v0.82.9

🌟 Release Highlights

This release focuses on security hardening, performance improvements, and expanded runtime support — including a new docker-sbx runtime, better compiler analysis, and meaningful speed gains in core compilation paths.

✨ What's New

• docker-sbx runtime support — Workflows can now target a Docker-based sandbox runtime via the docker-sbx key in the compiler, enabling more isolated execution environments. (#45006)
• PowerShell installer for Windows — gh-aw now ships a PowerShell install path and Windows CI coverage, making it easier to get started on Windows. (#44953)
• private-to-public-flows: allow frontmatter field — Workflows can now explicitly opt in to cross-visibility flows using a new tools.github frontmatter field. (#45113)
• Issue dependency tools in GitHub MCP toolsets — The MCP toolset mapping now includes issue dependency tools. (#45082)
• Unscoped push trigger validation — A new ValidatePushBranchScope compiler check prevents accidental workflow fan-out from unscoped push triggers. (#44915)
• toJSON(secrets) blocking rule — The compiler now flags expressions that would expose secrets via toJSON. (#44922)
• pull_request → pull_request_target escalation detection — The safe-update analysis now flags trigger escalations that could grant elevated permissions unexpectedly. (#44925)
• Sighthound-gated agentic scan workflow — New workflow for artifact-backed security scanning with configurable gating. (#45120)

⚡ Performance

• ParseWorkflow regression fixed — Targeted caching reduces parse time by ~51% vs the regression baseline. (#44994)
• CompileMemoryUsage regression fixed — Optimized normalizeBlankLines and findRunValue paths recover a memory regression. (#44995)
• ExtractWorkflowNameFromFile hot-path improvements — Faster header parsing recovers a benchmark regression on the critical path. (#45225)

🐛 Bug Fixes

• CLI proxy default policy now correctly respects repository visibility, blocking private-repo access from public-repo contexts. (#45158)
• GitHub MCP server fallback — When native HTTP initialization fails, the CLI mounts the MCP server as a fallback. (#44976)
• COPILOT_MODEL alias resolution — Model aliases are now resolved at runtime before the Copilot CLI is spawned. (#44975)
• PR triage agent gh pr checks replaced — Switched to MCP get_check_runs to eliminate CLI proxy 403 errors. (#44927)
• gVisor pinned release bumped — Updated from 20250623.0 to 20250707.0. (#45101)
• sbx credential refresh — A credential refresh step is now emitted before agent execution. (#45146)
• Hamburger nav breakpoint — Fixed iPad Pro 12.9 header overlap by extending the breakpoint to 1050px. (#45281)
• Docs mobile overflow — Resolved hidden-label overflow on mobile and restored the homepage skip-link target. (#45224)

📚 Documentation

• Deprecated dispatch_repository de-emphasized in the frontmatter reference. (#44928)
• engine.token-weights frontmatter field removed (was deprecated). (#44948)
• Developer specifications consolidated into the instructions file (v9.20). (#44961)

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🚀 Release · 23.7 AIC · ⊞ 7.6K

