From 460c341ebb35d2151139e0fb86163f1d2f3003b0 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 22 Jan 2026 03:28:34 +0000
Subject: [PATCH 1/3] Initial plan


From 72813c214fa98dd1359b6e67620e74431b88f1a8 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 22 Jan 2026 03:37:34 +0000
Subject: [PATCH 2/3] Update CLI tool versions and test expectations
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Claude Code: 2.1.14 → 2.1.15
- Copilot CLI: 0.0.388 → 0.0.389
- Codex: 0.87.0 → 0.88.0
- Update constants_test.go with new version expectations
- Recompile all workflow lock files

Co-authored-by: mnkiefer <8320933+mnkiefer@users.noreply.github.com>
---
 .github/workflows/agent-performance-analyzer.lock.yml     | 6 +++---
 .github/workflows/agent-persona-explorer.lock.yml         | 6 +++---
 .github/workflows/agentic-campaign-generator.lock.yml     | 6 +++---
 .github/workflows/ai-moderator.lock.yml                   | 4 ++--
 .github/workflows/archie.lock.yml                         | 6 +++---
 .github/workflows/artifacts-summary.lock.yml              | 6 +++---
 .github/workflows/audit-workflows.lock.yml                | 6 +++---
 .github/workflows/auto-triage-issues.lock.yml             | 6 +++---
 .github/workflows/blog-auditor.lock.yml                   | 6 +++---
 .github/workflows/brave.lock.yml                          | 6 +++---
 .github/workflows/breaking-change-checker.lock.yml        | 6 +++---
 .github/workflows/changeset.lock.yml                      | 4 ++--
 .github/workflows/ci-coach.lock.yml                       | 6 +++---
 .github/workflows/ci-doctor.lock.yml                      | 6 +++---
 .github/workflows/cli-consistency-checker.lock.yml        | 6 +++---
 .github/workflows/cli-version-checker.lock.yml            | 6 +++---
 .github/workflows/cloclo.lock.yml                         | 6 +++---
 .github/workflows/code-scanning-fixer.lock.yml            | 6 +++---
 .github/workflows/code-simplifier.lock.yml                | 6 +++---
 .github/workflows/codex-github-remote-mcp-test.lock.yml   | 4 ++--
 .github/workflows/commit-changes-analyzer.lock.yml        | 6 +++---
 .github/workflows/copilot-agent-analysis.lock.yml         | 6 +++---
 .github/workflows/copilot-cli-deep-research.lock.yml      | 6 +++---
 .github/workflows/copilot-pr-merged-report.lock.yml       | 6 +++---
 .github/workflows/copilot-pr-nlp-analysis.lock.yml        | 6 +++---
 .github/workflows/copilot-pr-prompt-analysis.lock.yml     | 6 +++---
 .github/workflows/copilot-session-insights.lock.yml       | 6 +++---
 .github/workflows/craft.lock.yml                          | 6 +++---
 .github/workflows/daily-assign-issue-to-user.lock.yml     | 6 +++---
 .github/workflows/daily-choice-test.lock.yml              | 6 +++---
 .github/workflows/daily-cli-performance.lock.yml          | 6 +++---
 .github/workflows/daily-code-metrics.lock.yml             | 6 +++---
 .github/workflows/daily-compiler-quality.lock.yml         | 6 +++---
 .github/workflows/daily-copilot-token-report.lock.yml     | 6 +++---
 .github/workflows/daily-doc-updater.lock.yml              | 6 +++---
 .github/workflows/daily-fact.lock.yml                     | 6 +++---
 .github/workflows/daily-file-diet.lock.yml                | 6 +++---
 .github/workflows/daily-firewall-report.lock.yml          | 6 +++---
 .github/workflows/daily-issues-report.lock.yml            | 6 +++---
 .github/workflows/daily-malicious-code-scan.lock.yml      | 4 ++--
 .github/workflows/daily-multi-device-docs-tester.lock.yml | 6 +++---
 .github/workflows/daily-news.lock.yml                     | 6 +++---
 .github/workflows/daily-observability-report.lock.yml     | 6 +++---
 .github/workflows/daily-performance-summary.lock.yml      | 6 +++---
 .github/workflows/daily-regulatory.lock.yml               | 6 +++---
 .github/workflows/daily-repo-chronicle.lock.yml           | 6 +++---
 .github/workflows/daily-safe-output-optimizer.lock.yml    | 6 +++---
 pkg/constants/constants.go                                | 6 +++---
 pkg/constants/constants_test.go                           | 6 +++---
 49 files changed, 143 insertions(+), 143 deletions(-)

diff --git a/.github/workflows/agent-performance-analyzer.lock.yml b/.github/workflows/agent-performance-analyzer.lock.yml
index 50a634eb9ac..2c9746bfa1d 100644
--- a/.github/workflows/agent-performance-analyzer.lock.yml
+++ b/.github/workflows/agent-performance-analyzer.lock.yml
@@ -155,7 +155,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -584,7 +584,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Agent Performance Analyzer - Meta-Orchestrator",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1678,7 +1678,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/agent-persona-explorer.lock.yml b/.github/workflows/agent-persona-explorer.lock.yml
index 37a21491563..c1102590bb4 100644
--- a/.github/workflows/agent-persona-explorer.lock.yml
+++ b/.github/workflows/agent-persona-explorer.lock.yml
@@ -157,7 +157,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -478,7 +478,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Agent Persona Explorer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1195,7 +1195,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/agentic-campaign-generator.lock.yml b/.github/workflows/agentic-campaign-generator.lock.yml
index 9d52db73be4..16744cbdf9e 100644
--- a/.github/workflows/agentic-campaign-generator.lock.yml
+++ b/.github/workflows/agentic-campaign-generator.lock.yml
@@ -178,7 +178,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -761,7 +761,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Agentic Campaign Generator",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1336,7 +1336,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/ai-moderator.lock.yml b/.github/workflows/ai-moderator.lock.yml
index 84b0dd8f8a4..1f05c5cd4d2 100644
--- a/.github/workflows/ai-moderator.lock.yml
+++ b/.github/workflows/ai-moderator.lock.yml
@@ -166,7 +166,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -464,7 +464,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: "gpt-5-mini",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "AI Moderator",
               experimental: false,
               supports_tools_allowlist: true,
diff --git a/.github/workflows/archie.lock.yml b/.github/workflows/archie.lock.yml
index 15e3fd7f2b9..8cf179ff43a 100644
--- a/.github/workflows/archie.lock.yml
+++ b/.github/workflows/archie.lock.yml
@@ -185,7 +185,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -462,7 +462,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Archie",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1193,7 +1193,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/artifacts-summary.lock.yml b/.github/workflows/artifacts-summary.lock.yml
index 9af87666a5d..f61622bf0c3 100644
--- a/.github/workflows/artifacts-summary.lock.yml
+++ b/.github/workflows/artifacts-summary.lock.yml
@@ -146,7 +146,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -432,7 +432,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Artifacts Summary",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1119,7 +1119,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/audit-workflows.lock.yml b/.github/workflows/audit-workflows.lock.yml
index 046e3db0e51..d383514a353 100644
--- a/.github/workflows/audit-workflows.lock.yml
+++ b/.github/workflows/audit-workflows.lock.yml
@@ -217,7 +217,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -525,7 +525,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Agentic Workflow Audit Agent",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1502,7 +1502,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/auto-triage-issues.lock.yml b/.github/workflows/auto-triage-issues.lock.yml
index 35c109bb4ba..ebd438b0592 100644
--- a/.github/workflows/auto-triage-issues.lock.yml
+++ b/.github/workflows/auto-triage-issues.lock.yml
@@ -145,7 +145,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -467,7 +467,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Auto-Triage Issues",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1162,7 +1162,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/blog-auditor.lock.yml b/.github/workflows/blog-auditor.lock.yml
index 33cfe941a6f..5ff13d101b4 100644
--- a/.github/workflows/blog-auditor.lock.yml
+++ b/.github/workflows/blog-auditor.lock.yml
@@ -148,7 +148,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -440,7 +440,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Blog Auditor",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1385,7 +1385,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/brave.lock.yml b/.github/workflows/brave.lock.yml
index 8d460623a29..35d8c44ff1a 100644
--- a/.github/workflows/brave.lock.yml
+++ b/.github/workflows/brave.lock.yml
@@ -176,7 +176,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -456,7 +456,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Brave Web Search Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1094,7 +1094,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/breaking-change-checker.lock.yml b/.github/workflows/breaking-change-checker.lock.yml
index e53dbe2c14d..e75bc74849b 100644
--- a/.github/workflows/breaking-change-checker.lock.yml
+++ b/.github/workflows/breaking-change-checker.lock.yml
@@ -143,7 +143,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -450,7 +450,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Breaking Change Checker",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1155,7 +1155,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/changeset.lock.yml b/.github/workflows/changeset.lock.yml
index a7f94ea5beb..991ffde3937 100644
--- a/.github/workflows/changeset.lock.yml
+++ b/.github/workflows/changeset.lock.yml
@@ -185,7 +185,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -544,7 +544,7 @@ jobs:
