🌟 Release Highlights

v1.2.1 focuses on workflow durability, safer updates, and broader engine and auth support.

✨ What's New

• Durable workflow continuation: artifact-backed continuation across agents (#75097).
• Specification-aware PR reviewer (#75207) and an experimental Atomic declarative engine (#75196).
• Issue artifacts and label-scoped title deduplication for create-issue safe outputs (#75323, #74941).
• GitHub App authentication for repo-memory (#74937) and deployment controls on workflow environments (#74938).
• Outcome-backed experiment metrics with adaptive maturity windows (#74992).
• Attribution footers now show the models powering auto (#74985, thanks @davidslater).

🐛 Bug Fixes & Improvements

• Workflow updates preserve source refs, frontmatter comments and formatting, and avoid needless rewrites (#74948, #74945, #74931).
• Activation lock checks pin to an immutable workflow revision; nested import resolution in lock hashes fixed (#75228, #75226).
• Security reviews now fail closed when unresolved (#75335); new warning for dynamic checkout refs exposing host setup steps to untrusted code (#74951).
• Copilot model handling: detection alias resolves on Luna-only catalogs, and Claude model IDs are normalized (#74957, #74947).
• PR branch pushes no longer require Administration permission and handle Copilot-review-only rulesets (#74946, #75230).
• Faster, more resilient work queue (#75216, #75352, #75369, #74934).
• Firewall bumped to v0.29.7 and MCP gateway to v0.5.4 (#75110).

📚 Documentation

• Koka setup and optional TLA+/Koka spec verification guidance (#75348); legacy copilot-requests flag references removed (#75116).

Generated by 🚀 Release · copilot · auto (Claude Sonnet 5.5) · ~18 AIC · ⊞ 13.7K

What's Changed

• build(deps): bump charm.land/bubbletea/v2 from 2.1.0 to 2.1.1 by @dependabot[bot] in #74482
• fix: repair CI guidance, template assertions, and stress budgets by @pelikhan in #74994
• fix: start sous-chef requests with linked Copilot mention by @pelikhan in #74995
• Resolve Copilot detection alias on Luna-only catalogs and add larger-model fallbacks by @SivaKesava1 with @Copilot in #74957
• Preserve workflow source refs so updates follow releases by @pelikhan with @Copilot in #74948
• Preserve workflow frontmatter when imports do not change by @pelikhan with @Copilot in #74931
• Normalize Claude model IDs before Copilot inference by @pelikhan with @Copilot in #74947
• Fix daily AIC accounting for reusable workflows by @pelikhan with @Copilot in #74932
• Retry transient work-queue dispatch tag reads by @pelikhan with @Copilot in #74934
• Prevent consecutive PR Sous Chef comments and preserve Copilot triggers by @pelikhan in #75111
• fix(linters): unwrap parens in timenowsub, timeafterleak, errstringmatch, sprintfint by @github-actions[bot] in #75085
• Include detection reporting permissions in conclusion App tokens by @pelikhan with @Copilot in #74949
• [docs] Update documentation for features from 2026-11-05 by @github-actions[bot] in #75156
• [ci-coach] Fix wastedassign lint failure in work TUI view by @github-actions[bot] in #75182
• [code-scanning-fix] Fix js/incomplete-multi-character-sanitization: strip HTML comments until stable by @github-actions[bot] in #75174
• docs: remove legacy copilot-requests feature flag references by @pelikhan in #75116
• [Safe Outputs Conformance] REQ-002: Count required sections across full type blocks by @github-actions[bot] in #75114
• [docs] docs: markdown spellcheck fix (American English) by @github-actions[bot] in #75074
• Warn when dynamic checkout refs expose host setup steps to untrusted code by @pelikhan with @Copilot in #74951
• Remove Administration requirement from PR branch pushes and preserve failure reporting by @pelikhan with @Copilot in #74946
• Prevent import read failures from masquerading as stale locks by @pelikhan with @Copilot in #74935
• [blog] Agent of the Day – 2026-11-05 by @github-actions[bot] in #75185
• Complete missing package API specifications by @gh-aw-bot with @Copilot in #75180
• [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #75187
• [instructions] Sync instruction files with release 1.0.1 by @github-actions[bot] in #75137
• [actions] Update GitHub Actions versions - 2026-11-05 by @github-actions[bot] in #75126
• [Safe Outputs Conformance] USE-003: Exempt staged-flag consumer from preview-format check by @github-actions[bot] in #75113
• [Safe Outputs Conformance] USE-001: Use standard ERR_CONFIG code for missing HTTP MCP API key by @github-actions[bot] in #75112
• Preserve frontmatter comments and formatting during workflow updates by @pelikhan with @Copilot in #74945
• Bump firewall to v0.29.7 and MCP gateway to v0.5.4 by @lpcox with @Copilot in #75110
• Clarify strict-mode XPIA policy for nonsecret test/build state by @pelikhan with @Copilot in #74936
• Add artifact-backed durable workflow continuation across agents by @pelikhan in #75097
• Clarify SPDD safeguards and spec-to-test mappings by @gh-aw-bot with @Copilot in #75198
• Add specification-aware pull request reviewer by @pelikhan in #75207
• Fix scheduled issue triage safe-output targeting by @pelikhan in #75229
• Fix Sous Chef head activity refresh through CLI proxy by @pelikhan in #75227
• Add label-scoped title deduplication for create-issue by @pelikhan with @Copilot in #74941
• Support deployment controls on workflow environments by @pelikhan with @Copilot in #74938
• Allow status-only reporters to read proven pre-agent custom outputs by @pelikhan with @Copilot in #74939
• fix: pin activation lock checks to immutable workflow revision by @pelikhan in #75228
• Reduce work-queue Git verification overhead by @pelikhan in #75216
• Add experimental Atomic declarative engine by @pelikhan in #75196
• [ca] chore: update Claude Code and Codex CLI pins by @github-actions[bot] in #75104
• Add Koka as an option in formal-methods instructions by @pelikhan with @Copilot in [https:...

