v0.86.1

🌟 Release Highlights

This release delivers a broad set of compiler safety fixes, new diagnostics for gh aw fix, expanded engine support, and continued investment in automated linting and test coverage across the codebase.

✨ What's New

• New guided diagnostics: gh aw fix now offers a guided fix for restricted tools.bash allow-listing on engines that ignore it (#51102), plus tips for known external engines (opencode, crush) missing their import (#51088).
• Expanded engine support: Added shared engine definitions and smoke tests for Pydantic AI (#51161), plus new example workflows for the aider, cursor, and kiro definition-based engines (#51166). Bumped default Claude, Codex, and Playwright MCP versions (#50947).
• PureLock initiative: Introduced a daily pure-function maximum-coverage test workflow (#51107) that is progressively locking down core compiler functions (e.g. simplifyDataSchemaNode, parseManifestBootstrapAction) with dedicated pure-function test suites (#51167, #51119).
• Safe-outputs improvements: Fixed add_labels failing on pull requests in issue-intent paths (#51168), replaced any bool-or-expression fields with *TemplatableBool for safer config typing (#51097), and deduplicated AllowedLabels into a shared embedded config struct (#50988).
• Log parsing: Added log-parser support for behavior-defined engines (#50991) and a log-parser script for the cursor engine definition (#51087).

🐛 Bug Fixes & Improvements

• Fixed the compiler re-adding a COPILOT_GITHUB_TOKEN reference when copilot-requests: write is set (#51117).
• Fixed detection config_error caused by inaccessible GITHUB_STEP_SUMMARY in chroot environments (#51104).
• Hardened project GraphQL lookups by replacing interpolated owner inputs with variableized requests (#51143).
• Added a warning for unsafe pull-request-target checkouts in non-strict mode (#51103).
• Validated slide PDF downloads before writing, and validated uv package names against PEP 508 before uv pip show (#51142, #51016).
• Normalized DefaultClaudeCodeVersion in wasm golden tests (#51121) and used Unicode display widths for CLI column padding (#51093).
• Fixed several linter false positives/negatives: write-reference dominance and alias resolution in require-fetch-response-body-try-catch (#51027), local overflow warnings from multi-device docs testing reports (#51026), regexpdynamicpattern POSIX coverage (#51002), and unsafe try/catch autofix suggestions in fetch-body/JSON.parse rules (#51017). Added a new globwalkignorederror linter to flag discarded errors from filepath.Glob/os.ReadDir (#51185) and an ESLint rule requiring error codes in thrown errors (#51042).

📚 Documentation

• Added guidance on using pkg/logger for debug instrumentation (#51163).
• Synced instruction files with the 0.86.0 release and refreshed the glossary and feature docs (#51040, #51053, #51052).

🔧 Internal

• Enforced autopilot mode so agents never ask for confirmation before acting (#51123).
• Continued large-scale test-quality work: migrated tracker_id_integration_test.go to testify assertions (#51178), added t.Parallel() to safe Go tests (#51024), and split AWF helpers into focused modules (#51154).
• Bumped github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3 (#51187) and dompurify to 3.4.13 in /docs (#51132).> Generated by 🚀 Release · auto · 17.7 AIC · ⊞ 11.3K

