chore: bump gh-aw-firewall (AWF) to v0.25.5 by Copilot · Pull Request #23711 · github/gh-aw

Copilot · 2026-03-31T13:03:30Z

Summary

Updates the default gh-aw-firewall (AWF) version from v0.25.4 to v0.25.5.

Changes

Updated DefaultFirewallVersion constant in pkg/constants/constants.go from v0.25.4 to v0.25.5
Rebuilt WebAssembly compiler binary (make build-wasm + scripts/bundle-wasm-docs.sh)
Recompiled all 178 workflow lock files to pick up the new version

Release Notes for v0.25.5

From gh-aw-firewall v0.25.5:

fix: copy get-claude-key.sh to chroot-accessible path

✨ PR Review Safe Output Test - Run 23798826952

💥 [THE END] — Illustrated by Smoke Claude · ◷

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/7c3ab818-8a04-404d-b56d-7a6a0959e0e5 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions · 2026-03-31T13:06:03Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-03-31T13:06:04Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-03-31T13:06:06Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-03-31T13:06:07Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-03-31T13:09:10Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	v4.52.4
curl	✅	8.5.0
gh	✅	2.88.1
node	✅	v20.20.1
python3	✅	3.12.3
go	✅	1.24.13
java	✅	10.0.201
dotnet	✅	10.0.201

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · ◷

Copilot

Pull request overview

Updates the repository’s default gh-aw-firewall (AWF) version to v0.25.5 and propagates that pin through compiled workflow lockfiles.

Changes:

Bumped DefaultFirewallVersion from v0.25.4 to v0.25.5.
Updated multiple compiled workflow lock files to use AWF v0.25.5 (binary install arg, container image tags, and --image-tag).
Added a changeset documenting the patch bump.

Reviewed changes

Copilot reviewed 112 out of 180 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
pkg/constants/constants.go	Bumps the default AWF version constant to `v0.25.5`.
.github/workflows/workflow-health-manager.lock.yml	Updates AWF version references (env, install, images, `--image-tag`) to `0.25.5`.
.github/workflows/workflow-generator.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/test-workflow.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/test-project-url-default.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/test-dispatcher.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/super-linter.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/sub-issue-closer.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/smoke-gemini.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/security-compliance.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/repo-tree-map.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/refiner.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/q.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/pr-triage-agent.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/poem-bot.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/plan.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/notion-issue-summary.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/metrics-collector.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/jsweep.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/issue-triage-agent.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/issue-monster.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/gpclean.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/firewall.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/example-permissions-warning.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/dictation-prompt.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/dev.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/dependabot-go-checker.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/dependabot-burner.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/daily-team-status.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/daily-secrets-analysis.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/daily-malicious-code-scan.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/daily-assign-issue-to-user.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/craft.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/contribution-check.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/constraint-solving-potd.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/code-simplifier.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/changeset.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/brave.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/bot-detection.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/ai-moderator.lock.yml	Updates AWF version references to `0.25.5`.
.github/workflows/ace-editor.lock.yml	Updates AWF version references to `0.25.5`.
.changeset/patch-bump-awf-v0-25-5.md	Adds release notes/changeset entry for the AWF default version bump.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

github-actions · 2026-03-31T13:14:12Z

@pelikhan ✅ Smoke test results for run §23798826957:

Test	Status
GitHub MCP	✅
MCP Scripts GH CLI	✅
Serena MCP	❌ (tools unavailable)
Playwright	✅
Web Fetch	✅
File Writing	✅
Bash Tool	✅
Discussion Interaction	✅
Build gh-aw	✅
Discussion Creation	✅
Workflow Dispatch	✅
PR Review	✅

Overall: ⚠️ PARTIAL PASS (Serena MCP tools not available in this context)

PR Author: @pelikhan · Assignees: @pelikhan, @Copilot

📰 BREAKING: Report filed by Smoke Copilot · ◷

github-actions

Smoke test review ✅ — This PR bumps AWF from v0.25.4 to v0.25.5 across all 178 lock files. The changeset entry is correct, version references are consistent throughout the lock files, and the diff looks clean. No issues found.