🌟 Release Highlights

This release focuses on security hardening, stronger OpenTelemetry support, and smarter model routing across workflows.

⚠️ Breaking Changes

• pull_request_target forks now require explicit opt-in for unrestricted use (#74884). Review workflows that run on fork PRs and add the opt-in where intended.
• -l shorthand removed from project new to resolve a flag conflict (#74561).

✨ What's New

• OpenTelemetry: opt-in OTLP session logs with bounded priority compaction (#74599), dependency-free OTLP protobuf support for Azure Monitor (#74594), work queue health instrumentation (#74634), and partial-rejection detection without duplicate retries (#74767).
• Safe outputs: new safe-output identifiers with dependency failure propagation (#74376), and Azure DevOps work-item targets now accept numeric strings (#74944).
• Windows 386: the extension now publishes a Windows 386 binary (#74369).
• Model routing: dozens of workflows moved to economy/balanced routing through Copilot for lower cost.
• Evals: intent-specific evals added to 70 more agentic workflows (#74165, #74350).

🔒 Security Hardening

• Safer log handling: ZIP extraction bounded by size and entry count (#74906).
• Labels are normalized before security filtering and filters match sanitized values (#74752, #74905).
• Hardened run-step expression sanitization and raw-run Actions expression scanning (#74793, #74789).
• Codex config writes constrained to the managed temp directory (#74915).
• DIFC and CLI proxy images pinned to the gateway digest (#74950).
• Implicit network defaults restricted to documented infrastructure, and telemetry hosts removed from runtime-selected ecosystems (#74364, #74363).

🐛 Bug Fixes & Improvements

• Compilation now fails on invalid prompt expressions (#74689) and quotes prompt-step env values as YAML scalars (#74560).
• Fixed false dependency cycles for custom jobs after repo-memory push (#74366).
• Failures are reported when activation stops before the agent starts (#74365).
• Fix codemods now handle nested workflows and App-token permissions (#74368).
• Clearer CLI timeout formats, flag aliases, and authoring errors (#74881, #74367).
• Surfaced approval-gated Copilot workflows on PRs (#74914).
• Preserved compact log timestamps and OTel token accounting (#74785, #74766).

📚 Documentation

• Consolidated developer specifications and refreshed glossary, safe-output, and FAQ docs.

Generated by 🚀 Release · copilot · auto · ~18 AIC · ⊞ 13.5K

What's Changed

• Allow PR Finisher to update two shared AW files by @pelikhan with @Copilot in #74885
• Require explicit opt-in for unrestricted pull_request_target forks by @pelikhan with @Copilot in #74884
• Scan raw run content for Actions expressions by @gh-aw-bot with @Copilot in #74789
• Match label filters against sanitized values by @gh-aw-bot with @Copilot in #74905
• Bound ZIP log extraction by total size and entry count by @gh-aw-bot with @Copilot in #74906
• Add splitindexzero analyzer by @gh-aw-bot with @Copilot in #74904
• Harden run-step expression sanitization for comments and heredocs by @gh-aw-bot with @Copilot in #74793
• Use AWI maintenance token for PR Sous Chef agent assignments by @pelikhan in #74954
• build(deps-dev): apply 1ES-available Dependabot updates by @pelikhan in #74953
• build(deps): bump docker/login-action from 4.6.0 to 4.7.0 by @dependabot[bot] in #74496
• build(deps): bump @astrojs/starlight from 0.42.7 to 0.42.8 in /docs by @dependabot[bot] in #74493
• build(deps): bump @astrojs/markdown-remark from 7.3.4 to 7.3.5 in /docs by @dependabot[bot] in #74492
• build(deps): bump httpx2 from 2.13.1 to 2.16.0 in /.github/workflows by @dependabot[bot] in #74490
• build(deps-dev): bump postcss from 8.5.31 to 8.5.32 in /docs by @dependabot[bot] in #74489
• build(deps): bump openai from 3.37.0 to 3.42.0 in /.github/workflows by @dependabot[bot] in #74487
• build(deps): bump pydantic-core from 2.50.1 to 2.50.2 in /.github/workflows by @dependabot[bot] in #74485
• build(deps-dev): bump minimatch from 10.2.6 to 11.0.3 in /actions/setup/js by @dependabot[bot] in #74484
• build(deps): bump pluggy from 1.6.0 to 1.7.0 in /.github/workflows by @dependabot[bot] in #74481
• build(deps): bump geo-optimizer-skill from 4.19.4 to 4.19.9 in /.github/workflows by @dependabot[bot] in #74479
• Surface approval-gated Copilot workflows on PRs by @gh-aw-bot with @Copilot in #74914
• test: make checkpoint-history abort deadline deterministic by @pelikhan in #74959
• Pin DIFC and CLI proxy images to the gateway digest by @pelikhan with @Copilot in #74950
• Accept numeric-string targets in Azure DevOps work-item safe outputs by @pelikhan with @Copilot in #74944
• Constrain Codex config writes to the managed temp directory by @gh-aw-bot with @Copilot in #74915

