chore: bump Copilot CLI → 1.0.36, Codex CLI → 0.125.0, GitHub MCP Server → v1.0.3 by Copilot · Pull Request #28401 · github/gh-aw

Copilot · 2026-04-25T05:21:50Z

Routine version bumps for three tools released 2026-04-24.

Version changes

Tool	Old	New
GitHub Copilot CLI	1.0.35	1.0.36
OpenAI Codex CLI	0.124.0	0.125.0
GitHub MCP Server	v1.0.2	v1.0.3

Changes

pkg/constants/version_constants.go — updated DefaultCopilotVersion, DefaultCodexVersion, DefaultGitHubMCPServerVersion
.github/workflows/*.lock.yml — all 201 workflows recompiled
WASM golden fixtures — updated to reflect new versions

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh gh repo view --json owner,name --jq .owner.login + "/" + .name cfg GOINSECURE hpke GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-extld=gcc (http block)
- Triggering command: /usr/bin/gh gh repo view owner/repo env fq9m/dOvw0liy9-ZbDdQ2fq9m cfg 64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh repo view owner/repo env Ahfx/EOBK6ELuzyeu-LDGAhfx GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuorigin (http block)
https://api.github.com/orgs/test-owner/actions/secrets
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json exer.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE de GOINSECURE GOMOD GOMODCACHE go /pre�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name ays.md GO111MODULE (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linuupstream /usr/bin/git y_with_repos_arrgit eFae/0ahu769BnKYrev-parse 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/git 3991291916/custonode SgUm/-evxfJf9jMJ/opt/hostedtoolcache/node/24.14.1/x64/bin/npm cfg git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git 784/001/stabilitgit GO111MODULE ache/go/1.25.8/x--show-toplevel git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 1/x64/bin/node git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git 449/001/stabilitgit GO111MODULE 8d519d9/node_mod--show-toplevel git rev-�� --show-toplevel go /usr/bin/git rity4201485236/0node GO111MODULE ache/go/1.25.8/xinstall git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv xterm-color x_amd64/vet /usr/bin/git -json GO111MODULE x_amd64/vet git remo�� add origin /usr/bin/git .a @v1.19.2/printerrev-parse x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /tmp/TestGuardPolicyBlockedUsersApprovalLabelsCompiledOutput3278879955/001 config ache/node/24.14.1/x64/bin/node remote.origin.urgit GO111MODULE 64/bin/go ache/node/24.14.1/x64/bin/node 0164�� --show-toplevel go /usr/bin/infocmp -json GO111MODULE 64/bin/go infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/gh h ../../../.pretgit GO111MODULE 64/bin/go gh api /repos/github/ghremote.origin.url --jq /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv 7/001/noflag-a.md 343119/b250/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p github.com/segme-1 -lang=go1.17 ache/go/1.25.8/x64/pkg/tool/linu-buildtags -o /tmp/go-build21645352/b002/_pkg_-errorsas -trimpath 64/pkg/tool/linux_amd64/compile -p github.com/githurev-parse -lang=go1.25 64/pkg/tool/linux_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git 1SUlY0Hxg -trimpath ache/go/1.25.8/x: git rev-�� --show-toplevel rtcfg /usr/bin/git Onlymin-integritgit g/gitutil/gitutirev-parse 1/x64/bin/node git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel /usr/lib/git-core/git /usr/bin/infocmp run --auto 1/x64/bin/node infocmp -1 xterm-color 1/x64/bin/node /usr/bin/git /tmp/TestGuardPogit l /usr/bin/git git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_with_repos=public_2881967043/001 rev-parse /usr/bin/git -json GO111MODULE x_amd64/compile git init�� GOMODCACHE x_amd64/compile /usr/bin/git bytealg/indexbytgit GO111MODULE x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv /repos/actions/github-script/git/ref/tags/v9 --jq /usr/bin/git .github/workflowgit GO111MODULE 64/bin/go git -C /tmp/gh-aw-test-runs/20260425-052956-50440/test-742398334/.github/workflows config /usr/bin/git remote.origin.urgit GO111MODULE 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv git-upload-pack '/tmp/TestParseDefaultBranchFromLsRemoteWithRealGitmaster_branchremote.origin.urgit git-upload-pack '/tmp/TestParseDefaultBranchFromLsRemoteWithRealGitmaster_branch1799700729/001' /usr/bin/git github/workflowsgit GO111MODULE 64/bin/go git -C /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_only_defaults_repo167379327/001 config /usr/bin/git remote.origin.urgit GO111MODULE er git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git /tmp/go-build216bash -trimpath 64/pkg/tool/linux_amd64/link git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/link /usr/bin/git ngutil.test (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git 2956-50440/test-bash GO111MODULE kflow.test git rev-�� --show-toplevel kflow.test /usr/bin/infocmp -json GO111MODULE /opt/hostedtoolc--show-toplevel infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git 3349-77422/test-bash GO111MODULE ache/go/1.25.8/x64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linu.github/workflows/test.md /usr/bin/git 3349-77422/test-git GO111MODULE e/git git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json o x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linuorigin /usr/bin/infocmp add-source-path-git cfg 64/pkg/tool/linu--show-toplevel infocmp -1 xterm-color 64/pkg/tool/linuTest commit /usr/bin/git 4228586957/.githgit cfg 