Skip to content

v0.82.3

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 07 Jul 10:00
Immutable release. Only release title and notes can be modified.
v0.82.3
afad433
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🌟 Release Highlights

This release focuses on developer experience, security hardening, and compiler flexibility — delivering tighter CI guardrails, new safe-output primitives, and meaningful quality-of-life improvements across the toolchain.

✨ What's New

  • Compiler job dependency control — jobs.<generated>.needs can now augment compiler-generated job dependencies, giving authors explicit control over execution order for generated jobs like activation, agent, and safe_outputs (#43940)

  • dismiss-review safe output — Workflows can now programmatically dismiss their own PR reviews with actor-bound guards and required justification, enabling automated review lifecycle management (#43125)

  • Native duplicate issue marking — close-issue with duplicate_of now creates a proper GitHub "marked as duplicate of #X" timeline entry instead of a plain comment (#43152)

  • CI drift detection for lock files — A new CI check catches stale .lock.yml files when workflow markdown is edited without regenerating the corresponding lock files, preventing silent drift (#43747)

  • Selective maintenance job opt-out — maintenance.disabled_jobs lets repositories omit specific agentics-maintenance jobs, avoiding unnecessary write scopes for issue-triage-only repos (#43300)

  • Harness retry policy now configurable — GH_AW_HARNESS_* env vars let workflows widen the retry window for Copilot/Claude harnesses during sustained API transients (#43051)

  • Model inventory update — New model aliases (kiwi, mai-code) added; 10 Copilot sub-agents upgraded from small to newer model aliases for improved output quality (#43085, #43063)

🐛 Bug Fixes & Improvements

  • MCP server security hardening — HTTP MCP server now binds to 127.0.0.1 only, closing a DNS-rebinding and cross-origin POST attack surface introduced by go-sdk v1.6.0 (#43766)

  • Ctrl-C cancellation restored — context.Context threaded through 8 remote_fetch.go APIs so Ctrl-C now properly cancels in-flight HTTP requests from any CLI command (#43128)

  • Token double-charging fix — Cache-read tokens for the github-copilot provider were incorrectly counted twice; this is now corrected for accurate cost reporting (#43048)

  • Token metrics restoration — Token usage metrics are now correctly restored even when events.jsonl omits session.shutdown.modelMetrics (#43007)

  • Rate limit cancellation — checkAndWaitForRateLimit is now context-cancellable, preventing stuck runs during Ctrl-C (#43848)

  • gh aw trial GH_HOST support — --trigger-context issue URLs now correctly honor GH_HOST for GitHub Enterprise Server deployments (#43729)

  • safe-outputs manifest bundled — The safe-outputs-items manifest is now included in the usage artifact, restoring SafeItemsCount visibility in run reports (#43056)

📚 Documentation

  • Quick Start improvements — Frontmatter defined inline with .lock.yml semantics surfaced as a callout; engine secret setup clarified (#43083, #43107)

  • CLI reference expanded — Added "When to use" column to CLI commands summary table; enterprise guidance collapsed to reduce cognitive load (#43699, #43082)

  • Persona-driven authoring guide — New documentation covering persona-based workflow authoring and ad hoc scenario evaluation (#43050)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🚀 Release · 33.4 AIC · ⊞ 7.6K

