Skip to content

Set Codex default fallback model to gpt-5.4 and regenerate lockfiles#34804

Merged
pelikhan merged 3 commits into
mainfrom
copilot/update-codex-default-model
May 26, 2026
Merged

Set Codex default fallback model to gpt-5.4 and regenerate lockfiles#34804
pelikhan merged 3 commits into
mainfrom
copilot/update-codex-default-model

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented May 26, 2026

Codex workflows were defaulting to gpt-5.3-codex when no explicit model override was provided. This updates the Codex engine default to gpt-5.4 and recompiles generated lockfiles so runtime fallbacks stay consistent with source constants.

  • Default model constant

    • Updated CodexDefaultModel in pkg/constants/engine_constants.go from gpt-5.3-codex to gpt-5.4.
  • Generated workflow artifacts

    • Recompiled workflows to propagate the new Codex fallback into affected .github/workflows/*.lock.yml files where GH_AW_MODEL_AGENT_CODEX / GH_AW_MODEL_DETECTION_CODEX defaults are emitted.
// pkg/constants/engine_constants.go
CodexDefaultModel = "gpt-5.4"


✨ PR Review Safe Output Test - Run 26425207108

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · opus47 7.4M ·

Copilot AI and others added 2 commits May 26, 2026 00:09
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title Set Codex default model to gpt-5.4 Set Codex default fallback model to gpt-5.4 and regenerate lockfiles May 26, 2026
Copilot AI requested a review from pelikhan May 26, 2026 00:16
@pelikhan pelikhan added the smoke label May 26, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 26, 2026

🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧

@github-actions
Copy link
Copy Markdown
Contributor

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 26, 2026

⚠️ Smoke Antigravity failed. Antigravity encountered unexpected challenges...

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 26, 2026

🚀 Smoke Gemini MISSION COMPLETE! Gemini has spoken. ✨

Smoke test completed with a build failure. Attempting to report.

@github-actions github-actions Bot removed the smoke label May 26, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 26, 2026

💫 TO BE CONTINUED... Smoke Claude failed! Our hero faces unexpected challenges...

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 26, 2026

🌑 The shadows whisper... Smoke Codex failed to deliver outputs. The oracle requires further meditation...

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

The threat detection results could not be parsed.

Review the workflow run logs for details.

@github-actions
Copy link
Copy Markdown
Contributor

Smoke Test Results

  • GitHub MCP Testing: ✅
  • Web Fetch Testing: ✅
  • File Writing Testing: ✅
  • Bash Tool Testing: ✅
  • Build gh-aw: ❌

Overall Status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

Smoke Gemini — Powered by Gemini ·

@github-actions
Copy link
Copy Markdown
Contributor

Agent Container Tool Check

Tool Status Version
bash 5.2.21
sh available
git 2.54.0
jq 1.7
yq 4.53.2
curl 8.5.0
gh 2.92.0
node 22.22.3
python3 3.14.5
go 1.24.13
java openjdk 21.0.11
dotnet 10.0.300

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · sonnet46 503.6K ·

@github-actions
Copy link
Copy Markdown
Contributor

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

The threat detection results could not be parsed.

Review the workflow run logs for details.

Smoke test status: FAIL

  • GitHub MCP: ✅
  • Serena MCP: ✅
  • Playwright: ✅
  • Web-fetch: ❌
  • Build gh-aw: ✅
  • Cache memory: ✅
  • Set issue field: ❌

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · gpt54 14.8M ·

@github-actions
Copy link
Copy Markdown
Contributor

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

The threat detection results could not be parsed.

Review the workflow run logs for details.

Comment Memory

Quiet build hums
Glass checks catch the hidden snag
Green lights wait in line

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · gpt54 14.8M ·

@github-actions
Copy link
Copy Markdown
Contributor

Smoke Copilot 26425207102: FAIL
PRs: feat: unified event timeline across MCP Gateway, AWF firewall, and agent logs; Reduce ExtractWorkflowNameFromFile overhead by removing deferred close path
Results: ✅ GitHub, MCP Scripts, Serena, Playwright, file, bash, discussion, build, artifact, new discussion, dispatch, review, sub-agent, check run; ❌ web-fetch direct tool, comment memory files
Author: app/copilot-swe-agent; Assignees: pelikhan, Copilot