64/pkg/tool/linu--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/lib/git-core/git -json GO111MODULE ache/go/1.25.8/x--show-toplevel /usr/lib/git-core/git main�� run --auto /usr/bin/git --detach GO111MODULE ache/go/1.25.8/x--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv add s/4/artifacts /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel gK/24c6N3nCfPzRvt533isM/tbRs5qT39-u5M-v5W8kx /usr/bin/git -json GO111MODULE c7eb8cdc0b9f9d07--show-toplevel git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/pkg/cli x_amd64/compile /usr/bin/git l age/compact/comprev-parse x_amd64/compile git remo�� thImports1584253412/001 l /usr/bin/git -json GO111MODULE x_amd64/vet git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --get remote.origin.url /usr/bin/gh add-source-path-git g/timeutil/formarev-parse 64/pkg/tool/linu--show-toplevel gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts /usr/bin/infocmp .artifacts[].namgit cfg 64/pkg/tool/linu--show-toplevel infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv 72 -tests /usr/bin/git -json GO111MODULE 64/bin/go git -C /tmp/gh-aw-test-test-logs/run-4 config /usr/bin/git remote.origin.urgit GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/compile /usr/bin/git -json GO111MODULE x_amd64/compile git -C /tmp/gh-aw-test-runs/20260425-052801-34085/test-1156760631 rev-parse 64/pkg/tool/linux_amd64/vet -json GO111MODULE x_amd64/vet 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv -aw/git/ref/tags/v1.0.0 rev-parse bject.type] | @tsv -json GO111MODULE 64/bin/go git-upload-pack /tmp�� GOMODCACHE go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/TestHashConsistency_GoAndJavaScript2923964471/001/test-frontmatter-with-env--thin go (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv user.email ings.cjs odules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/git cjs st/suppress-warn-o 64/bin/node forks.js rev-�� HEAD st/suppress-warnmain _modules/.bin/gi-lang=go1.25 --bare full mode test k/gh-aw/gh-aw/ac--require st/dist/workers//home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs (http block)
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv . tions/setup/js/node_modules/vite--stdout $name) { hasDiscussionsEnabled } } /tmp/bare-incremgit gin/full-mode-brcommit tions/setup/node-m git init�� -q (http block)
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv . tions/setup/js/node_modules/vite--stdout bin/git /tmp/bare-increm/opt/hostedtoolcache/node/24.14.1/x64/bin/node . ode-gyp-bin/git SVZrikQ/74wPqgnN/home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs init�� -q st/suppress-warn--conditions k/node_modules/.development -m ode_modules/viteapi n-dir/git st/dist/workers/-f (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch user.email tions/setup/js/node_modules/viteowner=github 64/pkg/tool/linux_amd64/link e_modules/.bin/ggit git bin/git 64/pkg/tool/linuconfig bran�� -M t-patch-utils-t2Kk8r/.diffsize.tmp repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } --is-ancestor k/gh-aw/gh-aw/ac-C es/.bin/git git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch . /opt/hostedtoolc--output=/tmp/git-patch-utils-l9zjXd/.diffsize.tmp /opt/hostedtoolcache/node/24.14.1/x64/bin/node r/work/gh-aw/gh-git /home/REDACTED/wor-C ache/node/24.14./home/REDACTED/work/gh-aw/gh-aw /opt/hostedtoolcshow /tmp�� k/gh-aw/gh-aw git cleanup.lock.yml feature | cat /egit git 6188bdfa0320db35/home/REDACTED/work/gh-aw/gh-aw/.github/workflows go (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch '**/*.ts' '**/*.json' --ignore-p-f config n-dir/node remote.origin.urgit FFiles,SFiles,Sw-C down-spellcheck./home/REDACTED/work/gh-aw/gh-aw/.github/workflows git 8d51�� figured in .golaremote.origin.url rev-parse repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } --binary --output=/tmp/gi-C er.lock.yml ache/go/1.25.8/xconfig (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv GOMODCACHE 64/pkg/tool/linuremote.origin.url /usr/bin/git Z_8Baherd cfg 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linuTest User /usr/bin/git 45352/b150/_pkg_git cfg 64/pkg/tool/linu--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv /tmp/shared-actions-test3268858872 remote /usr/lib/git-core/git ub/workflows GO111MODULE 64/bin/go /usr/lib/git-core/git main�� run --auto /usr/bin/git --detach GO111MODULE b10d5c90a57d4d4d--show-toplevel git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 x_amd64/vet bject.type] | @tsv -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 1/x64/bin/sh git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv ons-test962262799 config /usr/bin/git remote.origin.urgit GO111MODULE x_amd64/compile git rev-�� 2" 1>&2 x_amd64/compile rue,"errors":[],"warnings":[]}] eturned GO111MODULE x_amd64/vet infocmp (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.github/workflows/agentic-optimization-kit.md go /usr/bin/git -json GO111MODULE 64/bin/go git ls-r�� --symref origin /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv /tmp/TestHashConsistency_GoAndJavaScript2923964471/001/test-frontmatter-with-arrays.md go t -json GO111MODULE 64/bin/go git -C ons-test3932825219 rev-parse ow-with-reaction.lock.yml -json GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ons-test962262799 x_amd64/compile 343119/b454/vet.cfg -json GO111MODULE x_amd64/compile git conf�� --get remote.origin.url ache/node/24.14.1/x64/bin/node 01 GO111MODULE