What's Changed

  • Honor NO_COLOR/color-profile degradation for Lip Gloss v2 output paths by @pelikhan with @Copilot in #42945
  • Surface canonical dispatch-repository key in frontmatter full reference by @pelikhan with @Copilot in #43009
  • [docs] docs: trim repetitive glossary entries by @github-actions[bot] in #43019
  • fix(lint-monster): eliminate os.Getenv coupling in compilerenv and action_mode by @pelikhan with @Copilot in #42984
  • Strengthen codemod registry coverage by asserting all registered IDs by @pelikhan with @Copilot in #43008
  • Fix CLI consistency issues in lint, mcp, and secrets commands by @pelikhan with @Copilot in #42982
  • Restore token usage metrics when events.jsonl omits session.shutdown.modelMetrics by @pelikhan with @Copilot in #43007
  • compiler: inject missing model pricing from models.dev at compile time by @pelikhan with @Copilot in #43003
  • refactor(copilot-sdk): multi-provider only — remove single-provider legacy by @pelikhan with @Copilot in #42740
  • compilerenv: remove constructor panic to satisfy custom Go lint by @pelikhan with @Copilot in #43044
  • Suppress CodeQL js/http-to-file-access in ensure-docs-slide-pdf.js with explicit trust-boundary rationale by @pelikhan with @Copilot in #43049
  • Document persona-driven workflow authoring and ad hoc scenario evaluation by @pelikhan with @Copilot in #43050
  • Refresh AWF container digests and recompile workflow lockfiles by @pelikhan with @Copilot in #43060
  • feat(models): 2026-07-03 model inventory update — new models, alias additions, mirror sync by @pelikhan with @Copilot in #43063
  • Trim search_repositories token cost with explicit small-page pagination in workflow prompts by @pelikhan with @Copilot in #43055
  • Harden temp writes in safe-output evaluation script by @pelikhan with @Copilot in #43054
  • Reduce ambient prompt bloat in core analysis workflows by @pelikhan with @Copilot in #43053
  • fix: stop double-charging cache-read tokens for github-copilot provider by @pelikhan with @Copilot in #43048
  • fix: prevent tool denial failures in daily-agent-of-the-day-blog-writer by @pelikhan with @Copilot in #43070
  • feat: migrate 10 copilot sub-agents from small to kiwi / mai-code by @pelikhan with @Copilot in #43085
  • Quick Start: define frontmatter inline and surface .lock.yml semantics as a callout by @pelikhan with @Copilot in #43083
  • refactor: split compiler_types.go grab-bag into workflow_data.go and safe_outputs_config.go by @pelikhan with @Copilot in #43071
  • Docs: reduce CLI page cognitive load by collapsing enterprise guidance by @pelikhan with @Copilot in #43082
  • fix(safe-outputs): bundle safe-outputs-items manifest into usage artifact to restore SafeItemsCount by @pelikhan with @Copilot in #43056
  • fix: pass GITHUB_SHA to safe-outputs MCP server container by @pelikhan with @Copilot in #43106
  • [log] Add debug logging to import-path and pricing resolution by @github-actions[bot] in #43109
  • Fail fast on empty safeoutputs schema and add Copilot soft-time convergence guard by @pelikhan with @Copilot in #43057
  • fix: hard-bake workflow ID in workflow_call concurrency group to prevent deadlock by @pelikhan with @Copilot in #43078
  • Home page: move Public Preview notice into hero with warning callout styling by @pelikhan with @Copilot in #43081
  • [jsweep] Clean tool_call_details.cjs by @github-actions[bot] in #43111
  • Clarify Quick Start workflow source and engine secret setup by @pelikhan with @Copilot in #43107
  • Add centralized /souschef PR command routing to PR Sous Chef by @pelikhan with @Copilot in #43119
  • Refactor main-job runtime setup orchestration to reduce largefunc backlog by @pelikhan with @Copilot in #43105
  • fix(daily-yamllint-fixer): add testdata/** to allowed-files by @pelikhan with @Copilot in #43121
