bump gh-aw-firewall to v0.25.0 by Copilot · Pull Request #22508 · github/gh-aw

Copilot · 2026-03-23T20:21:03Z

Bumps DefaultFirewallVersion from v0.24.5 to v0.25.0 in pkg/constants/constants.go and recompiles all workflow lock files.

Changes

Updated DefaultFirewallVersion constant: v0.24.5 → v0.25.0
Recompiled all .lock.yml workflow files to pick up the new version

✨ PR Review Safe Output Test - Run 23458288477

💥 [THE END] — Illustrated by Smoke Claude · ◷

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com> Agent-Logs-Url: https://github.com/github/gh-aw/sessions/067566d0-9ac7-4d1e-a52e-8e06062ad34d

github-actions · 2026-03-23T20:22:54Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-03-23T20:22:58Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-03-23T20:23:00Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-03-23T20:23:01Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

Copilot

Pull request overview

Updates the default gh-aw-firewall (AWF) version used by the codebase and regenerated workflow lock files so workflows run against AWF v0.25.0.

Changes:

Bumped DefaultFirewallVersion from v0.24.5 to v0.25.0.
Updated pinned AWF version references across workflow .lock.yml files (env vars, install script args, image tags, and container image refs).

Reviewed changes

Copilot reviewed 130 out of 178 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
pkg/constants/constants.go	Bumps the default AWF version constant to `v0.25.0`.
.github/workflows/workflow-health-manager.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/workflow-generator.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/weekly-blog-post-writer.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/test-workflow.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/test-project-url-default.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/test-dispatcher.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/super-linter.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/sub-issue-closer.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/smoke-gemini.lock.yml	Updates AWF version pins (install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/smoke-call-workflow.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/security-compliance.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/schema-feature-coverage.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/repo-tree-map.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/refiner.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/q.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/pr-triage-agent.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/poem-bot.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/plan.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/pdf-summary.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/notion-issue-summary.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/metrics-collector.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/issue-triage-agent.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/issue-monster.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/grumpy-reviewer.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/gpclean.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/firewall.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/example-permissions-warning.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/duplicate-code-detector.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/dictation-prompt.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/dev.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/dependabot-go-checker.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/dependabot-burner.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/daily-team-status.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/daily-secrets-analysis.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/daily-observability-report.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/daily-malicious-code-scan.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/daily-fact.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/craft.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/contribution-check.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/code-simplifier.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/ci-coach.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/changeset.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/brave.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/bot-detection.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/archie.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/ai-moderator.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.
.github/workflows/ace-editor.lock.yml	Updates AWF version pins (env/install/images/image-tag) to `0.25.0`/`v0.25.0`.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-23T20:24:46Z

pkg/constants/constants.go

@@ -361,7 +361,7 @@ const DefaultGitHubMCPServerVersion Version = "v0.32.0"
 const DefaultGitHubLockdown = false

 // DefaultFirewallVersion is the default version of the gh-aw-firewall (AWF) binary
-const DefaultFirewallVersion Version = "v0.24.5"
+const DefaultFirewallVersion Version = "v0.25.0"


PR description says all workflow lock files were recompiled, but the repo still contains a lock file pinned to the old AWF version (pkg/cli/workflows/example-blocked-domains.lock.yml still references v0.24.5). Please re-run the workflow lock compilation (or update that file) so all lock files consistently reference v0.25.0.

Good catch! The lock file compilation step should ensure all files are updated consistently when bumping firewall versions.

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-03-23T20:25:46Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	v4.52.4
curl	✅	8.5.0
gh	✅	2.87.3
node	✅	v20.20.1
python3	✅	3.12.3
go	✅	1.24.13
java	✅	21.0.10 (Temurin LTS)
dotnet	✅	10.0.102

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · ◷

github-actions · 2026-03-23T20:29:01Z

Smoke Test: Copilot - 23458288522 | @Mossaka

Test	Result
GitHub MCP	✅
MCP Scripts GH CLI	✅
Serena MCP	❌
Playwright	✅
Web Fetch	✅
File Writing	✅
Bash Tool	✅
Discussion Interaction	✅
Build gh-aw	✅
Discussion Creation	✅
Workflow Dispatch	✅
PR Review	✅

Overall: ❌ FAIL — Serena MCP tools not available

📰 BREAKING: Report filed by Smoke Copilot · ◷

github-actions

Smoke test review: Version bumps from v0.24.5 → v0.25.0 look consistent across env vars and install scripts. LGTM! 🚀

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-03-23T20:29:03Z

.github/workflows/ace-editor.lock.yml

          GH_AW_INFO_ALLOWED_DOMAINS: '["defaults"]'
          GH_AW_INFO_FIREWALL_ENABLED: "true"
-          GH_AW_INFO_AWF_VERSION: "v0.24.5"
+          GH_AW_INFO_AWF_VERSION: "v0.25.0"


Version bump from v0.24.5 to v0.25.0 looks correct. Consider adding a comment here documenting what changed in this firewall version for future reviewers.

github-actions · 2026-03-23T20:29:03Z

.github/workflows/ace-editor.lock.yml

          GH_HOST: github.com
      - name: Install AWF binary
-        run: bash ${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh v0.24.5
+        run: bash ${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh v0.25.0


