v0.82.11

🌟 Release Highlights

This release focuses on improved onboarding, stronger safe-outputs reliability, expanded eval coverage, and a wave of targeted bug fixes across the agentic harnesses and compiler toolchain.

✨ What's New

• Streamlined gh aw add setup — The package manifest config bootstrap flow now runs automatically, reducing manual configuration steps when adding new workflows. (#46041)
• Preconfigured Copilot PAT onboarding in gh aw add-wizard — The wizard now walks users through setting up a Copilot Personal Access Token, making first-time setup smoother. (#45987)
• Fork-backed safe-output pull request support — Safe outputs now support creating pull requests from fork-backed branches, expanding the supported workflow topologies. (#45909)
• GitHub MCP Server upgraded to v1.6.0 — The bundled MCP server is now at v1.6.0 with fields_param enabled by default, giving workflows access to richer GitHub data. (#45832)
• Issue-intent metadata required for close/assignment tools — close and assign_to_agent tools now require issue-intent metadata by default (with per-tool opt-out), reducing unintentional issue state changes. (#46014)
• Evals expanded to 24 more workflows — Automated evaluation coverage has been significantly broadened, improving reliability signals across the workflow library. (#45984)
• PR sous-chef surfaces failed checks in nudge comments — When a PR is nudged, failed CI checks are now included in the comment, making it easier to act on blocking issues. (#45957)

🐛 Bug Fixes & Improvements

• Fix repositories: ["*"] in GitHub App token minting — Activation tokens now correctly honor wildcard repository scopes. (#45908)
• Decouple safe-outputs client token from project token — The Process Safe Outputs client token is now independent of the project-specific token, fixing token confusion in multi-project setups. (#45999)
• Fix compiler version normalization for git describe output — Version strings from git describe are now normalized correctly before use in compiled workflows. (#46030)
• Fast-fail Copilot harness on LLM invocation cap — When the LLM invocation cap is saturated, the Copilot harness now fails fast instead of hanging. (#45827)
• Exempt large body/content fields from SM-IS-01 10 KB cap — Added maxLength: 65536 to body and content fields so large payloads are not incorrectly rejected. (#45826)
• Detect Claude Code 401 auth errors in claude_harness — Authentication failures from Claude Code are now caught and reported clearly. (#45982)
• Fix Pi JSONL eval log parsing — YES/NO answers in Pi engine JSONL log format are now parsed correctly. (#45960)
• Align actionlint to v1.7.12 — All references now use a consistent actionlint version. (#45979)
• Prevent spurious .github symlink probes — The frontmatter hash GitHub API reader no longer emits false symlink probe requests. (#45989)
• Improve unknown model pricing errors — Better error messaging and accurate issue titles when a model's pricing data is missing. (#45985)
• Prevent duplicate "Download container images" step in Codex evals — A duplicate step in the generated Codex evals job is now correctly suppressed. (#45991)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🚀 Release · 33.8 AIC · ⊞ 7.6K

---

What's Changed

• nilctxpassed: ignore variadic spread slice arguments to prevent false positives by @pelikhan with @Copilot in #45906
• [WIP] Fix failing GitHub Actions job Integration: Workflow Misc Part 2 by @pelikhan with @Copilot in #45927
• [WIP] Fix failing GitHub Actions job agent by @pelikhan with @Copilot in #45935
• [avenger] Update wasm golden files for action pin bumps by @github-actions[bot] in #45948
• feat: surface failed checks in pr-sous-chef nudge comments by @pelikhan with @Copilot in #45957
• fix(evals): parse YES/NO answers from Pi JSONL engine log format by @pelikhan with @Copilot in #45960
• [instructions] Sync instruction files with release v0.82.10 by @github-actions[bot] in #45967
• fix: add maxLength: 65536 to body/content fields to exempt from SM-IS-01 10 KB cap by @pelikhan with @Copilot in #45826
• Honor repositories: ["*"] in activation GitHub App token minting by @pelikhan with @Copilot in #45908
• fix: fast-fail copilot harness when LLM invocation cap is saturated by @pelikhan with @Copilot in #45827
• [docs] Update glossary - daily scan by @github-actions[bot] in #45975
• feat: upgrade GitHub MCP server to v1.6.0, enable fields_param by default by @pelikhan with @Copilot in #45832
• eslint-factory: consolidate fs-sync try/catch rules and unify ESM/CJS fs binding detection by @pelikhan with @Copilot in #45964
• [eslint-miner] feat(eslint): add require-new-url-try-catch rule by @github-actions[bot] in #45971
• eslint-factory: extract nonStringKind to shared module; align setOutput rule with CORE_ALIASES by @pelikhan with @Copilot in #45973
• Refactor ResolveWorkflows into focused helpers to reduce largefunc backlog by @pelikhan with @Copilot in #45965
• Add evals to 24 more agentic workflows by @pelikhan with @Copilot in #45984
• fix: align actionlint version to v1.7.12 across all references by @pelikhan with @Copilot in #45979
• fix: detect Claude Code 401 auth errors in claude_harness by @pelikhan with @Copilot in #45982
• fix: unknown model pricing — better error options and accurate issue title by @pelikhan with @Copilot in #45985
• fix: prevent duplicate "Download container images" step in codex evals job by @pelikhan with @Copilot in #45991
• Add fork-backed safe-output pull request support by @pelikhan with @Copilot in #45909
• fix: prevent spurious .github symlink probes in frontmatter hash GitHub API reader by @pelikhan with @Copilot in #45989
• Add preconfigured Copilot PAT onboarding in gh aw add-wizard by @mnkiefer with @Copilot in #45987
• fix add normalization for git describe compiler versions by @mnkiefer in #46030
• feat: add smoke-copilot-mai workflow using mai-code-1-flash by @pelikhan with @Copilot in #46048
• [spdd] Daily spec work plan - 2026-07-16 (rotation 15–19) by @pelikhan with @Copilot in #46044
• Require issue-intent metadata for close/assignment tools by default, with per-tool opt-out by @pelikhan with @Copilot in #46014
• feat: add OutcomeStatusLifecycle and OutcomeStatusLifecycleClose as first-class outcome status constants by @pelikhan with @Copilot in #46039
• [aw] Decouple Process Safe Outputs client token from project-specific token by @pelikhan with @Copilot in #45999

Full Changelog: v0.82.10...v0.82.11