  • fix(designer): add missing safe output types and frontmatter fields to designer SKILL.md by @pelikhan with @Copilot in #43118
  • Preserve trailing-newline semantics in fprintlnsprintf SuggestedFix by @pelikhan with @Copilot in #43120
  • Require PR-targeted acknowledgement for /souschef comment triggers by @pelikhan with @Copilot in #43144
  • Refactor workflow env access in github_cli/features to injected lookup by @pelikhan with @Copilot in #43104
  • Replace hard-coded workflow temp paths with shared constants by @pelikhan with @Copilot in #43103
  • Deduplicate runtime override cloning in applyRuntimeOverrides by @pelikhan with @Copilot in #43134
  • [spec-extractor] Update package specifications for agentdrain, cli, console, constants by @github-actions[bot] in #43173
  • [instructions] Sync instruction files with release v0.81.6 by @github-actions[bot] in #43157
  • chore: bump bubbletea v2.0.7 → v2.0.8, annotate WithInput(nil) by @pelikhan with @Copilot in #43171
  • [code-scanning-fix] Fix go/allocation-size-overflow (CWE-190): remove +1 in map allocation by @github-actions[bot] in #43148
  • Add modelsdev package spec and complete linters analyzer documentation coverage by @pelikhan with @Copilot in #43208
  • [docs] Update glossary - daily scan by @github-actions[bot] in #43176
  • fix: remove gpt-5.5 from agent model alias by @pelikhan with @Copilot in #43229
  • fix(arc-dind): mount workspace correctly and unify artifact roots by @lpcox in #43222
  • Refactor runtime setup extra-field merging into shared helpers by @pelikhan with @Copilot in #43135
  • feat(eslint): add require-await-core-summary-write rule by @pelikhan with @Copilot in #43170
  • fix(aw-compat): gh aw fix returns exit code 2 and correct summary when guided-error codemod fires by @pelikhan with @Copilot in #43169
  • deps: bump @playwright/cli from 0.1.14 to 0.1.15 by @pelikhan with @Copilot in #43196
  • [dead-code] chore: remove dead functions — 1 function removed by @github-actions[bot] in #43212
  • logs: fix truncated daily audits — raise MCP gateway timeout and add count-limit pagination by @pelikhan with @Copilot in #43197
  • [caveman] Optimize instruction verbosity — adr-writer, contribution-checker (2026-07-03) by @github-actions[bot] in #43266
  • feat(pr-sous-chef): exempt CONFLICTING PRs from last-comment-from-sous-chef skip by @pelikhan with @Copilot in #43286
  • [community] Update community contributions in README by @github-actions[bot] in #43287
  • feat(readme): compact community contributions widget with per-user search links by @pelikhan with @Copilot in #43293
  • [WIP] Fix failing GitHub Actions job 'build' by @pelikhan with @Copilot in #43294
  • [WIP] Fix failing GitHub Actions job test by @pelikhan with @Copilot in #43295
  • fix: detect stream_options HTTP 400 as non-retryable Anthropic BYOK error by @pelikhan with @Copilot in #43127
  • [linter-miner] linter: add stringsindexcontains — flag strings.Index comparisons that should use strings.Contains by @github-actions[bot] in #43253
  • Thread context.Context through 8 public remote_fetch.go APIs to fix Ctrl-C cancellation by @pelikhan with @Copilot in #43128
  • [log] Add debug logging to five previously unlogged Go files by @github-actions[bot] in #43303
  • [WIP] Fix failing GitHub Actions job for integration unauthenticated add by @pelikhan with @Copilot in #43304
  • [WIP] Fix failing GitHub Actions job for parser location and validation by @pelikhan with @Copilot in #43306
  • Fix audit comparison output for unsuccessful workflow runs by @pelikhan with @Copilot in #43139
  • fix: await runLogParser in async test callbacks by @pelikhan with @Copilot in #43316
  • fix: remove unused context import breaking CI builds in parser integration tests by @pelikhan with @Copilot in #43323
  • spdd batch 4: promote guard-policies spec, add safeguards/norms to manifest and alias specs, create MCP access-control compliance fixtures by @pelikhan with @Copilot in #43245
  • feat(close-issue): add duplicate_of for native GitHub duplicate marking by @pelikhan with @Copilot in #43152
  • Make Copilot/Claude harness retry policy configurable via GH_AW_HARNESS_* by @pelikhan with @Copilot in #43051
  • fix(push_repo_memory): correct misleading "git diff format overhead" framing in pre-check error message by @pelikhan with @Copilot in #43301
  • Add dismiss-review safe output with actor-bound PR review dismissal guards by @pelikhan with @Copilot in #43125
  • feat: add security architecture formal test suite (P1–P10) by @pelikhan with @Copilot in #43244
  • Prevent invalid id-token: read emission when merging permissions: all: read with explicit overrides by @pelikhan with @Copilot in #43297
  • Fix host.docker.internal DNS resolution for mcp-scripts in bridge-mode gateway by @pelikhan with @Copilot in #43172
  • Document compile --no-models-dev-lookup and add CLI docs regression coverage by @pelikhan with @Copilot in #43339
  • [jsweep] Clean write_large_content_to_file.cjs by @github-actions[bot] in #43312
  • Stop compiler from emitting deprecated artifact v3 pins in GHES mode by @pelikhan with @Copilot in #43298
  • Add maintenance.disabled_jobs to selectively omit agentics-maintenance jobs and permissions by @pelikhan with @Copilot in #43300
  • [instructions] Sync instruction files with release v0.82.2 by @github-actions[bot] in #43354
  • Fix docs search regression by testing against preview build and adding responsive search-modal coverage by @pelikhan with @Copilot in #43338
  • Add regression tests for gh-aw-firewall digest pinning at default version (0.27.22) by @pelikhan with @Copilot in #43343
  • Harden issue-intent confidence handling: clearer INTENT suffix + lenient validation by @pelikhan with @Copilot in #43344
  • refactor: extract shared multi-provider JSON helpers to eliminate duplicate code by @pelikhan with @Copilot in #43329
  • [spec-extractor] Update package specifications for agentdrain, cli, console, constants by @github-actions[bot] in #43362
  • Resolve require-async-entrypoint-catch by binding, not bare name by @pelikhan with @Copilot in #43349
  • fix(create-issue): emit deduplicate-by-title in compiled handler config by @pelikhan with @Copilot in #43345
  • refactor: consolidate duplicated model-normalization helpers (pkg/cli ↔ pkg/modelsdev) by @pelikhan with @Copilot in #43340
  • fix: correct engine.env secrets warning — excluded from sandbox, not leaked by @pelikhan with @Copilot in #43302
  • [ca] CLI Version Updates: Claude Code 2.1.201, MCP Gateway v0.3.33 by @pelikhan with @Copilot in #43358
  • eslint-factory: add gh-aw-custom/prefer-number-isnan rule for unsafe global isNaN usage by @pelikhan with @Copilot in #43365
  • Clarify pr-sous-chef criteria for dismissing github-actions[bot] reviews by @pelikhan with @Copilot in #43366
  • docs(spec): fix parser and workflow README accuracy issues by @pelikhan with @Copilot in #43394
  • require-await-core-summary-write: tighten isCoreLikeIdentifier to exact alias set by @pelikhan with @Copilot in #43382
  • fix(eslint-factory): require-async-entrypoint-catch — track async arrow/fn-expr entrypoints and flag .then() without .catch() by @pelikhan with @Copilot in #43356
  • deps: bump bubbletea v2.0.8, lipgloss v2.0.5 by @pelikhan with @Copilot in #43375
  • [dead-code] chore: remove dead functions — 1 function removed by @github-actions[bot] in #43397
  • Strengthen persona-driven workflow guidance for recurring reports and compliance audits by @pelikhan with @Copilot in #43412
  • Scope dependabot-repair workflow token permissions to least privilege by @pelikhan with @Copilot in #43411
  • fix: reformat action pins JSON to 2-space indentation by @pelikhan with @Copilot in #43448