The install script version is updated to v0.25.0 — consistent with the env var above. 👍

github-actions · 2026-03-23T20:29:17Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-03-23T20:31:02Z

Smoke test (Codex) for run 23458288465

PRs (merged): [docs] docs: condense LabelOps patterns sections #22496 [docs] docs: condense LabelOps patterns sections, Add changeset for awf v0.24.0 bump #22495 Add changeset for awf v0.24.0 bump
GitHub MCP: ✅
Serena activate_project + find_symbol(>=3): ✅
Playwright title contains "GitHub": ✅
web-fetch contains "GitHub": ✅
Temp file write/read: ✅
Build (GOCACHE=/tmp/go-cache GOMODCACHE=/tmp/go-mod make build): ✅
Overall status: PASS

Warning

⚠️ Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

ab.chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · ◷

github-actions · 2026-03-23T20:31:25Z

Commit pushed: 54fbd9f

Generated by Changeset Generator

github-actions · 2026-03-23T20:32:52Z

💥 Smoke Test Run §23458288477 — PARTIAL PASS

Core tests #1–11: ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅ ✅
PR review tests #12–18: ✅ ✅ ✅ ⚠️ ✅ ✅ ⚠️

Skipped: #15 (thread node IDs unavailable), #18 (no safe PR to close)

💥 [THE END] — Illustrated by Smoke Claude · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

💥 [THE END] — Illustrated by Smoke Claude

github-actions · 2026-03-23T20:32:53Z

.github/workflows/ace-editor.lock.yml

          GH_AW_INFO_ALLOWED_DOMAINS: '["defaults"]'
          GH_AW_INFO_FIREWALL_ENABLED: "true"
-          GH_AW_INFO_AWF_VERSION: "v0.24.5"
+          GH_AW_INFO_AWF_VERSION: "v0.25.0"


Version bump looks correct — v0.24.5 → v0.25.0 for GH_AW_INFO_AWF_VERSION. Consistent with the firewall version update across all lock files.

github-actions · 2026-03-23T20:32:53Z

.github/workflows/agent-performance-analyzer.lock.yml

          GH_AW_INFO_ALLOWED_DOMAINS: '["defaults"]'
          GH_AW_INFO_FIREWALL_ENABLED: "true"
-          GH_AW_INFO_AWF_VERSION: "v0.24.5"
+          GH_AW_INFO_AWF_VERSION: "v0.25.0"


AWF version updated correctly in agent-performance-analyzer.lock.yml. The GH_AW_INFO_AWF_VERSION change to v0.25.0 matches the DefaultFirewallVersion constant bump.

bump gh-aw-firewall to v0.25.0

82c73ec

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com> Agent-Logs-Url: https://github.com/github/gh-aw/sessions/067566d0-9ac7-4d1e-a52e-8e06062ad34d

Copilot AI assigned Copilot and Mossaka Mar 23, 2026

Copilot AI requested a review from Mossaka March 23, 2026 20:21

Mossaka marked this pull request as ready for review March 23, 2026 20:22

Copilot AI review requested due to automatic review settings March 23, 2026 20:22

Mossaka added the smoke label Mar 23, 2026

Copilot created this pull request from a session on behalf of Mossaka March 23, 2026 20:22 View session

Copilot finished work on behalf of Mossaka March 23, 2026 20:22

github-actions bot removed the smoke label Mar 23, 2026

Copilot started reviewing on behalf of Mossaka March 23, 2026 20:23 View session

Copilot AI reviewed Mar 23, 2026

View reviewed changes

github-actions bot mentioned this pull request Mar 23, 2026

Smoke Test: Copilot - 23458288522 #22511

Closed

github-actions bot added the smoke-copilot label Mar 23, 2026

github-actions bot reviewed Mar 23, 2026

View reviewed changes

Add changeset [skip-ci]

d0827a1

github-actions bot mentioned this pull request Mar 23, 2026

Smoke Test: Claude - 23458288477 #22513

Closed

github-actions bot added the smoke-claude label Mar 23, 2026

github-actions bot reviewed Mar 23, 2026

View reviewed changes

github-actions bot added the ai-inspected label Mar 23, 2026

pelikhan merged commit 51e6f1e into main Mar 23, 2026

pelikhan deleted the copilot/bump-gh-aw-firewall-v0-25-0 branch March 23, 2026 20:38

This was referenced Mar 23, 2026

[blog] Weekly blog post – 2026-03-23 #22515

Closed

Add aw_context caller metadata to workflow dispatches #22479

Merged

Conversation

Copilot AI commented Mar 23, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Uh oh!

github-actions bot commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

github-actions bot commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Mar 23, 2026

Agent Container Tool Check

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

github-actions bot commented Mar 23, 2026

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 23, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Mar 23, 2026 •

edited by github-actions bot

Loading

github-actions bot commented Mar 23, 2026 •

edited

Loading

github-actions bot commented Mar 23, 2026 •

edited

Loading

github-actions bot commented Mar 23, 2026 •

edited

Loading