x_amd64/link /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv user.name Test User /usr/lib/git-core/git -json GO111MODULE 64/bin/go /usr/lib/git-core/git --gi�� for-each-ref --format=%(objectname) /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv /tmp/gh-aw-add-gdiagnostic noise should not be returned show /usr/bin/git -json GO111MODULE 64/bin/go git -C /tmp/gh-aw-test-runs/20260425-053349-77422/test-2051664937/.github/workflows config /usr/bin/git remote.origin.urgit GO111MODULE /node git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet GOINSECURE b/gh-aw/pkg/consrev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 TJ4J/EoB_P8I8HxwDW6KATJ4J test GOINSECURE GOMOD GOMODCACHE ylQP4Z8/vCNYLdc7test@example.com 8634�� 1158030920/.github/workflows 343119/b067/vet.cfg cfg GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu/tmp/file-tracker-test2223919331/test2.lock.yml (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name GOPROXY (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 1156760631 HCmd/oMQac4bC0uy1Yg0zHCmd ache/go/1.25.8/x64/pkg/tool/linu-lang=go1.25 GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linutest@example.com (http block)
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 cfg x_amd64/vet GOINSECURE /go-yaml/printerrev-parse GOMODCACHE x_amd64/vet env Ahfx/EOBK6ELuzyeu-LDGAhfx GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuorigin (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name =develop 1/x64/bin/node s GOWORK 64/bin/go 1/x64/bin/node -c "prettier" --check 'scripts/**/*.js' --ignore-path .prettierignore sh /usr/bin/infocmp tierignore git 64/bin/go infocmp (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet GOINSECURE b/gh-aw/pkg/timerev-parse ache/go/1.25.8/x--show-toplevel gK/24c6N3nCfPzRvt533isM/tbRs5qT39-u5M-v5W8kx env A2hZ/xH2WxlwhQRDq8IEgA2hZ GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xremote.origin.url (http block)
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 cfg 64/pkg/tool/linux_amd64/vet GOINSECURE /go-yaml/internarev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet env 906973377 cfg x_amd64/vet GOINSECURE b/gh-aw/actions/rev-parse GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name faultBranchFromLsRemoteWithRealGitcustom_branch2253746329/002/work /home/REDACTED/.npm/_npx/b388654678d519d9/node_modules/.bin/prettier GOSUMDB GOWORK 64/bin/go prettier --ch�� licyMinIntegrityOnlymin-integrity_with_explicit_repo3527959618/001 --ignore-path /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet tierignore git 64/bin/go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE b/gh-aw/pkg/strirev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE 45352/b011/rt0_jrev-parse ache/go/1.25.8/x--show-toplevel 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name GOPROXY /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/cgo GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/cgo -V=f�� /usr/bin/git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet GOINSECURE b/gh-aw/pkg/typerev-parse ache/go/1.25.8/x--show-toplevel 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE x_amd64/compile GOINSECURE fips140cache ache/go/1.25.8/x--git-dir x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name GOPROXY /usr/bin/git GOSUMDB GOWORK 64/bin/go git -c ithub-script/git/ref/tags/v9 log ache/node/24.14.1/x64/bin/node -n1 --format=format:rev-parse --end-of-options--show-toplevel git (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet GOINSECURE e/jsonschema-go/rev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet stlo�� se 343119/b018/vet.cfg x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/pkg/tool/linux_amd64/link GOINSECURE fips140/edwards2/tmp/js-hash-test-1724533666/test-hash.js 45352/b006/symab/home/REDACTED/work/gh-aw/gh-aw/.github/workflows/agentic-optimization-kit.md 64/pkg/tool/linux_amd64/link (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name GOPROXY /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/compile GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcache/go/1.25.8/xTest User -V=f�� /usr/bin/git go 1/x64/bin/node -json GO111MODULE 64/bin/go 1/x64/bin/node (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name cfg 64/pkg/tool/linux_amd64/vet GOINSECURE /go-yaml/lexer GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name GOPROXY At,event,headBranch,headSha,displayTitle GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcache/go/1.25.8/xtest@example.com -V=f�� /usr/bin/git go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path -json color.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE x_amd64/vet env .a GO111MODULE x_amd64/vet GOINSECURE order GOMODCACHE 9B8vwjI/_jU1qxM0sgM1d_TR1DWb (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 45352/b012/equalrev-parse ache/go/1.25.8/x--show-toplevel 64/pkg/tool/linux_amd64/vet env 45352/b248/_pkg_.a DUdE/2oEXO76xEThYfB4YDUdE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE t/internal/formarev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