  • [community] Update community contributions in README by @github-actions[bot] in #43450
  • test: add golden files and RunWithSuggestedFixes for 3 autofix linters by @pelikhan with @Copilot in #43376
  • fix(aic-guardrail): widen fallback search window and add in-loop rate-limit backoff by @pelikhan with @Copilot in #43447
  • Add smoke-token-telemetry workflow to catch token telemetry emitter regressions by @pelikhan with @Copilot in #43403
  • Fix hardcoded main branch in gh aw trial --host-repo by @pelikhan with @Copilot in #43405
  • fix: github-app auth support in SideRepoOps maintenance workflow generator by @pelikhan with @Copilot in #43406
  • [linter-miner] linter: add appendbytestring — flag redundant []byte(s) conversion in append calls by @github-actions[bot] in #43423
  • Fix TypeScript never-narrowing in require-async-entrypoint-catch for setup/js lint path by @pelikhan with @Copilot in #43440
  • Improve frontmatter diagnostics for invalid tools config shape by @pelikhan with @Copilot in #43409
  • ambient-context: reduce prompt sizes across 4 high-traffic workflows by @pelikhan with @Copilot in #43460
  • Targeted custom-lint cleanup: defer-in-loop resource handling and continuation options struct by @pelikhan with @Copilot in #43414
  • [model-inventory] Add lyria alias and allow models.dev in Daily Model Inventory firewall by @pelikhan with @Copilot in #43458
  • refactor: extract pkg/colorwriter to eliminate duplicated colorprofile_writer.go across console and logger by @pelikhan with @Copilot in #43459
  • fix(eslint): detect dropped await on local core.summary aliases by @pelikhan with @Copilot in #43404
  • Add CJS syntax gate to catch module-load async/await errors earlier by @pelikhan with @Copilot in #43473
  • Route audit-style workflow discussions into the Audits category by @pelikhan with @Copilot in #43472
  • feat(sous-chef): eliminate per-PR REST calls in pending-checks pre-filter by @pelikhan with @Copilot in #43471
  • fix(logs): total_turns and total_safe_items always 0 in summary by @pelikhan with @Copilot in #43410
  • Optimize claude-code-user-docs-review by collapsing redundant sub-agents by @pelikhan with @Copilot in #43469
  • fix: add CJS module-load syntax gate to prevent silent await/non-async regressions by @pelikhan with @Copilot in #43474
  • Add audit_decomposition A/B experiment to audit-workflows by @pelikhan with @Copilot in #43475
  • fix(jsweep): prevent context exhaustion by adding early analysis decision point by @pelikhan with @Copilot in #43462
  • Classify Copilot SDK session.idle timeouts as agentic_engine_timeout by @pelikhan with @Copilot in #43413
  • pr-sous-chef: process all PRs, treat marker-only comments as informational by @pelikhan with @Copilot in #43492
  • Enforce syntax-aware linting for bundled CommonJS action scripts by @pelikhan with @Copilot in #43470
  • fix(pr-sous-chef): prefilter step summary + per-run report issue by @pelikhan with @Copilot in #43494
  • daily-yamllint-fixer: remove allowed-files restriction from safe-outputs by @pelikhan with @Copilot in #43496
  • Fix allocation-size overflow risk in model pricing merge by @pelikhan with @Copilot in #43468
  • Clarify copilot-requests authentication as PAT-free by @pelikhan with @Copilot in #43503
  • Warn on outdated action versions in user-provided steps by @pelikhan with @Copilot in #43455
  • Deduplicate skip-query gate logic for setup action guards by @pelikhan with @Copilot in #43480
  • Deduplicate discussion comment mutation flow across comment actions by @pelikhan with @Copilot in #43482
  • [spec-enforcer] Enforce specifications for modelsdev, repoutil, semverutil by @github-actions[bot] in #43536
  • prefer-number-isnan: treat ESM import bindings as local shadows by @pelikhan with @Copilot in #43500
