[bootc-bot]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
github/gh-aw	uses-with	minor	v0.92.0 → v0.93.5

---

Release Notes

github/gh-aw

v0.93.5

Compare Source

🌟 Release Highlights

This release focuses on hardening: stronger static analysis linters, safer credential handling, and more robust diagnostics.

✨ What's New

• Safe-output integration jobs can now use network credentials (#​71833).
• Engine driver crashes are classified with secret-safe stderr diagnostics, making failures easier to triage (#​71883).
• Pi CLI default updated to 1.4.0 (#​71899).
• New and sharper custom linters: readerstringconv analyzer, parenthesized Flush discard detection, missing goroutine recovery through local closures, and closed detection gaps (#​71891, #​71896, #​71897, #​71880).
• Secret-leak analysis now tracks credential handoffs through step outputs (#​71850).

🐛 Bug Fixes & Improvements

• Fixed generated conclusion references and fetch warnings; Redis image pinned (#​71898).
• Guarded indexing boundaries and prevented cron-step overflow (#​71889).
• Refreshed Node image pins and enforced patched runtime dependencies (#​71879).
• gh-aw-detection is no longer treated as experimental (#​71848).
• Internal consolidation of permission scope expansion, GitHub Contents base64 decoding, and public API GET fallback transport (#​71888, #​71894, #​71893).

📚 Documentation

• Documentation refreshed for recent features (#​71867).

Generated by 🚀 Release · copilot · auto · ~14 AIC · ⊞ 12.6K

---

What's Changed

• Allow network credentials in safe-output integration jobs by @​pelikhan in #​71833
• [docs] Update documentation for features from 2026-10-25 by @​github-actions[bot] in #​71867
• [jsweep] Clean write_daily_aic_usage_cache.cjs by @​github-actions[bot] in #​71805
• fix: stop treating gh-aw-detection as experimental by @​pelikhan in #​71848
• [docs] Update Astro dependencies - 2026-10-25 by @​github-actions[bot] in #​71796
• Detect parenthesized Flush discards in uncheckedflushreturn by @​pelikhan with @​Copilot in #​71896
• Track credential handoffs through step outputs in secret-leak analysis by @​pelikhan with @​Copilot in #​71850
• Update Pi CLI default to 1.4.0 by @​pelikhan with @​Copilot in #​71899
• Detect missing recovery in goroutines launched through local closures by @​pelikhan with @​Copilot in #​71897
• Refresh Node image pins and enforce patched runtime dependencies by @​pelikhan with @​Copilot in #​71879
• Close custom-linter detection gaps and exempt safe os error checks by @​pelikhan with @​Copilot in #​71880
• feat(linters): add readerstringconv analyzer by @​pelikhan with @​Copilot in #​71891
• Centralize missing permission scope expansion by @​pelikhan with @​Copilot in #​71888
• Unify GitHub Contents base64 decoding by @​pelikhan with @​Copilot in #​71894
• Consolidate public GitHub API GET fallback transport by @​pelikhan with @​Copilot in #​71893
• Fix generated conclusion references and fetch warnings; pin Redis by @​pelikhan with @​Copilot in #​71898
• Guard indexing boundaries and prevent cron-step overflow by @​pelikhan with @​Copilot in #​71889
• Deduplicate AW import normalization in source policy lint rules by @​pelikhan with @​Copilot in #​71887
• [dead-code] chore: remove dead functions — 2 functions removed by @​github-actions[bot] in #​71916
• Classify engine driver crashes with secret-safe stderr diagnostics by @​pelikhan with @​Copilot in #​71883

Full Changelog: github/gh-aw@v0.93.4...v0.93.5

v0.93.4

Compare Source

🌟 Release Highlights

This release focuses on work-queue reliability, safer checkout credential handling, and a broad set of compiler and workflow fixes.

✨ What's New

• Work queues: pools and workers now install on first use, with clearer diagnostics for missing pools and privacy-preserving GraphQL errors.
• Safe outputs: standardized machine-readable error codes, add_comment constraints disclosed in the tool description, and visible staged-preview notices on PR and Claim guards.
• Threat detection: matching-engine detection now inherits agent API targets, and validated status-only jobs are allowed after detection.
• Environments: workflow environments now propagate to activation jobs.
• Faster update: fewer network fetches, plus verbose request timings.

