Skip to content

Release v0.28.5

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Aug 18:48
· 33 commits to main since this release
v0.28.5
ef02dab

Summary

Release v0.28.5 is an incremental maintenance release focused on hardening the AWF sandbox's filesystem and network boundaries, fixing a transient Cloud Hypervisor readiness bug, and cleaning up dispatcher/documentation/dependency debt. There are no breaking changes for existing awf CLI users.

What's Changed

Security

  • Enforce filesystem allowWrite boundaries in AWF sandboxes (#7634) — tightens write-path enforcement so sandboxed agents can only write within explicitly allowed paths.
  • Route CLI artifact redirects through scoped Squid egress (#7635) — ensures CLI artifact download redirects are proxied through Squid's domain-allowlist instead of bypassing egress controls.

Bug Fixes

  • Recover transient Cloud Hypervisor readiness failures (#7611) — adds retry/recovery handling so intermittent Cloud Hypervisor VM readiness checks no longer fail the run outright.
  • Fix broken tracking issue links from the firewall dispatcher (#7630) — corrects issue link generation in dispatcher-created tracking issues.

Documentation

  • Document AI-credit accounting for Copilot auto dynamic selector (#7620)
  • Add B25 catalog entry for native-root container-workdir ownership repair (#7631) — documents PR #7599's fix for container workdir ownership when running as native root.

Dependencies

  • Upgrade gh-aw workflows to v0.87.4 (#7626)
  • chore(deps): update ESLint to 10.9.0 (#7632)

Refactoring

  • Deduplicate Cloud Hypervisor execution mock setup (#7633) — consolidates duplicated test mock scaffolding for the Cloud Hypervisor backend.

Technical Details

  • Sandbox write-boundary enforcement and Squid egress routing for CLI artifact redirects touch the core security surface (filesystem allowlisting and network egress paths) — worth a close look if you rely on custom allowWrite configs or CLI artifact downloads.
  • Cloud Hypervisor readiness-failure recovery and mock-setup deduplication affect the (preview) Cloud Hypervisor microVM backend and its test suite, not the default Docker-based backend.
  • No changes to public CLI flags, Docker Compose topology, or Squid/agent/api-proxy container images in this release.

Upgrade Notes

No breaking changes. Users of the Cloud Hypervisor preview backend benefit from more reliable readiness handling; no action required. Users relying on allowWrite filesystem scoping should confirm their existing allowlists still cover intended write paths, since enforcement is now stricter (#7634).

Full Changelog: v0.28.4...v0.28.5> Generated by Update Release Notes · auto · 59.4 AIC · ⊞ 7.7K

Assets 18
Loading