               engine_name: "Codex",
               model: "gpt-5-mini",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Changeset Generator",
               experimental: true,
               supports_tools_allowlist: true,
diff --git a/.github/workflows/ci-coach.lock.yml b/.github/workflows/ci-coach.lock.yml
index 82b6942299f..89d320b9dd2 100644
--- a/.github/workflows/ci-coach.lock.yml
+++ b/.github/workflows/ci-coach.lock.yml
@@ -199,7 +199,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -495,7 +495,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "CI Optimization Coach",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1745,7 +1745,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/ci-doctor.lock.yml b/.github/workflows/ci-doctor.lock.yml
index 82d8fe71342..ed402878018 100644
--- a/.github/workflows/ci-doctor.lock.yml
+++ b/.github/workflows/ci-doctor.lock.yml
@@ -168,7 +168,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -510,7 +510,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "CI Failure Doctor",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1240,7 +1240,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/cli-consistency-checker.lock.yml b/.github/workflows/cli-consistency-checker.lock.yml
index ab84cd34b19..6b978a3aebf 100644
--- a/.github/workflows/cli-consistency-checker.lock.yml
+++ b/.github/workflows/cli-consistency-checker.lock.yml
@@ -142,7 +142,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -449,7 +449,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "CLI Consistency Checker",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1159,7 +1159,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/cli-version-checker.lock.yml b/.github/workflows/cli-version-checker.lock.yml
index 255f8279c9d..eb68005b0cc 100644
--- a/.github/workflows/cli-version-checker.lock.yml
+++ b/.github/workflows/cli-version-checker.lock.yml
@@ -162,7 +162,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -458,7 +458,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "CLI Version Checker",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1418,7 +1418,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/cloclo.lock.yml b/.github/workflows/cloclo.lock.yml
index b1bd03acbbe..e97804f86c8 100644
--- a/.github/workflows/cloclo.lock.yml
+++ b/.github/workflows/cloclo.lock.yml
@@ -244,7 +244,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -601,7 +601,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "/cloclo",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1511,7 +1511,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/code-scanning-fixer.lock.yml b/.github/workflows/code-scanning-fixer.lock.yml
index 7b10a7c3b74..8d4dd0d603a 100644
--- a/.github/workflows/code-scanning-fixer.lock.yml
+++ b/.github/workflows/code-scanning-fixer.lock.yml
@@ -156,7 +156,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -452,7 +452,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Code Scanning Fixer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1186,7 +1186,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/code-simplifier.lock.yml b/.github/workflows/code-simplifier.lock.yml
index 727da2aa615..dd19d7bc688 100644
--- a/.github/workflows/code-simplifier.lock.yml
+++ b/.github/workflows/code-simplifier.lock.yml
@@ -149,7 +149,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -445,7 +445,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Code Simplifier",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1039,7 +1039,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/codex-github-remote-mcp-test.lock.yml b/.github/workflows/codex-github-remote-mcp-test.lock.yml
index 30f6dd3d7c2..664e001fe5d 100644
--- a/.github/workflows/codex-github-remote-mcp-test.lock.yml
+++ b/.github/workflows/codex-github-remote-mcp-test.lock.yml
@@ -126,7 +126,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -212,7 +212,7 @@ jobs:
               engine_name: "Codex",
               model: process.env.GH_AW_MODEL_AGENT_CODEX || "",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Codex GitHub Remote MCP Test",
               experimental: true,
               supports_tools_allowlist: true,
diff --git a/.github/workflows/commit-changes-analyzer.lock.yml b/.github/workflows/commit-changes-analyzer.lock.yml
index 7810d48da1c..58a9b9914df 100644
--- a/.github/workflows/commit-changes-analyzer.lock.yml
+++ b/.github/workflows/commit-changes-analyzer.lock.yml
@@ -150,7 +150,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -425,7 +425,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Commit Changes Analyzer",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1294,7 +1294,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/copilot-agent-analysis.lock.yml b/.github/workflows/copilot-agent-analysis.lock.yml
index 7d86dd2ba1c..3743d6ad800 100644
--- a/.github/workflows/copilot-agent-analysis.lock.yml
+++ b/.github/workflows/copilot-agent-analysis.lock.yml
@@ -180,7 +180,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -455,7 +455,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Copilot Agent PR Analysis",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1706,7 +1706,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/copilot-cli-deep-research.lock.yml b/.github/workflows/copilot-cli-deep-research.lock.yml
index 6b9391351ee..990c93c90a4 100644
--- a/.github/workflows/copilot-cli-deep-research.lock.yml
+++ b/.github/workflows/copilot-cli-deep-research.lock.yml
@@ -153,7 +153,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -439,7 +439,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Copilot CLI Deep Research Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1346,7 +1346,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/copilot-pr-merged-report.lock.yml b/.github/workflows/copilot-pr-merged-report.lock.yml
index a9da4e327dd..252d17263e5 100644
--- a/.github/workflows/copilot-pr-merged-report.lock.yml
+++ b/.github/workflows/copilot-pr-merged-report.lock.yml
@@ -147,7 +147,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -522,7 +522,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Copilot PR Merged Report",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1313,7 +1313,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/copilot-pr-nlp-analysis.lock.yml b/.github/workflows/copilot-pr-nlp-analysis.lock.yml
index 243cda8c9a1..e770826ab3c 100644
--- a/.github/workflows/copilot-pr-nlp-analysis.lock.yml
+++ b/.github/workflows/copilot-pr-nlp-analysis.lock.yml
@@ -207,7 +207,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -522,7 +522,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Copilot PR Conversation NLP Analysis",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1933,7 +1933,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/copilot-pr-prompt-analysis.lock.yml b/.github/workflows/copilot-pr-prompt-analysis.lock.yml
index 2f67a791868..226ff4a0fff 100644
--- a/.github/workflows/copilot-pr-prompt-analysis.lock.yml
+++ b/.github/workflows/copilot-pr-prompt-analysis.lock.yml
@@ -178,7 +178,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -464,7 +464,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Copilot PR Prompt Pattern Analysis",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1463,7 +1463,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/copilot-session-insights.lock.yml b/.github/workflows/copilot-session-insights.lock.yml
index af7e777ca25..56ec878ab55 100644
--- a/.github/workflows/copilot-session-insights.lock.yml
+++ b/.github/workflows/copilot-session-insights.lock.yml
@@ -204,7 +204,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -508,7 +508,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Copilot Session Insights",
               experimental: true,
               supports_tools_allowlist: true,
@@ -2243,7 +2243,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/craft.lock.yml b/.github/workflows/craft.lock.yml
index aaf2fbfc961..9134c2e7dec 100644
--- a/.github/workflows/craft.lock.yml
+++ b/.github/workflows/craft.lock.yml
@@ -177,7 +177,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -494,7 +494,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Workflow Craft Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1273,7 +1273,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-assign-issue-to-user.lock.yml b/.github/workflows/daily-assign-issue-to-user.lock.yml
index 000a6f395d8..2eb598a5c8e 100644
--- a/.github/workflows/daily-assign-issue-to-user.lock.yml
+++ b/.github/workflows/daily-assign-issue-to-user.lock.yml
@@ -141,7 +141,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -459,7 +459,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Auto-Assign Issue",
               experimental: false,
               supports_tools_allowlist: true,
@@ -996,7 +996,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-choice-test.lock.yml b/.github/workflows/daily-choice-test.lock.yml
index ac00afc0072..65ea071f430 100644
--- a/.github/workflows/daily-choice-test.lock.yml
+++ b/.github/workflows/daily-choice-test.lock.yml
@@ -143,7 +143,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -397,7 +397,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Daily Choice Type Test",
               experimental: true,
               supports_tools_allowlist: true,
@@ -981,7 +981,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/daily-cli-performance.lock.yml b/.github/workflows/daily-cli-performance.lock.yml
index fa9d7d37ff4..1263d1cb177 100644
--- a/.github/workflows/daily-cli-performance.lock.yml
+++ b/.github/workflows/daily-cli-performance.lock.yml
