v0.88.4

🌟 Release Highlights

This release focuses on hardening the agentic firewall/network layer, improving CI reliability, and expanding project tooling support.

✨ What's New

• Trusted enclave sensitivity support (#58328) — adds finer-grained sensitivity controls for trusted enclave workflows.
• DIFC policy generation for GitHub App workflows (#58302) — automatically generates data-flow integrity/confidentiality policies for workflows authenticated via a GitHub App.
• aw.json project support in the add command (#58267) — makes it easier to add workflows into existing aw.json-based projects.
• Daily Linear and Jira smoke issues workflow (#58320) — adds scheduled smoke-testing coverage for Linear and Jira integrations.

🐛 Bug Fixes & Improvements

• Fixed root-relative workflow paths in imported local manifests (#58317).
• Fixed Pi Anthropic routing through the firewall (#58313).
• Disabled OTLP export when authorization secrets are empty, avoiding noisy failed exports (#58312).
• Preserved setup-ruby PATH precedence inside the Agentic Workflow Firewall (AWF) (#58311).
• Prevented custom agent propagation to evals jobs (#58314).
• Fixed a zizmor 1.29 finding related to path parsing (#58339).
• Refreshed the CI Doctor upstream source revision (#58341).

📚 Documentation

• Updated quick-start references to point to repo-status (#58309).

🔧 Internal

• Various CI stability fixes for workflow markdown/lock drift and impacted Go tests (#58385, #58325).

Generated by 🚀 Release · copilot · auto · 16.8 AIC · ⊞ 11.8K

---

What's Changed

• Update quick-start references to repo-status by @pelikhan with @Copilot in #58309
• Fix root-relative workflow paths in imported local manifests by @pelikhan with @Copilot in #58317
• Generate DIFC policies for GitHub App workflows by @lpcox with @Copilot in #58302
• Prevent custom agent propagation to evals jobs by @pelikhan with @Copilot in #58314
• Fix Pi Anthropic routing through the firewall by @pelikhan with @Copilot in #58313
• Disable OTLP export when authorization secrets are empty by @pelikhan with @Copilot in #58312
• [WIP] Fix failing GitHub Actions job impacted-go-tests by @pelikhan with @Copilot in #58325
• Fix zizmor 1.29 finding path parsing by @pelikhan with @Copilot in #58339
• Refresh CI Doctor upstream source revision by @pelikhan with @Copilot in #58341
• Add daily Linear and Jira smoke issues workflow by @pelikhan with @Copilot in #58320
• Preserve setup-ruby PATH precedence inside AWF by @pelikhan with @Copilot in #58311
• Add trusted enclave sensitivity support by @lpcox with @Copilot in #58328
• Add aw.json project support to the add command by @pelikhan with @Copilot in #58267
• [WIP] Fix failing GitHub Actions job Check workflow markdown/lock drift by @pelikhan with @Copilot in #58385

Full Changelog: v0.88.3...v0.88.4