Bump gh-aw-firewall (AWF) to v0.8.2

[Copilot]

Updates the default AWF binary version from v0.8.1 to v0.8.2.

Changes

• Updated DefaultFirewallVersion constant in pkg/constants/constants.go
• Updated corresponding test expectation in pkg/constants/constants_test.go
• Updated documentation in specs/layout.md
• Recompiled 124 workflow lock files via make recompile

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login g/workflow/imporGOINSECURE g/workflow/imporGOMOD 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/x-buildtags env 7184924/b410/_pk-errorsas GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Bump gh-aw-firewall (awf) to v0.8.2

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

---

Changeset

• Type: patch
• Description: Bump gh-aw-firewall (AWF) default binary version to v0.8.2. Updated DefaultFirewallVersion, related tests, docs, and recompiled lock files.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

🤖 DIAGNOSTIC COMPLETE: Smoke Copilot No Firewall STATUS: ALL_UNITS_OPERATIONAL. MISSION_SUCCESS.

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

✅ Firewall validation complete... Smoke Codex Firewall confirmed network sandboxing is operational. 🛡️

[github-actions]

📰 VERDICT: Smoke Copilot Playwright has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🎉 Yo ho ho! Smoke Copilot Safe Inputs found the treasure and completed successfully! ⚓💰

[github-actions]

Smoke Test Results

✅ File writing test - Created and verified test file
✅ Bash tool test - Successfully read file back
❌ Safe Input gh tool test - Tool not available (safeinputs-gh not configured)

Overall Status: PARTIAL PASS (2/3 tests passed, safeinputs-gh tool requires workflow configuration)

AI generated by Smoke Copilot Safe Inputs

[github-actions]

Smoke Test Results

❌ Playwright MCP: Tool not available
✅ Cache Memory: File created successfully
❌ Safe Input gh: Tool not available

Overall Status: FAIL

AI generated by Smoke Copilot Playwright

[github-actions]

✅ Smoke Test Results - Copilot Engine (No Firewall)

✅ Last 2 merged PRs reviewed: #9166 (Security Fix), #9160 (Remove awmg gateway)
✅ Test file created: /tmp/gh-aw/agent/smoke-test-copilot-20762144180.txt
✅ GitHub.com navigation: Successfully loaded with title "GitHub · Change is constant. GitHub keeps you ahead. · GitHub"
✅ Issue listing: Retrieved 3 open issues from githubnext/gh-aw repository

AI generated by Smoke Copilot No Firewall

[github-actions]

Last merged PRs: Security Fix: Suppress gosec warning for intentional error ignoring in semver.go (Alert #477); Remove awmg gateway binary and build infrastructure
OpenAI curl blocked: ✅
example.com blocked: ✅
GitHub MCP list PRs: ✅
File write/read: ✅
Network: SANDBOXED
Overall: PASS

AI generated by Smoke Codex Firewall

[github-actions]

Smoke Test Results (Claude - Run #20762144204)

Last 2 Merged PRs:

• Security Fix: Suppress gosec warning for intentional error ignoring in semver.go (Alert #477) #9166: Security Fix: Suppress gosec warning for intentional error ignoring in semver.go
• Remove awmg gateway binary and build infrastructure #9160: Remove awmg gateway binary and build infrastructure

Test Results:

• ✅ GitHub MCP (fetch recent PRs)
• ✅ File writing (agent directory)
• ✅ Bash tool (file verification)
• ✅ Playwright MCP (navigate to GitHub, title contains "GitHub")
• ✅ Cache memory (write and verify)
• ❌ Safe Input gh tool (test skipped - gh CLI is not authenticated per system config)

Overall: PASS (5/5 core tests passed)

AI generated by Smoke Claude

[github-actions]

PRs (last 2 merged): 9166 Security Fix: Suppress gosec warning for intentional error ignoring in semver.go (Alert #477); 9160 Remove awmg gateway binary and build infrastructure
GitHub MCP: ✅
File write (/tmp/gh-aw/agent): ✅
Bash cat verify: ✅
Playwright title contains "GitHub": ✅
Cache memory write (/tmp/gh-aw/cache-memory): ✅
safeinputs-gh (gh issues list --limit 3): ❌ command not found
Overall: FAIL

AI generated by Smoke Codex

[github-actions]

Smoke Test Results

Last 2 Merged PRs:

• Update Codex CLI to version 0.78.0 #9162: Update Codex CLI to version 0.78.0 (@Copilot, @mnkiefer)
• Security Fix: Suppress gosec warning for intentional error ignoring in semver.go (Alert #477) #9166: Security Fix: Suppress gosec warning for intentional error ignoring in semver.go

Test Results:

• ✅ GitHub MCP (default toolsets)
• ✅ File writing (/tmp/gh-aw/agent/)
• ✅ Bash tool execution
• ✅ get_me tool NOT available (403 error as expected)
• ✅ Cache memory (/tmp/gh-aw/cache-memory/)
• ✅ Web fetch (api.github.com returns valid JSON)
• ✅ Available tools: bash, view, edit, create, grep, glob, web_fetch, console, logger, github-, safeoutputs-

Overall: PASS

AI generated by Smoke Copilot