Bump default AWF to v0.25.24 and MCP Gateway to v0.2.24 by Copilot · Pull Request #26966 · github/gh-aw

Copilot · 2026-04-18T00:37:15Z

This updates gh-aw’s default runtime pins for AWF and MCP Gateway to pick up upstream TLS trust fixes: AWF v0.25.24 and mcpg v0.2.24. The change ensures newly compiled workflows consume the corrected defaults without per-workflow overrides.

Default version constants
- Updated /pkg/constants/version_constants.go:
  - DefaultFirewallVersion → v0.25.24
  - DefaultMCPGatewayVersion → v0.2.24
Compiled workflow outputs
- Regenerated lock workflows so compiled jobs reference:
  - AWF install script at v0.25.24
  - AWF container tags 0.25.24 (agent, api-proxy, squid)
  - MCP Gateway image ghcr.io/github/gh-aw-mcpg:v0.2.24
Golden fixtures and release metadata
- Updated WASM compiler golden fixtures under:
  - /pkg/workflow/testdata/TestWasmGolden_CompileFixtures/
- Added changeset:
  - /.changeset/patch-bump-awf-v0-25-24-mcpg-v0-2-24.md

// pkg/constants/version_constants.go
const DefaultFirewallVersion Version = "v0.25.24"
const DefaultMCPGatewayVersion Version = "v0.2.24"

