v0.87.2

🌟 Release Highlights

This release strengthens sandbox security defaults, improves package/workflow update reliability, and ships a batch of linter, docs, and CI reliability fixes.

✨ What's New

• External threat detection enabled by default (#54111) — workflows now get proactive threat-detection coverage out of the box, improving baseline security posture without extra configuration.
• Cloud Hypervisor adopted across 58 agentic workflows (#54346) — broader migration improves sandbox isolation and reliability for agentic runs.
• Scoped ownership for package resources (#54120) and re-resolved manifests during workflow updates (#54119) — package dependencies stay accurate and correctly scoped as workflows evolve.
• New manualpathconcat linter (#54307) flags manual / path concatenation, catching a common class of path-handling bugs at compile time.
• Support for runner groups in custom safe jobs (#53977) gives more control over where custom safe-output jobs execute.

🐛 Bug Fixes & Improvements

• Fixed the logs MCP tool silently truncating explicit date-range queries to a single stale day with no warning (#54110).
• Fixed safe-output inline-backtick neutralization (#54103) and JSON-array expressions in approve-workflow-run safe outputs (#53812).
• Fixed a false-positive heredoc detection on bare (( )) arithmetic in the generatedyamlheredoc linter (#53991).
• Hardened command argument validation for pip/uv checks and npm lockfile execution (#53957), and added regression coverage for pip argv validation before exec (#54282).
• Fixed schedule-triggered workflow false positives and improved root-cause surfacing for disabled workflows in the health monitor (#53881).
• Fixed approve_workflow_run handler load failure caused by an npm minimatch require (#54281).
• Fixed actionlint error from an agent job referencing needs.approval_allowlist without a declared dependency (#54028).
• Restored GHES-compatible artifact action pins (#53966) and hardened post-agent cache Git commits (#53879).

📚 Documentation

• Clarified lock files and workflow setup commands (#54342), documented compiler-generated job authentication (#54100), and made Copilot auth docs easier to scan (#54337).
• Documented PR fast-track triage criteria (#53880) and closed non-Copilot engine parity gaps for gh aw init and custom engine frontmatter (#53834).
• Added workflow wizard links to documentation (#53862) and unbloated the network and safe-outputs PR references (#54104, #53875).> Generated by 🚀 Release · auto · 16.2 AIC · ⊞ 11.7K