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-03-31T13:14:15Z

.changeset/patch-bump-awf-v0-25-5.md

+"gh-aw": patch
+---
+
+Bump the default gh-aw-firewall (AWF) version to v0.25.5.


Good changeset entry! Concise and clear. This will properly generate a patch-level release entry for the AWF v0.25.5 bump.

github-actions · 2026-03-31T13:14:15Z

.changeset/patch-bump-awf-v0-25-5.md

+---
+"gh-aw": patch
+---
+


Version bump looks correct — v0.25.4 → v0.25.5. Consistent across the GH_AW_INFO_AWF_VERSION env var and the install_awf_binary.sh script invocation. 🔒

github-actions · 2026-03-31T13:14:41Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-03-31T13:15:05Z

Smoke Test Run 23798826952 — PARTIAL

Core (#1–11): ✅✅✅✅❌✅✅✅✅✅✅
PR Review (#12–18): ✅✅✅⚠️✅❌⚠️

Failures: #5 Playwright (permissions), #17 Push to branch (gitignored file)
Skipped: #15 Resolve thread (no threads), #18 Close PR (no safe candidate)

💥 [THE END] — Illustrated by Smoke Claude · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

💥 [THE END] — Illustrated by Smoke Claude

github-actions · 2026-03-31T13:15:08Z

.changeset/patch-bump-awf-v0-25-5.md

@@ -0,0 +1,5 @@
+---
+"gh-aw": patch
+---


LGTM — changeset correctly marks this as a patch bump for the AWF firewall version update.

github-actions · 2026-03-31T13:15:08Z

.github/workflows/ace-editor.lock.yml

          GH_AW_INFO_ALLOWED_DOMAINS: '["defaults"]'
          GH_AW_INFO_FIREWALL_ENABLED: "true"
-          GH_AW_INFO_AWF_VERSION: "v0.25.4"
+          GH_AW_INFO_AWF_VERSION: "v0.25.5"


Version bump from v0.25.4 → v0.25.5 looks correct here. The AWF version is consistently updated across all relevant lock files.

chore: bump gh-aw-firewall to v0.25.5, update wasm, recompile workflows

c93590a

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/7c3ab818-8a04-404d-b56d-7a6a0959e0e5 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI assigned Copilot and pelikhan Mar 31, 2026

pelikhan marked this pull request as ready for review March 31, 2026 13:05

Copilot AI review requested due to automatic review settings March 31, 2026 13:05

pelikhan added the smoke label Mar 31, 2026

Copilot created this pull request from a session on behalf of pelikhan March 31, 2026 13:05 View session

Copilot finished work on behalf of pelikhan March 31, 2026 13:05

Copilot AI requested a review from pelikhan March 31, 2026 13:05

github-actions bot removed the smoke label Mar 31, 2026

Copilot started reviewing on behalf of pelikhan March 31, 2026 13:06 View session

Copilot AI reviewed Mar 31, 2026

View reviewed changes

pelikhan merged commit 0fc607d into main Mar 31, 2026
217 of 222 checks passed

pelikhan deleted the copilot/update-gh-aw-firewall-package branch March 31, 2026 13:14

github-actions bot mentioned this pull request Mar 31, 2026

Smoke Test: Copilot - 23798826957 #23718

Closed

github-actions bot added the smoke-copilot label Mar 31, 2026

github-actions bot reviewed Mar 31, 2026

View reviewed changes

github-actions bot mentioned this pull request Mar 31, 2026

Smoke Test: Claude - 23798826952 #23719

Closed

github-actions bot reviewed Mar 31, 2026

View reviewed changes

Conversation

Copilot AI commented Mar 31, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

Release Notes for v0.25.5

Uh oh!

github-actions bot commented Mar 31, 2026

Uh oh!

github-actions bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 31, 2026

Agent Container Tool Check

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

github-actions bot commented Mar 31, 2026

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 31, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 31, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Mar 31, 2026

Uh oh!

github-actions bot commented Mar 31, 2026

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 31, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 31, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Mar 31, 2026 •

edited by github-actions bot

Loading

github-actions bot commented Mar 31, 2026 •

edited

Loading

github-actions bot commented Mar 31, 2026 •

edited

Loading

github-actions bot commented Mar 31, 2026 •

edited

Loading