v0.88.5

🌟 Release Highlights

This release brings new compiler capabilities for dynamic repository access control, expanded safe-output integrations, and better observability for workflow runs.

✨ What's New

• Dynamic repository enclave policies — the compiler now supports dynamic enclave delegation, letting workflows request repository access policies at runtime instead of only at compile time (#58880, #59046).
• Repository labels in aw.yml — extend your aw.yml configuration with repository labels for finer-grained workflow targeting (#58796).
• Trailing wildcards in aw.yml includes — include patterns now support trailing wildcards for more flexible file matching (#58545).
• Linear and Jira tools in safe-output prompts — safe-output prompts now expose Linear and Jira tooling directly (#58599), and Azure DevOps work item status is now supported in the safe-output schema (#58410).
• Deterministic safe-output footers — safe outputs now include deterministic body footer templates for more consistent, auditable output (#58841).

📊 Observability Improvements

• GitHub Actions job metadata is now cached in logs output for faster log analysis (#59039).
• GitHub API rate limits are now reported in logs output (#58793).
• Privacy-preserving MCP call metrics are now included in usage artifacts (#58834).
• Truncated patch previews now report the emitted line count for clearer diagnostics (#58408).

🐛 Bug Fixes & Improvements

• Hardened Git revision argument handling against malformed input (#58412).
• Fixed IMP-004 $ref schema resolution (#58411).
• Fixed MCP Gateway routing in sandbox host-access mode (#58595).
• Preserved explicit HTTP schemes in AWF API proxy targets (#58608).
• Preserved setup-action PATH across privileged AWF startup (#58625).
• Restored the sandbox.agent: false opt-out (#58693).
• Handled GitHub reaction rate limits gracefully (#58610).

🔧 Internal

The bulk of this release also includes extensive internal CI, model-configuration, and workflow-reliability maintenance across gh-aw's own agentic workflows (Codex model compatibility fixes, safe-output conformance hardening, and dead-code cleanups) — not covered in detail here as they don't affect end users of the gh aw CLI.

