v0.93.0

🌟 Release Highlights

v0.93.0 focuses on security hardening, safer dry-run compilation, and more reliable safe outputs and sub-agent model resolution.

⚠️ Breaking Changes

• The missing-diagnostic safe-output tools are now named report_missing_tool and report_missing_data (#70738). Update any workflows or prompts that use the old names. Learn more
• Admission jobs are now opt-in through frontmatter or aw.json (#70763).

✨ Whats New

• Read-only health tool in the MCP server for checking server status (#70527).
• Artifact-first admission conclusion session delivery (#70622) and routing analytics recorded in aw_session.jsonl, including model config, baseline estimate, upstream errors and harness identity (#70672).
• Claude inline sub-agents are registered and Claude/Codex sub-agent models resolve before engine startup (#70671).
• Shared /review alias for PR reviewer workflows (#70863).
• New Go linters (formatintitoa, osisnotexist) and a needs-consistency linter (#70801, #70546).
• Firewall bumped to v0.28.70 and MCP Gateway to v0.4.36.

🔒 Security

• Dry-run compilation is hardened against hosted execution effects, and dry-run workflows use a read-only cache (#70851, #70788).
• Compiler bootstrap is hardened against compromised certificate authorities (#70549).
• OTLP token environment-file injection is prevented (#70597).
• Unsafe action pins are rejected (#70616), and fixable Node image CVEs were cleared (#70615).
• Redaction must now succeed for all agent artifact uploads (#70875).

🐛 Bug Fixes & Improvements

• Safe outputs honor target repos in invocation context (#70912) and fix discussion temporary IDs and missing terminal outputs (#70696).
• Copilot URL approvals follow the finalized runtime firewall policy (#70750).
• Runner-label indentation in custom jobs is fixed (#70840).
• Fixed webhook integer overflow in 32-bit builds (#70775).
• Better engine driver crash and secret-redaction failure classification (#70605).
• MCP log continuation cursors are preserved (#70856); AIC telemetry attribution is corrected (#70864).
• Work queue replay prefers local Git lookups (#70617).

📚 Documentation

• Debug playbook now covers empty-output failure codes (#70676), and the work queue reference was streamlined.

Generated by 🚀 Release · copilot · auto · 14.9 AIC · ⊞ 12.4K

---

What's Changed

• Fix PR reviewer safe-output payload quoting guidance by @pelikhan in #70913
• fix(health): ignore evidence-confirmed PR lifecycle interruptions by @pelikhan in #70915
• [safe-output-integrator] Add safe-output fixtures for report-missing-tool and report-missing-data by @github-actions[bot] in #70930
• Fix stale CI expectations and schema regressions by @pelikhan in #70918
• Reuse workflow metadata in OTLP attributes by @pelikhan with @Copilot in #70860
• fix: honor safe-output target repos in invocation context by @pelikhan in #70912

Full Changelog: v0.92.8...v0.93.0