Skip to content

v1.2.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Nov 20:14
· 181 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.2.1
8f32243
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🌟 Release Highlights

v1.2.1 focuses on workflow durability, safer updates, and broader engine and auth support.

✨ What's New

  • Durable workflow continuation: artifact-backed continuation across agents (#75097).
  • Specification-aware PR reviewer (#75207) and an experimental Atomic declarative engine (#75196).
  • Issue artifacts and label-scoped title deduplication for create-issue safe outputs (#75323, #74941).
  • GitHub App authentication for repo-memory (#74937) and deployment controls on workflow environments (#74938).
  • Outcome-backed experiment metrics with adaptive maturity windows (#74992).
  • Attribution footers now show the models powering auto (#74985, thanks @davidslater).

🐛 Bug Fixes & Improvements

  • Workflow updates preserve source refs, frontmatter comments and formatting, and avoid needless rewrites (#74948, #74945, #74931).
  • Activation lock checks pin to an immutable workflow revision; nested import resolution in lock hashes fixed (#75228, #75226).
  • Security reviews now fail closed when unresolved (#75335); new warning for dynamic checkout refs exposing host setup steps to untrusted code (#74951).
  • Copilot model handling: detection alias resolves on Luna-only catalogs, and Claude model IDs are normalized (#74957, #74947).
  • PR branch pushes no longer require Administration permission and handle Copilot-review-only rulesets (#74946, #75230).
  • Faster, more resilient work queue (#75216, #75352, #75369, #74934).
  • Firewall bumped to v0.29.7 and MCP gateway to v0.5.4 (#75110).

📚 Documentation

  • Koka setup and optional TLA+/Koka spec verification guidance (#75348); legacy copilot-requests flag references removed (#75116).