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw 0313380/b251/vetrev-parse ache/go/1.25.8/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git ithub/workflows -trimpath 0313380/b422/log--show-toplevel git (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw rev-parse /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git user.name Test User /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw rev-parse ache/node/24.14.-t git rev-�� --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/.gbash remote.origin.ur--norc ache/node/24.14.--noprofile git (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile -Oz --enable-bu/opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOMOD GOMODCACHE x_amd64/compile env -json 1.5.0/internal/xcontext/xcontext.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE node (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git yG-aYRRV4 .cfg 64/pkg/tool/linu--show-toplevel /usr/bin/git conf�� --get-regexp ^remote\..*\.gh-resolved$ /usr/bin/git d om/modelcontextprev-parse 64/pkg/tool/linu--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/bin/infocmp -json GO111MODULE 64/bin/go infocmp -1 xterm-color go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/compile /usr/bin/git -json GO111MODULE x_amd64/compile git init�� GOMODCACHE (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel sh /usr/bin/git npx prettier --cgit GOPROXY 64/bin/go git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv t446421883 Bcts/l-3Xgegn_V4R30X4Bcts .yml -n1 --format=format:api --end-of-options--paginate M2/2rd54d-9cdbu-repos/{owner}/{repo}/actions/runs/3/artifacts -p 1/main.md -trimpath ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -I /tmp/go-build984rev-parse -I ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git 724358174 go .cfg git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linu-test.v=true /usr/bin/git 78196/b044/imporgit ro-o/78ByPuFdRyArev-parse .cfg git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git -bool (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linux_amd64/link /usr/bin/git outil.test 0313380/b146/vetrev-parse ortcfg.link git rev-�� --show-toplevel Pqv11X6qaW-vSfLS-buildtags /usr/bin/git ApprovalLabelsCogit 0313380/b265/vetrev-parse g_.a git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git t202946876/.githgit GO111MODULE ache/go/1.25.8/xHEAD git rev-�� --show-toplevel go /usr/bin/git 5748-59355/test-git GO111MODULE ache/go/1.25.8/x--show-toplevel git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json o x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv nt/action/git/ref/tags/v999.999.999 x_amd64/vet bject.type] | @tsv .a LvhFNvMoO x_amd64/link git conf�� --get remote.origin.url /usr/bin/infocmp Elygkb-do .cfg 64/pkg/tool/linu--show-toplevel infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv nt/action/git/ref/tags/v999.999.999 go bject.type] | @tsv lic_67033420/001git GO111MODULE 64/bin/go git rev-�� --git-dir go /opt/hostedtoolcache/node/24.14.1/x64/bin/node to pkg/actionpingit GO111MODULE 64/bin/go /opt/hostedtoolcache/node/24.14.1/x64/bin/node (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv -aw/git/ref/tags/v1.0.0 x_amd64/vet bject.type] | @tsv -json i0dFibft1 x_amd64/compile git rev-�� --show-toplevel x_amd64/compile /usr/bin/git tcfg .cfg 64/pkg/tool/linu--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv -aw/git/ref/tags/v1.0.0 remote2 bject.type] | @tsv -json GO111MODULE 64/bin/go git conf�� user.name Test User /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go /opt/hostedtoolcache/node/24.14.1/x64/bin/node (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv 0313380/b441/_pkg_.a -tests 0313380/b441=> -json b/gh-aw/pkg/strirev-parse x_amd64/compile git conf�� G_es/lMB5IYBY6CLlpDj_G_es remote.origin.url /usr/bin/git -json GO111MODULE x_amd64/compile 0313380/b441/importcfg (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv log.showsignature=false log /usr/bin/git --format=%H:%ct GOWORK 64/bin/go git push�� :latest develop /usr/bin/git 907547/b420/_pkggit GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git -bool -buildtags /usr/bin/git git rev-�� --show-toplevel git /usr/bin/git /tmp/gh-aw-test-git status /usr/bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv --show-toplevel git e/git /tmp/TestCompilebash config /usr/bin/git e/git rev-�� --show-toplevel git /home/REDACTED/.local/bin/node /tmp/gh-aw-test-/usr/bin/gh status /usr/bin/git node (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv remove myorg /usr/bin/git .a OhJqGnTLC 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linuTest User /opt/hostedtoolcache/node/24.14.1/x64/bin/node IIAr-WTp5 .cfg 64/pkg/tool/linu--show-toplevel /opt/hostedtoolcache/node/24.14.1/x64/bin/node (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv GOMODCACHE go /usr/bin/git ub/workflows GO111MODULE 64/bin/go git conf�� user.email test@example.com /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go /opt/hostedtoolcache/node/24.14.1/x64/bin/node (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv sistency_GoAndJavaScript4159087482/001/test-inlined-imports-enab-p -tests 1/x64/bin/node -json GO111MODULE x_amd64/compile git t-ha�� ithub/workflows/archie.md remote /usr/bin/git -json GO111MODULE x_amd64/compile git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv GOPATH GOPROXY /usr/lib/git-core/git GOSUMDB GOWORK 64/bin/go /usr/lib/git-core/git main�� /ref/tags/v9 --auto sv --detach GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv 0313380/b442/stringutil.test show ache/node/24.14.1/x64/bin/node -json GO111MODULE x_amd64/compile 6xLHowPgLv8_t/clH4XbTvIN3wmpMkDtM2/2rd54d-9cdbu-repos/{owner}/{repo}/actions/runs/3/artifacts t-23�� sistency_WithImports448841857/001/main.md rev-parse 64/pkg/tool/linux_amd64/vet -json GO111MODULE x_amd64/compile 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv echo "�� Built gh-aw.wasm ($(du -h gh-aw.wasm | cut -f1))" GOPROXY /usr/bin/git GOSUMDB GOWORK 64/bin/go git add . go 5288819/b465/vet.cfg -json GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 1908777708 hxms/bWOB0OjYPOs06SIChxms x_amd64/link GOINSECURE g/x/crypto/chachrev-parse GOMODCACHE x_amd64/link (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD 78196/b007/symab--show-toplevel 64/pkg/tool/linux_amd64/vet ache�� 91428496/.github/workflows r73k/ZR15bOYtzO_sNGC5r73k ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE /semver GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE 78196/b078/ GOMODCACHE 64/pkg/tool/linux_amd64/vet env 78196/b201/_pkg_.a GO111MODULE 64/pkg/tool/linux_amd64/compile GOINSECURE fips140/hkdf 78196/b078/symab--show-toplevel 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 724358174 QuTc/8J1aAAdvjhK6D-KwQuTc 64/pkg/tool/linux_amd64/vet GOINSECURE fips140/tls12 GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name mLsRemoteWithRealGitcustom_branch3662612296/001' 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 78196/b174/_pkg_.a HJpH/bR5uMPu5Fr3Cy4PJHJpH x_amd64/compile GOINSECURE fips140/ecdh GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 78196/b203/_pkg_.a eFae/0ahu769BnKYz-hV-eFae x_amd64/link GOINSECURE fips140/mlkem GOMODCACHE x_amd64/link (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env mpiledOutput3940100010/001 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 1908777708 3cxW/IBlaqeSprCJhOYFQ3cxW .cfg GOINSECURE g/x/text/transforev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-trimpath (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 rg/x/text@v0.36.0/internal/tag/tag.go 64/pkg/tool/linux_amd64/vet GOINSECURE hlite 78196/b013/symab--git-dir 64/pkg/tool/linux_amd64/vet env 78196/b241/_pkg_.a _zAe/m6K4S-499xrKjIdi_zAe .cfg GOINSECURE t/internal/langurev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name mLsRemoteWithRealGitbranch_with_hyphen2026441992/001' 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE 78196/b092/ GOMODCACHE 64/pkg/tool/linux_amd64/vet env 1908777708 GO111MODULE .cfg GOINSECURE nal/fips140tls 78196/b092/symab--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linuTest User env 78196/b234/_pkg_.a oYmy/n_pwg_VDfKQLamLkoYmy ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuremote (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linu-importcfg GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linu/home/REDACTED/work/gh-aw/gh-aw/pkg/timeutil/format_test.go env 1908777708 GO111MODULE 64/pkg/tool/linux_amd64/compile GOINSECURE g/x/text/unicoderev-parse 78196/b092/symab--show-toplevel 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linutest@example.com env 78196/b242/_pkg_.a V7o_/18xeupG6XnJInX8DV7o_ k GOINSECURE t/internal/tag GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-tests (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE ions-lock.json dtest@example.com env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE fips140 GOMODCACHE 64/pkg/tool/linux_amd64/vet env 1908777708 i2Jk/kxQktkbJrdZm0O72i2Jk 64/pkg/tool/linux_amd64/link GOINSECURE hpke GOMODCACHE 64/pkg/tool/linux_amd64/link (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 91428496/.github/workflows GO111MODULE ache/go/1.25.8/x64/pkg/tool/linu-nilfunc GOINSECURE t/internal/strinrev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu/tmp/file-tracker-test2669798048/test2.lock.yml (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env /workflows GO111MODULE 64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/compile (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 json GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 g/x/crypto/interrev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet env 78196/b138/_pkg_.a vMoO/r1c5PlYHcFDLvhFNvMoO 64/pkg/tool/linux_amd64/link GOINSECURE e/jsonschema-go/config GOMODCACHE 64/pkg/tool/linuremote.origin.url (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/git g_.a 0313380/b024/vetrev-parse x_amd64/compile git rev-�� --show-toplevel x_amd64/compile /usr/bin/git DefaultBranchFrols DefaultBranchFro-lh ache/go/1.25.8/x/tmp/gh-aw/aw-feature-branch.patch git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git " GO111MODULE k git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE ache/go/1.25.8/x/tmp/gh-aw/aw-feature-branch.patch git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv -json .cfg 64/pkg/tool/linux_amd64/compile GOINSECURE 78196/b133/ GOMODCACHE 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json at.go x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv --check **/*.cjs 64/bin/go **/*.json --ignore-path ../../../.prettirun go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE mcpgodebug GOMODCACHE x_amd64/compile env -json 7d7f7a5779b12703-w x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env .a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json @v1.1.3/base64/base64.go x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv --check **/*.cjs 64/bin/go **/*.json --ignore-path ../../../.prettilist go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv 78196/b138/_pkg_.a vMoO/r1c5PlYHcFDLvhFNvMoO 64/pkg/tool/linux_amd64/link GOINSECURE e/jsonschema-go/config GOMODCACHE 64/pkg/tool/linuremote.origin.url (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv y_with_repos=public_67033420/001remote.origin.url GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env from .github/aw to pkg/actionpins/data/action_pins.json..." GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD 78196/b029/symab/home/REDACTED/work/gh-aw/gh-aw/.github/workflows/ace-editor.md 64/pkg/tool/linux_amd64/vet env 78196/b194/_pkg_.a 4ACQ/f02Eva1ttQPQuPWq4ACQ ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.8/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json age/common.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo -importcfg /tmp/go-build3795288819/b392/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/internal/tools/generate-action-metadata/main.go go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE node (http block)
https://api.github.com/repos/owner/repo/contents/file.md
- Triggering command: /tmp/go-build1500313380/b400/cli.test /tmp/go-build1500313380/b400/cli.test -test.testlogfile=/tmp/go-build1500313380/b400/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /tmp/go-build3795288819/b400/cli.test /tmp/go-build3795288819/b400/cli.test -test.testlogfile=/tmp/go-build3795288819/b400/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE node (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json 1.5.0/internal/j-ifaceassert x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE node (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/8fecf965-36cc-4bd3-898f-8bfdbd3e6bbf Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