  • docs: update DICTATION.md with high-frequency project terms by @pelikhan with @Copilot in #43497
  • [instructions] Sync instruction files with release v0.82.x by @github-actions[bot] in #43519
  • fix(eslint): harden require-await-core-summary-write for compound expression forms by @pelikhan with @Copilot in #43507
  • fix(ai-moderator): noop safe output + cache miss hardening by @pelikhan with @Copilot in #43525
  • httprespbodyclose: analyze function literals as first-class scopes by @pelikhan with @Copilot in #43526
  • Add shared prompt quality gate for plateaued agent-review workflows by @pelikhan with @Copilot in #43527
  • [workflow-style] Normalize report formatting for 36 non-compliant workflows by @pelikhan with @Copilot in #43516
  • feat: support github-app in max-daily-ai-credits for dedicated guardrail token by @pelikhan with @Copilot in #43508
  • fix(lint): eliminate env-coupling in workflow_data, add_interactive_engine, outcomes_command by @pelikhan with @Copilot in #43506
  • [eslint-miner] feat(eslint): add no-json-stringify-error rule by @github-actions[bot] in #43523
  • Fix GraphQL ID injection in project_command.go (Semgrep #627/#628, CWE-89) by @pelikhan with @Copilot in #43467
  • [yamllint-fixer] Reduce yamllint noise in generated lock files (trailing spaces + blank lines) by @github-actions[bot] in #43509
  • docs: add colorwriter README; fix linters README and doc.go for appendbytestring by @pelikhan with @Copilot in #43559
  • fix: use explicit model IDs in test-quality-sentinel experiment variants by @pelikhan with @Copilot in #43560
  • Normalize deployment-incident-monitor report formatting conventions by @pelikhan with @Copilot in #43556
  • feat(hippo): create up to 3 quick-win issues per daily run with cookie label by @pelikhan with @Copilot in #43549
  • [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in #43564
  • fix(daily-blog-writer): prevent tool denial guardrail from firing on shell/read calls by @pelikhan with @Copilot in #43567
  • Fix audit comparison turns delta for cached summaries by @pelikhan with @Copilot in #43501
  • Show safeoutputs command help on empty arguments by @pelikhan with @Copilot in #43566
  • [aw] Enforce terminal safe-output contract in Daily Formal Spec Verifier by @pelikhan with @Copilot in #43584
  • Docs: add persona pattern matrix, incident dedup-key templates, and design-token governance trigger guidance by @pelikhan with @Copilot in #43585
  • fix(compiler): auto-add pre_activation to safe_outputs/conclusion needs when messages reference its outputs by @pelikhan with @Copilot in #43570
  • [yamllint-fixer] Reduce yamllint trailing-spaces noise in generated lock files by @github-actions[bot] in #43580
  • docs: surface Claude engine option in quick-start add flow by @pelikhan with @Copilot in #43590
  • linter-miner: fix sub-agent model: large → model: inherited by @pelikhan with @Copilot in #43606
  • Route remaining compile stderr styling through console helpers by @pelikhan with @Copilot in #43586
  • Wrap org runner and MCP list-tools stderr output with console formatting helpers by @pelikhan with @Copilot in #43589
  • Add explicit AI crawler allowlist to docs robots.txt by @pelikhan with @Copilot in #43599
  • Fix trial_confirmation.go sub-step bullets to use console.FormatListItemStderr by @pelikhan with @Copilot in #43588
  • Centralize interactive huh form setup in pkg/console and remove CLI duplication by @pelikhan with @Copilot in #43587
  • SPDD 2026-07-05: outcome evaluators, policy compiler, and spec coverage for batch 20-24 by @pelikhan with @Copilot in #43594
  • Allow unrestricted bash in Daily Safe Output Integrator by @pelikhan with @Copilot in #43621
  • [caveman] Optimize instruction verbosity — asciicharts.md (2026-07-05) by @github-actions[bot] in #43624
  • ambient-context: reduce copilot-agent-analysis first-request size by ~28% by @pelikhan with @Copilot in #43619