@@ -155,7 +155,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -497,7 +497,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily CLI Performance Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1653,7 +1653,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-code-metrics.lock.yml b/.github/workflows/daily-code-metrics.lock.yml
index a9aaec50afb..2a8fb27d419 100644
--- a/.github/workflows/daily-code-metrics.lock.yml
+++ b/.github/workflows/daily-code-metrics.lock.yml
@@ -193,7 +193,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -497,7 +497,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Daily Code Metrics and Trend Tracking Agent",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1995,7 +1995,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/daily-compiler-quality.lock.yml b/.github/workflows/daily-compiler-quality.lock.yml
index 54c55487bc9..4431829c945 100644
--- a/.github/workflows/daily-compiler-quality.lock.yml
+++ b/.github/workflows/daily-compiler-quality.lock.yml
@@ -157,7 +157,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -451,7 +451,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Compiler Quality Check",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1658,7 +1658,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-copilot-token-report.lock.yml b/.github/workflows/daily-copilot-token-report.lock.yml
index ed1e22ef4a1..046e39cd33f 100644
--- a/.github/workflows/daily-copilot-token-report.lock.yml
+++ b/.github/workflows/daily-copilot-token-report.lock.yml
@@ -205,7 +205,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -520,7 +520,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Copilot Token Consumption Report",
               experimental: false,
               supports_tools_allowlist: true,
@@ -2055,7 +2055,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-doc-updater.lock.yml b/.github/workflows/daily-doc-updater.lock.yml
index 5bf372195d0..f35b240b6e9 100644
--- a/.github/workflows/daily-doc-updater.lock.yml
+++ b/.github/workflows/daily-doc-updater.lock.yml
@@ -155,7 +155,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -440,7 +440,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Daily Documentation Updater",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1229,7 +1229,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/daily-fact.lock.yml b/.github/workflows/daily-fact.lock.yml
index c52298b3881..77731af9236 100644
--- a/.github/workflows/daily-fact.lock.yml
+++ b/.github/workflows/daily-fact.lock.yml
@@ -131,7 +131,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -416,7 +416,7 @@ jobs:
               engine_name: "Codex",
               model: "gpt-5-mini",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Daily Fact About gh-aw",
               experimental: true,
               supports_tools_allowlist: true,
@@ -969,7 +969,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Run Codex
         run: |
           set -o pipefail
diff --git a/.github/workflows/daily-file-diet.lock.yml b/.github/workflows/daily-file-diet.lock.yml
index 932b605c56c..48e3ff86f44 100644
--- a/.github/workflows/daily-file-diet.lock.yml
+++ b/.github/workflows/daily-file-diet.lock.yml
@@ -149,7 +149,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -464,7 +464,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily File Diet",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1312,7 +1312,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-firewall-report.lock.yml b/.github/workflows/daily-firewall-report.lock.yml
index 8c4bd70d927..d5f958cb868 100644
--- a/.github/workflows/daily-firewall-report.lock.yml
+++ b/.github/workflows/daily-firewall-report.lock.yml
@@ -201,7 +201,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -534,7 +534,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Firewall Logs Collector and Reporter",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1543,7 +1543,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-issues-report.lock.yml b/.github/workflows/daily-issues-report.lock.yml
index 02e4e9508e0..7204efeae25 100644
--- a/.github/workflows/daily-issues-report.lock.yml
+++ b/.github/workflows/daily-issues-report.lock.yml
@@ -195,7 +195,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -583,7 +583,7 @@ jobs:
               engine_name: "Codex",
               model: process.env.GH_AW_MODEL_AGENT_CODEX || "",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Daily Issues Report Generator",
               experimental: true,
               supports_tools_allowlist: true,
@@ -2121,7 +2121,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Run Codex
         run: |
           set -o pipefail
diff --git a/.github/workflows/daily-malicious-code-scan.lock.yml b/.github/workflows/daily-malicious-code-scan.lock.yml
index 8501f28615b..d1d64117edb 100644
--- a/.github/workflows/daily-malicious-code-scan.lock.yml
+++ b/.github/workflows/daily-malicious-code-scan.lock.yml
@@ -146,7 +146,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -473,7 +473,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Malicious Code Scan Agent",
               experimental: false,
               supports_tools_allowlist: true,
diff --git a/.github/workflows/daily-multi-device-docs-tester.lock.yml b/.github/workflows/daily-multi-device-docs-tester.lock.yml
index 5f7c231f2e6..db37d4aa8cc 100644
--- a/.github/workflows/daily-multi-device-docs-tester.lock.yml
+++ b/.github/workflows/daily-multi-device-docs-tester.lock.yml
@@ -154,7 +154,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -496,7 +496,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Multi-Device Docs Tester",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1381,7 +1381,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/daily-news.lock.yml b/.github/workflows/daily-news.lock.yml
index b3eb5192293..2567cb8fa3d 100644
--- a/.github/workflows/daily-news.lock.yml
+++ b/.github/workflows/daily-news.lock.yml
@@ -262,7 +262,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -591,7 +591,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily News",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1960,7 +1960,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-observability-report.lock.yml b/.github/workflows/daily-observability-report.lock.yml
index ed5a9c48064..f7ebf02c515 100644
--- a/.github/workflows/daily-observability-report.lock.yml
+++ b/.github/workflows/daily-observability-report.lock.yml
@@ -150,7 +150,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -550,7 +550,7 @@ jobs:
               engine_name: "Codex",
               model: process.env.GH_AW_MODEL_AGENT_CODEX || "",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Daily Observability Report for AWF Firewall and MCP Gateway",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1436,7 +1436,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Run Codex
         run: |
           set -o pipefail
diff --git a/.github/workflows/daily-performance-summary.lock.yml b/.github/workflows/daily-performance-summary.lock.yml
index d46af8b528e..8c8c1bc628b 100644
--- a/.github/workflows/daily-performance-summary.lock.yml
+++ b/.github/workflows/daily-performance-summary.lock.yml
@@ -185,7 +185,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -984,7 +984,7 @@ jobs:
               engine_name: "Codex",
               model: process.env.GH_AW_MODEL_AGENT_CODEX || "",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Daily Project Performance Summary Generator (Using Safe Inputs)",
               experimental: true,
               supports_tools_allowlist: true,
@@ -2100,7 +2100,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Run Codex
         run: |
           set -o pipefail
diff --git a/.github/workflows/daily-regulatory.lock.yml b/.github/workflows/daily-regulatory.lock.yml
index dbcb4e1aa19..130c9906630 100644
--- a/.github/workflows/daily-regulatory.lock.yml
+++ b/.github/workflows/daily-regulatory.lock.yml
@@ -149,7 +149,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -897,7 +897,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Regulatory Report Generator",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1924,7 +1924,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-repo-chronicle.lock.yml b/.github/workflows/daily-repo-chronicle.lock.yml
index 10acc1315f0..5654fd52daf 100644
--- a/.github/workflows/daily-repo-chronicle.lock.yml
+++ b/.github/workflows/daily-repo-chronicle.lock.yml
@@ -182,7 +182,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -497,7 +497,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "The Daily Repository Chronicle",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1737,7 +1737,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-safe-output-optimizer.lock.yml b/.github/workflows/daily-safe-output-optimizer.lock.yml
index ee5651a588a..a5292c60b76 100644
--- a/.github/workflows/daily-safe-output-optimizer.lock.yml
+++ b/.github/workflows/daily-safe-output-optimizer.lock.yml
@@ -187,7 +187,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -487,7 +487,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Daily Safe Output Tool Optimizer",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1632,7 +1632,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/pkg/constants/constants.go b/pkg/constants/constants.go
index 720c7069291..3603a1f14ee 100644
--- a/pkg/constants/constants.go
+++ b/pkg/constants/constants.go
@@ -253,12 +253,12 @@ const AgenticCampaignLabel = "agentic-campaign"
 const CampaignLabelPrefix = "z_campaign_"
 
 // DefaultClaudeCodeVersion is the default version of the Claude Code CLI.
-const DefaultClaudeCodeVersion Version = "2.1.14"
+const DefaultClaudeCodeVersion Version = "2.1.15"
 
 // DefaultCopilotVersion is the default version of the GitHub Copilot CLI.
 //
 // WARNING: UPGRADING COPILOT CLI REQUIRES A FULL INTEGRATION TEST RUN TO ENSURE COMPATIBILITY.
