workflows/slide-deck-maintainer.lock.yml +++ b/.github/workflows/slide-deck-maintainer.lock.yml @@ -656,6 +656,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install Playwright CLI @@ -1964,6 +1965,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/smoke-aider.lock.yml b/.github/workflows/smoke-aider.lock.yml index 139dd177ea8..af88e3272ff 100644 --- a/.github/workflows/smoke-aider.lock.yml +++ b/.github/workflows/smoke-aider.lock.yml @@ -2226,6 +2226,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-builtin-ledgers.lock.yml b/.github/workflows/smoke-builtin-ledgers.lock.yml index 9a373c939b7..9d46070c6c6 100644 --- a/.github/workflows/smoke-builtin-ledgers.lock.yml +++ b/.github/workflows/smoke-builtin-ledgers.lock.yml @@ -561,6 +561,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1980,6 +1981,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-checkout-pr-dispatch.lock.yml b/.github/workflows/smoke-checkout-pr-dispatch.lock.yml index 3d58d782284..92cd28984a5 100644 --- a/.github/workflows/smoke-checkout-pr-dispatch.lock.yml +++ b/.github/workflows/smoke-checkout-pr-dispatch.lock.yml @@ -626,6 +626,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1842,6 +1843,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-claude-on-copilot.lock.yml b/.github/workflows/smoke-claude-on-copilot.lock.yml index 1dd6402bd61..7048d76cfc0 100644 --- a/.github/workflows/smoke-claude-on-copilot.lock.yml +++ b/.github/workflows/smoke-claude-on-copilot.lock.yml @@ -1814,6 +1814,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/smoke-claude-routed.lock.yml b/.github/workflows/smoke-claude-routed.lock.yml index 19d1d534ad8..05fff042af8 100644 --- a/.github/workflows/smoke-claude-routed.lock.yml +++ b/.github/workflows/smoke-claude-routed.lock.yml @@ -1846,6 +1846,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-aoai-apikey.lock.yml b/.github/workflows/smoke-copilot-aoai-apikey.lock.yml index 63b855d6be5..954344b3752 100644 --- a/.github/workflows/smoke-copilot-aoai-apikey.lock.yml +++ b/.github/workflows/smoke-copilot-aoai-apikey.lock.yml @@ -795,6 +795,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install Playwright CLI @@ -3253,6 +3254,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI @@ -3560,6 +3562,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-aoai-entra.lock.yml b/.github/workflows/smoke-copilot-aoai-entra.lock.yml index 70a1703de23..6c7173add21 100644 --- a/.github/workflows/smoke-copilot-aoai-entra.lock.yml +++ b/.github/workflows/smoke-copilot-aoai-entra.lock.yml @@ -806,6 +806,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install Playwright CLI @@ -3274,6 +3275,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI @@ -3586,6 +3588,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-arm.lock.yml b/.github/workflows/smoke-copilot-arm.lock.yml index 177785b575b..ac1bd6c72f8 100644 --- a/.github/workflows/smoke-copilot-arm.lock.yml +++ b/.github/workflows/smoke-copilot-arm.lock.yml @@ -717,6 +717,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install Playwright CLI @@ -3002,6 +3003,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-auto.lock.yml b/.github/workflows/smoke-copilot-auto.lock.yml index e1442119770..e9f83abe1de 100644 --- a/.github/workflows/smoke-copilot-auto.lock.yml +++ b/.github/workflows/smoke-copilot-auto.lock.yml @@ -605,6 +605,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1777,6 +1778,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-dynamic-workflow.lock.yml b/.github/workflows/smoke-copilot-dynamic-workflow.lock.yml index fbaeb13d2bd..83ddb22fb6e 100644 --- a/.github/workflows/smoke-copilot-dynamic-workflow.lock.yml +++ b/.github/workflows/smoke-copilot-dynamic-workflow.lock.yml @@ -586,6 +586,7 @@ jobs: run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.92 env: GH_HOST: github.com + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1767,6 +1768,7 @@ jobs: run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.92 env: GH_HOST: github.com + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI @@ -2066,6 +2068,7 @@ jobs: run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.92 env: GH_HOST: github.com + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-mai.lock.yml b/.github/workflows/smoke-copilot-mai.lock.yml index 3bf10feabd2..f3d0d38762b 100644 --- a/.github/workflows/smoke-copilot-mai.lock.yml +++ b/.github/workflows/smoke-copilot-mai.lock.yml @@ -641,6 +641,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1859,6 +1860,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-routed-claude.lock.yml b/.github/workflows/smoke-copilot-routed-claude.lock.yml index b2d11ae2e61..09a73f50b50 100644 --- a/.github/workflows/smoke-copilot-routed-claude.lock.yml +++ b/.github/workflows/smoke-copilot-routed-claude.lock.yml @@ -615,6 +615,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1853,6 +1854,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-routed-steering.lock.yml b/.github/workflows/smoke-copilot-routed-steering.lock.yml index 17ca1e8059a..685799faf00 100644 --- a/.github/workflows/smoke-copilot-routed-steering.lock.yml +++ b/.github/workflows/smoke-copilot-routed-steering.lock.yml @@ -615,6 +615,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1849,6 +1850,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-routed.lock.yml b/.github/workflows/smoke-copilot-routed.lock.yml index e22d9490caf..50274b77884 100644 --- a/.github/workflows/smoke-copilot-routed.lock.yml +++ b/.github/workflows/smoke-copilot-routed.lock.yml @@ -597,6 +597,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1810,6 +1811,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/smoke-copilot-sdk-routed-claude.lock.yml b/.github/workflows/smoke-copilot-sdk-routed-claude.lock.yml index 73bc5aa2832..7c99439195a 100644 --- a/.github/workflows/smoke-copilot-sdk-routed-claude.lock.yml +++ b/.github/workflows/smoke-copilot-sdk-routed-claude.lock.yml @@ -614,6 +614,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1845,6 +1846,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-sdk-routed.lock.yml b/.github/workflows/smoke-copilot-sdk-routed.lock.yml index cac2aa4cdcc..dd80bfc0e6d 100644 --- a/.github/workflows/smoke-copilot-sdk-routed.lock.yml +++ b/.github/workflows/smoke-copilot-sdk-routed.lock.yml @@ -596,6 +596,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1801,6 +1802,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-sdk.lock.yml b/.github/workflows/smoke-copilot-sdk.lock.yml index 7140923bc59..52dc370f557 100644 --- a/.github/workflows/smoke-copilot-sdk.lock.yml +++ b/.github/workflows/smoke-copilot-sdk.lock.yml @@ -637,6 +637,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1839,6 +1840,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-small.lock.yml b/.github/workflows/smoke-copilot-small.lock.yml index 74b7a3f3885..e83298dfc63 100644 --- a/.github/workflows/smoke-copilot-small.lock.yml +++ b/.github/workflows/smoke-copilot-small.lock.yml @@ -650,6 +650,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install Playwright CLI @@ -1874,6 +1875,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-sub-agents.lock.yml b/.github/workflows/smoke-copilot-sub-agents.lock.yml index d8dd70729bd..76d1af21e82 100644 --- a/.github/workflows/smoke-copilot-sub-agents.lock.yml +++ b/.github/workflows/smoke-copilot-sub-agents.lock.yml @@ -592,6 +592,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1806,6 +1807,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI @@ -2112,6 +2114,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/smoke-copilot.lock.yml b/.github/workflows/smoke-copilot.lock.yml index 43acfacb405..1969f9f832f 100644 --- a/.github/workflows/smoke-copilot.lock.yml +++ b/.github/workflows/smoke-copilot.lock.yml @@ -817,6 +817,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install TypeScript LSP dependencies @@ -3289,6 +3290,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI @@ -3591,6 +3593,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-create-cross-repo-pr.lock.yml b/.github/workflows/smoke-create-cross-repo-pr.lock.yml index 2f1d09da06b..913c7cdea23 100644 --- a/.github/workflows/smoke-create-cross-repo-pr.lock.yml +++ b/.github/workflows/smoke-create-cross-repo-pr.lock.yml @@ -643,6 +643,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1946,6 +1947,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-crush.lock.yml b/.github/workflows/smoke-crush.lock.yml index d3f100267e6..f722ceb21ba 100644 --- a/.github/workflows/smoke-crush.lock.yml +++ b/.github/workflows/smoke-crush.lock.yml @@ -2181,6 +2181,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-cursor.lock.yml b/.github/workflows/smoke-cursor.lock.yml index 6f362fff610..916f0e986e0 100644 --- a/.github/workflows/smoke-cursor.lock.yml +++ b/.github/workflows/smoke-cursor.lock.yml @@ -2057,6 +2057,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-deepseek-harness.lock.yml b/.github/workflows/smoke-deepseek-harness.lock.yml index 878976718dc..7452e458588 100644 --- a/.github/workflows/smoke-deepseek-harness.lock.yml +++ b/.github/workflows/smoke-deepseek-harness.lock.yml @@ -1992,6 +1992,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-gemini.lock.yml b/.github/workflows/smoke-gemini.lock.yml index 391c00486ab..956bd47b29d 100644 --- a/.github/workflows/smoke-gemini.lock.yml +++ b/.github/workflows/smoke-gemini.lock.yml @@ -2065,6 +2065,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/smoke-github-claude.lock.yml b/.github/workflows/smoke-github-claude.lock.yml index 9f013ef0410..678376c8bab 100644 --- a/.github/workflows/smoke-github-claude.lock.yml +++ b/.github/workflows/smoke-github-claude.lock.yml @@ -1819,6 +1819,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/smoke-goose.lock.yml b/.github/workflows/smoke-goose.lock.yml index 63822e40320..5f4a8602308 100644 --- a/.github/workflows/smoke-goose.lock.yml +++ b/.github/workflows/smoke-goose.lock.yml @@ -2227,6 +2227,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-issues.lock.yml b/.github/workflows/smoke-issues.lock.yml index 67aa2ed4c92..a10ef2ecce1 100644 --- a/.github/workflows/smoke-issues.lock.yml +++ b/.github/workflows/smoke-issues.lock.yml @@ -571,6 +571,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1831,6 +1832,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/smoke-kiro.lock.yml b/.github/workflows/smoke-kiro.lock.yml index f009d57e233..52eb5b53a2c 100644 --- a/.github/workflows/smoke-kiro.lock.yml +++ b/.github/workflows/smoke-kiro.lock.yml @@ -2088,6 +2088,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-multi-pr.lock.yml b/.github/workflows/smoke-multi-pr.lock.yml index 8fc6b9d8e71..1d534c5eab4 100644 --- a/.github/workflows/smoke-multi-pr.lock.yml +++ b/.github/workflows/smoke-multi-pr.lock.yml @@ -620,6 +620,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1905,6 +1906,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-opencode.lock.yml b/.github/workflows/smoke-opencode.lock.yml index 2462431772a..4ea087a07ef 100644 --- a/.github/workflows/smoke-opencode.lock.yml +++ b/.github/workflows/smoke-opencode.lock.yml @@ -2123,6 +2123,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-otel-backends.lock.yml b/.github/workflows/smoke-otel-backends.lock.yml index f4b633fbb50..6ca317df875 100644 --- a/.github/workflows/smoke-otel-backends.lock.yml +++ b/.github/workflows/smoke-otel-backends.lock.yml @@ -1929,6 +1929,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-pi-routed-claude.lock.yml b/.github/workflows/smoke-pi-routed-claude.lock.yml index d10d4d4a22e..9c2e8179180 100644 --- a/.github/workflows/smoke-pi-routed-claude.lock.yml +++ b/.github/workflows/smoke-pi-routed-claude.lock.yml @@ -1771,6 +1771,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-pi-routed.lock.yml b/.github/workflows/smoke-pi-routed.lock.yml index ef519163421..3533a853473 100644 --- a/.github/workflows/smoke-pi-routed.lock.yml +++ b/.github/workflows/smoke-pi-routed.lock.yml @@ -1756,6 +1756,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-pi-sub-agents.lock.yml b/.github/workflows/smoke-pi-sub-agents.lock.yml index cac708ce90d..7ed77d08936 100644 --- a/.github/workflows/smoke-pi-sub-agents.lock.yml +++ b/.github/workflows/smoke-pi-sub-agents.lock.yml @@ -1642,6 +1642,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-pi.lock.yml b/.github/workflows/smoke-pi.lock.yml index 007743f59bb..9844ddc0b7c 100644 --- a/.github/workflows/smoke-pi.lock.yml +++ b/.github/workflows/smoke-pi.lock.yml @@ -1847,6 +1847,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-project.lock.yml b/.github/workflows/smoke-project.lock.yml index 5922f0e3805..a74ad975de4 100644 --- a/.github/workflows/smoke-project.lock.yml +++ b/.github/workflows/smoke-project.lock.yml @@ -694,6 +694,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -2270,6 +2271,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI @@ -2574,6 +2576,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-pydantic.lock.yml b/.github/workflows/smoke-pydantic.lock.yml