v0.88.7

🌟 Release Highlights

This release focuses on hardening logs tooling, tightening security around agent outputs and secrets, and polishing documentation.

✨ What's New

• Smarter logs downloads: workflow logs can now be pruned with an oldest-run mode, remote workflow names are resolved automatically, and cache size diagnostics/pruning have been improved for concurrent downloads (#59453, #59454, #59338, #59336).
• Safer agent workflows: workflows now fail fast when agents report incomplete work, keeping runs honest instead of silently succeeding (#59316). Agent artifact packaging is now restricted to known files to reduce accidental data exposure (#59334).
• Repo-memory validation: disallowed files are now filtered out before validation/upload rather than failing the push downstream, making the repo-memory workflow more resilient (#58120).
• Flexible output mapping: aw.yml now supports wildcard mapping destination folders (#59317).
• Hardened OTLP handling: OTLP endpoints are now guarded against scheme-only authorization headers to prevent malformed configs from leaking credentials (#59315).
• More reliable provisioning: Node.js is now provisioned for external Copilot threat detection, and transient slash-command provenance checks are retried instead of failing outright (#59314, #59313).
• Claude debug logs have been relocated outside the agent data directory to avoid interfering with agent output packaging (#59450).

🐛 Bug Fixes & Improvements

• Fixed Archie's nested Mermaid fences rendering incorrectly (#59311).

📚 Documentation

• Updated the glossary via the daily documentation scan (#59429).
• Corrected a claim about delegation control listener reachability in the enclaves docs (#59310).
• Clarified fallback issue paths for manual PR creation (#56572).
• Documented the Copilot org-billing tip opt-out (#56564).

Generated by 🚀 Release · copilot · auto · 17 AIC · ⊞ 11.8K

---

What's Changed

• docs(enclaves): correct delegation control listener reachability claim by @lpcox in #59310
• Fix Archie’s nested Mermaid fences by @pelikhan with @Copilot in #59311
• Support wildcard mapping destination folders in aw.yml by @pelikhan with @Copilot in #59317
• Fail workflows when agents report incomplete by @pelikhan with @Copilot in #59316
• Retry transient slash-command provenance checks by @pelikhan with @Copilot in #59313
• Guard OTLP endpoints against scheme-only authorization headers by @pelikhan with @Copilot in #59315
• [log] Add debug logging to audit command dispatch by @github-actions[bot] in #59357
• Improve logs cache size diagnostics by @pelikhan with @Copilot in #59336
• Prune logs cache during concurrent downloads by @pelikhan with @Copilot in #59338
• Restrict agent artifact packaging to known files by @pelikhan with @Copilot in #59334
• repo-memory: filter disallowed files before validation/upload instead of failing downstream in push by @dsyme with @Copilot in #58120
• Document Copilot org-billing tip opt-out by @dsyme with @Copilot in #56564
• Clarify fallback issue paths for manual PR creation by @dsyme with @Copilot in #56572
• [instructions] Sync instruction files with release v0.88.2 by @github-actions[bot] in #59404
• [spec-extractor] Update package specifications for parser, repoutil, semverutil, sliceutil by @github-actions[bot] in #59419
• [docs] Update glossary - daily scan by @github-actions[bot] in #59429
• Provision Node.js for external Copilot threat detection by @pelikhan with @Copilot in #59314
• Relocate Claude debug log outside agent data directory by @pelikhan with @Copilot in #59450
• Resolve remote workflow names for logs targets by @pelikhan with @Copilot in #59454
• Add oldest-run pruning mode to logs downloads by @pelikhan with @Copilot in #59453

Full Changelog: v0.88.6...v0.88.7