- Triggering command: /tmp/go-build586343119/b404/cli.test /tmp/go-build586343119/b404/cli.test -test.testlogfile=/tmp/go-build586343119/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /tmp/go-build1131122880/b404/cli.test /tmp/go-build1131122880/b404/cli.test -test.testlogfile=/tmp/go-build1131122880/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /tmp/go-build3546794294/b404/cli.test /tmp/go-build3546794294/b404/cli.test -test.testlogfile=/tmp/go-build3546794294/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE /sh GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/xrepos/{owner}/{repo}/actions/runs/1/artifacts /usr/bin/git se 343119/b268/vet.rev-parse ache/go/1.25.8/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.8/xtest-owner/test-repo-34085 /usr/bin/git -unreachable=falls /tmp/go-build586-lh 64/pkg/tool/linu/tmp/gh-aw/aw-feature-branch.patch git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git efaultBranchFromgit efaultBranchFromrev-parse .cfg git rev-�� --show-toplevel go /usr/bin/git Onlymin-integritls GO111MODULE ache/go/1.25.8/x/tmp/gh-aw/aw-feature-branch.patch git (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel go /usr/bin/git -json GO111MODULE k/gh-aw/gh-aw/ac--show-toplevel git rev-�� --show-toplevel go /usr/bin/git Onlymin-integritls GO111MODULE /opt/hostedtoolc/tmp/gh-aw/aw-feature-branch.patch /usr/bin/git (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv 2801-34085/test-source-field-var-s 343119/b231/vet.cfg cfg GOSUMDB GOWORK 64/bin/go ache/go/1.25.8/x64/pkg/tool/linu-extld=gcc -o efaultBranchFromLsRemoteWithRealGitcustom_branch1093962348/001' efaultBranchFromLsRemoteWithRealGitcustom_branch1093962348/001' ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p crypto/internal/run -lang=go1.25 ache/go/1.25.8/x12345 (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env 3392263620 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv 2252616/001 2252616/002/work 64/bin/go GOINSECURE GOMOD GOMODCACHE go env b/workflows GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE 4-oiIa1/9KqfPfOCpIDAkxslPM8J env lGitmain_branch2478462639/001' lGitmain_branch2478462639/001' x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE ode_modules/.bin/sh GOINSECURE GOMOD GOMODCACHE go env on' --ignore-patremote.origin.url GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE lled. Run 'make deps-dev' to in (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env .a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv from .github/aw -s GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE BFU4hJRv0Iid env Gitmaster_branch2414171199/001' Gitmaster_branch2414171199/001' x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv .version=c3aa913-dirty" -o gh-aw ./cmd/gh-aw GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env .a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env .a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go ode_�� b/workflows GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env Gitmain_branch1352252616/001' Gitmain_branch1352252616/001' 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv 2801-34085/test-source-field-variant-1381327844/.github/workflows 343119/b260/vet.cfg cfg - GOWORK 64/bin/go ache/go/1.25.8/x64/pkg/tool/linurev-parse -o 45352/b224/importcfg -trimpath ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p internal/testlogarchive -lang=go1.25 ache/go/1.25.8/xv1.0.0 (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env on' --ignore-patremote.origin.url GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE g/x/text/secure/rev-parse GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-goversion (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOPATH git 64/bin/go node /tmp�� k/gh-aw/gh-aw/.github/workflows go /opt/hostedtoolcache/node/24.14.1/x64/bin/node -json GO111MODULE 64/bin/go node (http block)
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE sh -c runs/20260425-053349-77422/test-680517773/.github/workflows GOPROXY /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOSUMDB GOWORK 64/bin/go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linustatus (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xremote.origin.url 4535�� 2801-34085/test-add-source-path-2286445296/.github/workflows k/gh-aw/gh-aw/pkg/timeutil/format.go cfg -p crypto/internal/api -lang=go1.25 ache/go/1.25.8/xrepos/{owner}/{repo}/actions/runs/12345/artifacts (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE go /pre�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD r_wasm.s x_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go /pre�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env h ../../../.prettierignore GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/test/repo
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch _.a 343119/b027/vet.cfg ck GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet sRem�� JlIpS7G73 343119/b100/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p sync -lang=go1.25 ache/go/1.25.8/x64/pkg/tool/linurev-parse (http block)
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch --get url /usr/bin/git on' --ignore-patgit GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch /home/REDACTED/work/gh-aw/gh-aw/.github/workflows/agentic-optimization-kit.md go /usr/bin/git -json GO111MODULE 64/bin/go git conf�� user.email test@example.com /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
invalid.example.invalid
- Triggering command: /usr/lib/git-core/git-remote-https /usr/lib/git-core/git-remote-https origin https://invalid.example.invalid/nonexistent-repo.git e/git init�� it git ode_modules/.bin/git =receive Test User /git (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Changeset