Full Changelog: v1.1.0...v1.2.0

🌟 Release Highlights

v1.0.1 focuses on safer pull request outputs, smoother compile and update workflows, and improved observability.

✨ What's New

• Lock-safe pull request outputs: code-producing workflows now use lock-safe PR outputs, with a suggested lock exclusion when workflow permission pushes fail (#72396, #72423).
• Actions-lock integration: compile can now optionally integrate with actions-lock (#72395).
• Guided pull_request_target fixes: guided remediation with safe role restriction (#72412).
• Interactive org and enterprise update rollouts (#72418).
• Native Actions expression grammar replaces legacy expression parsing (#72413).
• Richer unified sessions: safe-output, safe job/script, and memory-save outcomes are now recorded (#72146, #72138, #72133), plus harness retry telemetry in spans and usage artifacts (#71934).
• Copilot CLI upgraded to 1.0.103 with a reviewed checksum pin (#72099).

🐛 Bug Fixes & Improvements

• Preserve cancelled startup failure diagnostics and suppress noisy startup-failure reports for cancelled jobs (#72432, #72405).
• Fix privileged AWF environment forwarding on sudo-rs (#72409).
• Merge imported job outputs with main workflow precedence (#72407).
• Honor newer cached action pins in runtime setup (#72272).
• Trust same-repository bot PRs triggered by labels (#72074).
• Enforce ubuntu-slim timeout limits and upgrade default runners for longer jobs (#72131).
• Fill model pricing gaps and accept none/max for pinned Codex routing (#72414, #70952).
• Harden AWF release download retries and fix work-queue provisioning recovery (#72157, #72400).

📚 Documentation

• New explanation of the activation gate and CAO integration (#72379) and a leaner troubleshooting guide (#72280).