-const DefaultCopilotVersion Version = "0.0.388"
+const DefaultCopilotVersion Version = "0.0.389"
 
 // DefaultCopilotDetectionModel is the default model for the Copilot engine when used in the detection job
 const DefaultCopilotDetectionModel ModelName = "gpt-5-mini"
@@ -282,7 +282,7 @@ const (
 )
 
 // DefaultCodexVersion is the default version of the OpenAI Codex CLI
-const DefaultCodexVersion Version = "0.87.0"
+const DefaultCodexVersion Version = "0.88.0"
 
 // DefaultGitHubMCPServerVersion is the default version of the GitHub MCP server Docker image
 const DefaultGitHubMCPServerVersion Version = "v0.29.0"
diff --git a/pkg/constants/constants_test.go b/pkg/constants/constants_test.go
index 5769f28829e..0a30a2441d3 100644
--- a/pkg/constants/constants_test.go
+++ b/pkg/constants/constants_test.go
@@ -280,9 +280,9 @@ func TestVersionConstants(t *testing.T) {
 		value    Version
 		expected Version
 	}{
-		{"DefaultClaudeCodeVersion", DefaultClaudeCodeVersion, "2.1.14"},
-		{"DefaultCopilotVersion", DefaultCopilotVersion, "0.0.388"},
-		{"DefaultCodexVersion", DefaultCodexVersion, "0.87.0"},
+		{"DefaultClaudeCodeVersion", DefaultClaudeCodeVersion, "2.1.15"},
+		{"DefaultCopilotVersion", DefaultCopilotVersion, "0.0.389"},
+		{"DefaultCodexVersion", DefaultCodexVersion, "0.88.0"},
 		{"DefaultGitHubMCPServerVersion", DefaultGitHubMCPServerVersion, "v0.29.0"},
 		{"DefaultMCPGatewayVersion", DefaultMCPGatewayVersion, "v0.0.74"},
 		{"DefaultSandboxRuntimeVersion", DefaultSandboxRuntimeVersion, "0.0.29"},

From a4946f802491cf7dc86361d1c76fe2cc9444dd79 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 22 Jan 2026 03:38:19 +0000
Subject: [PATCH 3/3] Recompile remaining workflow lock files

Co-authored-by: mnkiefer <8320933+mnkiefer@users.noreply.github.com>
---
 .github/workflows/daily-secrets-analysis.lock.yml          | 6 +++---
 .github/workflows/daily-team-evolution-insights.lock.yml   | 6 +++---
 .github/workflows/daily-team-status.lock.yml               | 6 +++---
 .github/workflows/daily-testify-uber-super-expert.lock.yml | 6 +++---
 .github/workflows/daily-workflow-updater.lock.yml          | 6 +++---
 .github/workflows/deep-report.lock.yml                     | 6 +++---
 .github/workflows/delight.lock.yml                         | 6 +++---
 .github/workflows/dependabot-go-checker.lock.yml           | 6 +++---
 .github/workflows/dev-hawk.lock.yml                        | 6 +++---
 .github/workflows/dev.lock.yml                             | 6 +++---
 .github/workflows/developer-docs-consolidator.lock.yml     | 6 +++---
 .github/workflows/dictation-prompt.lock.yml                | 6 +++---
 .github/workflows/discussion-task-miner.lock.yml           | 6 +++---
 .github/workflows/docs-noob-tester.lock.yml                | 6 +++---
 .github/workflows/duplicate-code-detector.lock.yml         | 6 +++---
 .github/workflows/example-custom-error-patterns.lock.yml   | 4 ++--
 .github/workflows/example-permissions-warning.lock.yml     | 4 ++--
 .github/workflows/example-workflow-analyzer.lock.yml       | 6 +++---
 .github/workflows/firewall-escape.lock.yml                 | 6 +++---
 .github/workflows/firewall.lock.yml                        | 4 ++--
 .github/workflows/github-mcp-structural-analysis.lock.yml  | 6 +++---
 .github/workflows/github-mcp-tools-report.lock.yml         | 6 +++---
 .github/workflows/github-remote-mcp-auth-test.lock.yml     | 6 +++---
 .github/workflows/glossary-maintainer.lock.yml             | 6 +++---
 .github/workflows/go-fan.lock.yml                          | 6 +++---
 .github/workflows/go-logger.lock.yml                       | 6 +++---
 .github/workflows/go-pattern-detector.lock.yml             | 6 +++---
 .github/workflows/grumpy-reviewer.lock.yml                 | 6 +++---
 .github/workflows/hourly-ci-cleaner.lock.yml               | 6 +++---
 .github/workflows/instructions-janitor.lock.yml            | 6 +++---
 .github/workflows/issue-arborist.lock.yml                  | 6 +++---
 .github/workflows/issue-monster.lock.yml                   | 6 +++---
 .github/workflows/issue-triage-agent.lock.yml              | 6 +++---
 .github/workflows/jsweep.lock.yml                          | 6 +++---
 .github/workflows/layout-spec-maintainer.lock.yml          | 6 +++---
 .github/workflows/lockfile-stats.lock.yml                  | 6 +++---
 .github/workflows/mcp-inspector.lock.yml                   | 6 +++---
 .github/workflows/mergefest.lock.yml                       | 6 +++---
 .github/workflows/metrics-collector.lock.yml               | 4 ++--
 .github/workflows/notion-issue-summary.lock.yml            | 6 +++---
 .github/workflows/org-health-report.lock.yml               | 6 +++---
 .github/workflows/pdf-summary.lock.yml                     | 6 +++---
 .github/workflows/plan.lock.yml                            | 6 +++---
 .github/workflows/poem-bot.lock.yml                        | 6 +++---
 .github/workflows/portfolio-analyst.lock.yml               | 6 +++---
 .github/workflows/pr-nitpick-reviewer.lock.yml             | 6 +++---
 .github/workflows/prompt-clustering-analysis.lock.yml      | 6 +++---
 .github/workflows/python-data-charts.lock.yml              | 6 +++---
 .github/workflows/q.lock.yml                               | 6 +++---
 .github/workflows/release.lock.yml                         | 6 +++---
 .github/workflows/repo-audit-analyzer.lock.yml             | 6 +++---
 .github/workflows/repo-tree-map.lock.yml                   | 6 +++---
 .github/workflows/repository-quality-improver.lock.yml     | 6 +++---
 .github/workflows/research.lock.yml                        | 6 +++---
 .github/workflows/safe-output-health.lock.yml              | 6 +++---
 .github/workflows/schema-consistency-checker.lock.yml      | 6 +++---
 .github/workflows/scout.lock.yml                           | 6 +++---
 .github/workflows/security-compliance.lock.yml             | 6 +++---
 .github/workflows/security-fix-pr.lock.yml                 | 6 +++---
 .github/workflows/security-review.lock.yml                 | 6 +++---
 .github/workflows/semantic-function-refactor.lock.yml      | 6 +++---
 .github/workflows/sergo.lock.yml                           | 6 +++---
 .github/workflows/slide-deck-maintainer.lock.yml           | 6 +++---
 .github/workflows/smoke-claude.lock.yml                    | 6 +++---
 .github/workflows/smoke-codex.lock.yml                     | 6 +++---
 .github/workflows/smoke-copilot.lock.yml                   | 6 +++---
 .github/workflows/stale-repo-identifier.lock.yml           | 6 +++---
 .github/workflows/static-analysis-report.lock.yml          | 6 +++---
 .github/workflows/step-name-alignment.lock.yml             | 6 +++---
 .github/workflows/sub-issue-closer.lock.yml                | 6 +++---
 .github/workflows/super-linter.lock.yml                    | 6 +++---
 .github/workflows/technical-doc-writer.lock.yml            | 6 +++---
 .github/workflows/terminal-stylist.lock.yml                | 6 +++---
 .github/workflows/test-create-pr-error-handling.lock.yml   | 6 +++---
 .github/workflows/tidy.lock.yml                            | 6 +++---
 .github/workflows/typist.lock.yml                          | 6 +++---
 .github/workflows/ubuntu-image-analyzer.lock.yml           | 6 +++---
 .github/workflows/unbloat-docs.lock.yml                    | 6 +++---
 .github/workflows/video-analyzer.lock.yml                  | 6 +++---
 .github/workflows/weekly-issue-summary.lock.yml            | 6 +++---
 .github/workflows/workflow-generator.lock.yml              | 6 +++---
 .github/workflows/workflow-health-manager.lock.yml         | 6 +++---
 .github/workflows/workflow-normalizer.lock.yml             | 6 +++---
 .github/workflows/workflow-skill-extractor.lock.yml        | 6 +++---
 84 files changed, 248 insertions(+), 248 deletions(-)

diff --git a/.github/workflows/daily-secrets-analysis.lock.yml b/.github/workflows/daily-secrets-analysis.lock.yml
index 6624c6ff662..f86a356dfcb 100644
--- a/.github/workflows/daily-secrets-analysis.lock.yml
+++ b/.github/workflows/daily-secrets-analysis.lock.yml
@@ -147,7 +147,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -490,7 +490,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Secrets Analysis Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1365,7 +1365,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-team-evolution-insights.lock.yml b/.github/workflows/daily-team-evolution-insights.lock.yml
index dab7ea04c3d..ea22ce0988e 100644
--- a/.github/workflows/daily-team-evolution-insights.lock.yml
+++ b/.github/workflows/daily-team-evolution-insights.lock.yml
@@ -148,7 +148,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -343,7 +343,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Daily Team Evolution Insights",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1218,7 +1218,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/daily-team-status.lock.yml b/.github/workflows/daily-team-status.lock.yml
index 6fb5625c737..30a709e8ecf 100644
--- a/.github/workflows/daily-team-status.lock.yml
+++ b/.github/workflows/daily-team-status.lock.yml
@@ -155,7 +155,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -462,7 +462,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Team Status",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1089,7 +1089,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-testify-uber-super-expert.lock.yml b/.github/workflows/daily-testify-uber-super-expert.lock.yml
index 8adc4c89188..67f3653aab4 100644
--- a/.github/workflows/daily-testify-uber-super-expert.lock.yml
+++ b/.github/workflows/daily-testify-uber-super-expert.lock.yml
@@ -159,7 +159,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -474,7 +474,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Testify Uber Super Expert",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1622,7 +1622,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/daily-workflow-updater.lock.yml b/.github/workflows/daily-workflow-updater.lock.yml
index 7fadeb2b1bf..4616154bf48 100644
--- a/.github/workflows/daily-workflow-updater.lock.yml
+++ b/.github/workflows/daily-workflow-updater.lock.yml
@@ -142,7 +142,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -438,7 +438,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Daily Workflow Updater",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1146,7 +1146,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/deep-report.lock.yml b/.github/workflows/deep-report.lock.yml
