v0.89.1

🌟 Release Highlights

This release focuses on hardening credential and permission handling across checkouts and plugins, improving gh aw logs reliability and diagnostics, and tightening compiler safety around bot-driven automation.

✨ What's New

• JSON schemas for CLI output — gh aw json-schema audit and gh aw json-schema logs expose deterministic, machine-readable schemas generated directly from structured output types, making it easier to build tooling around --json output (#59720).
• Blocked compiler version alerts — blocked gh-aw compiler versions are now reported during workflow activation, opening/deduplicating a failure issue instead of silently skipping the run (#59747).
• Better gh aw logs diagnostics — the logs command now prints local run/cache folders while downloading, reports --cached-json status, and supports continuing Drain3 log-pattern training from existing weights (#59823).
• Cross-repository logs fix — positional cross-repository targets are now resolved through local workflow metadata, so gh aw logs queries GitHub using proper display names instead of raw workflow IDs (#59859).
• Clearer workflow source 404s — log consumers now surface clearer errors when a referenced workflow source can't be found (#59820).

🐛 Bug Fixes & Improvements

• Fixed an invalid empty GitHub server guard policy that caused mcpg to fail at startup for enclave-only GitHub tool configurations combined with tools.github: false (#59816).
• Preserved valid GitHub App checkout token permissions when permissions.contents: none skips the default checkout, fixing broken target-only checkout flows (#59743).
• Allowed runtime-retrieved credentials (from pre-steps) to be consumed by plugins[].github-token, supporting centralized secret-broker flows (#59744).
• Classified trusted AWF maxAiCredits HTTP 403 responses as budget exhaustion instead of authentication failure, avoiding futile Copilot retries against an already-spent proxy (#59745).
• Requested PR read access for no-fallback branch pushes to fix related permission gaps (#59739).
• Allowed GitHub domains in the Daily Go Test Parallelizer workflow (#59736).
• Ignored platform-managed bot PRs in review automation (#59722).
• Repointed the pydantic-ai catalog entry to its maintained harness definition (#59763).
• Added AI Credits pricing for Gemini 3.8 Flash (#59748).

📚 Documentation

• Unbloated the network permissions reference, tightening prose while preserving all examples, warnings, and links (#59834).

Generated by 🚀 Release · copilot · auto · 19.6 AIC · ⊞ 11.9K

---

What's Changed

• Allow GitHub domains in Daily Go Test Parallelizer by @pelikhan with @Copilot in #59736
• [ci-coach] Fix compiler-threat-detection-spec.md section numbering to restore TestFormal_* conformance by @github-actions[bot] in #59740
• [WIP] Fix failing GitHub Actions job build-wasm by @pelikhan with @Copilot in #59724
• Ignore platform-managed bot PRs in review automation by @pelikhan with @Copilot in #59722
• [blog] Agent of the Day – 2026-09-09 by @github-actions[bot] in #59754
• Expose JSON schemas for audit and logs output by @pelikhan with @Copilot in #59720
• [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #59761
• Add AI Credits pricing for Gemini 3.8 Flash by @pelikhan with @Copilot in #59748
• Request PR read access for no-fallback branch pushes by @pelikhan with @Copilot in #59739
• Repoint pydantic-ai catalog to its maintained harness definition by @pelikhan with @Copilot in #59763
• Classify trusted AWF max-ai-credits HTTP 403 as budget exhaustion and suppress futile Copilot retries by @pelikhan with @Copilot in #59745
• Allow runtime-retrieved credentials for Agent Plugin checkout auth by @pelikhan with @Copilot in #59744
• build(deps): Bump the npm_and_yarn group across 1 directory with 3 updates by @dependabot[bot] in #59792
• Report blocked gh-aw compiler versions during activation by @pelikhan with @Copilot in #59747
• Preserve valid GitHub App checkout token permissions when permissions.contents: none skips default checkout by @pelikhan with @Copilot in #59743
• Fix invalid empty GitHub server guard policy for enclave-only GitHub tools by @lpcox with @Copilot in #59816
• Clarify workflow source 404s in log consumers by @pelikhan with @Copilot in #59820
• Improve logs command cache diagnostics and Drain3 training by @pelikhan with @Copilot in #59823
• build(deps): Bump google.golang.org/grpc from 1.83.1 to 1.83.2 in the go_modules group across 1 directory by @dependabot[bot] in #59844
• [docs] docs: unbloat network permissions reference by @github-actions[bot] in #59834
• [compiler-threat-spec] Daily compiler threat spec audit (2026-09-10): no new CTR rules required by @github-actions[bot] in #59856
• [log] Add debug logging to under-instrumented cli add_ helper functions by @github-actions[bot] in #59866
• Fix local cross-repository workflow resolution in gh aw logs by @pelikhan with @Copilot in #59859

Full Changelog: v0.89.0...v0.89.1