---

What's Changed

• Fix glossary doc: status-comment belongs under on:, not safe-outputs by @pelikhan with @Copilot in #50987
• [log] Add debug logging to run phase, update compile, trial types, and safe-outputs handler/data-schema code by @github-actions[bot] in #50993
• Refactor toImportsResult to satisfy custom function-length linter by @pelikhan with @Copilot in #50994
• [docs] Update documentation for features from 2026-08-07 by @github-actions[bot] in #51053
• [docs] Update glossary - daily scan by @github-actions[bot] in #51052
• [spec-extractor] Update package specifications for agentdrain, cli, console, constants by @github-actions[bot] in #51050
• [instructions] Sync instruction files with release 0.86.0 by @github-actions[bot] in #51040
• Fix false-positive local overflow warnings from multi-device docs testing report by @pelikhan with @Copilot in #51026
• [test-parallel] Add t.Parallel() to demonstrably safe Go tests (batch 1/25 files) by @github-actions[bot] in #51024
• Add recovery guidance to shared gitutil error wrappers (cwd, git root, home directory) by @pelikhan with @Copilot in #50990
• Deduplicate AllowedLabels into a shared embedded safe-output config struct by @pelikhan with @Copilot in #50988
• Deduplicate identical "failed to marshal JSON" error wraps in pkg/cli by @pelikhan with @Copilot in #50989
• feat: add log-parser support for behavior-defined engines by @pelikhan with @Copilot in #50991
• Add log-parser script to cursor.md engine definition by @pelikhan with @Copilot in #51087
• [eslint-miner] Add ESLint rule: require-error-code-in-thrown-error by @github-actions[bot] in #51042
• Prevent unsafe try/catch autofix suggestions for VariableDeclaration in fetch-body and JSON.parse rules by @pelikhan with @Copilot in #51017
• Fix regexpdynamicpattern POSIX coverage and rationale by @pelikhan with @Copilot in #51002
• Bump default Claude, Codex, and Playwright MCP versions by @pelikhan with @Copilot in #50947
• Fix write-reference dominance and add alias resolution in require-fetch-response-body-try-catch by @pelikhan with @Copilot in #51027
• feat: merge discussion-task-miner into deep-report by @pelikhan with @Copilot in #51100
• Add PureLock: daily pure-function maximum-coverage test workflow by @pelikhan with @Copilot in #51107
• [purelock] Lock down parseManifestBootstrapAction with a pure-function test suite by @github-actions[bot] in #51119
• fix: normalize DefaultClaudeCodeVersion in wasm golden tests by @pelikhan with @Copilot in #51121
• Add pre-fetch guard to Impeccable Skills Reviewer by @pelikhan with @Copilot in #51099
• Warn on unsafe pull request target checkouts in non-strict mode by @pelikhan with @Copilot in #51103
• chore: enforce autopilot mode — never ask for confirmation by @pelikhan with @Copilot in #51123
• Fix compiler re-adding COPILOT_GITHUB_TOKEN reference when copilot-requests: write is set by @pelikhan with @Copilot in #51117
• Require tools.bash: false when tools.github.min-integrity is none in strict mode by @pelikhan with @Copilot in #51089
• Fix detection config_error from inaccessible GITHUB_STEP_SUMMARY in chroot by @pelikhan with @Copilot in #51104
• Use Unicode display widths for CLI column padding by @pelikhan with @Copilot in #51093
• Validate uv package names against PEP 508 before uv pip show by @pelikhan with @Copilot in #51016
• build(deps): bump dompurify from 3.4.12 to 3.4.13 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in #51132
• Address SPDD daily spec review: DriftRecord conformance tests, guard-policy dry-run report, spec gaps by @pelikhan with @Copilot in #51135
• Align mcp/secrets help subcommand wording and add consistency guardrails by @pelikhan with @Copilot in #51096
• Refresh container pins before daily image scans by @pelikhan with @Copilot in #51083
• Consolidate CLI validation issue types by @pelikhan with @Copilot in #51098
• Validate slide PDF downloads before writing by @pelikhan with @Copilot in #51142
• Prompt Clustering: add mandatory root-cause drilldown for low-merge outlier clusters by @pelikhan with @Copilot in #51141
• chore: use latest release for gh-aw-detection binary instead of pinned version by @pelikhan with @Copilot in #51146
• Add guided gh aw fix diagnostic for restricted tools.bash on engines that ignore allow-listing by @pelikhan with @Copilot in #51102
• [WIP] Fix failing GitHub Actions job Integration: Workflow Infra by @pelikhan with @Copilot in #51144
• feat: tip for known external engines (opencode, crush) missing their import by @pelikhan with @Copilot in #51088
• Replace any bool-or-expression fields with *TemplatableBool in workflow step and safe-outputs config by @pelikhan with @Copilot in #51097
• [WIP] Fix failing GitHub Actions job for unit tests (D-L) by @pelikhan with @Copilot in #51151
• [WIP] Formalize security and error handling for replace-label spec by @pelikhan with @Copilot in #51129
• Harden project GraphQL lookups by replacing interpolated owner inputs with variableized requests by @pelikhan with @Copilot in #51143
• feat(purelock): process 3 functions/run via parallel test-writer sub-agents by @pelikhan with @Copilot in #51164
• Add 2 agentic workflows for each of the aider, cursor, and kiro definition-based engines by @pelikhan with @Copilot in #51166
• docs: add guidance on using pkg/logger for debug instrumentation by @pelikhan with @Copilot in #51163
• [purelock] Lock down simplifyDataSchemaNode with a pure-function test suite by @github-actions[bot] in #51167
• Enable detection for newly flagged report workflows by @pelikhan with @Copilot in #51171
• [aw] Prevent Daily Agent of the Day workflow from failing on sub-agent model unavailability by @pelikhan with @Copilot in #51173
• Split AWF helpers into focused modules by @pelikhan with @Copilot in #51154
• Optimize PR Code Quality Reviewer prompt and diff prefetch by @pelikhan with @Copilot in #51170
• Add generated footer to status comment updates by @pelikhan with @Copilot in #51165
• Extract Design Decision Gate ADR report templates into an on-demand inline skill by @pelikhan with @Copilot in #51182
• [deps] Update github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3 by @pelikhan with @Copilot in #51187
• Add globwalkignorederror linter: flag discarded errors from filepath.Glob/os.ReadDir by @pelikhan with @Copilot in #51185
• Fix add_labels issue-intent path failing on pull requests by @dsyme with @Copilot in #51168
• Add Pydantic AI shared engine definition and smoke test by @pelikhan with @Copilot in #51161
• Improve test quality: migrate tracker_id_integration_test.go to testify assertions by @pelikhan with @Copilot in #51178

Full Changelog: v0.86.0...v0.86.1