---

What's Changed

• Redirect Astro wizard docs to hosted wizard by @pelikhan with @Copilot in #53815
• [test-parallel] Daily Go Test Parallelizer: add t.Parallel() to safe pkg/cli subtests by @github-actions[bot] in #53822
• Add review-agentic-workflows skill for security-first workflow review and optimization triage by @pelikhan with @Copilot in #53775
• Remove hidden README and docs navigation text by @pelikhan with @Copilot in #53816
• Add workflow wizard links to documentation by @pelikhan with @Copilot in #53862
• [test-parallel] test: add t.Parallel() to TestCLIProxyBashDisabledCodemod subtests by @github-actions[bot] in #53845
• pr-sous-chef: document GraphQL fetch for reviewThreads (fixes invalid gh pr view field) by @pelikhan with @Copilot in #53833
• docs: close non-Copilot engine parity gaps for gh aw init and custom engine frontmatter by @pelikhan with @Copilot in #53834
• Fix JSON-array expressions in approve workflow run safe outputs by @pelikhan with @Copilot in #53812
• [docs] docs: unbloat safe outputs PR reference by @github-actions[bot] in #53875
• Fix chronic Smoke Copilot AOAI dispatch failure and cap per-run AI credits by @pelikhan with @Copilot in #53817
• [test-parallel] Add t.Parallel() to safe codemod test files (batch after codemod_factory_test.go) by @github-actions[bot] in #53887
• Infer GitHub App permissions and events from resolved package workflows in add-wizard bootstrap by @pelikhan with @Copilot in #53766
• Document PR fast-track triage criteria by @pelikhan with @Copilot in #53880
• Fix schedule-triggered workflow false positives and surface disabled-workflow root cause in health monitor by @pelikhan with @Copilot in #53881
• [community] Update community contributions in README by @github-actions[bot] in #53893
• [test-parallel] test: add t.Parallel() to safe pkg/cli tests (daily batch) by @github-actions[bot] in #53931
• [eslint-miner] eslint: extend no-exec-interpolated-command to cover execApi parameter-alias calls by @github-actions[bot] in #53947
• Split oversized test files compiler_jobs_test.go and compiler_safe_outputs_config_test.go by @pelikhan with @Copilot in #53818
• [docs] docs: fix British-English spellings in frontmatter-full.md by @github-actions[bot] in #53898
• [docs] Update glossary - daily scan by @github-actions[bot] in #53961
• Align workflow step names with glossary terminology by @pelikhan with @Copilot in #53968
• [test-parallel] Daily Go Test Parallelizer: add t.Parallel() to 6 safe test files by @github-actions[bot] in #53967
• Update charmbracelet golden test helper dependency by @pelikhan with @Copilot in #53970
• eslint-factory: resolve destructured bindings precisely in resolveInitializer by @pelikhan with @Copilot in #53960
• Document threat-detection-suppress and max-runs deprecation; fix stale check-for-updates link by @pelikhan with @Copilot in #53990
• [purelock] Lock down validateCopilotSetupStepsRunsOn, extractGitHubToolsets, buildConnectionString with pure-function test suite
  [Content truncated due to length] by @github-actions[bot] in #54004
• [test-parallel] test: add t.Parallel() to safe top-level tests in pkg/cli batch by @github-actions[bot] in #54002
• [WIP] Fix failing GitHub Actions job Integration: Workflow Compiler by @pelikhan with @Copilot in #54008
• [blog] Agent of the Day – 2026-08-19 by @github-actions[bot] in #54022
• Improve pre-created pull request title and body by @pelikhan with @Copilot in #53956
• Harden command argument validation for pip/uv checks and npm lockfile execution context by @pelikhan with @Copilot in #53957
• Harden post-agent cache Git commits by @pelikhan with @Copilot in #53879
• [test-parallel] test: add t.Parallel() to safe pkg/cli tests (batch 2) by @github-actions[bot] in #54024
• [WIP] Fix failing GitHub Actions job Integration: Workflow Infra by @pelikhan with @Copilot in #54032
• Fix gvisor+privileged sandbox codemod gap and add missing tools.bash codemod for min-integrity: none by @pelikhan with @Copilot in #53964
• [test-parallel] Add t.Parallel() to safe pkg/cli tests (batch 12) by @github-actions[bot] in #54078
• Restore GHES-compatible artifact action pins by @pelikhan with @Copilot in #53966
• Exclude package registries from engine default network domains by @lpcox in #54055
• [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #54023
• Remove phantom permission factory documentation by @pelikhan with @Copilot in #54015
• [WIP] Fix failing GitHub Actions job Integration: Workflow Misc Part 2 by @pelikhan with @Copilot in #54088
• [WIP] Fix failing GitHub Actions job lint-go by @pelikhan with @Copilot in #54089
• Raise max-patch-size for Deep Report repo-memory push by @pelikhan with @Copilot in #54029
• Prevent GH_AW_TOOLS_META_JSON expression-size overflows in compiled workflows by @pelikhan with @Copilot in #53965
• Refresh aw.yml package dependencies during update by @pelikhan with @Copilot in #53974
• Add formal conformance-registry invariants for AWF config fixture index by @pelikhan with @Copilot in #54041
• [docs] docs: unbloat network reference by @github-actions[bot] in #54104
