v0.93.2

🌟 Release Highlights

A reliability-focused release: Copilot CLI installs are more resilient, scanners and reports are more trustworthy, and Pi runs behave correctly on ARC/DinD runners.

🐛 Bug Fixes & Improvements

• Copilot CLI install fallback — when the live compatibility matrix selects a release without a trusted checksum pin, setup now falls back to the bundled default (within the compatibility window), with checksum verification still required. (#71339)
• Pi on ARC/DinD — Pi streaming logs now go to the writable engine-log directory, fixing log, summary and session export on ARC/DinD runners. (#71228)
• Custom ledger safe outputs — custom ledger tool schemas now require a record, and invalid envelopes are rejected before queuing so agents can self-correct. (#71240)
• Grype scan completeness — empty or malformed Grype output is no longer cached as a zero-finding success, and per-image scan status is tracked. (#71297)
• Report formatting — bold labels in collapsible report summaries now render correctly instead of showing literal <b> tags. (#71273)
• Release notes — fixed apostrophe encoding guidance so highlights no longer publish u0027. (#71272)
• Conformance checks — removed false positives for PTI-005 and SEC-005. (#71287, #71286)
• Windows CI — POSIX-only outcome API fixtures are skipped on Windows. (#71247)

📚 Documentation

• Added admission setup and server-size AIC policy guidance to Cost Management. (#71323)

Generated by 🚀 Release · copilot · auto · ~18 AIC · ⊞ 12.6K

---

What's Changed

• Fix Pi streaming logs on ARC/DinD runners by @pelikhan in #71228
• fix: enforce custom ledger record contract before queuing by @pelikhan in #71240
• fix: skip POSIX outcome API fixtures on Windows by @pelikhan in #71247
• Fix release highlights apostrophe encoding guidance by @pelikhan in #71272
• fix: preserve bold formatting in collapsible report summaries by @pelikhan in #71273
• fix: exempt display-only session metadata from SEC-005 by @pelikhan in #71286
• fix: accept integrity-first deadline guard in PTI-005 conformance check by @pelikhan in #71287
• [log] Add debug logging to webhook, model-routing, and JS taint-summary files by @github-actions[bot] in #71327
• Document admission setup and server-size AIC policies by @pelikhan with @Copilot in #71323
• fix: reject incomplete Grype scans and verify per-image completion by @pelikhan in #71297
• Fall back to pinned Copilot CLI when live compatibility targets lack trusted checksums by @pelikhan with @Copilot in #71339

Full Changelog: v0.93.1...v0.93.2