index 0e7c574ee84..5823551801c 100644
--- a/.github/workflows/deep-report.lock.yml
+++ b/.github/workflows/deep-report.lock.yml
@@ -195,7 +195,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -606,7 +606,7 @@ jobs:
               engine_name: "Codex",
               model: process.env.GH_AW_MODEL_AGENT_CODEX || "",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "DeepReport - Intelligence Gathering Agent",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1724,7 +1724,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Run Codex
         run: |
           set -o pipefail
diff --git a/.github/workflows/delight.lock.yml b/.github/workflows/delight.lock.yml
index 8766905892b..e36f41f099e 100644
--- a/.github/workflows/delight.lock.yml
+++ b/.github/workflows/delight.lock.yml
@@ -160,7 +160,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -519,7 +519,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Delight",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1729,7 +1729,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/dependabot-go-checker.lock.yml b/.github/workflows/dependabot-go-checker.lock.yml
index cbaada555ad..08e89e01dff 100644
--- a/.github/workflows/dependabot-go-checker.lock.yml
+++ b/.github/workflows/dependabot-go-checker.lock.yml
@@ -143,7 +143,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -488,7 +488,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Dependabot Dependency Checker",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1424,7 +1424,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/dev-hawk.lock.yml b/.github/workflows/dev-hawk.lock.yml
index c0d3f27c46c..7b0d6d5ebb7 100644
--- a/.github/workflows/dev-hawk.lock.yml
+++ b/.github/workflows/dev-hawk.lock.yml
@@ -172,7 +172,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -459,7 +459,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Dev Hawk",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1223,7 +1223,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/dev.lock.yml b/.github/workflows/dev.lock.yml
index 286089661d8..44924f7cd60 100644
--- a/.github/workflows/dev.lock.yml
+++ b/.github/workflows/dev.lock.yml
@@ -143,7 +143,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -327,7 +327,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Dev",
               experimental: false,
               supports_tools_allowlist: true,
@@ -831,7 +831,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/developer-docs-consolidator.lock.yml b/.github/workflows/developer-docs-consolidator.lock.yml
index ce52b0d1f0c..215f714a28a 100644
--- a/.github/workflows/developer-docs-consolidator.lock.yml
+++ b/.github/workflows/developer-docs-consolidator.lock.yml
@@ -161,7 +161,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -514,7 +514,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Developer Documentation Consolidator",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1776,7 +1776,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/dictation-prompt.lock.yml b/.github/workflows/dictation-prompt.lock.yml
index 8ab02fe0797..de7855a5889 100644
--- a/.github/workflows/dictation-prompt.lock.yml
+++ b/.github/workflows/dictation-prompt.lock.yml
@@ -145,7 +145,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -441,7 +441,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Dictation Prompt Generator",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1107,7 +1107,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/discussion-task-miner.lock.yml b/.github/workflows/discussion-task-miner.lock.yml
index 3930600da62..80edbcf5311 100644
--- a/.github/workflows/discussion-task-miner.lock.yml
+++ b/.github/workflows/discussion-task-miner.lock.yml
@@ -160,7 +160,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -502,7 +502,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Discussion Task Miner - Code Quality Improvement Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1500,7 +1500,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/docs-noob-tester.lock.yml b/.github/workflows/docs-noob-tester.lock.yml
index d223c82cec9..c7b391979a0 100644
--- a/.github/workflows/docs-noob-tester.lock.yml
+++ b/.github/workflows/docs-noob-tester.lock.yml
@@ -146,7 +146,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -468,7 +468,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Documentation Noob Tester",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1206,7 +1206,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/duplicate-code-detector.lock.yml b/.github/workflows/duplicate-code-detector.lock.yml
index 18a3feef317..d1263e4fd15 100644
--- a/.github/workflows/duplicate-code-detector.lock.yml
+++ b/.github/workflows/duplicate-code-detector.lock.yml
@@ -142,7 +142,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -497,7 +497,7 @@ jobs:
               engine_name: "Codex",
               model: process.env.GH_AW_MODEL_AGENT_CODEX || "",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Duplicate Code Detector",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1222,7 +1222,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Run Codex
         run: |
           set -o pipefail
diff --git a/.github/workflows/example-custom-error-patterns.lock.yml b/.github/workflows/example-custom-error-patterns.lock.yml
index e5d3893707e..ec5e1301460 100644
--- a/.github/workflows/example-custom-error-patterns.lock.yml
+++ b/.github/workflows/example-custom-error-patterns.lock.yml
@@ -128,7 +128,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -204,7 +204,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Example: Custom Error Patterns",
               experimental: false,
               supports_tools_allowlist: true,
diff --git a/.github/workflows/example-permissions-warning.lock.yml b/.github/workflows/example-permissions-warning.lock.yml
index 0866b911da2..ed715d7a07d 100644
--- a/.github/workflows/example-permissions-warning.lock.yml
+++ b/.github/workflows/example-permissions-warning.lock.yml
@@ -127,7 +127,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -202,7 +202,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Example: Properly Provisioned Permissions",
               experimental: false,
               supports_tools_allowlist: true,
diff --git a/.github/workflows/example-workflow-analyzer.lock.yml b/.github/workflows/example-workflow-analyzer.lock.yml
index 9888be4f70d..207ffba4627 100644
--- a/.github/workflows/example-workflow-analyzer.lock.yml
+++ b/.github/workflows/example-workflow-analyzer.lock.yml
@@ -149,7 +149,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -458,7 +458,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Weekly Workflow Analysis",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1118,7 +1118,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/firewall-escape.lock.yml b/.github/workflows/firewall-escape.lock.yml
index 0f8bd05ff2c..6f6219ad518 100644
--- a/.github/workflows/firewall-escape.lock.yml
+++ b/.github/workflows/firewall-escape.lock.yml
@@ -172,7 +172,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -458,7 +458,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "The Great Escapi",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1345,7 +1345,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/firewall.lock.yml b/.github/workflows/firewall.lock.yml
index 2d1a676fe62..89d3f851549 100644
--- a/.github/workflows/firewall.lock.yml
+++ b/.github/workflows/firewall.lock.yml
@@ -127,7 +127,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -203,7 +203,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Firewall Test Agent",
               experimental: false,
               supports_tools_allowlist: true,
diff --git a/.github/workflows/github-mcp-structural-analysis.lock.yml b/.github/workflows/github-mcp-structural-analysis.lock.yml
index 5787a995fa8..6ce0b27af41 100644
--- a/.github/workflows/github-mcp-structural-analysis.lock.yml
+++ b/.github/workflows/github-mcp-structural-analysis.lock.yml
@@ -185,7 +185,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -489,7 +489,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "GitHub MCP Structural Analysis",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1748,7 +1748,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/github-mcp-tools-report.lock.yml b/.github/workflows/github-mcp-tools-report.lock.yml
index acfd9ceef84..313b4c3cfd8 100644
--- a/.github/workflows/github-mcp-tools-report.lock.yml
+++ b/.github/workflows/github-mcp-tools-report.lock.yml
@@ -162,7 +162,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -500,7 +500,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "GitHub MCP Remote Server Tools Report Generator",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1623,7 +1623,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/github-remote-mcp-auth-test.lock.yml b/.github/workflows/github-remote-mcp-auth-test.lock.yml
index 99bf8c8449b..bf01f14ff6f 100644
--- a/.github/workflows/github-remote-mcp-auth-test.lock.yml
+++ b/.github/workflows/github-remote-mcp-auth-test.lock.yml
@@ -142,7 +142,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -432,7 +432,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: "gpt-5-mini",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "GitHub Remote MCP Authentication Test",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1057,7 +1057,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/glossary-maintainer.lock.yml b/.github/workflows/glossary-maintainer.lock.yml
index 1ccadad8215..5fed8e5321b 100644
--- a/.github/workflows/glossary-maintainer.lock.yml
+++ b/.github/workflows/glossary-maintainer.lock.yml
@@ -158,7 +158,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -462,7 +462,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Glossary Maintainer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1776,7 +1776,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/go-fan.lock.yml b/.github/workflows/go-fan.lock.yml
index 3dccab93752..c8760a07966 100644
--- a/.github/workflows/go-fan.lock.yml
+++ b/.github/workflows/go-fan.lock.yml