Type: patch
Description: Updated the default GitHub Copilot CLI, OpenAI Codex CLI, and GitHub MCP Server versions.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

Generated by Changeset Generator for issue #28401 · ◷

✨ PR Review Safe Output Test - Run 24928634771

Note

🔒 Integrity filter blocked 1 item

The following item was blocked because it doesn't meet the GitHub integrity level.

chore: bump Copilot CLI → 1.0.36, Codex CLI → 0.125.0, GitHub MCP Server → v1.0.3 #28401 pull_request_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

💥 [THE END] — Illustrated by Smoke Claude · ● 170.9K · ◷

… MCP Server v1.0.3)" Agent-Logs-Url: https://github.com/github/gh-aw/sessions/beeeefdb-c4b2-417f-8115-9d5fb97d608c Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

github-actions · 2026-04-25T05:34:27Z

Hey @Copilot 👋 — thanks for kicking off this version-bump PR for the CLI/MCP components! Version hygiene like this is important for keeping the toolchain current.

A couple of notes since this is still a WIP draft:

Tests not yet present — the diff is currently empty (expected for a draft), but once the version constants and recompiled workflows land, make sure the CI checks and any snapshot/integration tests pass.
Description is a TODO checklist — the PR body lists tasks still to be done rather than a summary of what changed and why. Once the work is complete, consider replacing the checklist with a short prose description so reviewers have clear context at a glance.

If you'd like a hand finishing this up, here's a ready-to-use agent prompt:

Complete the version bump PR for gh-aw:
1. Update `DefaultCopilotVersion` from 1.0.35 to 1.0.36 in the appropriate Go source file.
2. Update `DefaultCodexVersion` from 0.124.0 to 0.125.0.
3. Update `DefaultGitHubMCPServerVersion` from v1.0.2 to v1.0.3.
4. Run `make recompile` to recompile all workflows.
5. Run `make agent-finish` to validate.
6. Update the PR body to be a concise prose description of what changed and why, referencing the three version bumps.