Generated by 🚀 Release · copilot · auto · ~15 AIC · ⊞ 12.9K

What's Changed

• Trust same-repository bot PRs triggered by labels by @pelikhan with @Copilot in #72074
• Upgrade Copilot CLI to 1.0.103 with reviewed checksum pin by @pelikhan with @Copilot in #72099
• [blog] Agent of the Day – 2026-10-26 by @github-actions[bot] in #72127
• Soften container pin update failure messages by @dsyme in #72093
• Use Gonum helpers for grader descriptive statistics by @pelikhan with @Copilot in #72100
• Correct map tool usage in built-in ledger smoke workflow by @pelikhan with @Copilot in #72095
• Make setup action reference tests deterministic by @pelikhan in #72155
• Enforce ubuntu-slim timeout limits and upgrade default runners for longer jobs by @pelikhan with @Copilot in #72131
• Record memory save outcomes in unified sessions and conclusion data by @pelikhan with @Copilot in #72133
• Model routing: accept none/max for pinned Codex and add routed Codex smoke by @SivaKesava1 with @Copilot in #70952
• Preserve harness retry telemetry in spans and usage artifacts by @pelikhan with @Copilot in #71934
• Record safe job and script outcomes in unified sessions by @pelikhan with @Copilot in #72146
• Record privacy-preserving safe-output outcomes in unified sessions by @pelikhan with @Copilot in #72138
• Fix Aider Go test stub package declarations by @pelikhan in #72164
• Harden AWF release download retries and diagnostics by @pelikhan in #72157
• Preview Notices by @salilsub in #72217
• Revert "Preview Notices (#72217)" by @pelikhan in #72281
• Retry transient PR Sous Chef API failures by @pelikhan in #72282
• [docs] docs: unbloat troubleshooting/common-issues.md by @github-actions[bot] in #72280
• [log] Add debug logging to unlogged branches in cli package-manifest/actionlint code by @github-actions[bot] in #72299
• [instructions] Sync instruction files with release v0.93.5 by @github-actions[bot] in #72363
• Honor newer cached action pins in runtime setup by @pelikhan with @Copilot in #72272
• docs: explain the activation gate and CAO integration by @pelikhan in #72379
• chore: update action and container pins by @pelikhan in #72377
• build(deps-dev): bump fast-uri from 3.1.8 to 3.1.9 in /actions/setup/js in the npm_and_yarn group across 1 directory by @dependabot[bot] in #71506
• build(deps): bump undici from 6.29.0 to 6.29.1 in /actions/setup/js in the npm_and_yarn group across 1 directory by @dependabot[bot] in #72384
• build(deps): bump library/alpine from 294b683 to be26560 by @dependabot[bot] in #72393
• Refactor arXiv paper memory to use a built-in ledger by @pelikhan in #72394
• build(deps): apply pending Dependabot updates by @pelikhan in #72397
• [docs] Update documentation for features from 2026-10-27 by @github-actions[bot] in #72406
• Fix work-queue provisioning transport recovery by @pelikhan in #72400
• fix: fill model pricing gaps and restore 1ES-compatible Vite by @pelikhan in #72414
• feat: add optional actions-lock integration to compile by @pelikhan in #72395
• Suppress startup-failure reports for cancelled agent jobs by @pelikhan with @Copilot in #72405
• Add guided pull_request_target fixes and safe role restriction by @pelikhan in #72412
• Merge imported job outputs with main workflow precedence by @pelikhan in #72407
• Add lock-safe pull request outputs and migrate code-producing workflows by @pelikhan in #72396
• Add interactive org and enterprise update rollouts by @pelikhan in #72418
• Replace legacy expression parsing with native Actions grammar by @pelikhan in #72413
• Suggest lock exclusion for workflow permission push failures by @pelikhan in #72423
• fix: refresh vendored Node image pin to patched build by @pelikhan in #72382
• [blog] Agent of the Day – 2026-10-27 by @github-actions[bot] in #72460
• Preserve cancelled startup failure diagnostics by @pelikhan in #72432
• [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in #72463
• Refactor issue and comment Markdown into report trees by @pelikhan in [https://github.com//pull/72415](https://github.com/github/gh-aw/p...

🔧 Maintenance Release

v1.0.0 focuses on housekeeping: documentation refreshes, GitHub Actions version updates, improved debug logging, and expanded schema coverage.

📚 Documentation

• Added an AI Transparency Notice (#71520).
• Refreshed the glossary, architecture diagram, and synced instruction files.

🔧 Under the Hood

• Added debug logging to agentdrain and actionpins for easier troubleshooting.
• Added a schema coverage demo for the work-queue-policy field.
• Updated the Safe Outputs conformance checker for recent spec changes.

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.6K

What's Changed

• [docs] Update glossary - weekly full scan by @github-actions[bot] in #72068
• [architecture] Update architecture diagram - 2026-10-26 by @github-actions[bot] in #72054
• [instructions] Sync instruction files with release v0.93.5 by @github-actions[bot] in #72051
• [spec-review] Update Safe Outputs conformance checker for recent spec changes by @github-actions[bot] in #72004
• [log] Add debug logging to remaining unlogged functions in agentdrain and actionpins by @github-actions[bot] in #71993
• [schema-coverage] feat: Add schema coverage demo for work-queue-policy field by @github-actions[bot] in #72028
• [actions] Update GitHub Actions versions - 2026-10-26 by @github-actions[bot] in #72037
• AI Transparency Notice by @salilsub in #71520

Full Changelog: v0.93.6...v1.0.0

🌟 Release Highlights

A focused release strengthening infrastructure dependencies, compile/audit reliability, and validation.

✨ What's New

• Updated runtime stack: MCP Gateway bumped to v0.5.0 and the firewall to v0.29.0.
• Better expression validation: missing step references in Actions/AW expressions are now detected at compile time.
• Resilient MCP tooling: compile and audit timeouts now return stage-aware partial results instead of failing outright.

🐛 Bug Fixes & Improvements

• Threat detection that is skipped no longer reports inherited agent tokens.
• Fixed a compile-progress file permission policy violation.
• Hardened fetch-script portability and structured lint reporting.
• Cached state is now read before workflow analysis, and title-parsing benchmarks are separated from file I/O costs.

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.6K

What's Changed

• Separate workflow title parsing from file-I/O benchmark costs by @pelikhan with @Copilot in #71927
• Read cached state before workflow analysis by @pelikhan with @Copilot in #71878
• Detect missing step references in Actions/AW expressions by @pelikhan with @Copilot in #71926
• Return stage-aware partial results for MCP compile and audit timeouts by @pelikhan with @Copilot in #71886
• Fix compile-progress file permission policy violation by @pelikhan with @Copilot in #71947
• Prevent skipped threat detection from reporting inherited agent tokens by @pelikhan with @Copilot in #71933
• Harden fetch-script portability and structured lint reporting by @pelikhan with @Copilot in #71932
• Bump MCPG to v0.5.0 and firewall to v0.29.0 by @lpcox with @Copilot in #71957
• [blog] Weekly blog post – 2026-10-26 by @github-actions[bot] in #71984
• [community] Update community contributions in README by @github-actions[bot] in #71976

Full Changelog: v0.93.5...v0.93.6

🌟 Release Highlights

This release focuses on hardening: stronger static analysis linters, safer credential handling, and more robust diagnostics.