index 0fd31ebf13a..cf464a9e165 100644 --- a/.github/workflows/smoke-pydantic.lock.yml +++ b/.github/workflows/smoke-pydantic.lock.yml @@ -2288,6 +2288,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-repo-memory-ledger.lock.yml b/.github/workflows/smoke-repo-memory-ledger.lock.yml index 585587bc3ad..5eabea31ef0 100644 --- a/.github/workflows/smoke-repo-memory-ledger.lock.yml +++ b/.github/workflows/smoke-repo-memory-ledger.lock.yml @@ -565,6 +565,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1839,6 +1840,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI @@ -2139,6 +2141,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-service-ports.lock.yml b/.github/workflows/smoke-service-ports.lock.yml index 5ac42c7023b..807079ea4b5 100644 --- a/.github/workflows/smoke-service-ports.lock.yml +++ b/.github/workflows/smoke-service-ports.lock.yml @@ -1826,6 +1826,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-temporary-id.lock.yml b/.github/workflows/smoke-temporary-id.lock.yml index 9d624ac5567..cbab66f5574 100644 --- a/.github/workflows/smoke-temporary-id.lock.yml +++ b/.github/workflows/smoke-temporary-id.lock.yml @@ -1953,6 +1953,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-test-tools.lock.yml b/.github/workflows/smoke-test-tools.lock.yml index e050d7ec499..bfeb73ca340 100644 --- a/.github/workflows/smoke-test-tools.lock.yml +++ b/.github/workflows/smoke-test-tools.lock.yml @@ -1881,6 +1881,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-update-cross-repo-pr.lock.yml b/.github/workflows/smoke-update-cross-repo-pr.lock.yml index 18a3de6f454..bfb70839fdd 100644 --- a/.github/workflows/smoke-update-cross-repo-pr.lock.yml +++ b/.github/workflows/smoke-update-cross-repo-pr.lock.yml @@ -677,6 +677,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1966,6 +1967,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-work-queue.lock.yml b/.github/workflows/smoke-work-queue.lock.yml index 7e2f441558d..82f3c329096 100644 --- a/.github/workflows/smoke-work-queue.lock.yml +++ b/.github/workflows/smoke-work-queue.lock.yml @@ -559,6 +559,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Grant runner access to KVM run: bash "${RUNNER_TEMP}/gh-aw/actions/cloud_hypervisor_kvm_access.sh" - name: Check host eligibility for cloud-hypervisor @@ -970,7 +971,7 @@ jobs: if [[ ! "$GH_AW_MAX_AI_CREDITS" =~ ^[0-9]+$ ]]; then GH_AW_MAX_AI_CREDITS="1000" fi - printf '%s\n' "{\"\$schema\":\"https://github.com/github/gh-aw-firewall/releases/download/v0.28.59/awf-config.schema.json\",\"network\":{\"allowDomains\":[\"api.snapcraft.io\",\"archive.ubuntu.com\",\"azure.archive.ubuntu.com\",\"crl.geotrust.com\",\"crl.globalsign.com\",\"crl.identrust.com\",\"crl.sectigo.com\",\"crl.thawte.com\",\"crl.usertrust.com\",\"crl.verisign.com\",\"crl3.digicert.com\",\"crl4.digicert.com\",\"crls.ssl.com\",\"json-schema.org\",\"json.schemastore.org\",\"keyserver.ubuntu.com\",\"ocsp.digicert.com\",\"ocsp.geotrust.com\",\"ocsp.globalsign.com\",\"ocsp.identrust.com\",\"ocsp.sectigo.com\",\"ocsp.ssl.com\",\"ocsp.thawte.com\",\"ocsp.usertrust.com\",\"ocsp.verisign.com\",\"packagecloud.io\",\"packages.cloud.google.com\",\"packages.microsoft.com\",\"ppa.launchpad.net\",\"s.symcb.com\",\"s.symcd.com\",\"security.ubuntu.com\",\"ts-crl.ws.symantec.com\",\"ts-ocsp.ws.symantec.com\",\"www.googleapis.com\"],\"isolation\":true,\"topologyAttach\":[\"awmg-mcpg\"]},\"filesystem\":{\"allowWrite\":[\"/tmp/gh-aw/agent\",\"/tmp/gh-aw/sandbox/agent/logs\",\"/workspace\",\"/workspace/.awf-home\"]},\"apiProxy\":{\"enabled\":true,\"enableTokenSteering\":true,\"maxRuns\":500,\"maxAiCredits\":${GH_AW_MAX_AI_CREDITS},\"maxCacheMisses\":5,\"modelFallback\":{\"enabled\":false},\"fallbackModels\":[\"gpt-5.4\",\"gpt-5.4-mini\"],\"providers\":{\"github-copilot\":{\"models\":{\"gpt-5.3-codex\":{\"cost\":{\"cache_read\":\"1.75e-07\",\"input\":\"1.75e-06\",\"output\":\"1.4e-05\"}},\"gpt-5.4\":{\"cost\":{\"cache_read\":\"2.5e-07\",\"input\":\"2.5e-06\",\"output\":\"1.5e-05\"}},\"gpt-5.4-mini\":{\"cost\":{\"cache_read\":\"7.5e-08\",\"input\":\"7.5e-07\",\"output\":\"4.5e-06\"}}}}},\"models\":{\"agent\":[\"sonnet-6x\",\"gpt-6\",\"gpt-5.4\",\"gpt-5.5\",\"gpt-5.6\",\"gpt-5.3\",\"gemini-pro\",\"any\"],\"antigravity\":[\"copilot/antigravity*\",\"google/antigravity*\",\"gemini/antigravity*\"],\"any\":[\"copilot/*\",\"anthropic/*\",\"openai/*\",\"google/*\",\"gemini/*\"],\"auto\":[\"copilot/auto\",\"large\"],\"claude\":[\"agent\"],\"codex\":[\"agent\"],\"coding\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\",\"gpt-5-codex\",\"kimi\"],\"computer-use\":[\"copilot/*computer-use*\",\"google/*computer-use*\",\"gemini/*computer-use*\",\"openai/*computer-use*\"],\"copilot\":[\"agent\"],\"deep-research\":[\"copilot/deep-research*\",\"copilot/o3-deep-research*\",\"copilot/o4-mini-deep-research*\",\"google/deep-research*\",\"gemini/deep-research*\",\"openai/o3-deep-research*\",\"openai/o4-mini-deep-research*\"],\"detection\":[\"small\"],\"evals\":[\"small\"],\"fable\":[\"copilot/*fable*\",\"anthropic/*fable*\"],\"gemini\":[\"agent\"],\"gemini-3-flash\":[\"copilot/gemini-3*flash*\",\"google/gemini-3*flash*\",\"gemini/gemini-3*flash*\"],\"gemini-3-pro\":[\"copilot/gemini-3*pro*\",\"google/gemini-3*pro*\",\"google/nano-banana*\",\"gemini/gemini-3*pro*\"],\"gemini-3.1-flash\":[\"copilot/gemini-3.1*flash*\",\"google/gemini-3.1*flash*\",\"gemini/gemini-3.1*flash*\"],\"gemini-3.1-pro\":[\"copilot/gemini-3.1*pro*\",\"google/gemini-3.1*pro*\",\"gemini/gemini-3.1*pro*\"],\"gemini-3.5-flash\":[\"copilot/gemini-3.5*flash*\",\"google/gemini-3.5*flash*\",\"gemini/gemini-3.5*flash*\"],\"gemini-3.6-flash\":[\"copilot/gemini-3.6*flash*\",\"google/gemini-3.6*flash*\",\"gemini/gemini-3.6*flash*\"],\"gemini-3.7-flash\":[\"copilot/gemini-3.7*flash*\",\"google/gemini-3.7*flash*\",\"gemini/gemini-3.7*flash*\"],\"gemini-3.8-flash\":[\"copilot/gemini-3.8*flash*\",\"google/gemini-3.8*flash*\",\"gemini/gemini-3.8*flash*\"],\"gemini-flash\":[\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"],\"gemini-flash-lite\":[\"copilot/gemini-*flash*lite*\",\"google/gemini-*flash*lite*\",\"gemini/gemini-*flash*lite*\"],\"gemini-omni\":[\"copilot/gemini-omni*\",\"google/gemini-omni*\",\"gemini/gemini-omni*\"],\"gemini-pro\":[\"copilot/gemini-*pro*\",\"google/gemini-*pro*\",\"gemini/gemini-*pro*\"],\"gemma\":[\"copilot/gemma*\",\"google/gemma*\",\"gemini/gemma*\"],\"gpt-5\":[\"copilot/gpt-5*\",\"openai/gpt-5*\"],\"gpt-5-codex\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\"],\"gpt-5-mini\":[\"copilot/gpt-5*mini*\",\"openai/gpt-5*mini*\"],\"gpt-5-nano\":[\"copilot/gpt-5*nano*\",\"openai/gpt-5*nano*\"],\"gpt-5-pro\":[\"copilot/gpt-5*pro*\",\"openai/gpt-5*pro*\"],\"gpt-5.1\":[\"copilot/gpt-5.1*\",\"openai/gpt-5.1*\"],\"gpt-5.2\":[\"copilot/gpt-5.2*\",\"openai/gpt-5.2*\"],\"gpt-5.3\":[\"copilot/gpt-5.3*\",\"openai/gpt-5.3*\"],\"gpt-5.4\":[\"copilot/gpt-5.4*\",\"openai/gpt-5.4*\"],\"gpt-5.5\":[\"copilot/gpt-5.5*\",\"openai/gpt-5.5*\"],\"gpt-5.6\":[\"copilot/gpt-5.6*\",\"openai/gpt-5.6*\"],\"gpt-6\":[\"copilot/gpt-6*\",\"openai/gpt-6*\"],\"grok\":[\"copilot/*grok*\",\"openai/*grok*\"],\"haiku\":[\"copilot/*haiku*\",\"anthropic/*haiku*\"],\"image-generation\":[\"copilot/gpt-image*\",\"openai/gpt-image*\",\"openai/chatgpt-image*\",\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"google/imagen*\"],\"kimi\":[\"copilot/kimi*\",\"openai/kimi*\"],\"kiwi\":[\"copilot/kiwi*\",\"openai/kiwi*\"],\"large\":[\"sonnet\",\"gpt-6\",\"gpt-5-pro\",\"gpt-5\",\"gemini-pro\"],\"lyria\":[\"google/lyria*\",\"gemini/lyria*\",\"copilot/lyria*\"],\"mai-code\":[\"copilot/MAI-Code*\",\"copilot/mai-code*\",\"openai/MAI-Code*\"],\"mai-code-1-flash-picker\":[\"copilot/MAI-Code-1-Flash-picker*\",\"copilot/mai-code-1-flash-picker*\",\"openai/MAI-Code-1-Flash-picker*\"],\"mini\":[\"haiku\",\"gpt-5-mini\",\"gpt-5-nano\",\"gemini-flash-lite\"],\"nano-banana\":[\"copilot/nano-banana*\",\"google/nano-banana*\",\"gemini/nano-banana*\"],\"opus\":[\"copilot/*opus*\",\"anthropic/*opus*\"],\"opusplan\":[\"opus?effort=high\"],\"raptor-mini\":[\"copilot/raptor*\",\"openai/raptor*\"],\"reasoning\":[\"copilot/o1*\",\"copilot/o3*\",\"copilot/o4*\",\"openai/o1*\",\"openai/o3*\",\"openai/o4*\"],\"robotics\":[\"copilot/*robotics*\",\"google/*robotics*\",\"gemini/*robotics*\"],\"small\":[\"mini\"],\"small-agent\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash\"],\"sonnet\":[\"copilot/*sonnet*\",\"anthropic/*sonnet*\"],\"sonnet-6x\":[\"copilot/*sonnet-4.5*\",\"copilot/*sonnet-4.6*\",\"copilot/*sonnet-5*\",\"copilot/*sonnet-4-5-*\",\"anthropic/*sonnet-4-5-*\",\"copilot/*sonnet-4-6*\",\"anthropic/*sonnet-4-6*\",\"anthropic/*sonnet-5*\"],\"summarization\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash-lite\",\"mini\"],\"veo\":[\"google/veo*\",\"gemini/veo*\"],\"vision\":[\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"]}},\"container\":{\"imageTag\":\"0.28.59,squid=sha256:e815a456d6050564666cb2a8bb04ff11a4babc2bfa746d611e895b87e59f9af0,agent=sha256:63a1cba05e97ede7fc08cc8abb91167045c998d4415433e9c87377e9266ec291,api-proxy=sha256:f3d7842f34ff1778ac024a8918519b12436d6437b82d6d1d8cee1d01b2ac87e2,cli-proxy=sha256:c95928680eb65a5257b45370af0b79c04224d2a37a508b6401d552914aaf8dbe\",\"agentTimeout\":10},\"cloudHypervisor\":{\"previewEnabled\":true,\"mountPolicy\":\"workspace-and-tool-cache\",\"vcpuCount\":2,\"memoryMib\":4096},\"logging\":{\"proxyLogsDir\":\"/tmp/gh-aw/sandbox/firewall/logs\",\"auditDir\":\"/tmp/gh-aw/sandbox/firewall/audit\"}}" > "${RUNNER_TEMP}/gh-aw/awf-config.json" + printf '%s\n' "{\"\$schema\":\"https://github.com/github/gh-aw-firewall/releases/download/v0.28.59/awf-config.schema.json\",\"network\":{\"allowDomains\":[\"api.snapcraft.io\",\"archive.ubuntu.com\",\"azure.archive.ubuntu.com\",\"crl.geotrust.com\",\"crl.globalsign.com\",\"crl.identrust.com\",\"crl.sectigo.com\",\"crl.thawte.com\",\"crl.usertrust.com\",\"crl.verisign.com\",\"crl3.digicert.com\",\"crl4.digicert.com\",\"crls.ssl.com\",\"json-schema.org\",\"json.schemastore.org\",\"keyserver.ubuntu.com\",\"ocsp.digicert.com\",\"ocsp.geotrust.com\",\"ocsp.globalsign.com\",\"ocsp.identrust.com\",\"ocsp.sectigo.com\",\"ocsp.ssl.com\",\"ocsp.thawte.com\",\"ocsp.usertrust.com\",\"ocsp.verisign.com\",\"packagecloud.io\",\"packages.cloud.google.com\",\"packages.microsoft.com\",\"ppa.launchpad.net\",\"s.symcb.com\",\"s.symcd.com\",\"security.ubuntu.com\",\"ts-crl.ws.symantec.com\",\"ts-ocsp.ws.symantec.com\",\"www.googleapis.com\"],\"isolation\":true,\"topologyAttach\":[\"awmg-mcpg\"]},\"filesystem\":{\"allowWrite\":[\"/tmp/gh-aw/agent\",\"/tmp/gh-aw/sandbox/agent/logs\",\"/tmp/gh-aw/aw_info.json\",\"/workspace\",\"/workspace/.awf-home\"]},\"apiProxy\":{\"enabled\":true,\"enableTokenSteering\":true,\"maxRuns\":500,\"maxAiCredits\":${GH_AW_MAX_AI_CREDITS},\"maxCacheMisses\":5,\"modelFallback\":{\"enabled\":false},\"fallbackModels\":[\"gpt-5.4\",\"gpt-5.4-mini\"],\"providers\":{\"github-copilot\":{\"models\":{\"gpt-5.3-codex\":{\"cost\":{\"cache_read\":\"1.75e-07\",\"input\":\"1.75e-06\",\"output\":\"1.4e-05\"}},\"gpt-5.4\":{\"cost\":{\"cache_read\":\"2.5e-07\",\"input\":\"2.5e-06\",\"output\":\"1.5e-05\"}},\"gpt-5.4-mini\":{\"cost\":{\"cache_read\":\"7.5e-08\",\"input\":\"7.5e-07\",\"output\":\"4.5e-06\"}}}}},\"models\":{\"agent\":[\"sonnet-6x\",\"gpt-6\",\"gpt-5.4\",\"gpt-5.5\",\"gpt-5.6\",\"gpt-5.3\",\"gemini-pro\",\"any\"],\"antigravity\":[\"copilot/antigravity*\",\"google/antigravity*\",\"gemini/antigravity*\"],\"any\":[\"copilot/*\",\"anthropic/*\",\"openai/*\",\"google/*\",\"gemini/*\"],\"auto\":[\"copilot/auto\",\"large\"],\"claude\":[\"agent\"],\"codex\":[\"agent\"],\"coding\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\",\"gpt-5-codex\",\"kimi\"],\"computer-use\":[\"copilot/*computer-use*\",\"google/*computer-use*\",\"gemini/*computer-use*\",\"openai/*computer-use*\"],\"copilot\":[\"agent\"],\"deep-research\":[\"copilot/deep-research*\",\"copilot/o3-deep-research*\",\"copilot/o4-mini-deep-research*\",\"google/deep-research*\",\"gemini/deep-research*\",\"openai/o3-deep-research*\",\"openai/o4-mini-deep-research*\"],\"detection\":[\"small\"],\"evals\":[\"small\"],\"fable\":[\"copilot/*fable*\",\"anthropic/*fable*\"],\"gemini\":[\"agent\"],\"gemini-3-flash\":[\"copilot/gemini-3*flash*\",\"google/gemini-3*flash*\",\"gemini/gemini-3*flash*\"],\"gemini-3-pro\":[\"copilot/gemini-3*pro*\",\"google/gemini-3*pro*\",\"google/nano-banana*\",\"gemini/gemini-3*pro*\"],\"gemini-3.1-flash\":[\"copilot/gemini-3.1*flash*\",\"google/gemini-3.1*flash*\",\"gemini/gemini-3.1*flash*\"],\"gemini-3.1-pro\":[\"copilot/gemini-3.1*pro*\",\"google/gemini-3.1*pro*\",\"gemini/gemini-3.1*pro*\"],\"gemini-3.5-flash\":[\"copilot/gemini-3.5*flash*\",\"google/gemini-3.5*flash*\",\"gemini/gemini-3.5*flash*\"],\"gemini-3.6-flash\":[\"copilot/gemini-3.6*flash*\",\"google/gemini-3.6*flash*\",\"gemini/gemini-3.6*flash*\"],\"gemini-3.7-flash\":[\"copilot/gemini-3.7*flash*\",\"google/gemini-3.7*flash*\",\"gemini/gemini-3.7*flash*\"],\"gemini-3.8-flash\":[\"copilot/gemini-3.8*flash*\",\"google/gemini-3.8*flash*\",\"gemini/gemini-3.8*flash*\"],\"gemini-flash\":[\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"],\"gemini-flash-lite\":[\"copilot/gemini-*flash*lite*\",\"google/gemini-*flash*lite*\",\"gemini/gemini-*flash*lite*\"],\"gemini-omni\":[\"copilot/gemini-omni*\",\"google/gemini-omni*\",\"gemini/gemini-omni*\"],\"gemini-pro\":[\"copilot/gemini-*pro*\",\"google/gemini-*pro*\",\"gemini/gemini-*pro*\"],\"gemma\":[\"copilot/gemma*\",\"google/gemma*\",\"gemini/gemma*\"],\"gpt-5\":[\"copilot/gpt-5*\",\"openai/gpt-5*\"],\"gpt-5-codex\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\"],\"gpt-5-mini\":[\"copilot/gpt-5*mini*\",\"openai/gpt-5*mini*\"],\"gpt-5-nano\":[\"copilot/gpt-5*nano*\",\"openai/gpt-5*nano*\"],\"gpt-5-pro\":[\"copilot/gpt-5*pro*\",\"openai/gpt-5*pro*\"],\"gpt-5.1\":[\"copilot/gpt-5.1*\",\"openai/gpt-5.1*\"],\"gpt-5.2\":[\"copilot/gpt-5.2*\",\"openai/gpt-5.2*\"],\"gpt-5.3\":[\"copilot/gpt-5.3*\",\"openai/gpt-5.3*\"],\"gpt-5.4\":[\"copilot/gpt-5.4*\",\"openai/gpt-5.4*\"],\"gpt-5.5\":[\"copilot/gpt-5.5*\",\"openai/gpt-5.5*\"],\"gpt-5.6\":[\"copilot/gpt-5.6*\",\"openai/gpt-5.6*\"],\"gpt-6\":[\"copilot/gpt-6*\",\"openai/gpt-6*\"],\"grok\":[\"copilot/*grok*\",\"openai/*grok*\"],\"haiku\":[\"copilot/*haiku*\",\"anthropic/*haiku*\"],\"image-generation\":[\"copilot/gpt-image*\",\"openai/gpt-image*\",\"openai/chatgpt-image*\",\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"google/imagen*\"],\"kimi\":[\"copilot/kimi*\",\"openai/kimi*\"],\"kiwi\":[\"copilot/kiwi*\",\"openai/kiwi*\"],\"large\":[\"sonnet\",\"gpt-6\",\"gpt-5-pro\",\"gpt-5\",\"gemini-pro\"],\"lyria\":[\"google/lyria*\",\"gemini/lyria*\",\"copilot/lyria*\"],\"mai-code\":[\"copilot/MAI-Code*\",\"copilot/mai-code*\",\"openai/MAI-Code*\"],\"mai-code-1-flash-picker\":[\"copilot/MAI-Code-1-Flash-picker*\",\"copilot/mai-code-1-flash-picker*\",\"openai/MAI-Code-1-Flash-picker*\"],\"mini\":[\"haiku\",\"gpt-5-mini\",\"gpt-5-nano\",\"gemini-flash-lite\"],\"nano-banana\":[\"copilot/nano-banana*\",\"google/nano-banana*\",\"gemini/nano-banana*\"],\"opus\":[\"copilot/*opus*\",\"anthropic/*opus*\"],\"opusplan\":[\"opus?effort=high\"],\"raptor-mini\":[\"copilot/raptor*\",\"openai/raptor*\"],\"reasoning\":[\"copilot/o1*\",\"copilot/o3*\",\"copilot/o4*\",\"openai/o1*\",\"openai/o3*\",\"openai/o4*\"],\"robotics\":[\"copilot/*robotics*\",\"google/*robotics*\",\"gemini/*robotics*\"],\"small\":[\"mini\"],\"small-agent\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash\"],\"sonnet\":[\"copilot/*sonnet*\",\"anthropic/*sonnet*\"],\"sonnet-6x\":[\"copilot/*sonnet-4.5*\",\"copilot/*sonnet-4.6*\",\"copilot/*sonnet-5*\",\"copilot/*sonnet-4-5-*\",\"anthropic/*sonnet-4-5-*\",\"copilot/*sonnet-4-6*\",\"anthropic/*sonnet-4-6*\",\"anthropic/*sonnet-5*\"],\"summarization\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash-lite\",\"mini\"],\"veo\":[\"google/veo*\",\"gemini/veo*\"],\"vision\":[\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"]}},\"container\":{\"imageTag\":\"0.28.59,squid=sha256:e815a456d6050564666cb2a8bb04ff11a4babc2bfa746d611e895b87e59f9af0,agent=sha256:63a1cba05e97ede7fc08cc8abb91167045c998d4415433e9c87377e9266ec291,api-proxy=sha256:f3d7842f34ff1778ac024a8918519b12436d6437b82d6d1d8cee1d01b2ac87e2,cli-proxy=sha256:c95928680eb65a5257b45370af0b79c04224d2a37a508b6401d552914aaf8dbe\",\"agentTimeout\":10},\"cloudHypervisor\":{\"previewEnabled\":true,\"mountPolicy\":\"workspace-and-tool-cache\",\"vcpuCount\":2,\"memoryMib\":4096},\"logging\":{\"proxyLogsDir\":\"/tmp/gh-aw/sandbox/firewall/logs\",\"auditDir\":\"/tmp/gh-aw/sandbox/firewall/audit\"}}" > "${RUNNER_TEMP}/gh-aw/awf-config.json" cp "${RUNNER_TEMP}/gh-aw/awf-config.json" /tmp/gh-aw/awf-config.json export GH_AW_MODELS_JSON_PATH="/tmp/gh-aw/models.json" GH_AW_DOCKER_HOST="" @@ -1789,6 +1790,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-workflow-call-with-inputs.lock.yml b/.github/workflows/smoke-workflow-call-with-inputs.lock.yml index 281e15b6f63..929ee1f1d5e 100644 --- a/.github/workflows/smoke-workflow-call-with-inputs.lock.yml +++ b/.github/workflows/smoke-workflow-call-with-inputs.lock.yml @@ -648,6 +648,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1808,6 +1809,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/spec-extractor.lock.yml b/.github/workflows/spec-extractor.lock.yml index 68b4a9ec4e4..2232a35d55e 100644 --- a/.github/workflows/spec-extractor.lock.yml +++ b/.github/workflows/spec-extractor.lock.yml @@ -608,6 +608,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1909,6 +1910,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/spec-librarian.lock.yml b/.github/workflows/spec-librarian.lock.yml index c54fc6e2710..e62f6a8b888 100644 --- a/.github/workflows/spec-librarian.lock.yml +++ b/.github/workflows/spec-librarian.lock.yml @@ -565,6 +565,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1802,6 +1803,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/squad-game-planner.lock.yml b/.github/workflows/squad-game-planner.lock.yml index 2ba463d22cc..557c1822a8d 100644 --- a/.github/workflows/squad-game-planner.lock.yml +++ b/.github/workflows/squad-game-planner.lock.yml @@ -600,6 +600,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1758,6 +1759,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/squad-implement-worker.lock.yml b/.github/workflows/squad-implement-worker.lock.yml index 62e0b75a72c..ffd83adc1b6 100644 --- a/.github/workflows/squad-implement-worker.lock.yml +++ b/.github/workflows/squad-implement-worker.lock.yml @@ -641,6 +641,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1919,6 +1920,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/squad-plan.lock.yml b/.github/workflows/squad-plan.lock.yml index e1e4834601d..a0ad42af634 100644 --- a/.github/workflows/squad-plan.lock.yml +++ b/.github/workflows/squad-plan.lock.yml @@ -660,6 +660,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1839,6 +1840,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/squad.lock.yml b/.github/workflows/squad.lock.yml index dbda40ff1a1..fd2ad84dfc2 100644 --- a/.github/workflows/squad.lock.yml +++ b/.github/workflows/squad.lock.yml @@ -691,6 +691,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -2481,6 +2482,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/stale-pr-cleanup.lock.yml b/.github/workflows/stale-pr-cleanup.lock.yml index b900c071056..e64e545ca99 100644 --- a/.github/workflows/stale-pr-cleanup.lock.yml +++ b/.github/workflows/stale-pr-cleanup.lock.yml @@ -544,6 +544,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1782,6 +1783,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2045,6 +2047,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/stale-repo-identifier.lock.yml b/.github/workflows/stale-repo-identifier.lock.yml index 58c61b076ae..36e1b1715ac 100644 --- a/.github/workflows/stale-repo-identifier.lock.yml +++ b/.github/workflows/stale-repo-identifier.lock.yml @@ -1954,6 +1954,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/sub-issue-closer.lock.yml b/.github/workflows/sub-issue-closer.lock.yml index 24592c8dcf6..ab2d00f1df2 100644 --- a/.github/workflows/sub-issue-closer.lock.yml +++ b/.github/workflows/sub-issue-closer.lock.yml @@ -1693,6 +1693,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/super-linter.lock.yml b/.github/workflows/super-linter.lock.yml index b9cb8132174..825d3185e0f 100644 --- a/.github/workflows/super-linter.lock.yml +++ b/.github/workflows/super-linter.lock.yml @@ -1716,6 +1716,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/technical-doc-writer.lock.yml b/.github/workflows/technical-doc-writer.lock.yml index f60703085c9..45c0cf4c379 100644 --- a/.github/workflows/technical-doc-writer.lock.yml +++ b/.github/workflows/technical-doc-writer.lock.yml @@ -665,6 +665,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1993,6 +1994,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2254,6 +2256,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/terminal-stylist.lock.yml b/.github/workflows/terminal-stylist.lock.yml index 5c0883ddf09..66856697e47 100644 --- a/.github/workflows/terminal-stylist.lock.yml +++ b/.github/workflows/terminal-stylist.lock.yml @@ -1664,6 +1664,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/test-quality-sentinel.lock.yml b/.github/workflows/test-quality-sentinel.lock.yml index 1240b608905..ba94b721d24 100644 --- a/.github/workflows/test-quality-sentinel.lock.yml +++ b/.github/workflows/test-quality-sentinel.lock.yml @@ -681,6 +681,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1929,6 +1930,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2200,6 +2202,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/tidy.lock.yml b/.github/workflows/tidy.lock.yml index 9cedc4fd348..c495d049350 100644 --- a/.github/workflows/tidy.lock.yml +++ b/.github/workflows/tidy.lock.yml @@ -650,6 +650,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1955,6 +1956,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2216,6 +2218,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/ubuntu-image-analyzer.lock.yml b/.github/workflows/ubuntu-image-analyzer.lock.yml index 94ab67cd23c..fc24a76b1e6 100644 --- a/.github/workflows/ubuntu-image-analyzer.lock.yml +++ b/.github/workflows/ubuntu-image-analyzer.lock.yml @@ -589,6 +589,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1814,6 +1815,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/uk-ai-operational-resilience.lock.yml b/.github/workflows/uk-ai-operational-resilience.lock.yml index e0e1bfe4f61..6c10fc55e86 100644 --- a/.github/workflows/uk-ai-operational-resilience.lock.yml +++ b/.github/workflows/uk-ai-operational-resilience.lock.yml @@ -565,6 +565,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1772,6 +1773,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/unbloat-docs.lock.yml b/.github/workflows/unbloat-docs.lock.yml index 1ce2b1bcb8a..f140d8799f1 100644 --- a/.github/workflows/unbloat-docs.lock.yml +++ b/.github/workflows/unbloat-docs.lock.yml @@ -1893,6 +1893,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/update-astro.lock.yml b/.github/workflows/update-astro.lock.yml index 9a9087f7ddb..1b07935003c 100644 --- a/.github/workflows/update-astro.lock.yml +++ b/.github/workflows/update-astro.lock.yml @@ -1851,6 +1851,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/video-analyzer.lock.yml b/.github/workflows/video-analyzer.lock.yml index 3cf240f6658..abbb5ea96ec 100644 --- a/.github/workflows/video-analyzer.lock.yml +++ b/.github/workflows/video-analyzer.lock.yml @@ -1661,6 +1661,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/visual-regression-checker.lock.yml b/.github/workflows/visual-regression-checker.lock.yml index 0147b3a161e..ff445cb4002 100644 --- a/.github/workflows/visual-regression-checker.lock.yml +++ b/.github/workflows/visual-regression-checker.lock.yml @@ -577,6 +577,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install Playwright CLI @@ -1779,6 +1780,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/weekly-blog-post-writer.lock.yml b/.github/workflows/weekly-blog-post-writer.lock.yml index f8d61696bbd..64dfc41e59d 100644 --- a/.github/workflows/weekly-blog-post-writer.lock.yml +++ b/.github/workflows/weekly-blog-post-writer.lock.yml @@ -727,6 +727,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -2033,6 +2034,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' @@ -2300,6 +2302,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/weekly-editors-health-check.lock.yml b/.github/workflows/weekly-editors-health-check.lock.yml index 9fbb3f0c7c2..8a31bdd9ad0 100644 --- a/.github/workflows/weekly-editors-health-check.lock.yml +++ b/.github/workflows/weekly-editors-health-check.lock.yml @@ -580,6 +580,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Install Playwright CLI @@ -1875,6 +1876,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/weekly-issue-summary.lock.yml b/.github/workflows/weekly-issue-summary.lock.yml index 55c91ac76af..23398260450 100644 --- a/.github/workflows/weekly-issue-summary.lock.yml +++ b/.github/workflows/weekly-issue-summary.lock.yml @@ -1724,6 +1724,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/weekly-network-domains-audit.lock.yml b/.github/workflows/weekly-network-domains-audit.lock.yml index c6ce7adc30c..a24fdbbcbe3 100644 --- a/.github/workflows/weekly-network-domains-audit.lock.yml +++ b/.github/workflows/weekly-network-domains-audit.lock.yml @@ -1674,6 +1674,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/weekly-safe-outputs-spec-review.lock.yml b/.github/workflows/weekly-safe-outputs-spec-review.lock.yml index f1e21419c68..b05d54ab363 100644 --- a/.github/workflows/weekly-safe-outputs-spec-review.lock.yml +++ b/.github/workflows/weekly-safe-outputs-spec-review.lock.yml @@ -1715,6 +1715,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/windows.lock.yml b/.github/workflows/windows.lock.yml index 603d871cd9a..7a7193a968a 100644 --- a/.github/workflows/windows.lock.yml +++ b/.github/workflows/windows.lock.yml @@ -1857,6 +1857,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/workflow-generator.lock.yml b/.github/workflows/workflow-generator.lock.yml index 92ec4433d58..1127bb5221b 100644 --- a/.github/workflows/workflow-generator.lock.yml +++ b/.github/workflows/workflow-generator.lock.yml @@ -594,6 +594,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1810,6 +1811,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/workflow-health-manager.lock.yml b/.github/workflows/workflow-health-manager.lock.yml index 56a7f62fd12..e6768e33197 100644 --- a/.github/workflows/workflow-health-manager.lock.yml +++ b/.github/workflows/workflow-health-manager.lock.yml @@ -581,6 +581,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1868,6 +1869,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' diff --git a/.github/workflows/workflow-skill-extractor.lock.yml b/.github/workflows/workflow-skill-extractor.lock.yml index bd4ef8dec06..2895f9c066f 100644 --- a/.github/workflows/workflow-skill-extractor.lock.yml +++ b/.github/workflows/workflow-skill-extractor.lock.yml @@ -555,6 +555,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.28.59 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1776,6 +1777,7 @@ jobs: env: GH_HOST: github.com GH_AW_COMPILED_VERSION: dev + GH_AW_COPILOT_MIN_VERSION: 1.0.35 - name: Install threat-detect binary id: threat_detect_install if: always() && steps.detection_guard.outputs.run_detection == 'true' From c29fcddb1aa4b0161ebecbc7e7efec86da01e5a0 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Fri, 16 Oct 2026 17:03:39 +0000 Subject: [PATCH 6/7] Keep Copilot model metadata writes on the runner Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- .../patch-copilot-session-id-compatibility.md | 2 +- .../daily-mcp-concurrency-analysis.lock.yml | 8 +- .github/workflows/smoke-work-queue.lock.yml | 8 +- actions/setup/js/copilot_harness.test.cjs | 9 +- actions/setup/js/copilot_model_selection.cjs | 33 ++++++- .../setup/js/copilot_model_selection.test.cjs | 91 ++++++++++++++++--- actions/setup/js/parse_token_usage.cjs | 2 + actions/setup/js/parse_token_usage.test.cjs | 30 +++++- pkg/constants/constants.go | 3 - pkg/workflow/awf_command_builder.go | 3 - pkg/workflow/cloud_hypervisor_test.go | 10 +- pkg/workflow/sandbox.go | 1 - pkg/workflow/sandbox_test.go | 2 +- 13 files changed, 157 insertions(+), 45 deletions(-) diff --git a/.changeset/patch-copilot-session-id-compatibility.md b/.changeset/patch-copilot-session-id-compatibility.md index cbca53c6016..b51af739ecf 100644 --- a/.changeset/patch-copilot-session-id-compatibility.md +++ b/.changeset/patch-copilot-session-id-compatibility.md @@ -2,4 +2,4 @@ "gh-aw": patch --- -Require a Copilot CLI version that supports harness session selection and preserve Copilot model metadata writes under Cloud Hypervisor. +Require a Copilot CLI version that supports harness session selection and persist Copilot model metadata on the runner without granting agents write access to aw_info.json. diff --git a/.github/workflows/daily-mcp-concurrency-analysis.lock.yml b/.github/workflows/daily-mcp-concurrency-analysis.lock.yml index a2e8873c58c..d0874bf39b1 100644 --- a/.github/workflows/daily-mcp-concurrency-analysis.lock.yml +++ b/.github/workflows/daily-mcp-concurrency-analysis.lock.yml @@ -1316,7 +1316,7 @@ jobs: if [[ ! "$GH_AW_MAX_AI_CREDITS" =~ ^[0-9]+$ ]]; then GH_AW_MAX_AI_CREDITS="1000" fi - printf '%s\n' "{\"\$schema\":\"https://github.com/github/gh-aw-firewall/releases/download/v0.28.59/awf-config.schema.json\",\"network\":{\"allowDomains\":[\"*.grafana.net\",\"*.sentry.io\",\"api.snapcraft.io\",\"archive.ubuntu.com\",\"azure.archive.ubuntu.com\",\"crl.geotrust.com\",\"crl.globalsign.com\",\"crl.identrust.com\",\"crl.sectigo.com\",\"crl.thawte.com\",\"crl.usertrust.com\",\"crl.verisign.com\",\"crl3.digicert.com\",\"crl4.digicert.com\",\"crls.ssl.com\",\"json-schema.org\",\"json.schemastore.org\",\"keyserver.ubuntu.com\",\"ocsp.digicert.com\",\"ocsp.geotrust.com\",\"ocsp.globalsign.com\",\"ocsp.identrust.com\",\"ocsp.sectigo.com\",\"ocsp.ssl.com\",\"ocsp.thawte.com\",\"ocsp.usertrust.com\",\"ocsp.verisign.com\",\"packagecloud.io\",\"packages.cloud.google.com\",\"packages.microsoft.com\",\"ppa.launchpad.net\",\"s.symcb.com\",\"s.symcd.com\",\"security.ubuntu.com\",\"ts-crl.ws.symantec.com\",\"ts-ocsp.ws.symantec.com\",\"www.googleapis.com\"],\"isolation\":true,\"topologyAttach\":[\"awmg-mcpg\"]},\"filesystem\":{\"allowWrite\":[\"/tmp/gh-aw/agent\",\"/tmp/gh-aw/sandbox/agent/logs\",\"/tmp/gh-aw/aw_info.json\",\"/workspace\",\"/workspace/.awf-home\",\"/tmp/gh-aw/cache-memory\"]},\"apiProxy\":{\"enabled\":true,\"enableTokenSteering\":true,\"maxRuns\":500,\"maxAiCredits\":${GH_AW_MAX_AI_CREDITS},\"maxCacheMisses\":5,\"models\":{\"agent\":[\"sonnet-6x\",\"gpt-6\",\"gpt-5.4\",\"gpt-5.5\",\"gpt-5.6\",\"gpt-5.3\",\"gemini-pro\",\"any\"],\"antigravity\":[\"copilot/antigravity*\",\"google/antigravity*\",\"gemini/antigravity*\"],\"any\":[\"copilot/*\",\"anthropic/*\",\"openai/*\",\"google/*\",\"gemini/*\"],\"auto\":[\"copilot/auto\",\"large\"],\"claude\":[\"agent\"],\"codex\":[\"agent\"],\"coding\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\",\"gpt-5-codex\",\"kimi\"],\"computer-use\":[\"copilot/*computer-use*\",\"google/*computer-use*\",\"gemini/*computer-use*\",\"openai/*computer-use*\"],\"copilot\":[\"agent\"],\"deep-research\":[\"copilot/deep-research*\",\"copilot/o3-deep-research*\",\"copilot/o4-mini-deep-research*\",\"google/deep-research*\",\"gemini/deep-research*\",\"openai/o3-deep-research*\",\"openai/o4-mini-deep-research*\"],\"detection\":[\"small\"],\"evals\":[\"small\"],\"fable\":[\"copilot/*fable*\",\"anthropic/*fable*\"],\"gemini\":[\"agent\"],\"gemini-3-flash\":[\"copilot/gemini-3*flash*\",\"google/gemini-3*flash*\",\"gemini/gemini-3*flash*\"],\"gemini-3-pro\":[\"copilot/gemini-3*pro*\",\"google/gemini-3*pro*\",\"google/nano-banana*\",\"gemini/gemini-3*pro*\"],\"gemini-3.1-flash\":[\"copilot/gemini-3.1*flash*\",\"google/gemini-3.1*flash*\",\"gemini/gemini-3.1*flash*\"],\"gemini-3.1-pro\":[\"copilot/gemini-3.1*pro*\",\"google/gemini-3.1*pro*\",\"gemini/gemini-3.1*pro*\"],\"gemini-3.5-flash\":[\"copilot/gemini-3.5*flash*\",\"google/gemini-3.5*flash*\",\"gemini/gemini-3.5*flash*\"],\"gemini-3.6-flash\":[\"copilot/gemini-3.6*flash*\",\"google/gemini-3.6*flash*\",\"gemini/gemini-3.6*flash*\"],\"gemini-3.7-flash\":[\"copilot/gemini-3.7*flash*\",\"google/gemini-3.7*flash*\",\"gemini/gemini-3.7*flash*\"],\"gemini-3.8-flash\":[\"copilot/gemini-3.8*flash*\",\"google/gemini-3.8*flash*\",\"gemini/gemini-3.8*flash*\"],\"gemini-flash\":[\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"],\"gemini-flash-lite\":[\"copilot/gemini-*flash*lite*\",\"google/gemini-*flash*lite*\",\"gemini/gemini-*flash*lite*\"],\"gemini-omni\":[\"copilot/gemini-omni*\",\"google/gemini-omni*\",\"gemini/gemini-omni*\"],\"gemini-pro\":[\"copilot/gemini-*pro*\",\"google/gemini-*pro*\",\"gemini/gemini-*pro*\"],\"gemma\":[\"copilot/gemma*\",\"google/gemma*\",\"gemini/gemma*\"],\"gpt-5\":[\"copilot/gpt-5*\",\"openai/gpt-5*\"],\"gpt-5-codex\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\"],\"gpt-5-mini\":[\"copilot/gpt-5*mini*\",\"openai/gpt-5*mini*\"],\"gpt-5-nano\":[\"copilot/gpt-5*nano*\",\"openai/gpt-5*nano*\"],\"gpt-5-pro\":[\"copilot/gpt-5*pro*\",\"openai/gpt-5*pro*\"],\"gpt-5.1\":[\"copilot/gpt-5.1*\",\"openai/gpt-5.1*\"],\"gpt-5.2\":[\"copilot/gpt-5.2*\",\"openai/gpt-5.2*\"],\"gpt-5.3\":[\"copilot/gpt-5.3*\",\"openai/gpt-5.3*\"],\"gpt-5.4\":[\"copilot/gpt-5.4*\",\"openai/gpt-5.4*\"],\"gpt-5.5\":[\"copilot/gpt-5.5*\",\"openai/gpt-5.5*\"],\"gpt-5.6\":[\"copilot/gpt-5.6*\",\"openai/gpt-5.6*\"],\"gpt-6\":[\"copilot/gpt-6*\",\"openai/gpt-6*\"],\"grok\":[\"copilot/*grok*\",\"openai/*grok*\"],\"haiku\":[\"copilot/*haiku*\",\"anthropic/*haiku*\"],\"image-generation\":[\"copilot/gpt-image*\",\"openai/gpt-image*\",\"openai/chatgpt-image*\",\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"google/imagen*\"],\"kimi\":[\"copilot/kimi*\",\"openai/kimi*\"],\"kiwi\":[\"copilot/kiwi*\",\"openai/kiwi*\"],\"large\":[\"sonnet\",\"gpt-6\",\"gpt-5-pro\",\"gpt-5\",\"gemini-pro\"],\"lyria\":[\"google/lyria*\",\"gemini/lyria*\",\"copilot/lyria*\"],\"mai-code\":[\"copilot/MAI-Code*\",\"copilot/mai-code*\",\"openai/MAI-Code*\"],\"mai-code-1-flash-picker\":[\"copilot/MAI-Code-1-Flash-picker*\",\"copilot/mai-code-1-flash-picker*\",\"openai/MAI-Code-1-Flash-picker*\"],\"mini\":[\"haiku\",\"gpt-5-mini\",\"gpt-5-nano\",\"gemini-flash-lite\"],\"nano-banana\":[\"copilot/nano-banana*\",\"google/nano-banana*\",\"gemini/nano-banana*\"],\"opus\":[\"copilot/*opus*\",\"anthropic/*opus*\"],\"opusplan\":[\"opus?effort=high\"],\"raptor-mini\":[\"copilot/raptor*\",\"openai/raptor*\"],\"reasoning\":[\"copilot/o1*\",\"copilot/o3*\",\"copilot/o4*\",\"openai/o1*\",\"openai/o3*\",\"openai/o4*\"],\"robotics\":[\"copilot/*robotics*\",\"google/*robotics*\",\"gemini/*robotics*\"],\"small\":[\"mini\"],\"small-agent\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash\"],\"sonnet\":[\"copilot/*sonnet*\",\"anthropic/*sonnet*\"],\"sonnet-6x\":[\"copilot/*sonnet-4.5*\",\"copilot/*sonnet-4.6*\",\"copilot/*sonnet-5*\",\"copilot/*sonnet-4-5-*\",\"anthropic/*sonnet-4-5-*\",\"copilot/*sonnet-4-6*\",\"anthropic/*sonnet-4-6*\",\"anthropic/*sonnet-5*\"],\"summarization\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash-lite\",\"mini\"],\"veo\":[\"google/veo*\",\"gemini/veo*\"],\"vision\":[\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"]}},\"container\":{\"imageTag\":\"0.28.59,squid=sha256:e815a456d6050564666cb2a8bb04ff11a4babc2bfa746d611e895b87e59f9af0,agent=sha256:63a1cba05e97ede7fc08cc8abb91167045c998d4415433e9c87377e9266ec291,api-proxy=sha256:f3d7842f34ff1778ac024a8918519b12436d6437b82d6d1d8cee1d01b2ac87e2,cli-proxy=sha256:c95928680eb65a5257b45370af0b79c04224d2a37a508b6401d552914aaf8dbe\",\"agentTimeout\":45},\"cloudHypervisor\":{\"previewEnabled\":true,\"mountPolicy\":\"workspace-and-tool-cache\",\"vcpuCount\":2,\"memoryMib\":4096},\"logging\":{\"proxyLogsDir\":\"/tmp/gh-aw/sandbox/firewall/logs\",\"auditDir\":\"/tmp/gh-aw/sandbox/firewall/audit\"}}" > "${RUNNER_TEMP}/gh-aw/awf-config.json" + printf '%s\n' "{\"\$schema\":\"https://github.com/github/gh-aw-firewall/releases/download/v0.28.59/awf-config.schema.json\",\"network\":{\"allowDomains\":[\"*.grafana.net\",\"*.sentry.io\",\"api.snapcraft.io\",\"archive.ubuntu.com\",\"azure.archive.ubuntu.com\",\"crl.geotrust.com\",\"crl.globalsign.com\",\"crl.identrust.com\",\"crl.sectigo.com\",\"crl.thawte.com\",\"crl.usertrust.com\",\"crl.verisign.com\",\"crl3.digicert.com\",\"crl4.digicert.com\",\"crls.ssl.com\",\"json-schema.org\",\"json.schemastore.org\",\"keyserver.ubuntu.com\",\"ocsp.digicert.com\",\"ocsp.geotrust.com\",\"ocsp.globalsign.com\",\"ocsp.identrust.com\",\"ocsp.sectigo.com\",\"ocsp.ssl.com\",\"ocsp.thawte.com\",\"ocsp.usertrust.com\",\"ocsp.verisign.com\",\"packagecloud.io\",\"packages.cloud.google.com\",\"packages.microsoft.com\",\"ppa.launchpad.net\",\"s.symcb.com\",\"s.symcd.com\",\"security.ubuntu.com\",\"ts-crl.ws.symantec.com\",\"ts-ocsp.ws.symantec.com\",\"www.googleapis.com\"],\"isolation\":true,\"topologyAttach\":[\"awmg-mcpg\"]},\"filesystem\":{\"allowWrite\":[\"/tmp/gh-aw/agent\",\"/tmp/gh-aw/sandbox/agent/logs\",\"/workspace\",\"/workspace/.awf-home\",\"/tmp/gh-aw/cache-memory\"]},\"apiProxy\":{\"enabled\":true,\"enableTokenSteering\":true,\"maxRuns\":500,\"maxAiCredits\":${GH_AW_MAX_AI_CREDITS},\"maxCacheMisses\":5,\"models\":{\"agent\":[\"sonnet-6x\",\"gpt-6\",\"gpt-5.4\",\"gpt-5.5\",\"gpt-5.6\",\"gpt-5.3\",\"gemini-pro\",\"any\"],\"antigravity\":[\"copilot/antigravity*\",\"google/antigravity*\",\"gemini/antigravity*\"],\"any\":[\"copilot/*\",\"anthropic/*\",\"openai/*\",\"google/*\",\"gemini/*\"],\"auto\":[\"copilot/auto\",\"large\"],\"claude\":[\"agent\"],\"codex\":[\"agent\"],\"coding\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\",\"gpt-5-codex\",\"kimi\"],\"computer-use\":[\"copilot/*computer-use*\",\"google/*computer-use*\",\"gemini/*computer-use*\",\"openai/*computer-use*\"],\"copilot\":[\"agent\"],\"deep-research\":[\"copilot/deep-research*\",\"copilot/o3-deep-research*\",\"copilot/o4-mini-deep-research*\",\"google/deep-research*\",\"gemini/deep-research*\",\"openai/o3-deep-research*\",\"openai/o4-mini-deep-research*\"],\"detection\":[\"small\"],\"evals\":[\"small\"],\"fable\":[\"copilot/*fable*\",\"anthropic/*fable*\"],\"gemini\":[\"agent\"],\"gemini-3-flash\":[\"copilot/gemini-3*flash*\",\"google/gemini-3*flash*\",\"gemini/gemini-3*flash*\"],\"gemini-3-pro\":[\"copilot/gemini-3*pro*\",\"google/gemini-3*pro*\",\"google/nano-banana*\",\"gemini/gemini-3*pro*\"],\"gemini-3.1-flash\":[\"copilot/gemini-3.1*flash*\",\"google/gemini-3.1*flash*\",\"gemini/gemini-3.1*flash*\"],\"gemini-3.1-pro\":[\"copilot/gemini-3.1*pro*\",\"google/gemini-3.1*pro*\",\"gemini/gemini-3.1*pro*\"],\"gemini-3.5-flash\":[\"copilot/gemini-3.5*flash*\",\"google/gemini-3.5*flash*\",\"gemini/gemini-3.5*flash*\"],\"gemini-3.6-flash\":[\"copilot/gemini-3.6*flash*\",\"google/gemini-3.6*flash*\",\"gemini/gemini-3.6*flash*\"],\"gemini-3.7-flash\":[\"copilot/gemini-3.7*flash*\",\"google/gemini-3.7*flash*\",\"gemini/gemini-3.7*flash*\"],\"gemini-3.8-flash\":[\"copilot/gemini-3.8*flash*\",\"google/gemini-3.8*flash*\",\"gemini/gemini-3.8*flash*\"],\"gemini-flash\":[\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"],\"gemini-flash-lite\":[\"copilot/gemini-*flash*lite*\",\"google/gemini-*flash*lite*\",\"gemini/gemini-*flash*lite*\"],\"gemini-omni\":[\"copilot/gemini-omni*\",\"google/gemini-omni*\",\"gemini/gemini-omni*\"],\"gemini-pro\":[\"copilot/gemini-*pro*\",\"google/gemini-*pro*\",\"gemini/gemini-*pro*\"],\"gemma\":[\"copilot/gemma*\",\"google/gemma*\",\"gemini/gemma*\"],\"gpt-5\":[\"copilot/gpt-5*\",\"openai/gpt-5*\"],\"gpt-5-codex\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\"],\"gpt-5-mini\":[\"copilot/gpt-5*mini*\",\"openai/gpt-5*mini*\"],\"gpt-5-nano\":[\"copilot/gpt-5*nano*\",\"openai/gpt-5*nano*\"],\"gpt-5-pro\":[\"copilot/gpt-5*pro*\",\"openai/gpt-5*pro*\"],\"gpt-5.1\":[\"copilot/gpt-5.1*\",\"openai/gpt-5.1*\"],\"gpt-5.2\":[\"copilot/gpt-5.2*\",\"openai/gpt-5.2*\"],\"gpt-5.3\":[\"copilot/gpt-5.3*\",\"openai/gpt-5.3*\"],\"gpt-5.4\":[\"copilot/gpt-5.4*\",\"openai/gpt-5.4*\"],\"gpt-5.5\":[\"copilot/gpt-5.5*\",\"openai/gpt-5.5*\"],\"gpt-5.6\":[\"copilot/gpt-5.6*\",\"openai/gpt-5.6*\"],\"gpt-6\":[\"copilot/gpt-6*\",\"openai/gpt-6*\"],\"grok\":[\"copilot/*grok*\",\"openai/*grok*\"],\"haiku\":[\"copilot/*haiku*\",\"anthropic/*haiku*\"],\"image-generation\":[\"copilot/gpt-image*\",\"openai/gpt-image*\",\"openai/chatgpt-image*\",\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"google/imagen*\"],\"kimi\":[\"copilot/kimi*\",\"openai/kimi*\"],\"kiwi\":[\"copilot/kiwi*\",\"openai/kiwi*\"],\"large\":[\"sonnet\",\"gpt-6\",\"gpt-5-pro\",\"gpt-5\",\"gemini-pro\"],\"lyria\":[\"google/lyria*\",\"gemini/lyria*\",\"copilot/lyria*\"],\"mai-code\":[\"copilot/MAI-Code*\",\"copilot/mai-code*\",\"openai/MAI-Code*\"],\"mai-code-1-flash-picker\":[\"copilot/MAI-Code-1-Flash-picker*\",\"copilot/mai-code-1-flash-picker*\",\"openai/MAI-Code-1-Flash-picker*\"],\"mini\":[\"haiku\",\"gpt-5-mini\",\"gpt-5-nano\",\"gemini-flash-lite\"],\"nano-banana\":[\"copilot/nano-banana*\",\"google/nano-banana*\",\"gemini/nano-banana*\"],\"opus\":[\"copilot/*opus*\",\"anthropic/*opus*\"],\"opusplan\":[\"opus?effort=high\"],\"raptor-mini\":[\"copilot/raptor*\",\"openai/raptor*\"],\"reasoning\":[\"copilot/o1*\",\"copilot/o3*\",\"copilot/o4*\",\"openai/o1*\",\"openai/o3*\",\"openai/o4*\"],\"robotics\":[\"copilot/*robotics*\",\"google/*robotics*\",\"gemini/*robotics*\"],\"small\":[\"mini\"],\"small-agent\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash\"],\"sonnet\":[\"copilot/*sonnet*\",\"anthropic/*sonnet*\"],\"sonnet-6x\":[\"copilot/*sonnet-4.5*\",\"copilot/*sonnet-4.6*\",\"copilot/*sonnet-5*\",\"copilot/*sonnet-4-5-*\",\"anthropic/*sonnet-4-5-*\",\"copilot/*sonnet-4-6*\",\"anthropic/*sonnet-4-6*\",\"anthropic/*sonnet-5*\"],\"summarization\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash-lite\",\"mini\"],\"veo\":[\"google/veo*\",\"gemini/veo*\"],\"vision\":[\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"]}},\"container\":{\"imageTag\":\"0.28.59,squid=sha256:e815a456d6050564666cb2a8bb04ff11a4babc2bfa746d611e895b87e59f9af0,agent=sha256:63a1cba05e97ede7fc08cc8abb91167045c998d4415433e9c87377e9266ec291,api-proxy=sha256:f3d7842f34ff1778ac024a8918519b12436d6437b82d6d1d8cee1d01b2ac87e2,cli-proxy=sha256:c95928680eb65a5257b45370af0b79c04224d2a37a508b6401d552914aaf8dbe\",\"agentTimeout\":45},\"cloudHypervisor\":{\"previewEnabled\":true,\"mountPolicy\":\"workspace-and-tool-cache\",\"vcpuCount\":2,\"memoryMib\":4096},\"logging\":{\"proxyLogsDir\":\"/tmp/gh-aw/sandbox/firewall/logs\",\"auditDir\":\"/tmp/gh-aw/sandbox/firewall/audit\"}}" > "${RUNNER_TEMP}/gh-aw/awf-config.json" cp "${RUNNER_TEMP}/gh-aw/awf-config.json" /tmp/gh-aw/awf-config.json export GH_AW_MODELS_JSON_PATH="/tmp/gh-aw/models.json" GH_AW_DOCKER_HOST="" @@ -1667,6 +1667,9 @@ jobs: cancel-in-progress: false queue: max env: + GH_AW_JOB_DISPLAY_NAMES: "{\"activation\":\"activation\",\"agent\":\"agent\",\"conclusion\":\"conclusion\",\"detection\":\"detection\",\"evals\":\"evals\",\"push_evals_state\":\"push_evals_state\",\"push_ledger_changes\":\"push_ledger_changes\",\"safe_outputs\":\"safe_outputs\",\"update_cache_memory\":\"update_cache_memory\"}" + GH_AW_JOB_RESULTS: "{\"activation\":{\"result\":\"${{ needs.activation.result }}\"},\"agent\":{\"result\":\"${{ needs.agent.result }}\"},\"detection\":{\"result\":\"${{ needs.detection.result }}\"},\"evals\":{\"result\":\"${{ needs.evals.result }}\"},\"push_evals_state\":{\"result\":\"${{ needs.push_evals_state.result }}\"},\"push_ledger_changes\":{\"result\":\"${{ needs.push_ledger_changes.result }}\"},\"safe_outputs\":{\"result\":\"${{ needs.safe_outputs.result }}\"},\"update_cache_memory\":{\"result\":\"${{ needs.update_cache_memory.result }}\"}}" + GH_AW_JOB_TIMING_ELIGIBLE: "{\"activation\":true,\"agent\":true,\"conclusion\":true,\"detection\":true,\"evals\":true,\"push_evals_state\":true,\"push_ledger_changes\":true,\"safe_outputs\":true,\"update_cache_memory\":true}" GH_AW_RUNTIME_FEATURES: ${{ vars.GH_AW_RUNTIME_FEATURES }} outputs: incomplete_count: ${{ steps.report_incomplete.outputs.incomplete_count }} @@ -1909,8 +1912,6 @@ jobs: GH_AW_WORKFLOW_SOURCE_URL: "${{ github.server_url }}/${{ github.repository }}/blob/${{ github.ref_name }}/.github/workflows/daily-mcp-concurrency-analysis.md" GH_AW_TRACKER_ID: "mcp-concurrency-analysis" GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }} - GH_AW_JOB_RESULTS: ${{ toJSON(needs) }} - GH_AW_JOB_DISPLAY_NAMES: "{\"activation\":\"Activation\",\"agent\":\"Agent\",\"check_token_telemetry\":\"Check token telemetry\",\"conclusion\":\"Conclusion\",\"detection\":\"Detection\",\"evals\":\"Evaluations\",\"pre_activation\":\"Pre-activation\",\"push_evals_state\":\"Push evaluations state\",\"push_experiments_state\":\"Push experiments state\",\"push_ledger_changes\":\"Push ledger changes\",\"push_repo_memory\":\"Push repository memory\",\"safe_outputs\":\"Safe outputs\",\"send_slack_message\":\"Send Slack message\",\"unlock\":\"Unlock\",\"update_cache_memory\":\"Update cache memory\",\"update_drive_memory\":\"Update drive memory\",\"upload_assets\":\"Upload assets\",\"upload_code_coverage\":\"Upload code coverage\",\"upload_code_scanning_sarif\":\"Upload code scanning results\"}" GH_AW_REPORT_FAILED_JOBS: "true" with: github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} @@ -1934,6 +1935,7 @@ jobs: continue-on-error: true uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 env: + GH_AW_JOB_DURATIONS: ${{ steps.report_failed_jobs.outputs.job_durations }} GH_AW_DAILY_AI_CREDITS_GUARDRAIL_STATUS: ${{ needs.activation.outputs.daily_ai_credits_guardrail_status }} GH_AW_DAILY_AI_CREDITS_EXCEEDED: ${{ needs.activation.outputs.daily_ai_credits_exceeded }} GH_AW_DAILY_AI_CREDITS_TOTAL: ${{ needs.activation.outputs.daily_ai_credits_total }} diff --git a/.github/workflows/smoke-work-queue.lock.yml b/.github/workflows/smoke-work-queue.lock.yml index ab7c7f5e404..b23baa9f0f6 100644 --- a/.github/workflows/smoke-work-queue.lock.yml +++ b/.github/workflows/smoke-work-queue.lock.yml @@ -971,7 +971,7 @@ jobs: if [[ ! "$GH_AW_MAX_AI_CREDITS" =~ ^[0-9]+$ ]]; then GH_AW_MAX_AI_CREDITS="1000" fi - printf '%s\n' "{\"\$schema\":\"https://github.com/github/gh-aw-firewall/releases/download/v0.28.59/awf-config.schema.json\",\"network\":{\"allowDomains\":[\"api.snapcraft.io\",\"archive.ubuntu.com\",\"azure.archive.ubuntu.com\",\"crl.geotrust.com\",\"crl.globalsign.com\",\"crl.identrust.com\",\"crl.sectigo.com\",\"crl.thawte.com\",\"crl.usertrust.com\",\"crl.verisign.com\",\"crl3.digicert.com\",\"crl4.digicert.com\",\"crls.ssl.com\",\"json-schema.org\",\"json.schemastore.org\",\"keyserver.ubuntu.com\",\"ocsp.digicert.com\",\"ocsp.geotrust.com\",\"ocsp.globalsign.com\",\"ocsp.identrust.com\",\"ocsp.sectigo.com\",\"ocsp.ssl.com\",\"ocsp.thawte.com\",\"ocsp.usertrust.com\",\"ocsp.verisign.com\",\"packagecloud.io\",\"packages.cloud.google.com\",\"packages.microsoft.com\",\"ppa.launchpad.net\",\"s.symcb.com\",\"s.symcd.com\",\"security.ubuntu.com\",\"ts-crl.ws.symantec.com\",\"ts-ocsp.ws.symantec.com\",\"www.googleapis.com\"],\"isolation\":true,\"topologyAttach\":[\"awmg-mcpg\"]},\"filesystem\":{\"allowWrite\":[\"/tmp/gh-aw/agent\",\"/tmp/gh-aw/sandbox/agent/logs\",\"/tmp/gh-aw/aw_info.json\",\"/workspace\",\"/workspace/.awf-home\"]},\"apiProxy\":{\"enabled\":true,\"enableTokenSteering\":true,\"maxRuns\":500,\"maxAiCredits\":${GH_AW_MAX_AI_CREDITS},\"maxCacheMisses\":5,\"modelFallback\":{\"enabled\":false},\"fallbackModels\":[\"gpt-5.4\",\"gpt-5.4-mini\"],\"providers\":{\"github-copilot\":{\"models\":{\"gpt-5.3-codex\":{\"cost\":{\"cache_read\":\"1.75e-07\",\"input\":\"1.75e-06\",\"output\":\"1.4e-05\"}},\"gpt-5.4\":{\"cost\":{\"cache_read\":\"2.5e-07\",\"input\":\"2.5e-06\",\"output\":\"1.5e-05\"}},\"gpt-5.4-mini\":{\"cost\":{\"cache_read\":\"7.5e-08\",\"input\":\"7.5e-07\",\"output\":\"4.5e-06\"}}}}},\"models\":{\"agent\":[\"sonnet-6x\",\"gpt-6\",\"gpt-5.4\",\"gpt-5.5\",\"gpt-5.6\",\"gpt-5.3\",\"gemini-pro\",\"any\"],\"antigravity\":[\"copilot/antigravity*\",\"google/antigravity*\",\"gemini/antigravity*\"],\"any\":[\"copilot/*\",\"anthropic/*\",\"openai/*\",\"google/*\",\"gemini/*\"],\"auto\":[\"copilot/auto\",\"large\"],\"claude\":[\"agent\"],\"codex\":[\"agent\"],\"coding\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\",\"gpt-5-codex\",\"kimi\"],\"computer-use\":[\"copilot/*computer-use*\",\"google/*computer-use*\",\"gemini/*computer-use*\",\"openai/*computer-use*\"],\"copilot\":[\"agent\"],\"deep-research\":[\"copilot/deep-research*\",\"copilot/o3-deep-research*\",\"copilot/o4-mini-deep-research*\",\"google/deep-research*\",\"gemini/deep-research*\",\"openai/o3-deep-research*\",\"openai/o4-mini-deep-research*\"],\"detection\":[\"small\"],\"evals\":[\"small\"],\"fable\":[\"copilot/*fable*\",\"anthropic/*fable*\"],\"gemini\":[\"agent\"],\"gemini-3-flash\":[\"copilot/gemini-3*flash*\",\"google/gemini-3*flash*\",\"gemini/gemini-3*flash*\"],\"gemini-3-pro\":[\"copilot/gemini-3*pro*\",\"google/gemini-3*pro*\",\"google/nano-banana*\",\"gemini/gemini-3*pro*\"],\"gemini-3.1-flash\":[\"copilot/gemini-3.1*flash*\",\"google/gemini-3.1*flash*\",\"gemini/gemini-3.1*flash*\"],\"gemini-3.1-pro\":[\"copilot/gemini-3.1*pro*\",\"google/gemini-3.1*pro*\",\"gemini/gemini-3.1*pro*\"],\"gemini-3.5-flash\":[\"copilot/gemini-3.5*flash*\",\"google/gemini-3.5*flash*\",\"gemini/gemini-3.5*flash*\"],\"gemini-3.6-flash\":[\"copilot/gemini-3.6*flash*\",\"google/gemini-3.6*flash*\",\"gemini/gemini-3.6*flash*\"],\"gemini-3.7-flash\":[\"copilot/gemini-3.7*flash*\",\"google/gemini-3.7*flash*\",\"gemini/gemini-3.7*flash*\"],\"gemini-3.8-flash\":[\"copilot/gemini-3.8*flash*\",\"google/gemini-3.8*flash*\",\"gemini/gemini-3.8*flash*\"],\"gemini-flash\":[\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"],\"gemini-flash-lite\":[\"copilot/gemini-*flash*lite*\",\"google/gemini-*flash*lite*\",\"gemini/gemini-*flash*lite*\"],\"gemini-omni\":[\"copilot/gemini-omni*\",\"google/gemini-omni*\",\"gemini/gemini-omni*\"],\"gemini-pro\":[\"copilot/gemini-*pro*\",\"google/gemini-*pro*\",\"gemini/gemini-*pro*\"],\"gemma\":[\"copilot/gemma*\",\"google/gemma*\",\"gemini/gemma*\"],\"gpt-5\":[\"copilot/gpt-5*\",\"openai/gpt-5*\"],\"gpt-5-codex\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\"],\"gpt-5-mini\":[\"copilot/gpt-5*mini*\",\"openai/gpt-5*mini*\"],\"gpt-5-nano\":[\"copilot/gpt-5*nano*\",\"openai/gpt-5*nano*\"],\"gpt-5-pro\":[\"copilot/gpt-5*pro*\",\"openai/gpt-5*pro*\"],\"gpt-5.1\":[\"copilot/gpt-5.1*\",\"openai/gpt-5.1*\"],\"gpt-5.2\":[\"copilot/gpt-5.2*\",\"openai/gpt-5.2*\"],\"gpt-5.3\":[\"copilot/gpt-5.3*\",\"openai/gpt-5.3*\"],\"gpt-5.4\":[\"copilot/gpt-5.4*\",\"openai/gpt-5.4*\"],\"gpt-5.5\":[\"copilot/gpt-5.5*\",\"openai/gpt-5.5*\"],\"gpt-5.6\":[\"copilot/gpt-5.6*\",\"openai/gpt-5.6*\"],\"gpt-6\":[\"copilot/gpt-6*\",\"openai/gpt-6*\"],\"grok\":[\"copilot/*grok*\",\"openai/*grok*\"],\"haiku\":[\"copilot/*haiku*\",\"anthropic/*haiku*\"],\"image-generation\":[\"copilot/gpt-image*\",\"openai/gpt-image*\",\"openai/chatgpt-image*\",\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"google/imagen*\"],\"kimi\":[\"copilot/kimi*\",\"openai/kimi*\"],\"kiwi\":[\"copilot/kiwi*\",\"openai/kiwi*\"],\"large\":[\"sonnet\",\"gpt-6\",\"gpt-5-pro\",\"gpt-5\",\"gemini-pro\"],\"lyria\":[\"google/lyria*\",\"gemini/lyria*\",\"copilot/lyria*\"],\"mai-code\":[\"copilot/MAI-Code*\",\"copilot/mai-code*\",\"openai/MAI-Code*\"],\"mai-code-1-flash-picker\":[\"copilot/MAI-Code-1-Flash-picker*\",\"copilot/mai-code-1-flash-picker*\",\"openai/MAI-Code-1-Flash-picker*\"],\"mini\":[\"haiku\",\"gpt-5-mini\",\"gpt-5-nano\",\"gemini-flash-lite\"],\"nano-banana\":[\"copilot/nano-banana*\",\"google/nano-banana*\",\"gemini/nano-banana*\"],\"opus\":[\"copilot/*opus*\",\"anthropic/*opus*\"],\"opusplan\":[\"opus?effort=high\"],\"raptor-mini\":[\"copilot/raptor*\",\"openai/raptor*\"],\"reasoning\":[\"copilot/o1*\",\"copilot/o3*\",\"copilot/o4*\",\"openai/o1*\",\"openai/o3*\",\"openai/o4*\"],\"robotics\":[\"copilot/*robotics*\",\"google/*robotics*\",\"gemini/*robotics*\"],\"small\":[\"mini\"],\"small-agent\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash\"],\"sonnet\":[\"copilot/*sonnet*\",\"anthropic/*sonnet*\"],\"sonnet-6x\":[\"copilot/*sonnet-4.5*\",\"copilot/*sonnet-4.6*\",\"copilot/*sonnet-5*\",\"copilot/*sonnet-4-5-*\",\"anthropic/*sonnet-4-5-*\",\"copilot/*sonnet-4-6*\",\"anthropic/*sonnet-4-6*\",\"anthropic/*sonnet-5*\"],\"summarization\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash-lite\",\"mini\"],\"veo\":[\"google/veo*\",\"gemini/veo*\"],\"vision\":[\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"]}},\"container\":{\"imageTag\":\"0.28.59,squid=sha256:e815a456d6050564666cb2a8bb04ff11a4babc2bfa746d611e895b87e59f9af0,agent=sha256:63a1cba05e97ede7fc08cc8abb91167045c998d4415433e9c87377e9266ec291,api-proxy=sha256:f3d7842f34ff1778ac024a8918519b12436d6437b82d6d1d8cee1d01b2ac87e2,cli-proxy=sha256:c95928680eb65a5257b45370af0b79c04224d2a37a508b6401d552914aaf8dbe\",\"agentTimeout\":10},\"cloudHypervisor\":{\"previewEnabled\":true,\"mountPolicy\":\"workspace-and-tool-cache\",\"vcpuCount\":2,\"memoryMib\":4096},\"logging\":{\"proxyLogsDir\":\"/tmp/gh-aw/sandbox/firewall/logs\",\"auditDir\":\"/tmp/gh-aw/sandbox/firewall/audit\"}}" > "${RUNNER_TEMP}/gh-aw/awf-config.json" + printf '%s\n' "{\"\$schema\":\"https://github.com/github/gh-aw-firewall/releases/download/v0.28.59/awf-config.schema.json\",\"network\":{\"allowDomains\":[\"api.snapcraft.io\",\"archive.ubuntu.com\",\"azure.archive.ubuntu.com\",\"crl.geotrust.com\",\"crl.globalsign.com\",\"crl.identrust.com\",\"crl.sectigo.com\",\"crl.thawte.com\",\"crl.usertrust.com\",\"crl.verisign.com\",\"crl3.digicert.com\",\"crl4.digicert.com\",\"crls.ssl.com\",\"json-schema.org\",\"json.schemastore.org\",\"keyserver.ubuntu.com\",\"ocsp.digicert.com\",\"ocsp.geotrust.com\",\"ocsp.globalsign.com\",\"ocsp.identrust.com\",\"ocsp.sectigo.com\",\"ocsp.ssl.com\",\"ocsp.thawte.com\",\"ocsp.usertrust.com\",\"ocsp.verisign.com\",\"packagecloud.io\",\"packages.cloud.google.com\",\"packages.microsoft.com\",\"ppa.launchpad.net\",\"s.symcb.com\",\"s.symcd.com\",\"security.ubuntu.com\",\"ts-crl.ws.symantec.com\",\"ts-ocsp.ws.symantec.com\",\"www.googleapis.com\"],\"isolation\":true,\"topologyAttach\":[\"awmg-mcpg\"]},\"filesystem\":{\"allowWrite\":[\"/tmp/gh-aw/agent\",\"/tmp/gh-aw/sandbox/agent/logs\",\"/workspace\",\"/workspace/.awf-home\"]},\"apiProxy\":{\"enabled\":true,\"enableTokenSteering\":true,\"maxRuns\":500,\"maxAiCredits\":${GH_AW_MAX_AI_CREDITS},\"maxCacheMisses\":5,\"modelFallback\":{\"enabled\":false},\"fallbackModels\":[\"gpt-5.4\",\"gpt-5.4-mini\"],\"providers\":{\"github-copilot\":{\"models\":{\"gpt-5.3-codex\":{\"cost\":{\"cache_read\":\"1.75e-07\",\"input\":\"1.75e-06\",\"output\":\"1.4e-05\"}},\"gpt-5.4\":{\"cost\":{\"cache_read\":\"2.5e-07\",\"input\":\"2.5e-06\",\"output\":\"1.5e-05\"}},\"gpt-5.4-mini\":{\"cost\":{\"cache_read\":\"7.5e-08\",\"input\":\"7.5e-07\",\"output\":\"4.5e-06\"}}}}},\"models\":{\"agent\":[\"sonnet-6x\",\"gpt-6\",\"gpt-5.4\",\"gpt-5.5\",\"gpt-5.6\",\"gpt-5.3\",\"gemini-pro\",\"any\"],\"antigravity\":[\"copilot/antigravity*\",\"google/antigravity*\",\"gemini/antigravity*\"],\"any\":[\"copilot/*\",\"anthropic/*\",\"openai/*\",\"google/*\",\"gemini/*\"],\"auto\":[\"copilot/auto\",\"large\"],\"claude\":[\"agent\"],\"codex\":[\"agent\"],\"coding\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\",\"gpt-5-codex\",\"kimi\"],\"computer-use\":[\"copilot/*computer-use*\",\"google/*computer-use*\",\"gemini/*computer-use*\",\"openai/*computer-use*\"],\"copilot\":[\"agent\"],\"deep-research\":[\"copilot/deep-research*\",\"copilot/o3-deep-research*\",\"copilot/o4-mini-deep-research*\",\"google/deep-research*\",\"gemini/deep-research*\",\"openai/o3-deep-research*\",\"openai/o4-mini-deep-research*\"],\"detection\":[\"small\"],\"evals\":[\"small\"],\"fable\":[\"copilot/*fable*\",\"anthropic/*fable*\"],\"gemini\":[\"agent\"],\"gemini-3-flash\":[\"copilot/gemini-3*flash*\",\"google/gemini-3*flash*\",\"gemini/gemini-3*flash*\"],\"gemini-3-pro\":[\"copilot/gemini-3*pro*\",\"google/gemini-3*pro*\",\"google/nano-banana*\",\"gemini/gemini-3*pro*\"],\"gemini-3.1-flash\":[\"copilot/gemini-3.1*flash*\",\"google/gemini-3.1*flash*\",\"gemini/gemini-3.1*flash*\"],\"gemini-3.1-pro\":[\"copilot/gemini-3.1*pro*\",\"google/gemini-3.1*pro*\",\"gemini/gemini-3.1*pro*\"],\"gemini-3.5-flash\":[\"copilot/gemini-3.5*flash*\",\"google/gemini-3.5*flash*\",\"gemini/gemini-3.5*flash*\"],\"gemini-3.6-flash\":[\"copilot/gemini-3.6*flash*\",\"google/gemini-3.6*flash*\",\"gemini/gemini-3.6*flash*\"],\"gemini-3.7-flash\":[\"copilot/gemini-3.7*flash*\",\"google/gemini-3.7*flash*\",\"gemini/gemini-3.7*flash*\"],\"gemini-3.8-flash\":[\"copilot/gemini-3.8*flash*\",\"google/gemini-3.8*flash*\",\"gemini/gemini-3.8*flash*\"],\"gemini-flash\":[\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"],\"gemini-flash-lite\":[\"copilot/gemini-*flash*lite*\",\"google/gemini-*flash*lite*\",\"gemini/gemini-*flash*lite*\"],\"gemini-omni\":[\"copilot/gemini-omni*\",\"google/gemini-omni*\",\"gemini/gemini-omni*\"],\"gemini-pro\":[\"copilot/gemini-*pro*\",\"google/gemini-*pro*\",\"gemini/gemini-*pro*\"],\"gemma\":[\"copilot/gemma*\",\"google/gemma*\",\"gemini/gemma*\"],\"gpt-5\":[\"copilot/gpt-5*\",\"openai/gpt-5*\"],\"gpt-5-codex\":[\"copilot/gpt-5*codex*\",\"openai/gpt-5*codex*\"],\"gpt-5-mini\":[\"copilot/gpt-5*mini*\",\"openai/gpt-5*mini*\"],\"gpt-5-nano\":[\"copilot/gpt-5*nano*\",\"openai/gpt-5*nano*\"],\"gpt-5-pro\":[\"copilot/gpt-5*pro*\",\"openai/gpt-5*pro*\"],\"gpt-5.1\":[\"copilot/gpt-5.1*\",\"openai/gpt-5.1*\"],\"gpt-5.2\":[\"copilot/gpt-5.2*\",\"openai/gpt-5.2*\"],\"gpt-5.3\":[\"copilot/gpt-5.3*\",\"openai/gpt-5.3*\"],\"gpt-5.4\":[\"copilot/gpt-5.4*\",\"openai/gpt-5.4*\"],\"gpt-5.5\":[\"copilot/gpt-5.5*\",\"openai/gpt-5.5*\"],\"gpt-5.6\":[\"copilot/gpt-5.6*\",\"openai/gpt-5.6*\"],\"gpt-6\":[\"copilot/gpt-6*\",\"openai/gpt-6*\"],\"grok\":[\"copilot/*grok*\",\"openai/*grok*\"],\"haiku\":[\"copilot/*haiku*\",\"anthropic/*haiku*\"],\"image-generation\":[\"copilot/gpt-image*\",\"openai/gpt-image*\",\"openai/chatgpt-image*\",\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"google/imagen*\"],\"kimi\":[\"copilot/kimi*\",\"openai/kimi*\"],\"kiwi\":[\"copilot/kiwi*\",\"openai/kiwi*\"],\"large\":[\"sonnet\",\"gpt-6\",\"gpt-5-pro\",\"gpt-5\",\"gemini-pro\"],\"lyria\":[\"google/lyria*\",\"gemini/lyria*\",\"copilot/lyria*\"],\"mai-code\":[\"copilot/MAI-Code*\",\"copilot/mai-code*\",\"openai/MAI-Code*\"],\"mai-code-1-flash-picker\":[\"copilot/MAI-Code-1-Flash-picker*\",\"copilot/mai-code-1-flash-picker*\",\"openai/MAI-Code-1-Flash-picker*\"],\"mini\":[\"haiku\",\"gpt-5-mini\",\"gpt-5-nano\",\"gemini-flash-lite\"],\"nano-banana\":[\"copilot/nano-banana*\",\"google/nano-banana*\",\"gemini/nano-banana*\"],\"opus\":[\"copilot/*opus*\",\"anthropic/*opus*\"],\"opusplan\":[\"opus?effort=high\"],\"raptor-mini\":[\"copilot/raptor*\",\"openai/raptor*\"],\"reasoning\":[\"copilot/o1*\",\"copilot/o3*\",\"copilot/o4*\",\"openai/o1*\",\"openai/o3*\",\"openai/o4*\"],\"robotics\":[\"copilot/*robotics*\",\"google/*robotics*\",\"gemini/*robotics*\"],\"small\":[\"mini\"],\"small-agent\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash\"],\"sonnet\":[\"copilot/*sonnet*\",\"anthropic/*sonnet*\"],\"sonnet-6x\":[\"copilot/*sonnet-4.5*\",\"copilot/*sonnet-4.6*\",\"copilot/*sonnet-5*\",\"copilot/*sonnet-4-5-*\",\"anthropic/*sonnet-4-5-*\",\"copilot/*sonnet-4-6*\",\"anthropic/*sonnet-4-6*\",\"anthropic/*sonnet-5*\"],\"summarization\":[\"haiku\",\"gpt-5-mini\",\"gemini-flash-lite\",\"mini\"],\"veo\":[\"google/veo*\",\"gemini/veo*\"],\"vision\":[\"copilot/gemini-*image*\",\"google/gemini-*image*\",\"gemini/gemini-*image*\",\"copilot/gemini-*flash*\",\"google/gemini-*flash*\",\"gemini/gemini-*flash*\"]}},\"container\":{\"imageTag\":\"0.28.59,squid=sha256:e815a456d6050564666cb2a8bb04ff11a4babc2bfa746d611e895b87e59f9af0,agent=sha256:63a1cba05e97ede7fc08cc8abb91167045c998d4415433e9c87377e9266ec291,api-proxy=sha256:f3d7842f34ff1778ac024a8918519b12436d6437b82d6d1d8cee1d01b2ac87e2,cli-proxy=sha256:c95928680eb65a5257b45370af0b79c04224d2a37a508b6401d552914aaf8dbe\",\"agentTimeout\":10},\"cloudHypervisor\":{\"previewEnabled\":true,\"mountPolicy\":\"workspace-and-tool-cache\",\"vcpuCount\":2,\"memoryMib\":4096},\"logging\":{\"proxyLogsDir\":\"/tmp/gh-aw/sandbox/firewall/logs\",\"auditDir\":\"/tmp/gh-aw/sandbox/firewall/audit\"}}" > "${RUNNER_TEMP}/gh-aw/awf-config.json" cp "${RUNNER_TEMP}/gh-aw/awf-config.json" /tmp/gh-aw/awf-config.json export GH_AW_MODELS_JSON_PATH="/tmp/gh-aw/models.json" GH_AW_DOCKER_HOST="" @@ -1302,6 +1302,9 @@ jobs: cancel-in-progress: false queue: max env: + GH_AW_JOB_DISPLAY_NAMES: "{\"activation\":\"activation\",\"agent\":\"agent\",\"conclusion\":\"conclusion\",\"detection\":\"detection\",\"safe_outputs\":\"safe_outputs\",\"verify_smoke_result\":\"verify_smoke_result\"}" + GH_AW_JOB_RESULTS: "{\"activation\":{\"result\":\"${{ needs.activation.result }}\"},\"agent\":{\"result\":\"${{ needs.agent.result }}\"},\"detection\":{\"result\":\"${{ needs.detection.result }}\"},\"safe_outputs\":{\"result\":\"${{ needs.safe_outputs.result }}\"},\"verify_smoke_result\":{\"result\":\"${{ needs.verify_smoke_result.result }}\"}}" + GH_AW_JOB_TIMING_ELIGIBLE: "{\"activation\":true,\"agent\":true,\"conclusion\":true,\"detection\":true,\"safe_outputs\":true,\"verify_smoke_result\":true}" GH_AW_RUNTIME_FEATURES: ${{ vars.GH_AW_RUNTIME_FEATURES }} outputs: incomplete_count: ${{ steps.report_incomplete.outputs.incomplete_count }} @@ -1539,8 +1542,6 @@ jobs: GH_AW_WORKFLOW_NAME: "Smoke Work Queue" GH_AW_WORKFLOW_SOURCE_URL: "${{ github.server_url }}/${{ github.repository }}/blob/${{ github.ref_name }}/.github/workflows/smoke-work-queue.md" GH_AW_RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }} - GH_AW_JOB_RESULTS: ${{ toJSON(needs) }} - GH_AW_JOB_DISPLAY_NAMES: "{\"activation\":\"Activation\",\"agent\":\"Agent\",\"check_token_telemetry\":\"Check token telemetry\",\"conclusion\":\"Conclusion\",\"detection\":\"Detection\",\"evals\":\"Evaluations\",\"pre_activation\":\"Pre-activation\",\"push_evals_state\":\"Push evaluations state\",\"push_experiments_state\":\"Push experiments state\",\"push_ledger_changes\":\"Push ledger changes\",\"push_repo_memory\":\"Push repository memory\",\"safe_outputs\":\"Safe outputs\",\"send_slack_message\":\"Send Slack message\",\"unlock\":\"Unlock\",\"update_cache_memory\":\"Update cache memory\",\"update_drive_memory\":\"Update drive memory\",\"upload_assets\":\"Upload assets\",\"upload_code_coverage\":\"Upload code coverage\",\"upload_code_scanning_sarif\":\"Upload code scanning results\"}" GH_AW_REPORT_FAILED_JOBS: "true" with: github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} @@ -1564,6 +1565,7 @@ jobs: continue-on-error: true uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 env: + GH_AW_JOB_DURATIONS: ${{ steps.report_failed_jobs.outputs.job_durations }} GH_AW_DAILY_AI_CREDITS_GUARDRAIL_STATUS: ${{ needs.activation.outputs.daily_ai_credits_guardrail_status }} GH_AW_DAILY_AI_CREDITS_EXCEEDED: ${{ needs.activation.outputs.daily_ai_credits_exceeded }} GH_AW_DAILY_AI_CREDITS_TOTAL: ${{ needs.activation.outputs.daily_ai_credits_total }} diff --git a/actions/setup/js/copilot_harness.test.cjs b/actions/setup/js/copilot_harness.test.cjs index abbc3073f8a..e5c29d2db14 100644 --- a/actions/setup/js/copilot_harness.test.cjs +++ b/actions/setup/js/copilot_harness.test.cjs @@ -4149,10 +4149,11 @@ process.exit(1);` expect(exitSpy).toHaveBeenCalledWith(1); expect(logs.at(-1)).toContain("not available in the workflow's live model catalog"); expect(logs.at(-1)).not.toContain("retrieval prevented"); - expect(JSON.parse(fs.readFileSync(path.join(tempDir, "aw_info.json"), "utf8"))).toMatchObject({ - requested_model: "gemini-3.8-flash", - model: "", - model_selection: { status: "unavailable" }, + expect(fs.existsSync(path.join(tempDir, "aw_info.json"))).toBe(false); + expect(JSON.parse(fs.readFileSync(path.join(tempDir, "sandbox/agent/logs/copilot-model-selection.json"), "utf8"))).toMatchObject({ + configured_model: "gemini-3.8-flash", + effective_model: "", + status: "unavailable", }); } finally { vi.unstubAllEnvs(); diff --git a/actions/setup/js/copilot_model_selection.cjs b/actions/setup/js/copilot_model_selection.cjs index 16a91306a67..e7b180338ca 100644 --- a/actions/setup/js/copilot_model_selection.cjs +++ b/actions/setup/js/copilot_model_selection.cjs @@ -15,9 +15,40 @@ function modelID(value) { function recordCopilotModelSelection(selection, env = process.env) { if (env.GH_AW_PHASE && env.GH_AW_PHASE !