Generated by Contribution Check · ● 1.3M · ◷

github-actions · 2026-04-25T10:17:11Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-04-25T10:17:12Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-04-25T10:17:13Z

🚀 Smoke OpenCode MISSION COMPLETE! OpenCode delivered. 🔥

github-actions · 2026-04-25T10:17:13Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-04-25T10:17:14Z

⚠️ Smoke Crush failed. Crush encountered unexpected challenges...

github-actions · 2026-04-25T10:17:18Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-04-25T10:20:14Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	4.52.5
curl	✅	8.5.0
gh	✅	2.89.0
node	✅	20.20.2
python3	✅	3.12.3
go	✅	1.24.13
java	✅	10 (OpenJDK)
dotnet	✅	10.0.201

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · ● 122.7K · ◷

github-actions · 2026-04-25T10:22:16Z

PRs: #28391 "[docs] docs: remove redundant sections in agentic-observability-kit"; #28392 "Add Kreuzberg document intelligence MCP shared workflow"
✅ GitHub MCP, Serena, Playwright, file write/read, build, comment memory
❌ Web Fetch MCP unavailable
Overall status: FAIL

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · ◷

github-actions · 2026-04-25T10:22:16Z

Comment Memory

Cold runners wake fast
Green checks bloom in quiet logs
Night hands code to dawn

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · ◷

github-actions · 2026-04-25T10:24:00Z

🤖 Smoke Test Results — §24928634781

Test	Status
GitHub MCP	✅
MCP Scripts GH CLI	✅
Serena CLI	⚠️
Playwright	✅
Web Fetch	❌
File Writing + Bash	✅
Discussion Interaction	✅
Build gh-aw	✅
Upload artifact	✅
Discussion Creation	✅
Workflow Dispatch	✅
PR Review	✅
Comment Memory	❌

Overall: ⚠️ PARTIAL PASS — @pelikhan @Copilot

📰 BREAKING: Report filed by Smoke Copilot · ● 649.8K · ◷

github-actions

Smoke test review of PR #28401. This PR updates lock files bumping github-mcp-server from v1.0.2 → v1.0.3. Changes look like automated manifest updates. No functional code changes detected.

📰 BREAKING: Report filed by Smoke Copilot · ● 649.8K

github-actions · 2026-04-25T10:24:02Z

@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v3","frontmatter_hash":"8955ee270578c68e1b90ccda262a02f9b608013552d51884c06a20f9fdbd98ed","agent_id":"copilot"}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6.0.2"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.28","digest":"sha256:a8834e285807654bf680154faa710d43fe4365a0868142f5c20e48c85e137a7a","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.25.28@sha256:a8834e285807654bf680154faa710d43fe4365a0868142f5c20e48c85e137a7a"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.28","digest":"sha256:93290f2393752252911bd7c39a047f776c0b53063575e7bde4e304962a9a61cb","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.28@sha256:93290f2393752252911bd7c39a047f776c0b53063575e7bde4e304962a9a61cb"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.28","digest":"sha256:844c18280f82cd1b06345eb2f4e91966b34185bfc51c9f237c3e022e848fb474","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.25.28@sha256:844c18280f82cd1b06345eb2f4e91966b34185bfc51c9f237c3e022e848fb474"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.0"},{"image":"ghcr.io/github/github-mcp-server:v1.0.2"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GITHUB_TOKEN"],"actions":[{"repo":"actions/checkout","sha":"de0fac2e4500dabe0009e67214ff5f5447ce83dd","version":"v6.0.2"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"373c709c69115d41ff229c7e5df9f8788daa9553","version":"v9"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.25.28","digest":"sha256:a8834e285807654bf680154faa710d43fe4365a0868142f5c20e48c85e137a7a","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.25.28@sha256:a8834e285807654bf680154faa710d43fe4365a0868142f5c20e48c85e137a7a"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.28","digest":"sha256:93290f2393752252911bd7c39a047f776c0b53063575e7bde4e304962a9a61cb","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.28@sha256:93290f2393752252911bd7c39a047f776c0b53063575e7bde4e304962a9a61cb"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.25.28","digest":"sha256:844c18280f82cd1b06345eb2f4e91966b34185bfc51c9f237c3e022e848fb474","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.25.28@sha256:844c18280f82cd1b06345eb2f4e91966b34185bfc51c9f237c3e022e848fb474"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.0"},{"image":"ghcr.io/github/github-mcp-server:v1.0.3"}]}


The manifest has been updated to bump github-mcp-server from v1.0.2 to v1.0.3. Worth verifying the new version's changelog before merging to ensure no breaking changes.

github-actions · 2026-04-25T10:24:18Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-04-25T10:25:33Z

Commit pushed: fdb7a7e

Generated by Changeset Generator

github-actions · 2026-04-25T10:26:31Z

Smoke test run 24928634771 — Claude engine

Core (#1-12): ✅✅✅✅✅✅✅✅✅❌✅✅
PR review (#13-19): ✅✅✅⚠️✅✅⚠️

Overall: PARTIAL — Test #10 (Agentic Workflows MCP status) failed with internal error. All other tests passed.