✨ What's New

• Safe-output integration jobs can now use network credentials (#71833).
• Engine driver crashes are classified with secret-safe stderr diagnostics, making failures easier to triage (#71883).
• Pi CLI default updated to 1.4.0 (#71899).
• New and sharper custom linters: readerstringconv analyzer, parenthesized Flush discard detection, missing goroutine recovery through local closures, and closed detection gaps (#71891, #71896, #71897, #71880).
• Secret-leak analysis now tracks credential handoffs through step outputs (#71850).

🐛 Bug Fixes & Improvements

• Fixed generated conclusion references and fetch warnings; Redis image pinned (#71898).
• Guarded indexing boundaries and prevented cron-step overflow (#71889).
• Refreshed Node image pins and enforced patched runtime dependencies (#71879).
• gh-aw-detection is no longer treated as experimental (#71848).
• Internal consolidation of permission scope expansion, GitHub Contents base64 decoding, and public API GET fallback transport (#71888, #71894, #71893).

📚 Documentation

• Documentation refreshed for recent features (#71867).

Generated by 🚀 Release · copilot · auto · ~14 AIC · ⊞ 12.6K

What's Changed

• Allow network credentials in safe-output integration jobs by @pelikhan in #71833
• [docs] Update documentation for features from 2026-10-25 by @github-actions[bot] in #71867
• [jsweep] Clean write_daily_aic_usage_cache.cjs by @github-actions[bot] in #71805
• fix: stop treating gh-aw-detection as experimental by @pelikhan in #71848
• [docs] Update Astro dependencies - 2026-10-25 by @github-actions[bot] in #71796
• Detect parenthesized Flush discards in uncheckedflushreturn by @pelikhan with @Copilot in #71896
• Track credential handoffs through step outputs in secret-leak analysis by @pelikhan with @Copilot in #71850
• Update Pi CLI default to 1.4.0 by @pelikhan with @Copilot in #71899
• Detect missing recovery in goroutines launched through local closures by @pelikhan with @Copilot in #71897
• Refresh Node image pins and enforce patched runtime dependencies by @pelikhan with @Copilot in #71879
• Close custom-linter detection gaps and exempt safe os error checks by @pelikhan with @Copilot in #71880
• feat(linters): add readerstringconv analyzer by @pelikhan with @Copilot in #71891
• Centralize missing permission scope expansion by @pelikhan with @Copilot in #71888
• Unify GitHub Contents base64 decoding by @pelikhan with @Copilot in #71894
• Consolidate public GitHub API GET fallback transport by @pelikhan with @Copilot in #71893
• Fix generated conclusion references and fetch warnings; pin Redis by @pelikhan with @Copilot in #71898
• Guard indexing boundaries and prevent cron-step overflow by @pelikhan with @Copilot in #71889
• Deduplicate AW import normalization in source policy lint rules by @pelikhan with @Copilot in #71887
• [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #71916
• Classify engine driver crashes with secret-safe stderr diagnostics by @pelikhan with @Copilot in #71883

Full Changelog: v0.93.4...v0.93.5

🌟 Release Highlights

This release focuses on work-queue reliability, safer checkout credential handling, and a broad set of compiler and workflow fixes.

✨ What's New

• Work queues: pools and workers now install on first use, with clearer diagnostics for missing pools and privacy-preserving GraphQL errors.
• Safe outputs: standardized machine-readable error codes, add_comment constraints disclosed in the tool description, and visible staged-preview notices on PR and Claim guards.
• Threat detection: matching-engine detection now inherits agent API targets, and validated status-only jobs are allowed after detection.
• Environments: workflow environments now propagate to activation jobs.
• Faster update: fewer network fetches, plus verbose request timings.

🐛 Bug Fixes & Improvements

• Release checkouts no longer persist credentials; compiler-generated PR checkouts are narrowly exempted from artipacked warnings.
• Compiler-generated constants are emitted as quoted strings, and schema-supported frontmatter shapes are accepted.
• Copilot BYOK HTTP API targets are preserved.
• Unmatched checkout.fetch refs no longer block other fetches.
• Fixed prompt tool scanner false positives, mapdeletecheck with asymmetric parentheses, and empty repo-memory wiki note substitution.
• Fixed missing embedded session-parser and grader runtime dependencies.
• Workflow health checks now have a time budget and debug logging; log storage admission and observability audits are bounded.
• Behavior-defined engine session capture is now protected.

📚 Documentation

• MemoryOps pattern page streamlined and docs updated for recent features.