Generated by 🚀 Release · copilot · auto (Claude Sonnet 5.5) · ~18 AIC · ⊞ 13.7K

What's Changed

  • build(deps): bump charm.land/bubbletea/v2 from 2.1.0 to 2.1.1 by @dependabot[bot] in #74482
  • fix: repair CI guidance, template assertions, and stress budgets by @pelikhan in #74994
  • fix: start sous-chef requests with linked Copilot mention by @pelikhan in #74995
  • Resolve Copilot detection alias on Luna-only catalogs and add larger-model fallbacks by @SivaKesava1 with @Copilot in #74957
  • Preserve workflow source refs so updates follow releases by @pelikhan with @Copilot in #74948
  • Preserve workflow frontmatter when imports do not change by @pelikhan with @Copilot in #74931
  • Normalize Claude model IDs before Copilot inference by @pelikhan with @Copilot in #74947
  • Fix daily AIC accounting for reusable workflows by @pelikhan with @Copilot in #74932
  • Retry transient work-queue dispatch tag reads by @pelikhan with @Copilot in #74934
  • Prevent consecutive PR Sous Chef comments and preserve Copilot triggers by @pelikhan in #75111
  • fix(linters): unwrap parens in timenowsub, timeafterleak, errstringmatch, sprintfint by @github-actions[bot] in #75085
  • Include detection reporting permissions in conclusion App tokens by @pelikhan with @Copilot in #74949
  • [docs] Update documentation for features from 2026-11-05 by @github-actions[bot] in #75156
  • [ci-coach] Fix wastedassign lint failure in work TUI view by @github-actions[bot] in #75182
  • [code-scanning-fix] Fix js/incomplete-multi-character-sanitization: strip HTML comments until stable by @github-actions[bot] in #75174
  • docs: remove legacy copilot-requests feature flag references by @pelikhan in #75116
  • [Safe Outputs Conformance] REQ-002: Count required sections across full type blocks by @github-actions[bot] in #75114
  • [docs] docs: markdown spellcheck fix (American English) by @github-actions[bot] in #75074
  • Warn when dynamic checkout refs expose host setup steps to untrusted code by @pelikhan with @Copilot in #74951
  • Remove Administration requirement from PR branch pushes and preserve failure reporting by @pelikhan with @Copilot in #74946
  • Prevent import read failures from masquerading as stale locks by @pelikhan with @Copilot in #74935
  • [blog] Agent of the Day – 2026-11-05 by @github-actions[bot] in #75185
  • Complete missing package API specifications by @gh-aw-bot with @Copilot in #75180
  • [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #75187
  • [instructions] Sync instruction files with release 1.0.1 by @github-actions[bot] in #75137
  • [actions] Update GitHub Actions versions - 2026-11-05 by @github-actions[bot] in #75126
  • [Safe Outputs Conformance] USE-003: Exempt staged-flag consumer from preview-format check by @github-actions[bot] in #75113
  • [Safe Outputs Conformance] USE-001: Use standard ERR_CONFIG code for missing HTTP MCP API key by @github-actions[bot] in #75112
  • Preserve frontmatter comments and formatting during workflow updates by @pelikhan with @Copilot in #74945
  • Bump firewall to v0.29.7 and MCP gateway to v0.5.4 by @lpcox with @Copilot in #75110
  • Clarify strict-mode XPIA policy for nonsecret test/build state by @pelikhan with @Copilot in #74936
  • Add artifact-backed durable workflow continuation across agents by @pelikhan in #75097
  • Clarify SPDD safeguards and spec-to-test mappings by @gh-aw-bot with @Copilot in #75198
  • Add specification-aware pull request reviewer by @pelikhan in #75207
  • Fix scheduled issue triage safe-output targeting by @pelikhan in #75229
  • Fix Sous Chef head activity refresh through CLI proxy by @pelikhan in #75227
  • Add label-scoped title deduplication for create-issue by @pelikhan with @Copilot in #74941
  • Support deployment controls on workflow environments by @pelikhan with @Copilot in #74938
  • Allow status-only reporters to read proven pre-agent custom outputs by @pelikhan with @Copilot in #74939
  • fix: pin activation lock checks to immutable workflow revision by @pelikhan in #75228
  • Reduce work-queue Git verification overhead by @pelikhan in #75216
  • Add experimental Atomic declarative engine by @pelikhan in #75196
  • [ca] chore: update Claude Code and Codex CLI pins by @github-actions[bot] in #75104
  • Add Koka as an option in formal-methods instructions by @pelikhan with @Copilot in #75267
  • Clarify ai-moderator add-labels format by @gh-aw-bot with @Copilot in #75263
  • Align lint and logs CLI options by @gh-aw-bot with @Copilot in #75265
  • Test ZIP extraction limits against high-compression archives by @gh-aw-bot with @Copilot in #75264
  • Show models powering auto in attribution footers by @davidslater in #74985
  • Support GitHub App authentication for repo-memory by @pelikhan with @Copilot in #74937
  • Fix nested import resolution in workflow lock hashes by @pelikhan in #75226
  • Fix PR branch rejection for Copilot-review-only rulesets by @pelikhan in #75230
  • [Safe Outputs Conformance] REQ-002: Complete required spec sections for comment_memory, merge_pull_request, create_check_run by @github-actions[bot] in #75328
  • Normalize reporting guidance in queue and metrics workflows by @gh-aw-bot with @Copilot in #75297
  • Document Koka setup and optional TLA+/Koka spec verification by @pelikhan in #75348
  • fix: gracefully skip evals when Decisions model is unavailable by @pelikhan in #75339
  • fix: fail closed on unresolved PR security reviews by @pelikhan in #75335
  • Speed up work queue checkpoint verification by @pelikhan in #75352
  • Support issue artifacts in create-issue safe outputs by @pelikhan in #75323
  • [code-scanning-fix] Fix js/incomplete-multi-character-sanitization: use repeated HTML comment stripping by @github-actions[bot] in #75350
  • Cover nested fragments in Copilot web-fetch codemod tests by @gh-aw-bot with @Copilot in #75298
  • fix(ioutildeprecated): report dot-imported Discard used as a selector receiver by @github-actions[bot] in #75295
  • fix(linters): unwrap parenthesized callees in sprintfbool, fprintlnsprintf, writebytestring, closeerrorunchecked by @github-actions[bot] in #75294
  • Make work queue Issue synchronization failures warning-only by @pelikhan in #75369
  • Suppress RGS-018 false positive for pinned TLC download by @gh-aw-bot with @Copilot in #75364
  • feat(experiments): add outcome-backed metrics with adaptive maturity windows by @pelikhan with @Copilot in #74992
  • [actions] Update GitHub Actions versions - 2026-11-06 by @github-actions[bot] in #75351
  • Fix CI regressions in lint provenance, fixtures, and guidance by @pelikhan in #75378
  • [instructions] Sync instruction files with release 1.0.1 by @github-actions[bot] in #75371
  • Accept submission metadata in work queue delivery verification by @pelikhan with @Copilot in #75384
  • [blog] Agent of the Day – 2026-11-06 by @github-actions[bot] in #75431
  • Add regression coverage for Z.AI input and cache token totals by @pelikhan with @Copilot in #75383
  • Preserve expanded details blocks in safe-output bodies by @pelikhan with @Copilot in #75380
  • Honor literal fallbacks in step-reference lint by @pelikhan with @Copilot in #75305

Full Changelog: v1.2.0...v1.2.1

Assets 19
Loading