v0.86.0

🌟 Release Highlights

This release is a heavy security and reliability hardening pass across secret redaction, MCP gateway logging, safe-outputs artifact handling, and threat-detection resilience, alongside a batch of engine and CI stability fixes.

🔒 Security & Redaction

• Secrets can no longer leak through logs or artifacts. Redaction is now enforced in step summaries (#50777), patch/bundle artifacts (#50778), and MCP gateway diagnostic logs (#50961, #50775).
• URL handling hardened: userinfo is stripped from logged URLs and rejected URLs are no longer logged in full (#50776); sanitizer URL authority parsing now matches browser behavior (#50929).
• upload_artifact safe-output now restricts uploads to canonical allowed roots and rejects sensitive paths (#50779).
• Additional sanitization fixes for exchange_otlp_workload_identity.cjs and report_failed_jobs.cjs (#50806).

🐛 Bug Fixes & Improvements

• Fixed MCP gateway environment variable injection (#50924) and declarative engine version validation (#50915).
• Fixed Goose and other harness engines crashing when engine.version is unset (#50849).
• Fixed Ollama warm-up failures by properly detaching ollama serve (#50975).
• add_labels now uses the correct updatePullRequest mutation for pull requests (#50910).
• Threat-detection is now more resilient: strict-mode conclude failures, external-detector context propagation, and Linux-only installer platform checks were all fixed (#50856, #50853, #50851).
• gh aw compile --actionlint and zizmor scans now fail by default on high-severity findings, catching risky workflow changes earlier (#50874, #50872).

📚 Documentation

• Documented missing ESLint factory rules (#50960) and added evals to the gh aw audit --artifacts valid sets (#50899).

🔧 Internal

Numerous refactors and reliability improvements: consolidated sync.Once caches onto syncutil.OnceLoader (#50934), migrated scheduled workflows off the removed opencode engine (#50933), enabled go-gh disk caching for repository API calls (#50842), and added poutine/zizmor security scans to CI (#50803, #50805).> Generated by 🚀 Release · auto · 23.5 AIC · ⊞ 11.2K