  • fix(setup/js): guard JSON.parse call sites with try/catch by @pelikhan with @Copilot in #43639
  • fix(observability): add firewall and mcp artifacts, remove invalid parse param by @pelikhan with @Copilot in #43658
  • fix(setup/js): numeric coercion, setOutput stringification, and async entrypoint cleanup by @pelikhan with @Copilot in #43637
  • Handle degenerate REVIEW_REQUIRED PR state in dismiss_pull_request_review by @pelikhan with @Copilot in #43657
  • refactor(linters): consolidate duplicated AST/context helpers into internal/astutil by @pelikhan with @Copilot in #43649
  • [community] Update community contributions in README by @github-actions[bot] in #43665
  • fix(setup/js): normalize unsafe caught/rejected error property access by @pelikhan with @Copilot in #43638
  • [blog] Weekly blog post – 2026-07-06 by @github-actions[bot] in #43667
  • [log] Add debug logging to intent policy compiler and console secret input by @github-actions[bot] in #43674
  • [compiler-threat-spec] spec(threat-detection): add CTR-021 workflow_run trigger branch scope (v1.0.15) by @github-actions[bot] in #43678
  • feat: add BinEval evals support by @pelikhan with @Copilot in #43641
  • Constrain Daily Compiler Quality safe-output reports to fit direct discussion tool limits by @pelikhan with @Copilot in #43673
  • q: enforce small model for contribution-checker subagent dispatch by @pelikhan with @Copilot in #43672
  • fix(code-simplifier): allow all bash commands by @pelikhan with @Copilot in #43679
  • Switch Daily yamllint Fixer to Copilot engine to avoid Claude runtime termination by @pelikhan with @Copilot in #43671
  • [yamllint-fixer] fix(workflow): indent sequences in generated on: section for yamllint by @github-actions[bot] in #43668
  • chore: upgrade gh-aw-firewall to v0.27.24 by @lpcox with @Copilot in #43664
  • Clarify Quick Start terminology for frontmatter and add commands by @pelikhan with @Copilot in #43696
  • docs: consolidate Quick Start API key notes into tabbed engine selector by @pelikhan with @Copilot in #43695
  • docs: add "When to use" column to CLI commands summary table by @pelikhan with @Copilot in #43699
  • fix(execcommandwithoutcontext): stop enclosing-scope walk at non-go/defer FuncLit boundaries by @pelikhan with @Copilot in #43692
  • Tighten step summary hierarchy and progressive disclosure by @pelikhan with @Copilot in #43495
  • Add bounded diff pre-fetch to PR Code Quality Reviewer by @pelikhan with @Copilot in #43730
  • fix: exempt github_api_helpers.cjs from SEC-004 (false positive) by @pelikhan with @Copilot in #43731
  • eslint-factory: extend no-json-stringify-error to cover .then(_, onRejected) and pin scope boundaries by @pelikhan with @Copilot in #43724
  • [WIP] Fix failing GitHub Actions job: Integration Workflow Misc Part 2 by @pelikhan with @Copilot in #43733
  • fix: honor GH_HOST for --trigger-context issue URLs in gh aw trial by @pelikhan with @Copilot in #43729
  • cleanup: replace deprecated needs.activation.outputs.{text,title,body} in examples and fixtures by @pelikhan with @Copilot in #43743
  • [architecture] Update architecture diagram - 2026-07-06 by @github-actions[bot] in #43761
  • deps: bump charm.land/bubbles/v2 to v2.1.1 by @pelikhan with @Copilot in #43779
  • [docs] Update documentation for features from 2026-07-06 by @github-actions[bot] in #43776
  • [docs] Update glossary - weekly full scan by @github-actions[bot] in #43774
  • [instructions] Sync instruction files with release v0.82.2 by @github-actions[bot] in #43754
  • docs(spec): complete intent and setutil package specs for dependency/maintenance metadata by @pelikhan with @Copilot in #43800
  • Constrain list_code_scanning_alerts prompt usage with explicit state/severity bounds by @pelikhan with @Copilot in #43744