@@ -159,7 +159,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -450,7 +450,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Go Fan",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1419,7 +1419,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/go-logger.lock.yml b/.github/workflows/go-logger.lock.yml
index ecc675d2aed..f9ec90d773c 100644
--- a/.github/workflows/go-logger.lock.yml
+++ b/.github/workflows/go-logger.lock.yml
@@ -171,7 +171,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -456,7 +456,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Go Logger Enhancement",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1337,7 +1337,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/go-pattern-detector.lock.yml b/.github/workflows/go-pattern-detector.lock.yml
index 796c73b236b..1ff006d59d2 100644
--- a/.github/workflows/go-pattern-detector.lock.yml
+++ b/.github/workflows/go-pattern-detector.lock.yml
@@ -150,7 +150,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -450,7 +450,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Go Pattern Detector",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1191,7 +1191,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/grumpy-reviewer.lock.yml b/.github/workflows/grumpy-reviewer.lock.yml
index 175a39dd532..befe0c14a3d 100644
--- a/.github/workflows/grumpy-reviewer.lock.yml
+++ b/.github/workflows/grumpy-reviewer.lock.yml
@@ -187,7 +187,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -531,7 +531,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Grumpy Code Reviewer 🔥",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1213,7 +1213,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/hourly-ci-cleaner.lock.yml b/.github/workflows/hourly-ci-cleaner.lock.yml
index d3374a5fcae..b0f5aa1c95f 100644
--- a/.github/workflows/hourly-ci-cleaner.lock.yml
+++ b/.github/workflows/hourly-ci-cleaner.lock.yml
@@ -171,7 +171,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -467,7 +467,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "CI Cleaner",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1378,7 +1378,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/instructions-janitor.lock.yml b/.github/workflows/instructions-janitor.lock.yml
index eed12d29703..2a707f95d90 100644
--- a/.github/workflows/instructions-janitor.lock.yml
+++ b/.github/workflows/instructions-janitor.lock.yml
@@ -155,7 +155,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -440,7 +440,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Instructions Janitor",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1217,7 +1217,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/issue-arborist.lock.yml b/.github/workflows/issue-arborist.lock.yml
index 23762566bc4..0fda5947323 100644
--- a/.github/workflows/issue-arborist.lock.yml
+++ b/.github/workflows/issue-arborist.lock.yml
@@ -153,7 +153,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -570,7 +570,7 @@ jobs:
               engine_name: "Codex",
               model: process.env.GH_AW_MODEL_AGENT_CODEX || "",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Issue Arborist",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1291,7 +1291,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Run Codex
         run: |
           set -o pipefail
diff --git a/.github/workflows/issue-monster.lock.yml b/.github/workflows/issue-monster.lock.yml
index 9ad9bfe62e0..a007d09c0b8 100644
--- a/.github/workflows/issue-monster.lock.yml
+++ b/.github/workflows/issue-monster.lock.yml
@@ -152,7 +152,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -466,7 +466,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Issue Monster",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1176,7 +1176,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/issue-triage-agent.lock.yml b/.github/workflows/issue-triage-agent.lock.yml
index 610f64dd7e6..82766412a14 100644
--- a/.github/workflows/issue-triage-agent.lock.yml
+++ b/.github/workflows/issue-triage-agent.lock.yml
@@ -122,7 +122,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -427,7 +427,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Issue Triage Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -954,7 +954,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/jsweep.lock.yml b/.github/workflows/jsweep.lock.yml
index 35704cfafdc..75f19516d93 100644
--- a/.github/workflows/jsweep.lock.yml
+++ b/.github/workflows/jsweep.lock.yml
@@ -163,7 +163,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -467,7 +467,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "jsweep - JavaScript Unbloater",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1262,7 +1262,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/layout-spec-maintainer.lock.yml b/.github/workflows/layout-spec-maintainer.lock.yml
index ab331aa1a83..edecbe37e2b 100644
--- a/.github/workflows/layout-spec-maintainer.lock.yml
+++ b/.github/workflows/layout-spec-maintainer.lock.yml
@@ -150,7 +150,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -446,7 +446,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Layout Specification Maintainer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1267,7 +1267,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/lockfile-stats.lock.yml b/.github/workflows/lockfile-stats.lock.yml
index a8c4f4fce94..9dbf5721d1d 100644
--- a/.github/workflows/lockfile-stats.lock.yml
+++ b/.github/workflows/lockfile-stats.lock.yml
@@ -159,7 +159,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -434,7 +434,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Lockfile Statistics Analysis Agent",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1443,7 +1443,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/mcp-inspector.lock.yml b/.github/workflows/mcp-inspector.lock.yml
index f760b61caf7..c409adfe299 100644
--- a/.github/workflows/mcp-inspector.lock.yml
+++ b/.github/workflows/mcp-inspector.lock.yml
@@ -200,7 +200,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -726,7 +726,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "MCP Inspector Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1621,7 +1621,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/mergefest.lock.yml b/.github/workflows/mergefest.lock.yml
index 335de921c97..e3e67b265e5 100644
--- a/.github/workflows/mergefest.lock.yml
+++ b/.github/workflows/mergefest.lock.yml
@@ -164,7 +164,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -446,7 +446,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Mergefest",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1304,7 +1304,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/metrics-collector.lock.yml b/.github/workflows/metrics-collector.lock.yml
index b575d8cdf22..01adc0637f4 100644
--- a/.github/workflows/metrics-collector.lock.yml
+++ b/.github/workflows/metrics-collector.lock.yml
@@ -143,7 +143,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -254,7 +254,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Metrics Collector - Infrastructure Agent",
               experimental: false,
               supports_tools_allowlist: true,
diff --git a/.github/workflows/notion-issue-summary.lock.yml b/.github/workflows/notion-issue-summary.lock.yml
index 13af0c17071..d0132ad6d3a 100644
--- a/.github/workflows/notion-issue-summary.lock.yml
+++ b/.github/workflows/notion-issue-summary.lock.yml
@@ -148,7 +148,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -386,7 +386,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Issue Summary to Notion",
               experimental: false,
               supports_tools_allowlist: true,
@@ -920,7 +920,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/org-health-report.lock.yml b/.github/workflows/org-health-report.lock.yml
index 8b354ccca84..312d597b6e7 100644
--- a/.github/workflows/org-health-report.lock.yml
+++ b/.github/workflows/org-health-report.lock.yml
@@ -186,7 +186,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -490,7 +490,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Organization Health Report",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1901,7 +1901,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/pdf-summary.lock.yml b/.github/workflows/pdf-summary.lock.yml
index afbea29ef02..3007093e3b4 100644
--- a/.github/workflows/pdf-summary.lock.yml
+++ b/.github/workflows/pdf-summary.lock.yml
@@ -206,7 +206,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -534,7 +534,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Resource Summarizer Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1251,7 +1251,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/plan.lock.yml b/.github/workflows/plan.lock.yml
index e6e90829af5..312dfa3b9c0 100644
--- a/.github/workflows/plan.lock.yml
+++ b/.github/workflows/plan.lock.yml
@@ -176,7 +176,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -540,7 +540,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Plan Command",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1176,7 +1176,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/poem-bot.lock.yml b/.github/workflows/poem-bot.lock.yml
index b9177c59a3b..f41886612f4 100644
--- a/.github/workflows/poem-bot.lock.yml
+++ b/.github/workflows/poem-bot.lock.yml
@@ -195,7 +195,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -1006,7 +1006,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: "gpt-5",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Poem Bot - A Creative Agentic Workflow",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1719,7 +1719,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/portfolio-analyst.lock.yml b/.github/workflows/portfolio-analyst.lock.yml
index a3f6c8ef0b7..645a1fcc0fb 100644
--- a/.github/workflows/portfolio-analyst.lock.yml
+++ b/.github/workflows/portfolio-analyst.lock.yml
@@ -208,7 +208,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -530,7 +530,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Automated Portfolio Analyst",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1831,7 +1831,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/pr-nitpick-reviewer.lock.yml b/.github/workflows/pr-nitpick-reviewer.lock.yml
index 361b3e9432c..2de9f360285 100644
--- a/.github/workflows/pr-nitpick-reviewer.lock.yml
+++ b/.github/workflows/pr-nitpick-reviewer.lock.yml