Note

🔒 Integrity filter blocked 1 item

The following item was blocked because it doesn't meet the GitHub integrity level.

chore: bump Copilot CLI → 1.0.36, Codex CLI → 0.125.0, GitHub MCP Server → v1.0.3 #28401 pull_request_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

💥 [THE END] — Illustrated by Smoke Claude · ● 170.9K · ◷

github-actions

💥 Automated smoke test review - all systems nominal! (Run 24928634771)

Note

🔒 Integrity filter blocked 1 item

The following item was blocked because it doesn't meet the GitHub integrity level.

#28401 pull_request_read: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

💥 [THE END] — Illustrated by Smoke Claude · ● 170.9K

github-actions · 2026-04-25T10:26:33Z

@@ -39,10 +39,10 @@ const DefaultClaudeCodeVersion Version = "2.1.119"
 // When unpinning or upgrading this version, verify:
 //   - MCPs are not blocked from loading (tools.mcp configuration still works end-to-end)
 //   - /models does not silently fail on PATs (check that model listing works with PAT auth)


✅ Smoke test review comment #1 — DefaultCopilotVersion updated to 1.0.36. Version bump looks correct.

github-actions · 2026-04-25T10:26:33Z

@@ -39,10 +39,10 @@ const DefaultClaudeCodeVersion Version = "2.1.119"
 // When unpinning or upgrading this version, verify:
 //   - MCPs are not blocked from loading (tools.mcp configuration still works end-to-end)
 //   - /models does not silently fail on PATs (check that model listing works with PAT auth)
-const DefaultCopilotVersion Version = "1.0.35"
+const DefaultCopilotVersion Version = "1.0.36"

 // DefaultCodexVersion is the default version of the OpenAI Codex CLI


✅ Smoke test review comment #2 — DefaultCodexVersion updated to 0.125.0. Consistent with the announced release.

Copilot

Pull request overview

Routine version bumps across the repo to align default/tooling versions and regenerated workflow artifacts accordingly.

Changes:

Bumped default versions for GitHub Copilot CLI, OpenAI Codex CLI, and GitHub MCP Server.
Regenerated workflow lockfiles to reference the updated tool/container versions.
Updated WASM golden fixtures to match the new embedded version metadata.

Show a summary per file

File	Description
`pkg/constants/version_constants.go`	Updates default Copilot/Codex/MCP Server version constants used across tooling/workflow generation.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden`	Refreshes golden fixture output to reflect Copilot CLI and MCP Server version bumps.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden`	Refreshes golden fixture output to reflect Copilot CLI and MCP Server version bumps.
`.github/workflows/test-workflow.lock.yml`	Regenerated lockfile with updated Copilot CLI and GitHub MCP Server image tag.
`.github/workflows/step-name-alignment.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/spec-enforcer.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/smoke-opencode.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/smoke-crush.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/smoke-agent-scoped-approved.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/smoke-agent-public-none.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/smoke-agent-public-approved.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/smoke-agent-all-none.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/smoke-agent-all-merged.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/schema-feature-coverage.lock.yml`	Updates Codex CLI version and related generated config blocks in the lockfile.
`.github/workflows/metrics-collector.lock.yml`	Regenerated lockfile with updated Copilot CLI and GitHub MCP Server image tag.
`.github/workflows/hourly-ci-cleaner.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/hippo-embed.lock.yml`	Regenerated lockfile with updated Copilot CLI and GitHub MCP Server image tag.
`.github/workflows/github-remote-mcp-auth-test.lock.yml`	Regenerated lockfile with updated Copilot CLI version references.
`.github/workflows/firewall.lock.yml`	Regenerated lockfile with updated Copilot CLI and GitHub MCP Server image tag.
`.github/workflows/example-permissions-warning.lock.yml`	Regenerated lockfile with updated Copilot CLI and GitHub MCP Server image tag.
`.github/workflows/design-decision-gate.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/daily-token-consumption-report.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/daily-team-evolution-insights.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/daily-security-red-team.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/daily-safe-outputs-conformance.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/daily-otel-instrumentation-advisor.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/daily-choice-test.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/daily-astrostylelite-markdown-spellcheck.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/copilot-pr-merged-report.lock.yml`	Regenerated lockfile with updated Copilot CLI version references.
`.github/workflows/commit-changes-analyzer.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/codex-github-remote-mcp-test.lock.yml`	Regenerated lockfile with updated Codex CLI version references.
`.github/workflows/cli-version-checker.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/ci-doctor.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/approach-validator.lock.yml`	Regenerated lockfile with updated GitHub MCP Server image tag.
`.github/workflows/ace-editor.lock.yml`	Regenerated lockfile with updated Copilot CLI and GitHub MCP Server image tag.
`.changeset/patch-bump-cli-mcp-versions-2026-04-24.md`	Adds a patch changeset describing the version bumps.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 129/203 changed files
Comments generated: 0