…2-24

Copilot

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates gh-aw default runtime pins for AWF and MCP Gateway so newly compiled workflows pick up upstream TLS trust fixes.

Changes:

Bumped default version constants for AWF (v0.25.24) and MCP Gateway (v0.2.24).
Regenerated compiled workflow lockfiles to reference updated AWF script/tag versions and MCP Gateway image.
Updated WASM compiler golden fixtures and added a Changesets entry documenting the bump.

Show a summary per file

File	Description
pkg/constants/version_constants.go	Updates default pinned versions for AWF and MCP Gateway.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden	Refreshes golden compiled output to use new default AWF/MCPG versions.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden	Refreshes golden compiled output to use new default AWF/MCPG versions.
.github/workflows/video-analyzer.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/test-workflow.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/smoke-crush.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/security-compliance.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/refiner.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/pr-triage-agent.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/plan.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/metrics-collector.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/gpclean.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/firewall.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/example-permissions-warning.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/dev.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/daily-malicious-code-scan.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/code-simplifier.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/changeset.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/bot-detection.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/ai-moderator.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.github/workflows/ace-editor.lock.yml	Regenerated lock workflow to pull/run AWF 0.25.24 and MCPG v0.2.24.
.changeset/patch-bump-awf-v0-25-24-mcpg-v0-2-24.md	Documents the default version bump for the next patch release.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 64/198 changed files
Comments generated: 0

Initial plan

7779e47

Copilot AI assigned Copilot and lpcox Apr 18, 2026

Copilot started work on behalf of lpcox April 18, 2026 00:37 View session

Copilot AI linked an issue Apr 18, 2026 that may be closed by this pull request

Bump AWF to v0.25.24 and mcpg to v0.2.24 #26965

Closed

github-actions bot mentioned this pull request Apr 18, 2026

[aw] No-Op Runs #26814

Open

chore: bump default AWF to v0.25.24 and mcpg to v0.2.24

e008085

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/8fecf965-36cc-4bd3-898f-8bfdbd3e6bbf Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update AWF to v0.25.24 and mcpg to v0.2.24~~ Bump default AWF to v0.25.24 and MCP Gateway to v0.2.24 Apr 18, 2026

Copilot AI requested a review from lpcox April 18, 2026 01:10

Copilot finished work on behalf of lpcox April 18, 2026 01:10

github-actions bot mentioned this pull request Apr 18, 2026

Smoke Test: Claude - 24593507195 #26971

Closed

Merge branch 'main' into copilot/bump-awf-to-v0-25-24-and-mcpg-to-v0-…

d41814a

…2-24

lpcox marked this pull request as ready for review April 18, 2026 01:51

Copilot AI review requested due to automatic review settings April 18, 2026 01:51

Copilot started reviewing on behalf of lpcox April 18, 2026 01:52 View session

Copilot AI reviewed Apr 18, 2026

View reviewed changes

lpcox merged commit 00f981d into main Apr 18, 2026
87 of 137 checks passed

lpcox deleted the copilot/bump-awf-to-v0-25-24-and-mcpg-to-v0-2-24 branch April 18, 2026 01:58

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump default AWF to v0.25.24 and MCP Gateway to v0.2.24#26966

Bump default AWF to v0.25.24 and MCP Gateway to v0.2.24#26966
lpcox merged 3 commits intomainfrom
copilot/bump-awf-to-v0-25-24-and-mcpg-to-v0-2-24

Copilot AI commented Apr 18, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

Copilot AI commented Apr 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Apr 18, 2026 •

edited

Loading