Generated by 🚀 Release · copilot · auto · ~14 AIC · ⊞ 12.6K

What's Changed

• [log] Add debug logging to repository package manifest import/resource/skill paths by @github-actions[bot] in #71541
• Report missing work queue pools with actionable recovery diagnostics by @pelikhan with @Copilot in #71495
• Prevent arXiv researcher Codex startup failure by @pelikhan with @Copilot in #71608
• [docs] Update documentation for features from 2026-10-24 by @github-actions[bot] in #71631
• Keep TYPE-016 conformance check compatible with added parameters by @pelikhan with @Copilot in #71615
• Require item-level verification in daily queue reports by @pelikhan with @Copilot in #71607
• Fix Update Astro dependency downloads and upgrade command by @pelikhan with @Copilot in #71619
• Fix mapdeletecheck detection with asymmetric parentheses by @pelikhan with @Copilot in #71618
• Strengthen ledger formal-spec coverage by @pelikhan with @Copilot in #71625
• Replace unavailable Copilot model in video analyzer by @pelikhan with @Copilot in #71620
• Disclose add_comment constraints in tool description by @pelikhan with @Copilot in #71614
• Add visible staged-preview notices to PR and Claim guards by @pelikhan with @Copilot in #71612
• [instructions] Sync instruction files with release v0.93.2 by @github-actions[bot] in #71598
• [dead-code] chore: remove dead functions — 1 functions removed by @github-actions[bot] in #71660
• [Safe Outputs] Standardize machine-readable error codes by @pelikhan with @Copilot in #71613
• Inherit agent API targets in matching-engine threat detection by @pelikhan with @Copilot in #71624
• Propagate workflow environments to activation jobs by @pelikhan with @Copilot in #71617
• Add detail-level A/B campaign to commit-changes-analyzer by @pelikhan with @Copilot in #71666
• Update CLI and scanner image versions by @pelikhan with @Copilot in #71616
• Approve libatomic container runtime license exception by @pelikhan in #71678
• fix: refresh verified TLA runtime checksum by @pelikhan in #71679
• Preflight agent assignment credentials before processing issues by @pelikhan with @Copilot in #71611
• Skip unmatched checkout.fetch refs without blocking other fetches by @pelikhan with @Copilot in #71622
• Fix external workflow sources for documentation jobs by @pelikhan in #71677
• Install configured work queue pools on first use by @pelikhan in #71675
• Fix missing work-queue diagnostic guidance by @pelikhan with @Copilot in #71665
• Fix logs storage admission and bound observability audits by @pelikhan in #71686
• fix(workflow): preserve Copilot BYOK HTTP API targets by @pelikhan in #71680
• Fix remaining CI diagnostic guidance gaps by @pelikhan in #71688
• Fix missing grader runtime error codes dependency by @pelikhan in #71689
• Improve privacy-preserving work queue GraphQL diagnostics by @pelikhan in #71676
• Allow validated status-only jobs after detection by @pelikhan with @Copilot in #71623
• Fix compiler integration fixtures for action pin linting by @pelikhan in #71692
• Fix Pi evals reading stale workflow prompts by @pelikhan with @Copilot in #71664
• Reduce update network fetches and add verbose request timings by @dsyme in #71687
• Restore safe-output handler and tool-description conformance by @pelikhan with @Copilot in #71609
• Fix remote repository API requests for experiments by @pelikhan in #71681
• fix: substitute empty repo-memory wiki note as a literal by @pelikhan in #71782
• Gate generated admission outputs on admission opt-in by @pelikhan in #71784
• Add a time budget and debug logging to workflow health checks by @pelikhan in #71786
• Fix first-use work-queue pool and worker registration by @pelikhan in #71787
• [docs] docs: unbloat MemoryOps pattern page by @github-actions[bot] in #71779
• Narrowly exempt compiler-generated PR checkouts from artipacked warnings by @pelikhan in #71783
• fix: avoid persisting release checkout credentials by @pelikhan in #71802
• Protect behavior-defined engine session capture by @pelikhan with @Copilot in #69586
• fix(workflow): gate conclusion stale-check output references by @pelikhan in #71808
• fix: emit compiler-generated constants as quoted strings by @pelikhan in #71803
• fix(workflow): avoid prompt tool scanner false positives by @pelikhan in #71813
• fix(workflow): accept schema-supported frontmatter shapes by @pelikhan in #71809
• Recognize verified compiler-owned checkout cleanup in artipacked lint by @pelikhan in #71806
• Fix missing embedded session-parser dependency by @pelikhan in #71822

Full Changelog: v0.93.3...v0.93.4

🌟 Release Highlights

This release tightens workflow quality checks and hardens threat detection.

✨ What's New

• Workflow linting on by default – gh aw compile now lints workflows during compilation, surfacing problems earlier (#71349).
• Work-queue smoke workflows – New daily smoke workflows with Bash 3-compatible validation improve confidence in work-queue behavior (#71363).

🐛 Bug Fixes & Improvements

• Work-queue Claim settlement now verifies discussion cleanup effects (#71361).
• Threat detection is pinned to v0.5.3 for reproducible, safer runs (#71501).