Initial plan

c3aa913

Copilot AI assigned Copilot and gh-aw-bot Apr 25, 2026

Copilot started work on behalf of gh-aw-bot April 25, 2026 05:21 View session

Copilot AI linked an issue Apr 25, 2026 that may be closed by this pull request

[ca] Update CLI/MCP versions: Copilot 1.0.36, Codex 0.125.0, GitHub MCP Server v1.0.3 #28394

Closed

chore: update CLI/MCP versions (Copilot 1.0.36, Codex 0.125.0, GitHub…

83f05b5

… MCP Server v1.0.3)" Agent-Logs-Url: https://github.com/github/gh-aw/sessions/beeeefdb-c4b2-417f-8115-9d5fb97d608c Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

This comment has been minimized.

Sign in to view

Copilot AI changed the title ~~[WIP] Update CLI/MCP versions to latest stable releases~~ chore: bump Copilot CLI → 1.0.36, Codex CLI → 0.125.0, GitHub MCP Server → v1.0.3 Apr 25, 2026

Copilot finished work on behalf of gh-aw-bot April 25, 2026 05:36

Copilot AI requested a review from gh-aw-bot April 25, 2026 05:36

github-actions Bot mentioned this pull request Apr 25, 2026

[aw] No-Op Runs #28177

Open

pelikhan added the smoke label Apr 25, 2026

github-actions Bot removed the smoke label Apr 25, 2026

github-actions Bot mentioned this pull request Apr 25, 2026

Smoke Test: Copilot - 24928634781 #28417

Closed

github-actions Bot added the smoke-copilot label Apr 25, 2026

github-actions Bot reviewed Apr 25, 2026

View reviewed changes

Add changeset

fdb7a7e

github-actions Bot mentioned this pull request Apr 25, 2026

Smoke Test: Claude - 24928634771 #28418

Closed

github-actions Bot added the smoke-claude label Apr 25, 2026

github-actions Bot reviewed Apr 25, 2026

View reviewed changes

pelikhan marked this pull request as ready for review April 25, 2026 10:33

Copilot AI review requested due to automatic review settings April 25, 2026 10:33

pelikhan merged commit 8689b9e into main Apr 25, 2026
19 checks passed

pelikhan deleted the copilot/update-cli-mcp-versions branch April 25, 2026 10:33

Copilot started reviewing on behalf of pelikhan April 25, 2026 10:34 View session

Copilot AI reviewed Apr 25, 2026

View reviewed changes

Conversation

Copilot AI commented Apr 25, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version changes

Changes

I tried to connect to the following addresses, but was blocked by firewall rules:

Changeset

Uh oh!

This comment has been minimized.

github-actions Bot commented Apr 25, 2026

Uh oh!

github-actions Bot commented Apr 25, 2026

Uh oh!

github-actions Bot commented Apr 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 25, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented Apr 25, 2026

Uh oh!

github-actions Bot commented Apr 25, 2026

Comment Memory

Uh oh!

github-actions Bot commented Apr 25, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Apr 25, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Apr 25, 2026

Uh oh!

github-actions Bot commented Apr 25, 2026

Uh oh!

github-actions Bot commented Apr 25, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Apr 25, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Apr 25, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Apr 25, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Apr 25, 2026 •

edited

Loading

github-actions Bot commented Apr 25, 2026 •

edited

Loading

github-actions Bot commented Apr 25, 2026 •

edited

Loading

github-actions Bot commented Apr 25, 2026 •

edited

Loading

github-actions Bot commented Apr 25, 2026 •

edited

Loading