== "agent") return; + const file = path.join(env.GH_AW_TMP_DIR || "/tmp/gh-aw", "sandbox/agent/logs/copilot-model-selection.json"); + try { + fs.mkdirSync(path.dirname(file), { recursive: true }); + fs.writeFileSync(file, JSON.stringify(selection)); + } catch (error) { + throw new Error(`Cannot record Copilot model selection log: ${getErrorMessage(error)}`, { cause: error }); + } +} + +// Only the runner post-step updates workflow metadata; the harness writes a log. +function persistCopilotModelSelection(env = process.env) { + if (env.GH_AW_PHASE && env.GH_AW_PHASE !== "agent") return; + const log = path.join(env.GH_AW_TMP_DIR || "/tmp/gh-aw", "sandbox/agent/logs/copilot-model-selection.json"); + if (!fs.existsSync(log)) return; const file = path.join(env.GH_AW_TMP_DIR || "/tmp/gh-aw", "aw_info.json"); try { const info = fs.existsSync(file) ? JSON.parse(fs.readFileSync(file, "utf8")) : {}; + if ((env.GH_AW_ENGINE_ID || info.engine_id) !== "copilot") return; + const stat = fs.lstatSync(log); + if (!stat.isFile() || stat.size > 16384) throw new Error("Invalid Copilot model selection log"); + const record = JSON.parse(fs.readFileSync(log, "utf8")); + const selection = { + status: record?.status, + configured_model: typeof record?.configured_model === "string" ? validateModelIdentifier(splitModelIdentifier(record.configured_model).base) : "", + resolved_model: typeof record?.resolved_model === "string" ? modelID(record.resolved_model) : "", + effective_model: typeof record?.effective_model === "string" ? modelID(record.effective_model) : "", + }; + if (!selection.configured_model || !["observed", "substituted", "unavailable"].includes(selection.status)) throw new Error("Invalid Copilot model selection"); + if (selection.status === "unavailable") { + selection.resolved_model = ""; + selection.effective_model = ""; + } else if (!selection.resolved_model || !selection.effective_model) { + throw new Error("Invalid Copilot model selection models"); + } info.requested_model ||= selection.configured_model; info.model = selection.effective_model; info.model_selection = selection; @@ -125,4 +156,4 @@ function createCopilotModelObserver({ configuredModel, resolvedModel, sessionId, return { check }; } -module.exports = { createCopilotModelObserver, recordCopilotModelSelection }; +module.exports = { createCopilotModelObserver, recordCopilotModelSelection, persistCopilotModelSelection }; diff --git a/actions/setup/js/copilot_model_selection.test.cjs b/actions/setup/js/copilot_model_selection.test.cjs index dde9627e87f..ee1f6f0212b 100644 --- a/actions/setup/js/copilot_model_selection.test.cjs +++ b/actions/setup/js/copilot_model_selection.test.cjs @@ -1,11 +1,11 @@ -import { afterEach, beforeEach, describe, expect, it } from "vitest"; +import { afterEach, beforeEach, describe, expect, it, vi } from "vitest"; import { createRequire } from "module"; import { spawnSync } from "child_process"; import fs from "fs"; import path from "path"; const require = createRequire(import.meta.url); -const { createCopilotModelObserver, recordCopilotModelSelection } = require("./copilot_model_selection.cjs"); +const { createCopilotModelObserver, recordCopilotModelSelection, persistCopilotModelSelection } = require("./copilot_model_selection.cjs"); const { resolveEffectiveModel, getEffectiveModelLabel } = require("./model_attribution.cjs"); const { detectErrors } = require("./agent_error_patterns.cjs"); @@ -13,7 +13,7 @@ describe("Copilot configured versus observed model", () => { let root, env, session, infoPath; beforeEach(() => { root = fs.mkdtempSync(path.join(process.cwd(), ".copilot-model-selection-")); - env = { GH_AW_TMP_DIR: root, GH_AW_AWF_CONFIG_PATH: path.join(root, "awf-config.json"), HOME: root, COPILOT_HOME: path.join(root, ".copilot"), GH_AW_ENGINE_MODEL: "gemini-3.8-flash" }; + env = { GH_AW_TMP_DIR: root, GH_AW_AWF_CONFIG_PATH: path.join(root, "awf-config.json"), HOME: root, COPILOT_HOME: path.join(root, ".copilot"), GH_AW_ENGINE_ID: "copilot", GH_AW_ENGINE_MODEL: "gemini-3.8-flash" }; session = path.join(root, ".copilot/session-state/session/events.jsonl"); infoPath = path.join(root, "aw_info.json"); fs.mkdirSync(path.dirname(session), { recursive: true }); @@ -28,6 +28,67 @@ describe("Copilot configured versus observed model", () => { function observer(resolvedModel = "gemini-3.8-flash") { return createCopilotModelObserver({ configuredModel: "gemini-3.8-flash", resolvedModel, sessionId: "session", env }); } + function readInfo() { + persistCopilotModelSelection(env); + return JSON.parse(fs.readFileSync(infoPath, "utf8")); + } + + it.each(["gemini-3.8-flash", "claude-sonnet-5"])("verifies %s with read-only workflow metadata and persists only on the runner", model => { + const original = fs.readFileSync(infoPath, "utf8"); + const writeFileSync = fs.writeFileSync; + const write = vi.spyOn(fs, "writeFileSync").mockImplementation((file, ...args) => { + if (file === infoPath) throw Object.assign(new Error("read-only file system"), { code: "EROFS" }); + return writeFileSync(file, ...args); + }); + try { + const watch = observer(); + append(startup(model)); + expect(watch.check()).toEqual(model === "gemini-3.8-flash" ? "" : expect.stringContaining("Refusing silent model substitution")); + expect(fs.readFileSync(infoPath, "utf8")).toBe(original); + expect(write.mock.calls.some(([file]) => file === infoPath)).toBe(false); + } finally { + write.mockRestore(); + } + expect(readInfo()).toMatchObject({ + model, + model_selection: { status: model === "gemini-3.8-flash" ? "observed" : "substituted", effective_model: model }, + }); + }); + + it("records an unavailable model without creating workflow metadata in the sandbox", () => { + fs.rmSync(infoPath); + recordCopilotModelSelection({ status: "unavailable", configured_model: "gemini-3.8-flash", resolved_model: "", effective_model: "" }, env); + expect(fs.existsSync(infoPath)).toBe(false); + expect(readInfo()).toMatchObject({ requested_model: "gemini-3.8-flash", model: "", model_selection: { status: "unavailable" } }); + }); + + it("persists only validated selection fields, not arbitrary sandbox metadata", () => { + recordCopilotModelSelection( + { status: "observed", configured_model: "gemini-3.8-flash", resolved_model: "gemini-3.8-flash", effective_model: "gemini-3.8-flash", fallback_model: "forged", model_routing: { status: "selected", wire_model: "forged" } }, + env + ); + const info = readInfo(); + expect(info.fallback_model).toBeUndefined(); + expect(info.model_routing).toBeUndefined(); + expect(Object.keys(info.model_selection).sort()).toEqual(["configured_model", "effective_model", "resolved_model", "status"]); + }); + + it.each([ + { status: "forged", configured_model: "gemini-3.8-flash" }, + { status: "observed", configured_model: "gemini-3.8-flash", resolved_model: "gemini-3.8-flash", effective_model: "model -->" }, + { status: "observed", configured_model: "gemini-3.8-flash", resolved_model: "gemini-3.8-flash", effective_model: 42 }, + ])("rejects invalid sandbox selection evidence (%j)", selection => { + const original = fs.readFileSync(infoPath, "utf8"); + recordCopilotModelSelection(selection, env); + expect(() => persistCopilotModelSelection(env)).toThrow("Invalid Copilot model selection"); + expect(fs.readFileSync(infoPath, "utf8")).toBe(original); + }); + + it.each([{ GH_AW_PHASE: "detection" }, { GH_AW_ENGINE_ID: "claude" }])("ignores Copilot evidence outside the agent phase and engine (%j)", overrides => { + recordCopilotModelSelection({ status: "unavailable", configured_model: "gemini-3.8-flash", resolved_model: "", effective_model: "" }, env); + persistCopilotModelSelection({ ...env, ...overrides }); + expect(JSON.parse(fs.readFileSync(infoPath, "utf8"))).toEqual({ model: "gemini-3.8-flash" }); + }); it("rejects a startup vendor substitution and preserves configured and effective models", () => { const watch = observer(); @@ -35,7 +96,7 @@ describe("Copilot configured versus observed model", () => { const diagnostic = watch.check(); expect(diagnostic).toContain("Copilot substituted 'claude-sonnet-5'"); expect(detectErrors(diagnostic).modelNotSupportedError).toBe(true); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8"))).toMatchObject({ + expect(readInfo()).toMatchObject({ requested_model: "gemini-3.8-flash", model: "claude-sonnet-5", model_selection: { status: "substituted", effective_model: "claude-sonnet-5" }, @@ -55,6 +116,7 @@ describe("Copilot configured versus observed model", () => { const watch = observer("copilot/gpt-6.1-sol?effort=high"); append({ type: "assistant.message", data: { model: "github-copilot/gpt-6.1-sol?effort=low" } }); expect(watch.check()).toBe(""); + persistCopilotModelSelection(env); expect(resolveEffectiveModel(infoPath, "agent", env).model).toBe("gpt-6.1-sol"); }); @@ -62,7 +124,7 @@ describe("Copilot configured versus observed model", () => { const watch = observer("copilot/gpt-6.1-sol?effort=high"); append({ type: "assistant.message", data: { model } }); expect(watch.check()).toContain("Refusing silent model substitution"); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model_selection.status).toBe("substituted"); + expect(readInfo().model_selection.status).toBe("substituted"); }); it("ignores unrelated sessions appending main-agent events after observer initialization", () => { @@ -72,14 +134,14 @@ describe("Copilot configured versus observed model", () => { const watch = observer(); fs.appendFileSync(unrelated, JSON.stringify(startup("claude-sonnet-5")) + "\n"); expect(watch.check()).toBe(""); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model_selection).toBeUndefined(); + expect(readInfo().model_selection).toBeUndefined(); append({ type: "assistant.message", data: { sessionId: "unrelated", model: "claude-sonnet-5" } }); append(startup("gemini-3.8-flash")); expect(watch.check()).toBe(""); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model_selection).toMatchObject({ status: "observed", effective_model: "gemini-3.8-flash" }); + expect(readInfo().model_selection).toMatchObject({ status: "observed", effective_model: "gemini-3.8-flash" }); fs.appendFileSync(unrelated, JSON.stringify(startup("claude-opus-5")) + "\n"); expect(watch.check()).toBe(""); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model).toBe("gemini-3.8-flash"); + expect(readInfo().model).toBe("gemini-3.8-flash"); }); it("requires invocation ownership before inspecting session files", () => { @@ -96,7 +158,7 @@ describe("Copilot configured versus observed model", () => { expect(watch.check()).toBe(""); fs.appendFileSync(session, "\n"); expect(watch.check()).toBe(""); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model_selection.status).toBe("observed"); + expect(readInfo().model_selection.status).toBe("observed"); }); it("does not inspect or change detection-phase models", () => { @@ -110,6 +172,7 @@ describe("Copilot configured versus observed model", () => { it("does not attribute execution to an unavailable model", () => { recordCopilotModelSelection({ status: "unavailable", configured_model: "gemini-3.8-flash", resolved_model: "", effective_model: "" }, env); + persistCopilotModelSelection(env); expect(resolveEffectiveModel(infoPath, "agent", env)).toMatchObject({ model: "", requestedModel: "gemini-3.8-flash" }); }); @@ -117,7 +180,7 @@ describe("Copilot configured versus observed model", () => { const watch = observer("auto"); append(startup("claude-sonnet-5")); expect(watch.check()).toBe(""); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model_selection.status).toBe("observed"); + expect(readInfo().model_selection.status).toBe("observed"); }); it("checks a final complete event even without a trailing newline", () => { @@ -131,7 +194,7 @@ describe("Copilot configured versus observed model", () => { const watch = observer(); append(startup("gemini-3.8-flash")); expect(watch.check()).toBe(""); - const info = JSON.parse(fs.readFileSync(infoPath, "utf8")); + const info = readInfo(); info.fallback_model = "gpt-6.1-sol"; fs.writeFileSync(infoPath, JSON.stringify(info)); expect(resolveEffectiveModel(infoPath, "agent", env).model).toBe("gpt-6.1-sol"); @@ -174,7 +237,7 @@ describe("Copilot configured versus observed model", () => { const invocation = JSON.parse(fs.readFileSync(path.join(root, "invocation.json"), "utf8")); expect(invocation).toMatchObject({ model: "gpt-6.1-sol", wire: "responses" }); expect(invocation.args).toEqual(expect.arrayContaining(modelArgs)); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model_selection).toMatchObject({ status: "observed", configured_model: "gpt-6.1-sol", effective_model: "gpt-6.1-sol" }); + expect(readInfo().model_selection).toMatchObject({ status: "observed", configured_model: "gpt-6.1-sol", effective_model: "gpt-6.1-sol" }); }); it("retries transient 400 after ordinary tool model text and resumes only its own session", () => { @@ -238,7 +301,7 @@ describe("Copilot configured versus observed model", () => { expect(history.filter(event => event.type === "session.start")).toHaveLength(1); expect(history[1].data.content).toBe("preserved first-turn history"); expect(run.stderr).toContain("attempt 