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · gpt55 4.6M ·

Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Smoke review completed for PR #34804. Inline comments were added to representative generated lockfile updates.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · gpt55 4.6M

GH_AW_INFO_ENGINE_ID: "codex"
GH_AW_INFO_ENGINE_NAME: "Codex"
GH_AW_INFO_MODEL: ${{ vars.GH_AW_MODEL_AGENT_CODEX || 'gpt-5.3-codex' }}
GH_AW_INFO_MODEL: ${{ vars.GH_AW_MODEL_AGENT_CODEX || 'gpt-5.4' }}
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Smoke review: verified this generated lockfile metadata fallback reflects the PR's Codex model change.

CODEX_HOME: /tmp/gh-aw/mcp-config
GH_AW_MCP_CONFIG: ${{ runner.temp }}/gh-aw/mcp-config/config.toml
GH_AW_MODEL_AGENT_CODEX: ${{ vars.GH_AW_MODEL_AGENT_CODEX || 'gpt-5.3-codex' }}
GH_AW_MODEL_AGENT_CODEX: ${{ vars.GH_AW_MODEL_AGENT_CODEX || 'gpt-5.4' }}
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Smoke review: this runtime model fallback is consistent with the updated metadata fallback above.

@github-actions
Copy link
Copy Markdown
Contributor

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

@github-actions
Copy link
Copy Markdown
Contributor

Smoke Test: Claude — Run 26425207108

Core #1#13: ✅ all green · PR review #14#16, #18#19: ✅ · #17 ⚠️ skipped (no unresolved threads) · #20 ⚠️ skipped (no safe test PR).

Overall: PARTIAL (all functional tests passed; only design-skipped tests are ⚠️).

§26425207108

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · opus47 7.4M ·

Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💥 Automated smoke test review - all systems nominal!

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · opus47 7.4M

// Used as the fallback when no explicit model is configured and the
// GH_AW_MODEL_AGENT_CODEX / GH_AW_MODEL_DETECTION_CODEX variable is unset.
CodexDefaultModel = "gpt-5.3-codex"
CodexDefaultModel = "gpt-5.4"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Minor: consider adding a short inline comment explaining the rationale for the gpt-5.4 default (e.g., link to model card / availability) so future bumps have context. (smoke test feedback — Run 26425207108)

// GH_AW_MODEL_AGENT_CODEX / GH_AW_MODEL_DETECTION_CODEX variable is unset.
CodexDefaultModel = "gpt-5.3-codex"
CodexDefaultModel = "gpt-5.4"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nit: when the default model changes, it's worth double-checking that downstream fallback chains and tests reference the same constant rather than a hard-coded string. (smoke test feedback — Run 26425207108)

@pelikhan pelikhan marked this pull request as ready for review May 26, 2026 00:36
Copilot AI review requested due to automatic review settings May 26, 2026 00:36
@pelikhan pelikhan merged commit 5fa30ed into main May 26, 2026
25 checks passed
@pelikhan pelikhan deleted the copilot/update-codex-default-model branch May 26, 2026 00:37
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the Codex engine’s default fallback model so workflows that don’t explicitly set a model (and don’t have GH_AW_MODEL_AGENT_CODEX / GH_AW_MODEL_DETECTION_CODEX set) now fall back to gpt-5.4, and regenerates the affected generated workflow lockfiles to keep emitted defaults consistent with the source constant.

Changes:

  • Updated CodexDefaultModel from gpt-5.3-codex to gpt-5.4.
  • Regenerated impacted .github/workflows/*.lock.yml artifacts to reflect the new default model fallback in emitted env defaults / info fields.
Show a summary per file
File Description
pkg/constants/engine_constants.go Bumps Codex default fallback model constant to gpt-5.4.
.github/workflows/smoke-codex.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.
.github/workflows/schema-feature-coverage.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.
.github/workflows/necromancer.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.
.github/workflows/issue-arborist.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.
.github/workflows/grumpy-reviewer.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.
.github/workflows/duplicate-code-detector.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.
.github/workflows/daily-cache-strategy-analyzer.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.
.github/workflows/codex-github-remote-mcp-test.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.
.github/workflows/ai-moderator.lock.yml Regenerated to emit gpt-5.4 as the Codex model fallback.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 10/10 changed files
  • Comments generated: 0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants