v0.92.5

🌟 Release Highlights

This release focuses on security hardening, better diagnostics for sub-agents and models, and structured reporting.

✨ What's New

• Structured reports: generated issues now use a normalized report AST, and new Actions-native and AW Markdown workflow ASTs were added (#69756, #69755).
• Better failure visibility: sub-agent failures are surfaced, unavailable models are diagnosed, and audit/logs reconcile sub-agent instances lacking agentId (#69788, #69467, #69432).
• Safer MCP compile: MCP compile is read-only unless write tools are enabled (#69510).
• Robust parsing: streaming JSONL parsing across the JavaScript runtime (#69400).
• Dependencies: MCP Gateway v0.4.35 and firewall v0.28.62 (#69581, #69526).

🐛 Bug Fixes & Improvements

• Detection outputs and CLI proxy startup diagnostics are now redacted before publication or artifact upload (#69520, #69517).
• Per-checkout tokens now preserve the gh environment (#69452).
• Safe-output field-named probes are rejected (#69439).
• Fixed claim authorization for signed pushes and reviewer publication recovery (#69505, #69474).
• Workflow debug logging is enabled only in Actions debug mode (#69516).
• Runtime detection model overrides are honored (#68818).
• Experiment assignment maps are preserved in unified sessions (#69521).
• Hardened Copilot CLI and Cloud Hypervisor compatibility (#69162).

📚 Documentation

• Documented unified-session eval results and safe-output data for persistent review state (#69522, #69437).

Generated by 🚀 Release · copilot · auto · 14 AIC · ⊞ 12.3K

---

What's Changed

• Fix stale guidance link assertion breaking CI by @pelikhan in #69458
• fix: reject field-named safe-output probes by @pelikhan in #69439
• fix: use Opus 5.5 for Design Decision Gate by @pelikhan in #69469
• Quiet secret redaction and avoid audit log filename collisions by @pelikhan in #69461
• Fix reviewer publication recovery without expanding permissions by @pelikhan in #69474
• Require gh-aw-actions promotion first and check latest-release alignment by @pelikhan with @Copilot in #69457
• fix: preserve gh environment with per-checkout tokens by @pelikhan in #69452
• Document safe-output data for persistent review state by @pelikhan with @Copilot in #69437
• audit/logs: reconcile sub-agent instances whose unified lifecycle events lack agentId by @SivaKesava1 with @Copilot in #69432
• pi: explicitly load workflow inline skills in bare mode by @SivaKesava1 with @Copilot in #69429
• Add robust streaming JSONL parsing across the JavaScript runtime by @pelikhan in #69400
• Diagnose unavailable models and add code-specific debugging playbook by @pelikhan in #69467
• Decouple shared schema validation from MCP scripts by @pelikhan in #69490
• fix: use model routing for Duplicate Code Detector by @pelikhan in #69499
• Skip Design Decision Gate ADR writes for already-closed PRs by @pelikhan in #69504
• test: dry-compile all repository agentic workflows by @pelikhan in #69509
• Fix Claim authorization for signed pushes and adapter preparation by @pelikhan in #69505
• docs: document unified-session eval results and answer distribution by @pelikhan in #69522
• Make MCP compile read-only unless write tools are enabled by @pelikhan in #69510
• fix: preserve experiment assignment maps in unified sessions by @pelikhan in #69521
• Enable workflow debug logging only in Actions debug mode by @pelikhan in #69516
• fix(docs): repair eval result specification link by @pelikhan in #69577
• fix: redact detection outputs before rendering and artifact upload by @pelikhan in #69520
• fix: redact CLI proxy startup diagnostics before publication by @pelikhan in #69517
• [instructions] Sync instruction files with release v0.92.0 by @github-actions[bot] in #69662
• [spec-enforcer] Enforce specifications for colorwriter, console, constants by @github-actions[bot] in #69688
• [docs] docs: weekly maintenance scan confirms scratchpad/ tone is clean (v9.28) by @github-actions[bot] in #69710
• Bump gh-aw-firewall default to v0.28.62 by @lpcox with @Copilot in #69526
• [eslint-miner] Add no-map-parseint-callback rule by @github-actions[bot] in #69608
• [dead-code] chore: remove dead functions — 5 functions removed by @github-actions[bot] in #69715
• [jsweep] Clean workflow_job_durations.cjs by @github-actions[bot] in #69615
• fix: honor runtime detection model overrides by @pelikhan in #68818
• Bump MCP Gateway to v0.4.35 by @lpcox with @Copilot in #69581
• Add fallback pricing for the Copilot AOAI API-key smoke workflow by @pelikhan with @Copilot in #69746
• Structure generated issues with a normalized report AST by @pelikhan in #69756
• Add Actions-native and AW Markdown workflow ASTs by @pelikhan in #69755
• Fix ESLint queue worker access and unverified delivery reporting by @pelikhan in #69752
• Expose GitHub MCP and web fetch in Smoke Codex by @pelikhan with @Copilot in #69747
• Harden Copilot CLI and Cloud Hypervisor compatibility by @lpcox with @Copilot in #69162

Full Changelog: v0.92.4...v0.92.5