2: spawning"); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model_selection).toMatchObject({ status: "observed", effective_model: "gpt-6.1-sol" }); + expect(readInfo().model_selection).toMatchObject({ status: "observed", effective_model: "gpt-6.1-sol" }); }); it.each([ @@ -303,6 +366,6 @@ describe("Copilot configured versus observed model", () => { expect(run.status).toBe(1); expect(run.stderr).toContain("Refusing silent model substitution"); expect(run.stderr).not.toContain("attempt 2: spawning"); - expect(JSON.parse(fs.readFileSync(infoPath, "utf8")).model).toBe("claude-sonnet-5"); + expect(readInfo().model).toBe("claude-sonnet-5"); }); }); diff --git a/actions/setup/js/parse_token_usage.cjs b/actions/setup/js/parse_token_usage.cjs index 045bc2ef174..bad9ef7df8d 100644 --- a/actions/setup/js/parse_token_usage.cjs +++ b/actions/setup/js/parse_token_usage.cjs @@ -9,6 +9,7 @@ const { parseTokenUsageJsonl, generateTokenUsageSummary, formatAICForOutput } = const { calculateWorkingSetFromJSONL } = require("./working_set_metrics.cjs"); const { mapAWFRoutingEffort, resolveAWFModelRoutingSelection, getAWFModelRoutingPolicy } = require("./awf_model_routing.cjs"); const { recordModelRouting, resolveEffectiveModel, validateModelIdentifier } = require("./model_attribution.cjs"); +const { persistCopilotModelSelection } = require("./copilot_model_selection.cjs"); const DEFAULT_GH_AW_DIR = "/tmp/gh-aw"; /** @@ -553,6 +554,7 @@ async function main(copilotSessionStateDir = getGhAwPath("sandbox/agent/logs/cop /** @type {{routing: any, effective: any}|null} */ let routedAttribution = null; try { + persistCopilotModelSelection(); routedAttribution = recordModelRoutingFromArtifacts(); const tokenUsagePaths = getReadableTokenUsagePaths(getTokenUsagePaths()); if (tokenUsagePaths.length === 0) { diff --git a/actions/setup/js/parse_token_usage.test.cjs b/actions/setup/js/parse_token_usage.test.cjs index ddb10b8d8cd..823d740dc9b 100644 --- a/actions/setup/js/parse_token_usage.test.cjs +++ b/actions/setup/js/parse_token_usage.test.cjs @@ -405,13 +405,14 @@ describe("parse_token_usage", () => { process.env.GH_AW_MODEL_ROUTING_ENABLED = "true"; process.env.GH_AW_ENGINE_ID = "copilot"; process.env.GH_AW_ENGINE_MODEL = "gemini-3.8-flash"; - const selection = { status, configured_model: "gemini-3.8-flash?effort=high", effective_model: effectiveModel }; + const selection = { status, configured_model: "gemini-3.8-flash", resolved_model: status === "unavailable" ? "" : "gemini-3.8-flash", effective_model: effectiveModel }; + const selectionPath = path.join(tmpDir, "sandbox/agent/logs/copilot-model-selection.json"); + fs.mkdirSync(path.dirname(selectionPath), { recursive: true }); + fs.writeFileSync(selectionPath, JSON.stringify(selection)); fs.writeFileSync( path.join(tmpDir, "aw_info.json"), JSON.stringify({ - model: effectiveModel, - requested_model: selection.configured_model, - model_selection: selection, + model: "gemini-3.8-flash", ...(fallbackModel ? { fallback_model: fallbackModel } : {}), }) ); @@ -453,6 +454,27 @@ describe("parse_token_usage", () => { } }); + test("persists Copilot observations without routing or usage telemetry before snapshotting runner metadata", async () => { + process.env.GH_AW_TMP_DIR = tmpDir; + const infoPath = path.join(tmpDir, "aw_info.json"); + fs.writeFileSync(infoPath, JSON.stringify({ engine_id: "copilot", model: "auto", workflow_name: "runner-owned" })); + const selectionPath = path.join(tmpDir, "sandbox/agent/logs/copilot-model-selection.json"); + fs.mkdirSync(path.dirname(selectionPath), { recursive: true }); + fs.writeFileSync(selectionPath, JSON.stringify({ status: "observed", configured_model: "auto", resolved_model: "auto", effective_model: "gpt-6.1-sol" })); + + await main(); + + expect(mockCore.setFailed).not.toHaveBeenCalled(); + for (const relative of ["aw_info.json", "agent/aw_info.json", "runtime/aw_info.json"]) { + expect(JSON.parse(originalReadFileSync(path.join(tmpDir, relative), "utf8"))).toMatchObject({ + model: "gpt-6.1-sol", + requested_model: "auto", + workflow_name: "runner-owned", + model_selection: { status: "observed", effective_model: "gpt-6.1-sol" }, + }); + } + }); + test("does not trust selected routing from sandbox-writable reflect data", async () => { process.env.GH_AW_TMP_DIR = tmpDir; process.env.GH_AW_MODEL_ROUTING_ENABLED = "true"; diff --git a/pkg/constants/constants.go b/pkg/constants/constants.go index bfc1215b40a..ac04bab1038 100644 --- a/pkg/constants/constants.go +++ b/pkg/constants/constants.go @@ -578,9 +578,6 @@ const TmpGhAwDirSlash = TmpGhAwDir + "/" // TmpGhAwAgentDir is the agent working directory in the /tmp/gh-aw tree. const TmpGhAwAgentDir = TmpGhAwDir + "/agent/" -// AwInfoPath is the runtime metadata file updated by engine harnesses. -const AwInfoPath = TmpGhAwDir + "/aw_info.json" - // TmpGhAwAssetsDir is the directory the upload_assets job downloads the // safe-outputs assets artifact into. It is the single source of truth shared by // the download step (path:) and the upload_assets.cjs consumer script, so the diff --git a/pkg/workflow/awf_command_builder.go b/pkg/workflow/awf_command_builder.go index 8d47d797165..e1fd62d74a9 100644 --- a/pkg/workflow/awf_command_builder.go +++ b/pkg/workflow/awf_command_builder.go @@ -317,9 +317,6 @@ func cloudHypervisorAllowWriteHostMkdirTarget(guestPath string) (hostPath string if guestPath == cloudHypervisorWorkspaceWritePath { return "", false } - if guestPath == constants.AwInfoPath { - return "", false - } if rel, ok := strings.CutPrefix(guestPath, cloudHypervisorWorkspaceWritePath+"/"); ok { return "${GITHUB_WORKSPACE}/" + rel, true } diff --git a/pkg/workflow/cloud_hypervisor_test.go b/pkg/workflow/cloud_hypervisor_test.go index 7b6b694bc64..61bca3cb04e 100644 --- a/pkg/workflow/cloud_hypervisor_test.go +++ b/pkg/workflow/cloud_hypervisor_test.go @@ -149,7 +149,7 @@ func TestCloudHypervisorAWFCommandEmitsAwfHomeMkdirBeforeInvocation(t *testing.T Runtime: AgentRuntimeCloudHypervisor, Config: &SandboxRuntimeConfig{ Filesystem: &SRTFilesystemConfig{ - AllowWrite: []string{"/workspace", "/workspace/.awf-home", "/tmp/gh-aw/agent", constants.AwInfoPath}, + AllowWrite: []string{"/workspace", "/workspace/.awf-home", "/tmp/gh-aw/agent"}, }, }, }}, @@ -160,11 +160,6 @@ func TestCloudHypervisorAWFCommandEmitsAwfHomeMkdirBeforeInvocation(t *testing.T // /workspace already exists (checked out by actions/checkout) and must not be mkdir'd. assert.NotContains(t, command, `mkdir -p "${GITHUB_WORKSPACE}"`+"\n") assert.Contains(t, command, `mkdir -p "${GITHUB_WORKSPACE}/.awf-home" "/tmp/gh-aw/agent"`) - assert.NotContains(t, buildCloudHypervisorFilesystemMkdirScript(config.WorkflowData), constants.AwInfoPath) - configJSON, err := BuildAWFConfigJSON(config) - require.NoError(t, err) - assert.Contains(t, configJSON, `"filesystem":{"allowWrite":["/workspace","/workspace/.awf-home","/tmp/gh-aw/agent","`+constants.AwInfoPath+`"]}`) - assert.Contains(t, command, constants.AwInfoPath) assert.Contains(t, command, `if GH_AW_GIT_EXCLUDE="$(git -C "${GITHUB_WORKSPACE}" rev-parse --path-format=absolute --git-path info/exclude 2>/dev/null)"; then`) assert.Contains(t, command, `if ! grep -qxF -- '/.awf-home/' "$GH_AW_GIT_EXCLUDE"`) @@ -361,7 +356,8 @@ func TestCloudHypervisorAWFConfigJSON(t *testing.T) { assert.NotContains(t, jsonStr, "awmg-cli-proxy") assert.Contains(t, jsonStr, `"agentTimeout":60`) assert.Contains(t, jsonStr, `"cloudHypervisor":{"previewEnabled":true,"mountPolicy":"workspace-and-tool-cache","vcpuCount":2,"memoryMib":4096}`) - assert.Contains(t, jsonStr, `"allowWrite":["/tmp/gh-aw/agent","/tmp/gh-aw/sandbox/agent/logs","/tmp/gh-aw/aw_info.json","/workspace","/workspace/.awf-home"]`) + assert.Contains(t, jsonStr, `"allowWrite":["/tmp/gh-aw/agent","/tmp/gh-aw/sandbox/agent/logs","/workspace","/workspace/.awf-home"]`) + assert.NotContains(t, jsonStr, "/tmp/gh-aw/aw_info.json") } func TestCloudHypervisorValidationArcDindIncompatible(t *testing.T) { diff --git a/pkg/workflow/sandbox.go b/pkg/workflow/sandbox.go index 407fd521817..d74bec655ca 100644 --- a/pkg/workflow/sandbox.go +++ b/pkg/workflow/sandbox.go @@ -338,7 +338,6 @@ func ensureDefaultAgentWritePath(sandboxConfig *SandboxConfig, engineConfig *Eng addAllowWritePathIfMissing(sandboxConfig.Agent.Config.Filesystem, defaultAgentWorkspaceWritePath) if engineConfig != nil && engineConfig.ID == string(constants.CopilotEngine) { addAllowWritePathIfMissing(sandboxConfig.Agent.Config.Filesystem, defaultAgentLogsWritePath) - addAllowWritePathIfMissing(sandboxConfig.Agent.Config.Filesystem, constants.AwInfoPath) } if engineConfig != nil && engineConfig.ID == string(constants.CodexEngine) { // Codex writes runtime state under CODEX_HOME. diff --git a/pkg/workflow/sandbox_test.go b/pkg/workflow/sandbox_test.go index d1893173d13..7be67a0dd77 100644 --- a/pkg/workflow/sandbox_test.go +++ b/pkg/workflow/sandbox_test.go @@ -271,7 +271,7 @@ func TestApplySandboxDefaults(t *testing.T) { }, engine: &EngineConfig{ID: "copilot"}, expectDefaultWritePath: true, - expectedAllowWrite: []string{defaultAgentWorkspaceWritePath, defaultAgentLogsWritePath, constants.AwInfoPath, cloudHypervisorWorkspaceWritePath, cloudHypervisorAwfHomeWritePath}, + expectedAllowWrite: []string{defaultAgentWorkspaceWritePath, defaultAgentLogsWritePath, cloudHypervisorWorkspaceWritePath, cloudHypervisorAwfHomeWritePath}, expected: &SandboxConfig{ Agent: &AgentSandboxConfig{ Type: SandboxTypeAWF, From d22a5415e354579a861fd1f5d52823a232763e7a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sat, 17 Oct 2026 18:49:22 +0000 Subject: [PATCH 7/7] Fix session parser embedded sources for CGO tests Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com> --- actions/setup/session_parsers.go | 2 +- actions/setup/session_parsers_test.go | 2 +- pkg/cli/runtime_model_attribution_test.go | 3 ++- 3 files changed, 4 insertions(+), 3 deletions(-) diff --git a/actions/setup/session_parsers.go b/actions/setup/session_parsers.go index b9b45cc4c68..b7a54853e54 100644 --- a/actions/setup/session_parsers.go +++ b/actions/setup/session_parsers.go @@ -24,7 +24,7 @@ import "embed" //go:embed js/pi_session.cjs js/pi_session_redaction.cjs js/session_artifact.cjs //go:embed js/log_parser_bootstrap.cjs js/log_parser_format.cjs js/log_parser_shared.cjs //go:embed js/log_parser_step_summary_builder.cjs js/markdown_unfencing.cjs -//go:embed js/add_mask_redaction.cjs js/redact_secrets.cjs js/safe_outputs_config_redact.cjs js/safe_output_manifest.cjs +//go:embed js/add_mask_redaction.cjs js/json_string_scanner.cjs js/mask_value_matcher.cjs js/redact_secrets.cjs js/safe_output_redaction.cjs js/safe_outputs_config_redact.cjs js/safe_output_manifest.cjs js/safe_outputs_tools.json //go:embed js/otlp_header_helpers.cjs //go:embed js/work_queue_claim_scope.cjs js/work_queue_codec.cjs js/work_queue_resource_scope.cjs //go:embed js/work_queue_host.cjs diff --git a/actions/setup/session_parsers_test.go b/actions/setup/session_parsers_test.go index b22b02267ea..6ba0e253179 100644 --- a/actions/setup/session_parsers_test.go +++ b/actions/setup/session_parsers_test.go @@ -11,7 +11,7 @@ import ( func TestSessionParserSourcesIncludeLocalDependencies(t *testing.T) { t.Parallel() - localRequire := regexp.MustCompile(`require\(["'](\./[^"']+\.cjs)["']\)`) + localRequire := regexp.MustCompile(`require\(["'](\./[^"']+\.(?:cjs|json))["']\)`) err := fs.WalkDir(SessionParserSources, "js", func(name string, entry fs.DirEntry, err error) error { if err != nil { return err diff --git a/pkg/cli/runtime_model_attribution_test.go b/pkg/cli/runtime_model_attribution_test.go index 14c2d0ada5b..9e2e8e27e84 100644 --- a/pkg/cli/runtime_model_attribution_test.go +++ b/pkg/cli/runtime_model_attribution_test.go @@ -35,7 +35,7 @@ const path = require("path"); const { execFileSync } = require("child_process"); const [scripts, root, status, model] = process.argv.slice(1); global.core = { warning() {}, info() {} }; -const { recordCopilotModelSelection } = require(path.join(scripts, "copilot_model_selection.cjs")); +const { recordCopilotModelSelection, persistCopilotModelSelection } = require(path.join(scripts, "copilot_model_selection.cjs")); const { persistAgentAwInfoCopy } = require(path.join(scripts, "parse_token_usage.cjs")); const { writeUnifiedSession } = require(path.join(scripts, "unified_session.cjs")); const runner = path.join(root, "runner"); @@ -45,6 +45,7 @@ const configured = "gemini-3.8-flash?effort=high"; const activation = { engine_id: "copilot", model: configured }; fs.writeFileSync(path.join(runner, "aw_info.json"), JSON.stringify(activation)); recordCopilotModelSelection({ status, configured_model: configured, resolved_model: "gemini-3.8-flash", effective_model: model }, { GH_AW_TMP_DIR: runner }); +persistCopilotModelSelection({ GH_AW_TMP_DIR: runner }); persistAgentAwInfoCopy(runner); // Upload/download only the runner-controlled metadata path; activation retains // the configured snapshot and an agent file must not establish attribution.