chore: update AWF firewall to v0.19.1

[Copilot]

• Update DefaultFirewallVersion constant from v0.19.0 to v0.19.1 in pkg/constants/constants.go
• Build binary and recompile all 154 workflow lock files
• Run targeted firewall tests (all pass)
• Fix log_parser_bootstrap.test.cjs prettier formatting issue from main merge
• Code review: no issues found
• Security scan (CodeQL): no alerts

Original prompt

---

This section details on the original issue you should resolve

<issue_title>chore: update AWF firewall to v0.19.1</issue_title>
<issue_description>## Summary

Update the AWF firewall dependency to v0.19.1. This patch release fixes the .claude.json file bind mount regression (#16214) that prevented Claude Code from writing its config via atomic writes.

Changes in AWF v0.19.1

• fix: Remove .claude.json file bind mount that broke Claude Code atomic writes (gh-aw-firewall#911)
• docs: Add AWF_ONE_SHOT_TOKEN_DEBUG documentation (gh-aw-firewall#867)
• perf: Parallelize container image builds in release workflow (gh-aw-firewall#909)

What to update

Update the pinned AWF image tag in pkg/workflow/awf_helpers.go (or wherever GetAWFImageTag() returns the version) from v0.19.0 to v0.19.1.

Closes #16214</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes chore: update AWF firewall to v0.19.1 #16255

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[lpcox]

@copilot please fix this linting error

make lint-cjs
shell: /usr/bin/bash -e {0}
cd actions/setup/js && npm run lint:cjs

lint:cjs
npx prettier --check '/*.cjs' '/.ts' '**/.json' --ignore-path ../../../.prettierignore

Checking formatting...
[warn] log_parser_bootstrap.test.cjs
[warn] Code style issues found in the above file. Run Prettier with --write to fix.
make: *** [Makefile:543: fmt-check-cjs] Error 1

[Copilot]

@copilot please fix this linting error

make lint-cjs
...

Fixed in 35375c5. The formatting issue was introduced by a merge with main — ran prettier --write on log_parser_bootstrap.test.cjs and verified make lint-cjs passes.

[Copilot]

Pull request overview

This PR updates the AWF (Agentic Workflow Firewall) dependency from v0.19.0 to v0.19.1 to fix a critical regression where the .claude.json file bind mount prevented Claude Code from writing its configuration file via atomic writes, causing silent startup failures with zero tool calls executed.

Changes:

• Updated DefaultFirewallVersion constant from v0.19.0 to v0.19.1 in pkg/constants/constants.go
• Recompiled all 154 workflow lock files to reference the new AWF version (v0.19.1)
• Fixed prettier formatting in log_parser_bootstrap.test.cjs (multi-line to single-line expect statement)

Reviewed changes

Copilot reviewed 156 out of 156 changed files in this pull request and generated no comments.

File	Description
pkg/constants/constants.go	Updated AWF version constant from v0.19.0 to v0.19.1
actions/setup/js/log_parser_bootstrap.test.cjs	Fixed prettier formatting issue from main merge
.github/workflows/*.lock.yml (154 files)	Recompiled workflow lock files with new AWF version references

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.