Generated by 🚀 Release · copilot · auto · 20.2 AIC · ⊞ 11.8K

---

What's Changed

• Install AWF for firewall-enabled custom engine commands by @pelikhan with @Copilot in #58384
• [code-scanning-fix] Fix go/unsafe-quoting: escape single quotes in GH_AW_UPGRADE_OPTIONS by @github-actions[bot] in #58495
• Require AWF v0.28.13 for GitHub CLI proxy mode by @pelikhan with @Copilot in #58383
• Report emitted line count in truncated patch previews by @pelikhan with @Copilot in #58408
• Add Azure DevOps work item status to safe-output schema by @pelikhan with @Copilot in #58410
• Support trailing wildcards in aw.yml includes by @pelikhan with @Copilot in #58545
• Fix MCP Gateway routing in sandbox host-access mode by @pelikhan with @Copilot in #58595
• Fix IMP-004 $ref schema resolution by @pelikhan with @Copilot in #58411
• Harden Git revision argument handling by @pelikhan with @Copilot in #58412
• Deprecate legacy agent sandbox options by @pelikhan with @Copilot in #58597
• Expose Linear and Jira tools in safe-output prompts by @pelikhan with @Copilot in #58599
• Handle GitHub reaction rate limits gracefully by @pelikhan with @Copilot in #58610
• Warn when Pi threat detection lacks Copilot authentication by @pelikhan with @Copilot in #58607
• Close consolidated workflow failures as duplicates by @pelikhan with @Copilot in #58627
• Align enclave agent frontmatter with primary agent tool configuration by @lpcox with @Copilot in #58620
• Preserve explicit HTTP schemes in AWF API proxy targets by @pelikhan with @Copilot in #58608
• Fix Linear and Jira smoke issue creation by @pelikhan with @Copilot in #58632
• Fail activation when required skills cannot install by @pelikhan with @Copilot in #58626
• Preserve setup-action PATH across privileged AWF startup by @pelikhan with @Copilot in #58625
• Align grader script packaging with runtime path resolution by @pelikhan with @Copilot in #58628
• Use Chrome for Testing in Playwright agent instructions by @pelikhan with @Copilot in #58702
• Restore the sandbox.agent: false opt-out by @pelikhan with @Copilot in #58693
• [log] Add debug logging to package manifest imports and project file merge by @github-actions[bot] in #58707
• Add payload-based grader execution command by @pelikhan with @Copilot in #58634
• Migrate agentic workflows to Cloud Hypervisor by @pelikhan with @Copilot in #58726
• Allow DataFlow Python pipeline execution by @pelikhan with @Copilot in #58721
• Add github network preset and enable gh-proxy mode for daily-experiment-report by @pelikhan with @Copilot in #58720
• Use a compatible runtime for Documentation Noob Tester by @pelikhan with @Copilot in #58724
• Fix gpclean: unrecognized codex model and silent no-safe-output stalls by @pelikhan with @Copilot in #58725
• Reconcile experiment variant counts against declared variants before computing balance stats by @pelikhan with @Copilot in #58719
• Silence CodeQL bad-redirect-check false positive in package-manifest import path guards by @pelikhan with @Copilot in #58718
• Fix cacheRecoveryError's %v-not-%w bug and extend errorfwrapv/fmterrorfnoverbs to concatenated format strings by @pelikhan with @Copilot in #58715
• Fix static-analysis scan pipeline short-circuiting and add scanner output completeness assertion by @pelikhan with @Copilot in #58717
• Fix flaky SIGPIPE/pipefail false positives in safe-outputs conformance checker by @pelikhan with @Copilot in #58768
• Decouple container pin refresh from scan compile in daily image scan workflow by @pelikhan with @Copilot in #58769
• Use Codex-compatible model for CLI Version Checker by @pelikhan with @Copilot in #58770
• Allow Go module access in analysis workflows by @pelikhan with @Copilot in #58766
• Fix Weekly Editors Health Check safe outputs and editor discovery by @pelikhan with @Copilot in #58765
• Fix Kreuzberg MCP container registry by @pelikhan with @Copilot in #58764
• Fix Daily Go Test Parallelizer runtime configuration by @pelikhan with @Copilot in #58772
• [eslint-miner] eslint-factory: extend require-getexecoutput-exitcode-check to exec.exec() by @github-actions[bot] in #58775
• Extend require-getexecoutput-exitcode-check ESLint rule to @actions/exec exec() by @pelikhan with @Copilot in #58778
• Reclassify policy-driven safe-output declines as skipped, not hard failures by @pelikhan with @Copilot in #58767
• Fix Daily Go Test Parallelizer producing no safe outputs by @pelikhan with @Copilot in #58780
• Use Codex-compatible model for daily CLI tools tester by @pelikhan with @Copilot in #58779
• Reduce first-time-user friction in Quickstart and CLI docs by @pelikhan with @Copilot in #58773
• Document microVM consolidation on Cloud Hypervisor by @pelikhan with @Copilot in #58784
• Fix missing safe-outputs in GitHub Remote MCP Authentication Test by @pelikhan with @Copilot in #58777
• Add ESLint rule for misplaced error code definitions by @pelikhan with @Copilot in #58783
• Use a Codex-compatible model for Daily Spending Forecast by @pelikhan with @Copilot in #58787
• Validate top-level env expression contexts by @pelikhan with @Copilot in #58781
• Improve Playwright browser provisioning guidance by @pelikhan with @Copilot in #58791
• Report GitHub API rate limits in logs output by @pelikhan with @Copilot in #58793
• Stage Linear and Jira smoke issue outputs by @pelikhan with @Copilot in #58786
• Extend aw.yml config with repository labels by @pelikhan with @Copilot in #58796
• [docs] Consolidate developer specifications into instructions file (v9.25) by @github-actions[bot] in #58819
• [dead-code] chore: remove dead functions — 5 functions removed by @github-actions[bot] in #58822
• Prevent Code Scanning Fixer tool-denial timeouts by @pelikhan with @Copilot in #58829
• Fix invalid Codex model identifier in daily-go-test-parallelizer workflow by @pelikhan with @Copilot in #58827
• Prevent Workflow Normalizer context exhaustion by @pelikhan with @Copilot in #58828
• Use Codex-compatible model for daily CLI performance workflow by @pelikhan with @Copilot in #58826
• Grant repo-memory directories write access under the cloud-hypervisor sandbox by @pelikhan with @Copilot in #58830
• Add privacy-preserving MCP call metrics to usage artifacts by @pelikhan with @Copilot in #58834
• Use supported Copilot model for Linter Miner by @pelikhan with @Copilot in #58864
• Add deterministic body footer templates to safe outputs by @pelikhan with @Copilot in #58841
• Guide Codex workflows to compatible Copilot models by @pelikhan with @Copilot in #58872
• Use a Codex model for Auto-Triage Issues by @pelikhan with @Copilot in #58860
• Increase Code Scanning Fixer execution budget by @pelikhan with @Copilot in #58861
• Route Daily Go Test Parallelizer GitHub operations through MCP proxy by @pelikhan with @Copilot in #58863
• Fix Daily Cache Strategy Analyzer Codex model configuration by @pelikhan with @Copilot in #58862
• Fix Update Astro model and safe-output fallback by @pelikhan with @Copilot in #58909
• Add compiler support for dynamic repository enclave policies by @lpcox with @Copilot in #58880
• [code-simplifier] Remove duplicate writeEnvValue helper in action_setup_otlp.cjs by @github-actions[bot] in #58916
• [dead-code] chore: remove dead functions — 5 functions removed by @github-actions[bot] in #58996
• Cache GitHub Actions job metadata in logs output by @pelikhan with @Copilot in #59039
• Register replace_label handler in safe-output collect job dispatch map by @dsyme with @Copilot in #58917
• [compiler-threat-spec] docs: sync compiler threat spec 1.0.30 changelog and mapping audit by @github-actions[bot] in #58902

Full Changelog: v0.88.4...v0.88.5