@@ -205,7 +205,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -601,7 +601,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "PR Nitpick Reviewer 🔍",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1582,7 +1582,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/prompt-clustering-analysis.lock.yml b/.github/workflows/prompt-clustering-analysis.lock.yml
index fb988a0573f..9ab85d7598b 100644
--- a/.github/workflows/prompt-clustering-analysis.lock.yml
+++ b/.github/workflows/prompt-clustering-analysis.lock.yml
@@ -232,7 +232,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -511,7 +511,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Copilot Agent Prompt Clustering Analysis",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1841,7 +1841,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/python-data-charts.lock.yml b/.github/workflows/python-data-charts.lock.yml
index b0575c07512..f00ce3e9f5d 100644
--- a/.github/workflows/python-data-charts.lock.yml
+++ b/.github/workflows/python-data-charts.lock.yml
@@ -180,7 +180,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -530,7 +530,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Python Data Visualization Generator",
               experimental: false,
               supports_tools_allowlist: true,
@@ -2061,7 +2061,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/q.lock.yml b/.github/workflows/q.lock.yml
index ab93b1c2381..1e35ee26fb6 100644
--- a/.github/workflows/q.lock.yml
+++ b/.github/workflows/q.lock.yml
@@ -233,7 +233,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -579,7 +579,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Q",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1513,7 +1513,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/release.lock.yml b/.github/workflows/release.lock.yml
index 547c3bf5f83..1c2665dc11b 100644
--- a/.github/workflows/release.lock.yml
+++ b/.github/workflows/release.lock.yml
@@ -161,7 +161,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -452,7 +452,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Release",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1206,7 +1206,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/repo-audit-analyzer.lock.yml b/.github/workflows/repo-audit-analyzer.lock.yml
index ae8eca44cad..683e70a9eec 100644
--- a/.github/workflows/repo-audit-analyzer.lock.yml
+++ b/.github/workflows/repo-audit-analyzer.lock.yml
@@ -163,7 +163,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -449,7 +449,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Repo Audit Analyzer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1069,7 +1069,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/repo-tree-map.lock.yml b/.github/workflows/repo-tree-map.lock.yml
index 46a5aa59b3d..545d1ecb015 100644
--- a/.github/workflows/repo-tree-map.lock.yml
+++ b/.github/workflows/repo-tree-map.lock.yml
@@ -146,7 +146,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -432,7 +432,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Repository Tree Map Generator",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1133,7 +1133,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/repository-quality-improver.lock.yml b/.github/workflows/repository-quality-improver.lock.yml
index 2757f66478c..cf02b7100bc 100644
--- a/.github/workflows/repository-quality-improver.lock.yml
+++ b/.github/workflows/repository-quality-improver.lock.yml
@@ -159,7 +159,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -453,7 +453,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Repository Quality Improvement Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1596,7 +1596,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/research.lock.yml b/.github/workflows/research.lock.yml
index aac63ded227..9a8ed4158ba 100644
--- a/.github/workflows/research.lock.yml
+++ b/.github/workflows/research.lock.yml
@@ -149,7 +149,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -449,7 +449,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Basic Research Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1072,7 +1072,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/safe-output-health.lock.yml b/.github/workflows/safe-output-health.lock.yml
index 4b47fe7994a..eb17bb56af6 100644
--- a/.github/workflows/safe-output-health.lock.yml
+++ b/.github/workflows/safe-output-health.lock.yml
@@ -184,7 +184,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -463,7 +463,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Safe Output Health Monitor",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1569,7 +1569,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/schema-consistency-checker.lock.yml b/.github/workflows/schema-consistency-checker.lock.yml
index 19d9ed5d325..89234157c96 100644
--- a/.github/workflows/schema-consistency-checker.lock.yml
+++ b/.github/workflows/schema-consistency-checker.lock.yml
@@ -162,7 +162,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -438,7 +438,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Schema Consistency Checker",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1438,7 +1438,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/scout.lock.yml b/.github/workflows/scout.lock.yml
index 8098bf48452..08e5f9298f7 100644
--- a/.github/workflows/scout.lock.yml
+++ b/.github/workflows/scout.lock.yml
@@ -236,7 +236,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -526,7 +526,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Scout",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1481,7 +1481,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/security-compliance.lock.yml b/.github/workflows/security-compliance.lock.yml
index 1b917ec1cfc..24d8bbdcf4f 100644
--- a/.github/workflows/security-compliance.lock.yml
+++ b/.github/workflows/security-compliance.lock.yml
@@ -157,7 +157,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -464,7 +464,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Security Compliance Campaign",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1279,7 +1279,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/security-fix-pr.lock.yml b/.github/workflows/security-fix-pr.lock.yml
index bb78bbc0ba7..7de538aba8e 100644
--- a/.github/workflows/security-fix-pr.lock.yml
+++ b/.github/workflows/security-fix-pr.lock.yml
@@ -161,7 +161,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -425,7 +425,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Security Fix PR",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1116,7 +1116,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/security-review.lock.yml b/.github/workflows/security-review.lock.yml
index 9ad734b74ab..ce2df5dee1c 100644
--- a/.github/workflows/security-review.lock.yml
+++ b/.github/workflows/security-review.lock.yml
@@ -191,7 +191,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -570,7 +570,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Security Review Agent 🔒",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1331,7 +1331,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/semantic-function-refactor.lock.yml b/.github/workflows/semantic-function-refactor.lock.yml
index 1dfa84fb0a8..835ea8bad80 100644
--- a/.github/workflows/semantic-function-refactor.lock.yml
+++ b/.github/workflows/semantic-function-refactor.lock.yml
@@ -148,7 +148,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -482,7 +482,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Semantic Function Refactoring",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1568,7 +1568,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/sergo.lock.yml b/.github/workflows/sergo.lock.yml
index a7407a54f29..73e4e371f97 100644
--- a/.github/workflows/sergo.lock.yml
+++ b/.github/workflows/sergo.lock.yml
@@ -160,7 +160,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -451,7 +451,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Sergo - Serena Go Expert",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1681,7 +1681,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/slide-deck-maintainer.lock.yml b/.github/workflows/slide-deck-maintainer.lock.yml
index c201390f60a..0161ac686db 100644
--- a/.github/workflows/slide-deck-maintainer.lock.yml
+++ b/.github/workflows/slide-deck-maintainer.lock.yml
@@ -171,7 +171,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -474,7 +474,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Slide Deck Maintainer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1277,7 +1277,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/smoke-claude.lock.yml b/.github/workflows/smoke-claude.lock.yml
index a6ce82bf577..84488a8fe6f 100644
--- a/.github/workflows/smoke-claude.lock.yml
+++ b/.github/workflows/smoke-claude.lock.yml
@@ -190,7 +190,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -709,7 +709,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Smoke Claude",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1575,7 +1575,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/smoke-codex.lock.yml b/.github/workflows/smoke-codex.lock.yml
index b138e3fadeb..5c2339d41c1 100644
--- a/.github/workflows/smoke-codex.lock.yml
+++ b/.github/workflows/smoke-codex.lock.yml
@@ -187,7 +187,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Determine automatic lockdown mode for GitHub MCP server
@@ -803,7 +803,7 @@ jobs:
               engine_name: "Codex",
               model: process.env.GH_AW_MODEL_AGENT_CODEX || "",
               version: "",
-              agent_version: "0.87.0",
+              agent_version: "0.88.0",
               workflow_name: "Smoke Codex",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1454,7 +1454,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Codex
-        run: npm install -g --silent @openai/codex@0.87.0
+        run: npm install -g --silent @openai/codex@0.88.0
       - name: Run Codex
         run: |
           set -o pipefail
diff --git a/.github/workflows/smoke-copilot.lock.yml b/.github/workflows/smoke-copilot.lock.yml
index 80d41eafc4f..bb847bd538d 100644
--- a/.github/workflows/smoke-copilot.lock.yml
+++ b/.github/workflows/smoke-copilot.lock.yml
@@ -186,7 +186,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -614,7 +614,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Smoke Copilot",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1268,7 +1268,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/stale-repo-identifier.lock.yml b/.github/workflows/stale-repo-identifier.lock.yml
