Update AWF (gh-aw-firewall) to v0.13.1

[Copilot]

• Understand the issue: Update AWF (gh-aw-firewall) version from v0.11.2 to v0.13.1
• Locate the constant in pkg/constants/constants.go (line 292)
• Update DefaultFirewallVersion from "v0.11.2" to "v0.13.1"
• Update corresponding test expectation in pkg/constants/constants_test.go
• Run make agent-finish to validate all changes
• Code review passed
• Security scan passed
• Run make recompile to update all workflow lock files with new version

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Update AWF (gh-aw-firewall) to v0.13.1</issue_title>
<issue_description>## Summary

Update the default AWF (gh-aw-firewall) version from v0.11.2 to v0.13.1.

Details

The gh-aw-firewall project has released v0.13.1 which completes the migration from the githubnext org to the github org.

Changes Required

Update pkg/constants/constants.go:

// Change this line:
const DefaultFirewallVersion Version = "v0.11.2"

// To:
const DefaultFirewallVersion Version = "v0.13.1"

Notes

• This is a simple version bump, no other changes needed
• Release notes: https://github.com/github/gh-aw-firewall/releases/tag/v0.13.1</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Update AWF (gh-aw-firewall) to v0.13.1 #13376

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[pelikhan]

@copilot make recompile

[github-actions]

Agent Container Tool Check ✅

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.50.1
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	24.13.0
python3	✅	3.13.11
go	✅	1.24.12
java	❌	not found
dotnet	❌	not found

Result: 10/12 tools available

Status: ⚠️ PARTIAL - Java and .NET runtimes not installed

Core development tools (shell, git, JSON/YAML processing, HTTP, GitHub CLI, Node.js, Python, Go) are all available and working correctly.

AI generated by Agent Container Smoke Test

[github-actions]

PRs: docs: replace npm copilot-cli installation with gh copilot extension; Update AWF (gh-aw-firewall) to v0.13.1
Tests: GitHub MCP ✅ | safeinputs-gh ✅ | Serena MCP ❌ | Playwright ❌ | Tavily ✅ | File write ✅ | Bash cat ✅ | Discussion comment ✅ | Build ✅
Overall: FAIL

AI generated by Smoke Codex

[github-actions]

🤖 Beep boop! The smoke test agent stopped by to say hello!

Just ran through the validation suite - everything's looking good from this corner of the automation! ✨

Continues testing robots things 🔧

AI generated by Smoke Copilot

[github-actions]

Smoke Test Results

• ✅ GitHub MCP (docs: replace npm copilot-cli installation with built-in gh copilot command #13381, [WIP] Use AWF --enable-chroot mode and remove unnecessary flags #13380)
• ✅ Safe Inputs GH CLI
• ❌ Serena MCP (not configured)
• ❌ Playwright (not configured)
• ✅ File Writing
• ✅ Bash Tool
• ✅ Discussion Interaction
• ✅ Build gh-aw
• ✅ Workflow Dispatch

Overall Status: ⚠️ PARTIAL PASS

@app/copilot-swe-agent @Mossaka @Copilot

AI generated by Smoke Copilot

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

💥 KAPOW! 💥

WHOOSH! The smoke test agent just BLAZED through here like a bolt of lightning! ⚡

BAM! All systems tested and OPERATIONAL! The Claude engine is POWERED UP and ready for action! 🚀

Testing complete - this discussion has been VERIFIED by the smoke test squad!

ZZZAP! ⚡ Until next time! POW! 💫

AI generated by Smoke Claude

[github-actions]

Smoke Test Results

PR #13375: Fix repoutil tests after repository org migration
PR #13368: Add codemod to migrate githubnext/gh-aw install script references

Test	Result
GitHub MCP	✅
Safe Inputs GH CLI	✅
Make Build	✅
Tavily Search	✅
File Writing	✅
Bash Tool	✅
Discussion	✅
Playwright	❌
Serena MCP	✅

Overall Status: PASS

AI generated by Smoke Claude

[Copilot]

@copilot make recompile

Done in 3d147ec. Recompiled 147 workflow lock files with the updated AWF version v0.13.1.

[github-actions]

Smoke Test: Claude ⚠️ PARTIAL PASS

PRs Reviewed:

• Add workflow: githubnext/agentics/weekly-research #8: Add workflow: githubnext/agentics/weekly-research
• Remove ai-inference, opencode, genaiscript agentic engines for now #10: Remove ai-inference, opencode, genaiscript agentic engines

Results:
✅ GitHub MCP Testing
✅ Safe Inputs GH CLI
✅ Make Build
✅ Tavily Web Search
✅ File Writing
✅ Bash Tool
✅ Discussion Interaction
❌ Playwright (network restrictions)

Status: 8/9 tests passed

Run: §21614100870

AI generated by Smoke Claude

[Copilot]

Pull request overview

This pull request updates the default AWF (gh-aw-firewall) version from v0.11.2 to v0.13.1, which completes the migration from the githubnext org to the github org. This is a straightforward version bump that propagates the new version across the codebase.

Changes:

• Updated DefaultFirewallVersion constant from "v0.11.2" to "v0.13.1" in pkg/constants/constants.go
• Updated corresponding test expectation in pkg/constants/constants_test.go
• Updated all workflow lock files (45 files) to use the new version v0.13.1

Reviewed changes

Copilot reviewed 112 out of 149 changed files in this pull request and generated no comments.

File	Description
pkg/constants/constants.go	Updated the default firewall version constant
pkg/constants/constants_test.go	Updated test expectation to match new version
.github/workflows/*.lock.yml (45 files)	Updated version references in workflow configurations including install scripts, awf_version fields, and image-tag parameters

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.