chore: bump firewall to v0.25.58 and gateway to v0.3.22#35973
Conversation
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
|
📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing... |
|
🚀 Smoke Gemini MISSION COMPLETE! Gemini has spoken. ✨ |
|
✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟 |
|
🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨ |
|
🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧 |
|
💫 TO BE CONTINUED... Smoke Claude failed! Our hero faces unexpected challenges... |
Agent Container Tool Check
Result: 12/12 tools available ✅ Overall Status: PASS
|
Smoke Test Results\n- GitHub MCP Testing: ✅\n- Web Fetch Testing: ✅\n- File Writing Testing: ✅\n- Bash Tool Testing: ✅\n- Build gh-aw: ❌\n\nOverall status: FAILWarning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "localhost"See Network Configuration for more information.
|
|
Smoke test summary for #26690105532
Warning Firewall blocked 5 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
|
Commit pushed:
|
|
Smoke test 26690105523
Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Smoke review: version bumps look internally consistent across the sampled lockfiles. I left two non-blocking inline notes and found no existing review comments to reply to.
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
📰 BREAKING: Report filed by Smoke Copilot · gpt54 12.7M
| @@ -464,7 +464,7 @@ jobs: | |||
| env: | |||
There was a problem hiding this comment.
Nice to see the install script version move with the image bump here; keeping those in lockstep helps avoid release drift.
| @@ -468,7 +468,7 @@ jobs: | |||
| env: | |||
There was a problem hiding this comment.
Good catch updating the pinned install version in the lockfile too — that keeps this workflow aligned with the new firewall release.
|
📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤 |
🧪 Smoke Test: Claude — Run 26690105542Overall: ❌ FAIL (Serena MCP crashed) Core #1–13: 1✅ 2✅ 3❌ 4✅ 5✅ 6✅ 7✅ 8✅ 9✅ 10✅ 11✅ 12✅ 13✅ PR Review #14–20: 14✅ 15✅ 16✅ 17 Details: §26690105542 Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
There was a problem hiding this comment.
💥 Automated smoke test review - all systems nominal!
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
💥 [THE END] — Illustrated by Smoke Claude · opus48 2M
| @@ -70,7 +70,7 @@ const DefaultGitHubMCPServerVersion Version = "v1.1.0" | |||
| // | |||
| // The first recompile regenerates all lock files using the new version; the second recompile | |||
| // refreshes the container SHA pins that were resolved during the first pass. | |||
| const DefaultFirewallVersion Version = "v0.25.57" | |||
| const DefaultFirewallVersion Version = "v0.25.58" | |||
There was a problem hiding this comment.
Smoke test review: firewall version bump to v0.25.58 looks correct here. ✅
| @@ -108,7 +108,7 @@ const CopilotNoAskUserMinVersion Version = "1.0.19" | |||
| // | |||
| // The first recompile regenerates all lock files using the new version; the second recompile | |||
| // refreshes the container SHA pins that were resolved during the first pass. | |||
| const DefaultMCPGatewayVersion Version = "v0.3.21" | |||
| const DefaultMCPGatewayVersion Version = "v0.3.22" | |||
There was a problem hiding this comment.
Smoke test review: gateway version bump to v0.3.22 is consistent with the changeset. 👍
There was a problem hiding this comment.
Pull request overview
This PR bumps the default firewall and MCP gateway versions used by the workflow compiler and refreshes generated workflow lock files so emitted workflows install and run the new container tags.
Changes:
- Updated
DefaultFirewallVersiontov0.25.58. - Updated
DefaultMCPGatewayVersiontov0.3.22. - Regenerated workflow lock files and added a patch changeset.
Show a summary per file
| File | Description |
|---|---|
pkg/constants/version_constants.go |
Updates the default firewall and MCP gateway version constants. |
.github/workflows/*.lock.yml |
Refreshes generated workflow manifests, install steps, image downloads, MCP gateway image tags, and AWF config schema/image tags. |
.changeset/patch-bump-firewall-gateway.md |
Records the dependency bump as a patch changeset. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 43/238 changed files
- Comments generated: 0
Routine version bump for two core dependencies.
Version changes (
pkg/constants/version_constants.go)DefaultFirewallVersion:v0.25.57→v0.25.58DefaultMCPGatewayVersion:v0.3.21→v0.3.22Regenerated artifacts
All 236 workflow lock files refreshed with updated container SHA pins via the required double-recompile (
make build && make recompile && make recompile).Release note highlights
Neither release introduces new CLI flags or schema changes, so no new
AWF*MinVersionconstants are needed.requestedModelconfig; ARC-DinD identity file synthesis fix; internal refactoring only.Changeset\n\n- Type: patch\n- Description: Bumped the default firewall and MCP gateway versions.
✨ PR Review Safe Output Test - Run 26690105542
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.comSee Network Configuration for more information.