---

What's Changed

• [WIP] Fix failing GitHub Actions job Integration: Workflow Features by @pelikhan with @Copilot in #50788
• fix(safe-outputs): restrict upload_artifact to canonical allowed roots, reject sensitive paths by @pelikhan with @Copilot in #50779
• fix: sanitize secret-bearing data before writing GitHub step summaries by @pelikhan with @Copilot in #50777
• Stop generating MCP gateway stderr logs by @pelikhan with @Copilot in #50765
• Prevent secrets from bypassing redaction in patch and bundle artifacts by @pelikhan with @Copilot in #50778
• Redact sensitive MCP data at logging and audit boundaries by @pelikhan with @Copilot in #50775
• Append persisted eval results across workflow runs by @pelikhan with @Copilot in #50766
• Add poutine security scan job to CGO CI workflow by @pelikhan with @Copilot in #50803
• chore: add actionlint job to cgo.yml by @pelikhan with @Copilot in #50805
• [docs] Update documentation for features from 2026-08-06 by @github-actions[bot] in #50832
• [test-parallel] Add t.Parallel() to safe tests in actionpins and cli packages by @github-actions[bot] in #50809
• Strip URL userinfo and stop logging complete rejected URLs by @pelikhan with @Copilot in #50776
• [instructions] Sync instruction files with release v0.85.4 by @github-actions[bot] in #50824
• fix: truncate input before sanitization to fix 816s JS test timeout by @pelikhan with @Copilot in #50810
• SEC-004: Fix content sanitization gaps in exchange_otlp_workload_identity.cjs and report_failed_jobs.cjs by @pelikhan with @Copilot in #50806
• [eslint-miner] Add require-fetch-response-body-try-catch ESLint rule by @github-actions[bot] in #50828
• fix: ensure blank line before footer in PR review body by @pelikhan with @Copilot in #50863
• threat-detection: suppress the unused setup prompt step summary on the external detector path by @pelikhan with @Copilot in #50852
• fix: compile zizmor fails by default on high severity findings by @pelikhan with @Copilot in #50872
• [avenger] Fix prettier formatting in eslint-factory rule test by @github-actions[bot] in #50873
• Propagate context to external threat detection by @pelikhan with @Copilot in #50853
• threat-detection: make threat-detect installer Linux-only and add platform-mapping tests by @pelikhan with @Copilot in #50851
• [ci-coach] Fix test-unit sync failures: fallback AW files list and OTLP WIF script by @github-actions[bot] in #50891
• fix(eslint-factory): withhold prefer-structured-clone suggestion when the cloned value carries function properties by @pelikhan with @Copilot in #50846
• Migrate compact logs run tables from tabwriter to console.RenderTable by @pelikhan with @Copilot in #50850
• Fix Goose (and other harness engines) crashing when engine.version is unset by @pelikhan with @Copilot in #50849
• Enable go-gh disk cache for repository features API calls by @pelikhan with @Copilot in #50842
• Recognize deferred named recover helpers in goroutinemissingrecover by @pelikhan with @Copilot in #50848
• threat-detection: delegate all conclude branches to threat-detect conclude on the external path by @pelikhan with @Copilot in #50854
• feat: fail compile --actionlint on high severity errors by @pelikhan with @Copilot in #50874
• [WIP] Audit AIC usage for workflows from 2026-08-06 by @pelikhan with @Copilot in #50844
• Publish shareable AI Moderator workflow by @salmanmkc with @Copilot in #50893
• threat-detection: fix strict-mode conclude failure writing no outputs by @pelikhan with @Copilot in #50856
• Validate docker image references before grype and syft scans by @pelikhan with @Copilot in #50847
• docs: add evals to gh aw audit --artifacts valid sets by @pelikhan with @Copilot in #50899
• Add fix codemods for toolset typo and allowed-repos: current legacy alias by @pelikhan with @Copilot in #50841
• Limit update_project item lookup to target content by @pelikhan with @Copilot in #50839
• Fix declarative engine version validation by @pelikhan in #50915
• fix: move poutine:ignore suppression comments inside run: script bodies by @pelikhan with @Copilot in #50902
• [WIP] Fix REST API path injection in pkg/cli/outcome_eval.go by @pelikhan with @Copilot in #50909
• test: isolate update checks from agent CI environment by @pelikhan in #50918
• Fix Copilot CLI path in AWF sandboxes by @lpcox with @Copilot in #50908
• threat-detection: stage prompt-template, prompt-import-tree, aw_info.json, and comment-memory into the detection dir by @pelikhan with @Copilot in #50914
• fix: remove stale CGO job dependencies by @pelikhan in #50935
• Skip repository hooks during filtered bundle synthesis by @pelikhan with @Copilot in #50898
• fix: safe-outputs checkout auto-detection must not downgrade contents: write to read by @pelikhan with @Copilot in #50907
• Rename pkg/github objective mapping functions per function-namer analysis by @pelikhan with @Copilot in #50932
• fix(sanitizer): align URL authority parsing with browser URL parsing by @pelikhan in #50929
• fix(add_labels): use updatePullRequest mutation for PRs in intent path by @pelikhan with @Copilot in #50910
• Fix MCP gateway environment injection by @pelikhan in #50924
• fix: align leading-whitespace policy between slash_command compiler and runtime by @pelikhan with @Copilot in #50928
• Consolidate 13 hand-rolled sync.Once+error caches onto syncutil.OnceLoader by @pelikhan with @Copilot in #50934
• docs: document missing ESLint factory rules by @pelikhan with @Copilot in #50960
• [docs] docs: unbloat ResearchPlanAssignOps pattern doc by @github-actions[bot] in #50957
• Refactor expired cleanup close/comment handlers by @pelikhan with @Copilot in #50942
• Migrate daily-reliability-review and daily-security-red-team off removed opencode engine by @pelikhan with @Copilot in #50933
• build(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 in /eslint-factory in the npm_and_yarn group across 1 directory by @dependabot[bot] in #50974
• build(deps): bump mermaid from 11.16.0 to 11.16.1 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in #50973
• Redact MCP gateway bearers from diagnostic artifacts by @pelikhan with @Copilot in #50961
• fix: stage copilot binary for external threat-detect AWF container by @pelikhan with @Copilot in #50972
• Fix Ollama warm-up failure by detaching ollama serve from the step's stdio by @pelikhan with @Copilot in #50975
• [community] Update community contributions in README by @github-actions[bot] in #50978

Full Changelog: v0.85.4...v0.86.0