📚 Documentation

• Clarified directory restrictions for reusable agentic workflows (#71451).

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.6K

What's Changed

• Add daily work queue smoke workflows and Bash 3-compatible validation by @pelikhan in #71363
• [instructions] Sync instruction files with release v0.93.2 by @github-actions[bot] in #71403
• [docs] Update documentation for features from 2026-10-23 by @github-actions[bot] in #71415
• feat: lint workflows during compilation by default by @pelikhan in #71349
• fix(work-queue): verify discussion cleanup effects during Claim settlement by @pelikhan in #71361
• docs: clarify directory restrictions for reusable agentic workflows by @pelikhan with @Copilot in #71451
• [dead-code] chore: remove dead functions — 2 functions removed by @github-actions[bot] in #71454
• [blog] Agent of the Day – 2026-10-23 by @github-actions[bot] in #71455
• Pin threat detection to v0.5.3 by @davidslater with @Copilot in #71501

Full Changelog: v0.93.2...v0.93.3

🌟 Release Highlights

A reliability-focused release: Copilot CLI installs are more resilient, scanners and reports are more trustworthy, and Pi runs behave correctly on ARC/DinD runners.

🐛 Bug Fixes & Improvements

• Copilot CLI install fallback — when the live compatibility matrix selects a release without a trusted checksum pin, setup now falls back to the bundled default (within the compatibility window), with checksum verification still required. (#71339)
• Pi on ARC/DinD — Pi streaming logs now go to the writable engine-log directory, fixing log, summary and session export on ARC/DinD runners. (#71228)
• Custom ledger safe outputs — custom ledger tool schemas now require a record, and invalid envelopes are rejected before queuing so agents can self-correct. (#71240)
• Grype scan completeness — empty or malformed Grype output is no longer cached as a zero-finding success, and per-image scan status is tracked. (#71297)
• Report formatting — bold labels in collapsible report summaries now render correctly instead of showing literal <b> tags. (#71273)
• Release notes — fixed apostrophe encoding guidance so highlights no longer publish u0027. (#71272)
• Conformance checks — removed false positives for PTI-005 and SEC-005. (#71287, #71286)
• Windows CI — POSIX-only outcome API fixtures are skipped on Windows. (#71247)

📚 Documentation

• Added admission setup and server-size AIC policy guidance to Cost Management. (#71323)

Generated by 🚀 Release · copilot · auto · ~18 AIC · ⊞ 12.6K

What's Changed

• Fix Pi streaming logs on ARC/DinD runners by @pelikhan in #71228
• fix: enforce custom ledger record contract before queuing by @pelikhan in #71240
• fix: skip POSIX outcome API fixtures on Windows by @pelikhan in #71247
• Fix release highlights apostrophe encoding guidance by @pelikhan in #71272
• fix: preserve bold formatting in collapsible report summaries by @pelikhan in #71273
• fix: exempt display-only session metadata from SEC-005 by @pelikhan in #71286
• fix: accept integrity-first deadline guard in PTI-005 conformance check by @pelikhan in #71287
• [log] Add debug logging to webhook, model-routing, and JS taint-summary files by @github-actions[bot] in #71327
• Document admission setup and server-size AIC policies by @pelikhan with @Copilot in #71323
• fix: reject incomplete Grype scans and verify per-image completion by @pelikhan in #71297
• Fall back to pinned Copilot CLI when live compatibility targets lack trusted checksums by @pelikhan with @Copilot in #71339

Full Changelog: v0.93.1...v0.93.2

🌟 Release Highlights

v0.93.1 focuses on engine reliability, MCP trust configuration, and audit tooling, plus many CI and workflow stability fixes.

✨ What's New

• Per-server custom CA trust for HTTP MCP servers — connect to MCP servers behind private PKI without weakening global trust (#71229). Learn more
• BM25 audit search — unified-session audit now supports search with automatic evidence grouping (#70998). Learn more
• Outcome evaluation moved into logs — the separate outcomes command is removed (#71218).
• Detection gates enforced for custom workflow jobs (#70997) and hosted threat detection is isolated (#71244).
• Work-queue diagnostics included in health reports (#70965).
• MCP Gateway bumped to v0.4.37 (#71219).

🐛 Bug Fixes & Improvements

• Codex stages native TOML sub-agents with resolved models and fails closed before startup (#70945); Copilot SDK refuses silent model substitution (#70943).
• Model-routing allowed-models now expands aliases (#70942); Claude detection model aliases resolve before CLI launch (#70861).
• Pi main/sub-agent requests are attributed with x-awf-caller (#71043).
• CLI proxy and MCP gateway containers honor runner proxy settings (#70347).
• Scalar allowed-repos normalized in GitHub guard policies (#70346); trusted-bot policy compilation covered and documented (#70343).
• Footer AIC costs show as rounded-up estimates (#71193).
• Dry-run telemetry disabled via documented opt-outs (#71032).
• Fixed Ollama CPU warm-up, Aider command replay, reviewer checkout after branch deletion, and unavailable prompt job output detection.