• Document compiler-generated job authentication by @pelikhan with @Copilot in #54100
• Support runner groups for custom safe jobs by @pelikhan with @Copilot in #53977
• Make failure investigator log capture fault-aware by @pelikhan with @Copilot in #54098
• Fix actionlint error: agent job referencing needs.approval_allowlist it never depends on by @pelikhan with @Copilot in #54028
• [WIP] Fix failing GitHub Actions job Integration: Workflow Misc Part 2 by @pelikhan with @Copilot in #54109
• Skip GHES auto-detection during CI initialization by @pelikhan with @Copilot in #54112
• Enable external threat detection by default by @pelikhan with @Copilot in #54111
• Split add_package_manifest.go into focused files by @pelikhan with @Copilot in #54030
• [ubuntu-image] Update Ubuntu Actions runner image analysis (20260810.271) by @github-actions[bot] in #54131
• [test-parallel] Add t.Parallel() to safe Go tests in pkg/cli (daily batch) by @github-actions[bot] in #54144
• [docs] Update glossary - daily scan by @github-actions[bot] in #54206
• [blog] Agent of the Day – 2026-08-20 by @github-actions[bot] in #54268
• [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in #54267
• Make Scout’s DeepWiki MCP server optional by @pelikhan with @Copilot in #54264
• [spec-extractor] Update package specifications for agentdrain, cli, console, constants by @github-actions[bot] in #54204
• [instructions] Sync instruction files with release v0.87.1 by @github-actions[bot] in #54197
• [test-parallel] test: add t.Parallel() to safe test cases in pkg/cli by @github-actions[bot] in #54184
• [community] Update community contributions in README by @github-actions[bot] in #54125
• Refactor parser import/path helpers to eliminate wasm/native drift and duplicate logic by @pelikhan with @Copilot in #53895
• Fix package-level mutable slice/map reassignment in virtual_fs.go and actionpins/data.go by @pelikhan with @Copilot in #53896
• Encode history-link query quotes to prevent footer markdown link breakage by @pelikhan with @Copilot in #53978
• Fix false-positive heredoc detection on bare (( )) arithmetic in generatedyamlheredoc linter by @pelikhan with @Copilot in #53991
• Re-resolve package manifests during workflow updates by @pelikhan with @Copilot in #54119
• Upgrade gh-aw-mcpg to v0.4.10 by @lpcox with @Copilot in #54068
• Fix safe-output inline-backtick neutralization by @lpcox in #54103
• [purelock] Lock down parseImportSpecsFromObject, relativizeIncludedFilePath, resolveCacheStepName with pure-function test suites by @github-actions[bot] in #54235
• Fix logs MCP tool truncating explicit date-range queries to a single stale day with no warning by @pelikhan with @Copilot in #54110
• Reuse a single checkout across CWI Windows jobs by @pelikhan with @Copilot in #54283
• Consolidate repository and semantic-version utilities by @pelikhan with @Copilot in #54148
• [actions] Update GitHub Actions versions - 2026-08-20 by @github-actions[bot] in #54189
• Add regression coverage for pip argv validation before exec by @pelikhan with @Copilot in #54282
• [test-parallel] test: add t.Parallel() to safe agentdrain miner tests by @github-actions[bot] in #54291
• Refactor safe-output repo target accessors by @pelikhan with @Copilot in #53838
• Fix approve_workflow_run handler load failure caused by npm minimatch require by @pelikhan with @Copilot in #54281
• Make no-json-stringify-set-or-map binding-aware to avoid cross-scope name collisions by @pelikhan with @Copilot in #54301
• Split pkg/cli/audit.go into focused audit_*.go files by @pelikhan with @Copilot in #54284
• Remove Copilot ripgrep install dependency from generated workflow contract by @pelikhan with @Copilot in #54305
• Bump gh-aw-firewall to v0.28.2 by @lpcox in #54321
• Make Copilot auth docs easier to scan by @pelikhan with @Copilot in #54337
• Align Go toolchain requirement with smoke runners by @pelikhan with @Copilot in #54335
• Support package resources with scoped ownership by @pelikhan with @Copilot in #54120
• Allow HTTP OTLP endpoints in MCP Gateway spec by @pelikhan with @Copilot in #54304
• Guard getErrorMessage suggestions by binding by @pelikhan with @Copilot in #54343
• Adopt Cloud Hypervisor for 58 agentic workflows by @pelikhan with @Copilot in #54346
• Treat provider invalid_request_error (HTTP 400) as terminal in the Codex harness by @pelikhan with @Copilot in #54306
• Allowlist Go module proxy domains for Code Scanning Fixer firewall by @pelikhan with @Copilot in #54348
• Clarify lock files and workflow setup commands in docs by @pelikhan with @Copilot in #54342
• Prevent Design Decision Gate invocation loops by @pelikhan with @Copilot in #54302
• Use safe RUNNER_TEMP paths in generated workflow scripts by @pelikhan with @Copilot in #54303
• Add manualpathconcat linter: flag manual "/" path concatenation by @pelikhan with @Copilot in #54307
• Document verified Ollama installer execution for Runner-Guard by @pelikhan with @Copilot in #54354
• Restore errormessage CI coverage by @pelikhan with @Copilot in #54355
• Fix Metrics Collector full-window coverage by @pelikhan with @Copilot in #54356

Full Changelog: v0.87.1...v0.87.2