v0.91.5

🌟 Release Highlights

This release focuses on model routing and engine resilience, plus a broad round of reliability fixes across Codex, Windows, and safe outputs.

✨ What's New

• Ordered engine model fallback using native AWF recovery, so workflows keep running when a preferred model is unavailable (#66593).
• auto and copilot/auto model support in Pi, Codex, and Claude (#66567).
• Model-routing visibility: routing decisions now appear in logs, audits, and unified sessions (#66645). Workflows are routed to version-matched, pinned images (#66291). See the new experimental model-routing guide (#66338).
• New gh aw fix codemods for Copilot web-fetch and reserved inputs (#66556).
• DeepSeek Harness engine integration updated and debugged (#66630).
• Frontmatter policy for local-only Docker image validation (#66284).

🐛 Bug Fixes & Improvements

• Interactive prompts are now guarded on a stdin TTY (#66648).
• Windows repository slugs fixed in artifact downloads and metadata caching (#66644).
• Codex: fixed setup crashes with piped model catalogs (#66631), stopped resume retries after invalid request-body rejection (#66553), and classified stalled MCP calls as transport wedges (#66303).
• Daily AI Credits guardrail now counts completed Agent jobs and generated jobs (#66302, #66298).
• Safe outputs: fixed mention allowlist token selection (#66571) and honored soft-skipped targets (#66555); clearer diagnostics for missing terminal outputs (#66557).
• Security hardening: checkout includeIf credentials cleaned before agent verification (#66299), threat-detection provider settings isolated across engines (#66533), allocation-size overflow avoided in the AWF model policy union (#66646), and shared MCP dependencies pinned with the Jupyter token secured (#66558).
• Action pin mappings now apply to compiler-generated workflows (#66301).

📚 Documentation

• New experimental model-routing guide plus refreshed landing tagline, social card, and CLI docs cleanup.

Generated by 🚀 Release · copilot · auto · 13.3 AIC · ⊞ 11.6K

---

What's Changed

• Fix model routing to read the agent-job task prompt by @lpcox with @Copilot in #66290
• Route model-routing workflows to version-matched, pinned images by @lpcox with @Copilot in #66291
• Docs: add experimental Copilot model-routing guide by @lpcox with @Copilot in #66338
• Count generated jobs in the daily AIC guardrail by @pelikhan with @Copilot in #66298
• fix(copilot): remove unavailable native web-tool support by @pelikhan in #66310
• Add frontmatter policy for local-only Docker image validation by @pelikhan with @Copilot in #66284
• Apply action pin mappings to compiler-generated workflows by @pelikhan with @Copilot in #66301
• [instructions] Sync instruction files with release v0.89.21 (dynamic-workflows, model-routing, post-steps) by @github-actions[bot] in #66518
• [docs] Fix duplicated word in Claude engine docs by @github-actions[bot] in #66427
• [community] Clean up README attribution section by @github-actions[bot] in #66412
• [docs] docs: unbloat cli.md by @github-actions[bot] in #66393
• Clean checkout includeIf credentials before agent verification by @pelikhan with @Copilot in #66299
• Count completed Agent jobs in the daily AI Credits guardrail by @pelikhan with @Copilot in #66302
• docs: refresh landing tagline and social card by @MaggieAppleton in #66506
• [spec-enforcer] Enforce specifications for fileutil, github, githubapi by @github-actions[bot] in #66535
• Classify stalled Codex MCP calls as transport wedges by @pelikhan with @Copilot in #66303
• Stop Codex resume retries after invalid request-body rejection by @pelikhan with @Copilot in #66553
• Blog Auditor: add agentic-workflows MCP tool for snippet validation by @pelikhan with @Copilot in #66560
• Honor soft-skipped targets in safe-output handlers by @pelikhan with @Copilot in #66555
• Make Docker checks optional for the dry-run gate by @pelikhan in #66591
• Fix mention allowlist token selection during safe-output ingestion by @pelikhan in #66571
• Isolate threat detection provider settings across engines by @pelikhan with @Copilot in #66533
• Match named Agent jobs by Actions job ID by @pelikhan with @Copilot in #66563
• Fix Caveman Optimizer ledger upsert rejection and persistence by @pelikhan with @Copilot in #66551
• Align nine workflow tool allowlists and warn on denied prompt tools by @pelikhan with @Copilot in #66554
• Increase arXiv repo-memory patch limit by @pelikhan with @Copilot in #66562
• Ensure cross-repo compile checks report blocked runs by @pelikhan with @Copilot in #66561
• Improve diagnostics for missing terminal outputs by @pelikhan with @Copilot in #66557
• Add fix codemods for Copilot web-fetch and reserved inputs by @pelikhan with @Copilot in #66556
• Fix Claude persona evaluator registration by @pelikhan in #66634
• fix: filter failed builtin jobs by stable workflow IDs by @pelikhan in #66632
• Fix Codex setup crashes when reading piped model catalogs by @pelikhan in #66631
• Support auto and copilot/auto in Pi, Codex, and Claude by @pelikhan in #66567
• Pin shared MCP dependencies and secure the Jupyter token by @pelikhan with @Copilot in #66558
• Update and debug DeepSeek Harness engine integration by @pelikhan in #66630
• Add ordered engine model fallback using native AWF recovery by @pelikhan in #66593
• Avoid allocation-size overflow in AWF model policy union by @pelikhan with @Copilot in #66646
• Bound PR Code Quality Reviewer analysis and ensure review submission by @pelikhan with @Copilot in #66647
• Guard interactive prompts on stdin TTY by @pelikhan with @Copilot in #66648
• Fix Windows repository slugs in artifact downloads and metadata caching by @pelikhan with @Copilot in #66644
• Surface model-routing decisions in logs, audits, and unified sessions by @pelikhan with @Copilot in #66645

Full Changelog: v0.91.4...v0.91.5