v1.2.0

🌟 Release Highlights

This release focuses on security hardening, stronger OpenTelemetry support, and smarter model routing across workflows.

⚠️ Breaking Changes

• pull_request_target forks now require explicit opt-in for unrestricted use (#74884). Review workflows that run on fork PRs and add the opt-in where intended.
• -l shorthand removed from project new to resolve a flag conflict (#74561).

✨ What's New

• OpenTelemetry: opt-in OTLP session logs with bounded priority compaction (#74599), dependency-free OTLP protobuf support for Azure Monitor (#74594), work queue health instrumentation (#74634), and partial-rejection detection without duplicate retries (#74767).
• Safe outputs: new safe-output identifiers with dependency failure propagation (#74376), and Azure DevOps work-item targets now accept numeric strings (#74944).
• Windows 386: the extension now publishes a Windows 386 binary (#74369).
• Model routing: dozens of workflows moved to economy/balanced routing through Copilot for lower cost.
• Evals: intent-specific evals added to 70 more agentic workflows (#74165, #74350).

🔒 Security Hardening

• Safer log handling: ZIP extraction bounded by size and entry count (#74906).
• Labels are normalized before security filtering and filters match sanitized values (#74752, #74905).
• Hardened run-step expression sanitization and raw-run Actions expression scanning (#74793, #74789).
• Codex config writes constrained to the managed temp directory (#74915).
• DIFC and CLI proxy images pinned to the gateway digest (#74950).
• Implicit network defaults restricted to documented infrastructure, and telemetry hosts removed from runtime-selected ecosystems (#74364, #74363).

🐛 Bug Fixes & Improvements

• Compilation now fails on invalid prompt expressions (#74689) and quotes prompt-step env values as YAML scalars (#74560).
• Fixed false dependency cycles for custom jobs after repo-memory push (#74366).
• Failures are reported when activation stops before the agent starts (#74365).
• Fix codemods now handle nested workflows and App-token permissions (#74368).
• Clearer CLI timeout formats, flag aliases, and authoring errors (#74881, #74367).
• Surfaced approval-gated Copilot workflows on PRs (#74914).
• Preserved compact log timestamps and OTel token accounting (#74785, #74766).

📚 Documentation

• Consolidated developer specifications and refreshed glossary, safe-output, and FAQ docs.

Generated by 🚀 Release · copilot · auto · ~18 AIC · ⊞ 13.5K

---

What's Changed

• Allow PR Finisher to update two shared AW files by @pelikhan with @Copilot in #74885
• Require explicit opt-in for unrestricted pull_request_target forks by @pelikhan with @Copilot in #74884
• Scan raw run content for Actions expressions by @gh-aw-bot with @Copilot in #74789
• Match label filters against sanitized values by @gh-aw-bot with @Copilot in #74905
• Bound ZIP log extraction by total size and entry count by @gh-aw-bot with @Copilot in #74906
• Add splitindexzero analyzer by @gh-aw-bot with @Copilot in #74904
• Harden run-step expression sanitization for comments and heredocs by @gh-aw-bot with @Copilot in #74793
• Use AWI maintenance token for PR Sous Chef agent assignments by @pelikhan in #74954
• build(deps-dev): apply 1ES-available Dependabot updates by @pelikhan in #74953
• build(deps): bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #74496
• build(deps): bump @astrojs/starlight from 0.42.7 to 0.42.8 in /docs by @dependabot[bot] in #74493
• build(deps): bump @astrojs/markdown-remark from 7.3.4 to 7.3.5 in /docs by @dependabot[bot] in #74492
• build(deps): bump httpx2 from 2.13.1 to 2.16.0 in /.github/workflows by @dependabot[bot] in #74490
• build(deps-dev): bump postcss from 8.5.31 to 8.5.32 in /docs by @dependabot[bot] in #74489
• build(deps): bump openai from 3.37.0 to 3.42.0 in /.github/workflows by @dependabot[bot] in #74487
• build(deps): bump pydantic-core from 2.50.1 to 2.50.2 in /.github/workflows by @dependabot[bot] in #74485
• build(deps-dev): bump minimatch from 10.2.6 to 11.0.3 in /actions/setup/js by @dependabot[bot] in #74484
• build(deps): bump pluggy from 1.6.0 to 1.7.0 in /.github/workflows by @dependabot[bot] in #74481
• build(deps): bump geo-optimizer-skill from 4.19.4 to 4.19.9 in /.github/workflows by @dependabot[bot] in #74479
• Surface approval-gated Copilot workflows on PRs by @gh-aw-bot with @Copilot in #74914
• test: make checkpoint-history abort deadline deterministic by @pelikhan in #74959
• Pin DIFC and CLI proxy images to the gateway digest by @pelikhan with @Copilot in #74950
• Accept numeric-string targets in Azure DevOps work-item safe outputs by @pelikhan with @Copilot in #74944
• Constrain Codex config writes to the managed temp directory by @gh-aw-bot with @Copilot in #74915

Full Changelog: v1.1.0...v1.2.0