v0.91.6

🌟 Release Highlights

This release delivers fair DAG work queues, an experimental Agy engine, broader model routing, and a round of security and reliability hardening.

✨ What's New

• Git-backed work queues: mandatory fair DAG work queues with claim-scoped effects (#66024), stress-tested and optimized (#66936), with essential read-only operations exposed via MCP (#66938).
• Experimental Agy engine with a production conformance gate (#66903) and a manual smoke workflow (#66944).
• Model routing across Claude, Codex, and pi (#66723); the implicit Codex model fallback is removed from generated workflows (#66708).
• Experimental Cloud Hypervisor enclave runtimes (#66641).
• Docs homepage presentation mode and full-width content (#66945, #66949).
• Stricter security: explicit strict-mode policy for pull_request_target checkouts (#66649) and the MCP gateway image is pinned to its downloaded digest (#66672).

🐛 Bug Fixes & Improvements

• Compiled workflow job names now match job IDs (#66687).
• Secret redaction now works in read-only cache directories (#66698).
• Repo-memory pushes on shared branches fixed (#66682).
• update_issue schema now compatible with Anthropic (#66784); blank optional safe-output fields are normalized (#66724).
• Better Claude and Pi session/subagent handling and unified session summaries (#66905, #66746, #66745, #66805).
• SHA-pinned actions emit parseable version comments (#66671); model routing stays out of threat detection jobs (#66670).
• Clearer error naming the unsupported Claude OAuth token (#66669).
• Dependency bumps: gh-aw-firewall v0.28.49, gh-aw-mcpg v0.4.30 (#66924).

📚 Documentation

• New work queue guides, specification, and examples (#66915, #66965, #66952).
• Workflow parameters in prompt bodies are documented (#66674).
• Cheap-agent security gate added to local dry-run debugging (#66929).

Generated by 🚀 Release · copilot · auto · 14.5 AIC · ⊞ 11.6K

---

What's Changed

• Align compiled workflow job names with job IDs by @pelikhan with @Copilot in #66687
• Support experimental Cloud Hypervisor enclave runtimes by @lpcox with @Copilot in #66641
• Document workflow parameters in prompt bodies by @pelikhan with @Copilot in #66674
• Fix repo-memory pushes on shared branches by @pelikhan in #66682
• Name unsupported Claude OAuth token in CLI secret setup by @pelikhan with @Copilot in #66669
• [WIP] Fix failing GitHub Actions job for integration add dependencies by @pelikhan with @Copilot in #66673
• Keep model routing out of threat detection jobs by @pelikhan with @Copilot in #66670
• Pin the MCP gateway Docker run image to its downloaded digest by @pelikhan with @Copilot in #66672
• Add explicit strict-mode policy for pull_request_target checkouts by @pelikhan with @Copilot in #66649
• Fix secret redaction in read-only cache directories by @pelikhan in #66698
• Emit parseable version comments for SHA-pinned actions by @pelikhan with @Copilot in #66671
• chore: update action pins and recompile workflows by @pelikhan in #66710
• [docs] Self-healing documentation fixes from issue analysis - 2026-10-07 by @github-actions[bot] in #66709
• Fix create_project type-check failures and dependency installation by @pelikhan in #66741
• [docs] docs: unbloat issue field section in safe-outputs reference by @github-actions[bot] in #66736
• Restore daily AIC scan cache for required workflows by @pelikhan with @Copilot in #66677
• Unify agent session step summary presentation by @pelikhan in #66745
• Normalize blank optional safe-output fields before validation by @pelikhan with @Copilot in #66724
• Remove implicit Codex model fallback from generated workflows by @pelikhan with @Copilot in #66708
• fix: prefer unified sessions for subagent attribution by @pelikhan in #66746
• Support model routing across Claude, Codex, and pi by @pelikhan with @Copilot in #66723
• [WIP] Fix pi engine ignoring inline sub-agents and their models by @pelikhan with @Copilot in #66726
• Fix update_issue schema compatibility with Anthropic by @pelikhan in #66784
• Fix Pi sub-agent smoke workflow model selection and completion by @pelikhan in #66805
• [spec-enforcer] Enforce specifications for gitutil, importinpututil, intent by @github-actions[bot] in #66858
• Implement mandatory fair DAG work queues with Claim-scoped effects by @pelikhan in #66024
• Fix missing providers in Copilot routing test fixtures by @pelikhan in #66914
• Fix CI dispatch fixture and generated workflow drift by @pelikhan in #66910
• [actions] Update GitHub Actions versions - 2026-10-08 by @github-actions[bot] in #66827
• Improve Claude unified session and subagent normalization by @pelikhan in #66905
• docs: organize work queue guides, agent instructions, and specification by @pelikhan in #66915
• Fix smoke experiment expressions and make OIDC reminders informational by @pelikhan in #66928
• docs: add cheap-agent security gate to local dry-run debugging by @pelikhan in #66929
• Add experimental Agy engine and production conformance gate by @pelikhan in #66903
• Stress-test and optimize the Git-backed work queue by @pelikhan in #66936
• Expose essential read-only work-queue operations through MCP by @pelikhan in #66938
• Add manual experimental Agy smoke workflow by @pelikhan in #66944
• Add presentation mode to the docs homepage by @pelikhan in #66945
• Report dry-run coverage and preserve model inventory diagnostics by @pelikhan in #66940
• Fix compiled work queue identity integration failures by @pelikhan in #66953
• docs: link work queue workflow examples by @pelikhan in #66952
• Improve fullscreen homepage slideshow presentation by @pelikhan in #66955
• Remove duplicate headings from skill installation summaries by @pelikhan with @Copilot in #66951
• Prevent blank space in documentation tables by @pelikhan with @Copilot in #66950
• Use the full available width for documentation content by @pelikhan with @Copilot in #66949
• Update Copilot model pricing inventory by @pelikhan with @Copilot in #66913
• Bump gh-aw-firewall to v0.28.49 and gh-aw-mcpg to v0.4.30 by @lpcox with @Copilot in #66924

Full Changelog: v0.91.5...v0.91.6