index 61bbd047639..d30d56d10a3 100644
--- a/.github/workflows/stale-repo-identifier.lock.yml
+++ b/.github/workflows/stale-repo-identifier.lock.yml
@@ -228,7 +228,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -553,7 +553,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Stale Repository Identifier",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1767,7 +1767,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/static-analysis-report.lock.yml b/.github/workflows/static-analysis-report.lock.yml
index 65b32af1b70..9b039763c1f 100644
--- a/.github/workflows/static-analysis-report.lock.yml
+++ b/.github/workflows/static-analysis-report.lock.yml
@@ -183,7 +183,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -462,7 +462,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Static Analysis Report",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1479,7 +1479,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/step-name-alignment.lock.yml b/.github/workflows/step-name-alignment.lock.yml
index 0ee2913d079..fed1a413526 100644
--- a/.github/workflows/step-name-alignment.lock.yml
+++ b/.github/workflows/step-name-alignment.lock.yml
@@ -155,7 +155,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -451,7 +451,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Step Name Alignment",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1465,7 +1465,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/sub-issue-closer.lock.yml b/.github/workflows/sub-issue-closer.lock.yml
index 9146aa528c5..cdc91531ecb 100644
--- a/.github/workflows/sub-issue-closer.lock.yml
+++ b/.github/workflows/sub-issue-closer.lock.yml
@@ -141,7 +141,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -500,7 +500,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Sub-Issue Closer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1133,7 +1133,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/super-linter.lock.yml b/.github/workflows/super-linter.lock.yml
index 6867da0ac80..40b25c9d465 100644
--- a/.github/workflows/super-linter.lock.yml
+++ b/.github/workflows/super-linter.lock.yml
@@ -165,7 +165,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -472,7 +472,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Super Linter Report",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1208,7 +1208,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/technical-doc-writer.lock.yml b/.github/workflows/technical-doc-writer.lock.yml
index 06f47a155a4..74632c11ab9 100644
--- a/.github/workflows/technical-doc-writer.lock.yml
+++ b/.github/workflows/technical-doc-writer.lock.yml
@@ -177,7 +177,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -537,7 +537,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Rebuild the documentation after making changes",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1679,7 +1679,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/terminal-stylist.lock.yml b/.github/workflows/terminal-stylist.lock.yml
index 5ef67837eed..752f744fc5e 100644
--- a/.github/workflows/terminal-stylist.lock.yml
+++ b/.github/workflows/terminal-stylist.lock.yml
@@ -140,7 +140,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -434,7 +434,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Terminal Stylist",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1070,7 +1070,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/test-create-pr-error-handling.lock.yml b/.github/workflows/test-create-pr-error-handling.lock.yml
index ac64475f0e5..8c5c386b9ae 100644
--- a/.github/workflows/test-create-pr-error-handling.lock.yml
+++ b/.github/workflows/test-create-pr-error-handling.lock.yml
@@ -150,7 +150,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -435,7 +435,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Test Create PR Error Handling",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1054,7 +1054,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/tidy.lock.yml b/.github/workflows/tidy.lock.yml
index c6aa4a5a976..d01adbb5ea2 100644
--- a/.github/workflows/tidy.lock.yml
+++ b/.github/workflows/tidy.lock.yml
@@ -187,7 +187,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -531,7 +531,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Tidy",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1157,7 +1157,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/typist.lock.yml b/.github/workflows/typist.lock.yml
index 95584322527..2d8030eceaf 100644
--- a/.github/workflows/typist.lock.yml
+++ b/.github/workflows/typist.lock.yml
@@ -147,7 +147,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -438,7 +438,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Typist - Go Type Analysis",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1555,7 +1555,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/ubuntu-image-analyzer.lock.yml b/.github/workflows/ubuntu-image-analyzer.lock.yml
index 18fd3df2f6b..e7d3a482ba7 100644
--- a/.github/workflows/ubuntu-image-analyzer.lock.yml
+++ b/.github/workflows/ubuntu-image-analyzer.lock.yml
@@ -146,7 +146,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -442,7 +442,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Ubuntu Actions Image Analyzer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1435,7 +1435,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/unbloat-docs.lock.yml b/.github/workflows/unbloat-docs.lock.yml
index a03d7a1ed3b..7ee41a12354 100644
--- a/.github/workflows/unbloat-docs.lock.yml
+++ b/.github/workflows/unbloat-docs.lock.yml
@@ -200,7 +200,7 @@ jobs:
       - name: Install awf binary
         run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.10.0
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Determine automatic lockdown mode for GitHub MCP server
         id: determine-automatic-lockdown
         env:
@@ -568,7 +568,7 @@ jobs:
               engine_name: "Claude Code",
               model: process.env.GH_AW_MODEL_AGENT_CLAUDE || "",
               version: "",
-              agent_version: "2.1.14",
+              agent_version: "2.1.15",
               workflow_name: "Documentation Unbloat",
               experimental: true,
               supports_tools_allowlist: true,
@@ -1624,7 +1624,7 @@ jobs:
           node-version: '24'
           package-manager-cache: false
       - name: Install Claude Code CLI
-        run: npm install -g --silent @anthropic-ai/claude-code@2.1.14
+        run: npm install -g --silent @anthropic-ai/claude-code@2.1.15
       - name: Execute Claude Code CLI
         id: agentic_execution
         # Allowed tools (sorted):
diff --git a/.github/workflows/video-analyzer.lock.yml b/.github/workflows/video-analyzer.lock.yml
index c24578a9c87..8355a066cad 100644
--- a/.github/workflows/video-analyzer.lock.yml
+++ b/.github/workflows/video-analyzer.lock.yml
@@ -156,7 +156,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -463,7 +463,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Video Analysis Agent",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1267,7 +1267,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/weekly-issue-summary.lock.yml b/.github/workflows/weekly-issue-summary.lock.yml
index e24f22dcf8b..dc8601c5bad 100644
--- a/.github/workflows/weekly-issue-summary.lock.yml
+++ b/.github/workflows/weekly-issue-summary.lock.yml
@@ -163,7 +163,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -478,7 +478,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Weekly Issue Summary",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1645,7 +1645,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/workflow-generator.lock.yml b/.github/workflows/workflow-generator.lock.yml
index 1b84af8606b..79f2168c1b3 100644
--- a/.github/workflows/workflow-generator.lock.yml
+++ b/.github/workflows/workflow-generator.lock.yml
@@ -170,7 +170,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -539,7 +539,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Workflow Generator",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1141,7 +1141,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/workflow-health-manager.lock.yml b/.github/workflows/workflow-health-manager.lock.yml
index 7a352343499..25963b2b967 100644
--- a/.github/workflows/workflow-health-manager.lock.yml
+++ b/.github/workflows/workflow-health-manager.lock.yml
@@ -158,7 +158,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -590,7 +590,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Workflow Health Manager - Meta-Orchestrator",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1636,7 +1636,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/workflow-normalizer.lock.yml b/.github/workflows/workflow-normalizer.lock.yml
index 540df8af0f3..444074fd829 100644
--- a/.github/workflows/workflow-normalizer.lock.yml
+++ b/.github/workflows/workflow-normalizer.lock.yml
@@ -164,7 +164,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -478,7 +478,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Workflow Normalizer",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1273,7 +1273,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
diff --git a/.github/workflows/workflow-skill-extractor.lock.yml b/.github/workflows/workflow-skill-extractor.lock.yml
index b4ab4fa0e09..0627ce8f9bf 100644
--- a/.github/workflows/workflow-skill-extractor.lock.yml
+++ b/.github/workflows/workflow-skill-extractor.lock.yml
@@ -147,7 +147,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh
@@ -506,7 +506,7 @@ jobs:
               engine_name: "GitHub Copilot CLI",
               model: process.env.GH_AW_MODEL_AGENT_COPILOT || "",
               version: "",
-              agent_version: "0.0.388",
+              agent_version: "0.0.389",
               workflow_name: "Workflow Skill Extractor",
               experimental: false,
               supports_tools_allowlist: true,
@@ -1510,7 +1510,7 @@ jobs:
           
           # Execute the installer with the specified version
           # Pass VERSION directly to sudo to ensure it's available to the installer script
-          sudo VERSION=0.0.388 bash /tmp/copilot-install.sh
+          sudo VERSION=0.0.389 bash /tmp/copilot-install.sh
           
           # Cleanup
           rm -f /tmp/copilot-install.sh