📚 Documentation

Daily documentation, glossary, and instruction syncs, plus an unbloated audit reference.

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.4K

What's Changed

• Preserve failed Claim delivery diagnostics for investigation by @pelikhan in #70971
• Copilot SDK: observe the main-session model and refuse silent substitution by @SivaKesava1 with @Copilot in #70943
• Stabilize smoke-copilot-sub-agents: mandatory delegation, experiment-independent contract checks by @SivaKesava1 with @Copilot in #70944
• Codex: stage native TOML sub-agents with resolved models and fail closed before startup by @SivaKesava1 with @Copilot in #70945
• feat(cli): include work-queue diagnostics in health reports by @pelikhan in #70965
• build(deps): apply docs updates available in 1ES by @pelikhan in #70996
• fix: bound daily AIC quota recovery and snapshot discovery by @pelikhan in #70968
• [docs] docs: unbloat reference/audit.md by @github-actions[bot] in #70991
• Update CLI and scanner pins with 1ES-compatible Claude by @pelikhan in #70999
• Add unified-session BM25 audit search with automatic evidence grouping by @pelikhan in #70998
• fix: detect and rewrite unavailable prompt job outputs by @pelikhan in #70973
• Fix authority-scoped work queue Issue mirror synchronization by @pelikhan in #70992
• Resolve Claude detection model aliases before CLI launch by @pelikhan with @Copilot in #70861
• Expand aliases in engine.model-routing.allowed-models by @SivaKesava1 with @Copilot in #70942
• Disable dry-run telemetry using documented environment opt-outs by @pelikhan with @Copilot in #71032
• Enforce detection gates for custom workflow jobs by @pelikhan in #70997
• [docs] Update documentation for features from 2026-10-22 by @github-actions[bot] in #71114
• [ci-coach] Fix modernize embedlit lint failures in pkg/cli by @github-actions[bot] in #71146
• [docs] Update glossary - daily scan by @github-actions[bot] in #71108
• [instructions] Sync instruction files with release v0.92.0 by @github-actions[bot] in #71091
• Fix Contribution Check tool-denial aborts with prefetched PR evidence by @pelikhan in #71162
• Fix Super Linter analysis and runtime failure recovery by @pelikhan in #71169
• fix: precompute Daily File Diet source metrics by @pelikhan in #71161
• Improve work queue failure diagnostics by @pelikhan in #71163
• [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in #71155
• Normalize scalar allowed-repos in GitHub guard policies by @pelikhan with @Copilot in #70346
• fix: filter expired approval runs from health failure candidates by @pelikhan in #71164
• [blog] Agent of the Day – 2026-10-22 by @github-actions[bot] in #71154
• Attribute Pi main/sub-agent requests with x-awf-caller and preserve caller metadata by @SivaKesava1 with @Copilot in #71043
• build(deps): consolidate 1ES-supported Dependabot npm updates by @pelikhan in #71195
• fix: repair CI documentation contracts and regression fixtures by @pelikhan in #71194
• Show footer AIC costs as rounded-up estimates by @pelikhan in #71193
• build(deps-dev): bump @playwright/test from 1.64.0 to 1.64.1 in /docs by @dependabot[bot] in #70493
• build(deps): bump starlight-changelogs from 0.7.0 to 0.7.1 in /docs by @dependabot[bot] in #70489
• fix(ci): preserve explicit embedded struct literals by @pelikhan in #71209
• Fix Aider command replay and daily Go workflow completion by @pelikhan in #71211
• Fix reviewer checkout after merged PR branch deletion by @pelikhan in #71210
• build(deps): bump the pip group across 1 directory with 2 updates by @dependabot[bot] in #70876
• [actions-aw-linter] Fix workflow_run positive branch cancellation detection by @github-actions[bot] in #71189
• build(deps): bump dompurify from 3.4.16 to 3.4.17 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in #71216
• build(deps): bump geo-optimizer-skill from 4.18.3 to 4.19.4 in /.github/workflows by @dependabot[bot] in #70485
• Honor runner proxy settings in CLI proxy and MCP gateway containers by @pelikhan with @Copilot in #70347
• Bump MCPG to v0.4.37 by @lpcox with @Copilot in #71219
• Support per-server custom CA trust for HTTP MCP servers by @pelikhan in #71229
• Unify debugging bootstraps and verify instruction routing by @pelikhan in #71223
• Move outcome evaluation into logs and remove outcomes command by @pelikhan in #71218
• Cover trusted-bot policy compilation and document platform bot support by @pelikhan with @Copilot in #70343
• Fix CI instruction drift and registry-dependent negative tests by @pelikhan in #71241
• Fix code quality reviewer finalization sequencing by @pelikhan in #71242
• Fix Ollama CPU warm-up and isolate hosted threat detection by @pelikhan in #71244

Full Changelog: v0.93.0...v0.93.1