---

What's Changed

• [instructions] Sync instruction files with release v0.82.8 by @github-actions[bot] in #44920
• fix(eslint): require-return-after-core-setfailed — detect nested-block fall-through, document break/continue limitation by @pelikhan with @Copilot in #44917
• [eslint-miner] eslint: add no-throw-plain-object rule by @github-actions[bot] in #44924
• docs: de-emphasize deprecated dispatch_repository in frontmatter full reference by @pelikhan with @Copilot in #44928
• [spec-extractor] Update package specifications for agentdrain, cli, console, constants by @github-actions[bot] in #44930
• fix(pr-triage-agent): replace gh pr checks with MCP get_check_runs to stop CLI proxy 403s by @pelikhan with @Copilot in #44927
• feat: add ValidatePushBranchScope to prevent unscoped push triggers causing workflow fan-out by @pelikhan with @Copilot in #44915
• Flag pull_request → pull_request_target trigger escalation in compiler safe-update analysis by @pelikhan with @Copilot in #44925
• [avenger] Fix prettier formatting in eslint rule source by @github-actions[bot] in #44935
• Reduce Smoke CI REST fan-out by scoping pull_request triggers by @pelikhan with @Copilot in #44934
• Add rule to block toJSON(secrets) expressions by @pelikhan with @Copilot in #44922
• Stop recommending get_me for workflow identity in GitHub MCP prompts by @pelikhan with @Copilot in #44936
• Reduce list_pull_requests MCP context bloat via default pagination + minimal output guidance by @pelikhan with @Copilot in #44941
• [spec-enforcer] Enforce specifications for colorwriter, console, constants by @github-actions[bot] in #44949
• Normalize progressive-disclosure guidance across reporting workflows by @pelikhan with @Copilot in #44960
• Remove deprecated engine.token-weights frontmatter by @pelikhan with @Copilot in #44948
• eslint-factory: suppress unsafe addReturn suggestion after terminal cleanup following core.setFailed by @pelikhan with @Copilot in #44929
• [docs] Consolidate developer specifications into instructions file (v9.20) by @github-actions[bot] in #44961
• Skip closed-PR follow-up workflows on Copilot branches by @pelikhan with @Copilot in #44967
• Add formal safe-update specification for compiler enforcement and manifest baselines by @pelikhan with @Copilot in #44997
• feat: Add docker-sbx runtime support to compiler by @lpcox with @Copilot in #45006
• chore: bump firewall version to v0.27.30 by @lpcox with @Copilot in #45025
• [docs] Update dictation skill instructions by @github-actions[bot] in #45053
• [safe-output-integrator] Add missing copilot safe-output fixture files (close-discussion, assign-to-agent, assign-to-user, unassign-from-user) by @github-actions[bot] in #45004
• Improve docs homepage JSON-LD for GEO citation (WebSite + Organization) by @pelikhan with @Copilot in #44991
• [docs] docs: unbloat about page by @github-actions[bot] in #44992
• fix: bump pinned gVisor release from 20250623.0 to 20250707.0 by @lpcox with @Copilot in #45101
• feat: implement private-to-public-flows: allow as a tools.github frontmatter field by @lpcox with @Copilot in #45113
• fix: emit sbx credential refresh step before agent execution by @lpcox in #45146
• Fix CLI proxy default policy to respect repo visibility (block private repos in public repos) by @lpcox with @Copilot in #45158
• spdd: 2026-07-11 spec work plan — normative requirements, combined-integrity fixture, coverage audit by @pelikhan with @Copilot in #44986
• fix: resolve COPILOT_MODEL aliases at runtime before spawning Copilot CLI by @pelikhan with @Copilot in #44975
• Formalize replace-label compliance model and fixture-backed conformance tests by @pelikhan with @Copilot in #44981
• [linter-miner] feat(linters): add ioutildeprecated linter to flag deprecated io/ioutil usage by @github-actions[bot] in #44998
• [mcp-tools] Update GitHub MCP toolsets mapping: add issue dependency tools by @github-actions[bot] in #45082
• prefer-number-isnan: autofix provably numeric calls, keep cautionary suggestion for unknown inputs by @pelikhan with @Copilot in #45064
• [log] Add debug logging to activation-job compiler split-outs by @github-actions[bot] in #45179
• [compiler-threat-spec] spec: bump compiler threat detection spec to v1.0.16 by @github-actions[bot] in #45178
• [blog] Weekly blog post – 2026-07-13 by @github-actions[bot] in #45166
• Add Sighthound-gated agentic workflow with artifacted scan output by @pelikhan with @Copilot in #45120
• docs: fix incomplete dependency tables in workflow and cli package specs by @pelikhan with @Copilot in #45094
• Add PowerShell installer path for gh-aw and cover it in Windows CI by @pelikhan with @Copilot in #44953
• perf: fix CompileMemoryUsage regression by optimizing normalizeBlankLines and findRunValue by @pelikhan with @Copilot in #44995
• fix: CLI-mount GitHub MCP server as fallback when native HTTP init fails by @pelikhan with @Copilot in #44976
• [docs] docs: unbloat error message guide by @github-actions[bot] in #45111
• Bump gh-aw-firewall to v0.27.31 and refresh AWF pin/schema artifacts by @lpcox with @Copilot in #45176
• perf: fix ParseWorkflow regression (+29% → -51%) via targeted caching by @pelikhan with @Copilot in #44994
• [eslint-miner] feat(eslint): add no-core-exportvariable-non-string rule by @github-actions[bot] in #45075
• [linter-miner] feat(linters): add logfatallibrary linter to flag log.Fatal calls in library packages by @github-actions[bot] in #45115
• Refactor constants tests to use testify and expand missing coverage by @pelikhan with @Copilot in #45223
• Restore docs home page skip-link target and prevent mobile overflow from hidden labels by @pelikhan with @Copilot in #45224
• [docs] Update glossary - weekly full scan by @github-actions[bot] in #45252
• pkg/stats: implement Sum, Variance, and StdDev by @pelikhan with @Copilot in #45273
• [community] Update community contributions in README by @github-actions[bot] in #45159
• [yamllint-fixer] fix: flatten commented-out on: blocks to reduce yamllint comments-indentation noise by @github-actions[bot] in #45177
• [instructions] Sync instruction files with release v0.82.8 by @github-actions[bot] in #45242
• [eslint-miner] feat(eslint): add require-spawnsync-error-check rule by @github-actions[bot] in #45246
• [jsweep] Clean write_daily_aic_usage_cache.cjs by @github-actions[bot] in #45036
• Bump pinned agentic CLI/MCP tool versions for 2026-07-13 by @pelikhan with @Copilot in #45215
• [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in #45277
• Improve ExtractWorkflowNameFromFile hot-path parsing to recover benchmark regression by @pelikhan with @Copilot in #45225
• fix: extend hamburger nav breakpoint to 1050px to cover iPad Pro 12.9 header overlap by @pelikhan with @Copilot in #45281

Full Changelog: v0.82.8...v0.82.9