v0.87.9

🌟 Release Highlights

This release focuses on Windows runner support, safe-output hardening, and expanded workflow authoring capabilities for agentic workflows.

✨ What's New

• Windows runner support expands — Bash and PowerShell now work on Windows runners, with a new wiki agentic workflow and a daily windows-grower workflow that automatically probes and fixes Windows compatibility issues (#56508, #56667, #56501).
• Optional intent field for workflows — Workflow front matter now supports an intent field, paired with new intent-driven workflow design guidance to help authors express the "why" behind a workflow (#56599, #56611).
• Private repository Agent Plugin installs — Authenticated installation of Agent Plugins from private repositories is now supported (#56505).
• Target-only checkout for MultiRepoOps — Sidecar workflows can now perform target-only checkouts, reducing unnecessary clone overhead (#56504).
• GitHub Issues read access for enclaves — Agent enclaves can now be granted read-only access to GitHub Issues (#55531), contributed by @lpcox.
• New workflow patterns — Added the "Feature Farmer" pattern (#56614) and documented the "All You Can Eat" scheduled workflow pattern (#56466).

🐛 Bug Fixes & Improvements

• Preserved GitHub expression operators in safe-output JSON to prevent corruption of generated payloads (#56653).
• Fixed runtime-import interpolation for needs output expressions (#56503).
• Prevented Git LFS hook failures during safe-output bundle creation (#56499).
• Fixed actionlint failures on generated maintenance workflow operation inputs (#56506).
• Fixed broken documentation redirect links (#56654).
• Engine domain sets are now explicit opt-in, tightening default network posture (#56447).
• Added an npm registry allowlist to affected workflows for supply-chain safety (#56592).
• Required try/catch around fs.realpathSync calls to avoid unhandled exceptions (#56612).
• Upgraded Go tooling to the latest releases (#56596).

📚 Documentation

• Documented the "All You Can Eat" scheduled workflow pattern and intent-driven workflow design guidance.
• Refreshed the glossary, fixed redirect links, and applied several self-healing documentation fixes from issue analysis.

No community-labeled issues were closed in this release window.

Generated by 🚀 Release · copilot · auto · 15.3 AIC · ⊞ 11.8K

---

What's Changed

• [test-parallel] test: add t.Parallel() to TestFormatWorkingTreeBlockers by @github-actions[bot] in #56453
• Implement event-entropy-rate trajectory grader by @pelikhan with @Copilot in #56464
• Document the "All You Can Eat" scheduled workflow pattern by @pelikhan with @Copilot in #56466
• [docs] Self-healing documentation fixes from issue analysis - 2026-08-28 by @github-actions[bot] in #56471
• Migrate Design Decision Gate to Pi and Copilot GPT-5.4 by @pelikhan with @Copilot in #56467
• Make engine domain sets explicit opt-in by @pelikhan with @Copilot in #56447
• [code-scanning-fix] Fix js/http-to-file-access: use correct CodeQL suppression syntax by @github-actions[bot] in #56500
• Add "wiki" agentic workflow to exercise Windows runner integration by @pelikhan with @Copilot in #56501
• Add read-only GitHub Issues access to agent enclaves by @lpcox in #55531
• Prevent LFS hook failures during safe-output bundle creation by @pelikhan with @Copilot in #56499
• [compiler-threat-spec] docs: extend CTR-004 mapping for enclave GitHub proxy trust surface by @github-actions[bot] in #56521
• [docs] docs: fix spelling of 'architecture' in gemini.md by @github-actions[bot] in #56527
• [log] Add debug logging to under-instrumented add-init/add-package-manifest paths by @github-actions[bot] in #56528
• [docs-diagram] Add editing-workflows recompile diagram by @github-actions[bot] in #56541
• [community] Update community contributions in README by @github-actions[bot] in #56515
• Add npm registry allowlist to affected workflows by @pelikhan with @Copilot in #56592
• Add optional intent field to workflow front matter by @pelikhan with @Copilot in #56599
• [instructions] Instructions Sync with release v0.87.8 by @github-actions[bot] in #56604
• [test-parallel] test: add t.Parallel() to safe pkg/cli audit tests (daily batch) by @github-actions[bot] in #56607
• [eslint-miner] Require try/catch around fs.realpathSync calls by @pelikhan with @Copilot in #56612
• Fix runtime-import interpolation for needs output expressions by @pelikhan with @Copilot in #56503
• [docs] Update glossary - daily scan by @github-actions[bot] in #56623
• Support target-only checkout for MultiRepoOps sidecar workflows by @pelikhan with @Copilot in #56504
• Add the Feature Farmer workflow pattern by @pelikhan with @Copilot in #56614
• [docs] Update documentation for features from 2026-08-28 by @github-actions[bot] in #56626
• Add intent-driven workflow design guidance by @pelikhan with @Copilot in #56611
• Fix actionlint failure on generated maintenance workflow operation input by @pelikhan with @Copilot in #56506
• Support authenticated Agent Plugin installation from private repositories by @pelikhan with @Copilot in #56505
• Upgrade Go tooling to latest releases by @pelikhan with @Copilot in #56596
• [test-parallel] Add t.Parallel() to safe tests in bootstrap_profile_runner_test.go by @github-actions[bot] in #56658
• Fix broken documentation redirect links by @pelikhan with @Copilot in #56654
• Add Bash support for Windows runners by @pelikhan with @Copilot in #56508
• [blog] Agent of the Day – 2026-08-28 by @github-actions[bot] in #56669
• Preserve GitHub expression operators in safe-output JSON by @pelikhan with @Copilot in #56653
• Remove Dashboard Language specification and review workflow by @pelikhan with @Copilot in #56674
• Add daily windows-grower workflow that probes and fixes Windows runner support by @pelikhan with @Copilot in #56667

Full Changelog: v0.87.8...v0.87.9