chore: upgrade microsoft/apm v0.8.1, apm-action v1.3.2, gh-aw-firewall v0.24.3

[Copilot]

Bumps three dependencies to their latest releases and recompiles all workflows + wasm.

Version changes

Dependency	From	To
microsoft/apm CLI (DefaultAPMVersion)	v0.8.0	v0.8.1
microsoft/apm-action	v1.3.1	v1.3.2
github/gh-aw-firewall (DefaultFirewallVersion)	v0.24.2	v0.24.3

Artifacts updated

• .github/aw/actions-lock.json — new apm-action SHA pinned (24f26ec)
• pkg/workflow/data/action_pins.json — synced via make build
• pkg/constants/constants.go — DefaultAPMVersion and DefaultFirewallVersion bumped
• 175 .lock.yml workflow files recompiled
• gh-aw.wasm rebuilt
• Wasm golden test files updated to reflect new firewall version

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

[github-actions]

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

[github-actions]

💥 WHOOSH! Smoke Claude springs into action on this pull request! [Panel 1 begins...]

[github-actions]

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	4.52.4
curl	✅	8.5.0
gh	✅	2.87.3
node	✅	20.20.1
python3	✅	3.12.3
go	✅	1.24.13
java	✅	21.0.10 (Temurin)
dotnet	✅	10.0.102

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · ◷

[github-actions]

Smoke Test: Codex

PR titles:

• Fix build-wasm: update golden test files for gh-aw-mcpg v0.1.18
• chore: bump MCP gateway version to v0.1.18
• GitHub MCP (2 merged PRs): ✅
• Serena MCP (activate + 3+ symbols): ✅
• Playwright (title contains GitHub): ✅
• Web-fetch (contains GitHub): ✅
• File write + bash cat + make build: ✅
  Overall status: PASS

🔮 The oracle has spoken through Smoke Codex · ◷

Warning

⚠️ Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• ab.chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"

See Network Configuration for more information.

[github-actions]

Commit pushed: e260993

Generated by Changeset Generator

[github-actions]

🤖 Smoke Test Results — Run §23271309848

Test	Status
GitHub MCP	✅
MCP Scripts GH CLI	✅
Serena MCP	❌
Playwright	✅
Web Fetch	✅
File Writing	✅
Bash Tool	✅
Discussion Interaction	✅
Build gh-aw	✅
Discussion Creation	✅
Workflow Dispatch	✅
PR Review	✅

Overall: ⚠️ PARTIAL PASS (11/12) — Serena MCP tools not available
PR by @copilot-swe-agent · Assignees: @pelikhan, @Copilot

📰 BREAKING: Report filed by Smoke Copilot · ◷

[github-actions]

Smoke test review 🤖: This PR upgrades microsoft/apm v0.8.1, apm-action v1.3.2, and gh-aw-firewall v0.24.3 across all lock files. Changes look mechanical and consistent — all SHA pins are updated, version strings are aligned. LGTM.

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

✅ Good: SHA pin updated correctly for microsoft/apm-action v1.3.1 → v1.3.2. The new SHA 24f26ec1cffbaa1aafb770517decbd551d497987 should be verified against the upstream release tag for supply chain security.

[github-actions]

Version bump from v0.24.2 → v0.24.3 for the AWF binary looks consistent with the rest of the PR's firewall upgrade pattern. 🚀

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