  • [rendering-scripts] fix(copilot-parser): render bash command from data.command in SDK events by @github-actions[bot] in #43750
  • feat(no-json-stringify-error): scope-aware suggestions + detail-preserving second suggestion by @pelikhan with @Copilot in #43748
  • [lockfile-stats] Guard analyzer against missing PyYAML to prevent silent safe-output stats loss by @pelikhan with @Copilot in #43835
  • feat: add CI drift check for workflow markdown vs generated lock files by @pelikhan with @Copilot in #43747
  • [eslint-miner] feat(eslint): add require-error-cause-in-rethrow rule by @github-actions[bot] in #43758
  • [docs] docs: unbloat governance guide by @github-actions[bot] in #43845
  • [dead-code] chore: remove dead functions — 5 functions removed by @github-actions[bot] in #43807
  • feat(docs): expand robots.txt with full AI crawler coverage by @pelikhan with @Copilot in #43843
  • Auto-label [pr-sous-chef] run-report issues with automation to clear unlabeled triage queue by @pelikhan with @Copilot in #43849
  • fix(pr-code-quality-reviewer): add Go ecosystem to firewall allow-list by @pelikhan with @Copilot in #43850
  • fix(daily-code-metrics): raise max-file-size to 256KB and enforce 90-day history.jsonl pruning by @pelikhan with @Copilot in #43870
  • Reduce CompileMCPWorkflow overhead by caching runtime requirement detection per compile by @pelikhan with @Copilot in #43833
  • fix: make checkAndWaitForRateLimit context-cancellable by @pelikhan with @Copilot in #43848
  • Close 2026-07-06 spec maintenance gaps for parser vectors, security notes, AI Credits sync gating, and SDK driver sync guidance by @pelikhan with @Copilot in #43839
  • [safe-output-integrator] feat: add fixture coverage for 6 missing safe-output types by @github-actions[bot] in #43864
  • fix(pr-sous-chef): relax checks-pending guard — ignore checks running > 1h by @pelikhan with @Copilot in #43888
  • Improve actionpins spec coverage for fallback, mapping, and context propagation by @pelikhan with @Copilot in #43871
  • fix: standardize agentic report discussions to Audits category by @pelikhan with @Copilot in #43899
  • [log] Add debug logging to forecast render by @github-actions[bot] in #43928
  • ambient-context: remove noop-reminder imports, trim workflow prompts (~3,600 chars/run saved) by @pelikhan with @Copilot in #43910
  • refactor(parser): split remote_fetch.go (1553 lines) into focused modules by @pelikhan with @Copilot in #43834
  • refactor: decompose large multi-cluster files (audit.go, import_field_extractor.go) by @pelikhan with @Copilot in #43898
  • fix: add maxLength: 65536 to create_issue and create_discussion body fields by @pelikhan with @Copilot in #43911
  • fix: address 7 CLI consistency issues from automated inspection by @pelikhan with @Copilot in #43802
  • Revert Daily yamllint Fixer to Claude to avoid Copilot 429 incomplete runs by @pelikhan with @Copilot in #43950
  • [code-simplifier] refactor(js): derive VALID_REACTIONS from REACTION_MAP to eliminate duplication by @github-actions[bot] in #43929
  • Recreate AWF firewall v0.27.26 integration and artifact refresh by @pelikhan with @Copilot in #43957
  • fix(mcp-server): bind HTTP server to 127.0.0.1; document validation escalation by @pelikhan with @Copilot in #43766
  • fix: suppress osgetenvlibrary lint findings in pkg/cli and pkg/workflow by @pelikhan with @Copilot in #43967
  • Allow jobs.<generated>.needs to augment compiler-generated job dependencies by @pelikhan with @Copilot in #43940
  • fix: follow symlinks when generating sparse checkout for .github subdirs by @pelikhan with @Copilot in #43909
  • fix: migrate 5 linters from syntactic stdlib-package matching to astutil.IsPkgSelector by @pelikhan with @Copilot in #43939

Full Changelog: v0.82.2...v0.82.3

Contributors

pelikhan and lpcox
Assets 17
Loading