v0.91.12

🌟 Release Highlights

This release hardens security for MCP and pull_request_target workflows, refines model routing, and adds Azure Entra OIDC support for Codex.

⚠️ Breaking Changes

• Strict mode now rejects unsafe pull_request_target role configurations (#68554). Review such workflows before recompiling.
• Model routing policy simplified: models.allowed / models.blocked are now the only request policy, and allowed-models are optional router candidates (#68495). Model-routed workflows that don't use GitHub Copilot inference now fail compilation (#68080).

✨ What's New

• Azure Entra OIDC support in native Codex (#68457).
• Operator-controlled MCP workflow capabilities (#68548), with stricter MCP argument handling, destination validation, and rejection of CLI flags in positional inputs (#68547, #68541).
• Routed smoke tests for AWF AI-credit steering notices (#68062).
• Persistent run provenance and corrected WIP attribution (#68501).

🐛 Bug Fixes & Improvements

• Model routing keeps the routed selection when a proxy failure follows it (#68498).
• Trusted base merges are excluded from unsigned PR bundle size checks (#68459).
• Work-queue fixes: abandoned worker reservations and reduced API amplification on unrelated issue closures (#68526, #68522).
• Better secret-safe artifact redaction failure diagnostics (#68523).
• Fewer API reads under installation quota pressure, plus checkout-free timing summaries (#68518, #68516).
• CI recovers from checkout cache misses (#68521); concurrency audit handler discovery fixed (#68528).

📚 Documentation

• Streamlined CLI reference for audit, sessions and graders (#68562).

Generated by 🚀 Release · copilot · auto · 14.5 AIC · ⊞ 11.7K

---

What's Changed

• Fix invalid engine override compile contract regression by @pelikhan in #68520
• Fix Aider workflows exiting after discovery shell commands by @pelikhan in #68525
• Stabilize shared logs count cancellation regression by @pelikhan in #68524
• Fix abandoned work-queue worker reservations by @pelikhan in #68526
• Fix concurrency audit handler discovery and tool usage by @pelikhan in #68528
• fix(ci): recover checkout cache misses at the triggering revision by @pelikhan in #68521
• Model routing: keep the routed selection when a proxy failure follows it by @SivaKesava1 with @Copilot in #68498
• Add routed smoke for AWF AI-credit steering notices (T1–T4) by @SivaKesava1 with @Copilot in #68062
• Model routing: make models.allowed/models.blocked the only request policy, and allowed-models optional router candidates by @SivaKesava1 with @Copilot in #68495
• Fail compilation for model-routed workflows that don't use GitHub Copilot inference by @SivaKesava1 with @Copilot in #68080
• Recompile smoke-copilot-routed-steering lock file by @SivaKesava1 with @Copilot in #68540
• Reject CLI flags in MCP positional inputs by @pelikhan in #68541
• [avenger] Fix compiled work queue dispatch tag fixture by @github-actions[bot] in #68546
• Fix compiled queue identity integration fixture for verified tag dispatch by @pelikhan in #68517
• Improve secret-safe artifact redaction failure diagnostics by @pelikhan in #68523
• fix(docs): avoid rate-limited agentics default-branch lookup by @pelikhan in #68519
• Exclude trusted base merges from unsigned PR bundle size checks by @pelikhan with @Copilot in #68459
• Fix checkout-free timing summaries and quota-only diagnostic failures by @pelikhan in #68516
• Fix WIP attribution and specify persistent run provenance by @Copilot in #68501
• fix: reduce PR prefetch API reads under installation quota pressure by @pelikhan in #68518
• Improve MCP argument handling and workflow destination validation by @pelikhan in #68547
• Support Azure Entra OIDC in native Codex by @pelikhan with @Copilot in #68457
• Avoid API amplification for unrelated work queue Issue closures by @pelikhan in #68522
• Make MCP workflow capabilities operator-controlled by @pelikhan in #68548
• Reject unsafe pull_request_target role configurations in strict mode by @pelikhan with @Copilot in #68554
• [community] Update community contributions in README by @github-actions[bot] in #68570
• [docs] docs: unbloat CLI commands reference (audit/sessions/graders) by @github-actions[bot] in #68562

Full Changelog: v0.91.11...v0.91.12