v0.87.8

🌟 Release Highlights

This release focuses on hardening safe-outputs and MCP gateway reliability, expanding the graders/audit toolchain, and shipping a wave of security and dependency fixes across the agentic workflow engine.

✨ What's New

• Graders & audit clustering — Added a daily grader audit workflow, cross-run audit clustering for graders/evals, and pattern analysis surfaced in logs and audit commands (#56359, #56146, #56072, #56066). See the graders specification.
• Safe-outputs improvements — add-labels gained a create-if-missing option, and remove-labels now supports issue-only permission controls (#56055, #56270).
• Shell linting for workflows — Shell scripts declared in workflow frontmatter are now linted automatically (#56150).
• Dashboard language — Deterministic dashboard custom-link semantics and expanded YAML dashboard specification (#56056, #55841).

🐛 Bug Fixes & Improvements

• Fixed MCP gateway startup failures on non-PR events and extended gateway readiness timeout (#56425, #56315).
• Fixed safe-output updates for fork pull request branches and used an explicit PR head baseline for fork branch updates (#56341, #56119).
• Fixed pricing discrepancies for gpt-5.6-sol and gemini-3.6-flash in models.json (#56272).
• Fixed step summary rendering by moving the WSRF block out of token usage details (#56264).
• Fixed visibility for organization and enterprise variable creation, and resolved dispatch workflow refs from PR comments (#56267, #56266).
• Fixed user-rate-limit alias schema/event fallback and jsonschema format enforcement (#56328, #56325).

🔒 Security Hardening

• Hardened Docker scanner exec paths against argv/path injection, and hardened uv/grype exec argument boundaries (#56333, #55675).
• Added a depguard rule blocking imports of the unmaintained x/crypto/openpgp, and added a govulncheck gate to Go CI (#55882, #55889).
• Enforced the gh-aw v0.85.3 security compatibility floor (#55796).
• Treated primitive decodeURI arguments as statically safe and replaced a template-injection grep check with a parsed workflow check (#56331, #55863).

📚 Documentation

• Added a workflow sharing/distribution diagram to the Using at Scale guide (#56283).
• Documented the graders CLI command and expanded the Troubleshooting section in the mcp-scripts reference (#55794, #55883).
• Clarified prerelease upgrade/downgrade guidance and advanced frontmatter configuration options (#56351, #56090).

Generated by 🚀 Release · copilot · auto · 21.5 AIC · ⊞ 11.8K

---

What's Changed

• Add diagnostics for GitHub release creation failures by @pelikhan with @Copilot in #56413
• Enforce jsonschema formats and structural error path lookup by @pelikhan with @Copilot in #56325
• Design Decision Gate: prevent runaway agent loops from nonexistent skill/tool drift by @pelikhan with @Copilot in #56314
• Fix visibility for organization and enterprise variable creation by @pelikhan with @Copilot in #56267
• Enforce gh-aw v0.85.3 security compatibility floor by @pelikhan with @Copilot in #55796
• Remove symlinked Go bind mount from Avenger by @pelikhan with @Copilot in #56426
• Fix MCP gateway startup failure on non-PR events (Daily Go Test Parallelizer) by @pelikhan with @Copilot in #56425
• [WIP] Fix failing GitHub Actions job Integration: Workflow Misc Part 2 by @pelikhan with @Copilot in #56430
• Fix Codex threat-detection config pointing at the Anthropic api-proxy port by @davidslater with @Copilot in #56404
• Update gh-aw-threat-detection pin to v0.5.1 by @pelikhan with @Copilot in #56441
• Ensure Aider workflows always emit safe outputs by @pelikhan with @Copilot in #56442
• Reduce Ponytail Reviewer ambient context with proxy tooling by @pelikhan with @Copilot in #56446

Full Changelog: v0.87.7...v0.87.8