🐛 Bug Fixes & Improvements

• Release checkouts no longer persist credentials; compiler-generated PR checkouts are narrowly exempted from artipacked warnings.
• Compiler-generated constants are emitted as quoted strings, and schema-supported frontmatter shapes are accepted.
• Copilot BYOK HTTP API targets are preserved.
• Unmatched checkout.fetch refs no longer block other fetches.
• Fixed prompt tool scanner false positives, mapdeletecheck with asymmetric parentheses, and empty repo-memory wiki note substitution.
• Fixed missing embedded session-parser and grader runtime dependencies.
• Workflow health checks now have a time budget and debug logging; log storage admission and observability audits are bounded.
• Behavior-defined engine session capture is now protected.

📚 Documentation

• MemoryOps pattern page streamlined and docs updated for recent features.

Generated by 🚀 Release · copilot · auto · ~14 AIC · ⊞ 12.6K

---

What's Changed

• [log] Add debug logging to repository package manifest import/resource/skill paths by @​github-actions[bot] in #​71541
• Report missing work queue pools with actionable recovery diagnostics by @​pelikhan with @​Copilot in #​71495
• Prevent arXiv researcher Codex startup failure by @​pelikhan with @​Copilot in #​71608
• [docs] Update documentation for features from 2026-10-24 by @​github-actions[bot] in #​71631
• Keep TYPE-016 conformance check compatible with added parameters by @​pelikhan with @​Copilot in #​71615
• Require item-level verification in daily queue reports by @​pelikhan with @​Copilot in #​71607
• Fix Update Astro dependency downloads and upgrade command by @​pelikhan with @​Copilot in #​71619
• Fix mapdeletecheck detection with asymmetric parentheses by @​pelikhan with @​Copilot in #​71618
• Strengthen ledger formal-spec coverage by @​pelikhan with @​Copilot in #​71625
• Replace unavailable Copilot model in video analyzer by @​pelikhan with @​Copilot in #​71620
• Disclose add_comment constraints in tool description by @​pelikhan with @​Copilot in #​71614
• Add visible staged-preview notices to PR and Claim guards by @​pelikhan with @​Copilot in #​71612
• [instructions] Sync instruction files with release v0.93.2 by @​github-actions[bot] in #​71598
• [dead-code] chore: remove dead functions — 1 functions removed by @​github-actions[bot] in #​71660
• [Safe Outputs] Standardize machine-readable error codes by @​pelikhan with @​Copilot in #​71613
• Inherit agent API targets in matching-engine threat detection by @​pelikhan with @​Copilot in #​71624
• Propagate workflow environments to activation jobs by @​pelikhan with @​Copilot in #​71617
• Add detail-level A/B campaign to commit-changes-analyzer by @​pelikhan with @​Copilot in #​71666
• Update CLI and scanner image versions by @​pelikhan with @​Copilot in #​71616
• Approve libatomic container runtime license exception by @​pelikhan in #​71678
• fix: refresh verified TLA runtime checksum by @​pelikhan in #​71679
• Preflight agent assignment credentials before processing issues by @​pelikhan with @​Copilot in #​71611
• Skip unmatched checkout.fetch refs without blocking other fetches by @​pelikhan with @​Copilot in #​71622
• Fix external workflow sources for documentation jobs by @​pelikhan in #​71677
• Install configured work queue pools on first use by @​pelikhan in #​71675
• Fix missing work-queue diagnostic guidance by @​pelikhan with @​Copilot in #​71665
• Fix logs storage admission and bound observability audits by @​pelikhan in #​71686
• fix(workflow): preserve Copilot BYOK HTTP API targets by @​pelikhan in #​71680
• Fix remaining CI diagnostic guidance gaps by @​pelikhan in #​71688
• Fix missing grader runtime error codes dependency by @​pelikhan in #​71689
• Improve privacy-preserving work queue GraphQL diagnostics by @​pelikhan in #​71676
• Allow validated status-only jobs after detection by @​pelikhan with @​Copilot in #​71623
• Fix compiler integration fixtures for action pin linting by @​pelikhan in #​71692
• Fix Pi evals reading stale workflow prompts by @​pelikhan with @​Copilot in #​71664
• Reduce update network fetches and add verbose request timings by @​dsyme in #​71687
• Restore safe-output handler and tool-description conformance by @​pelikhan with @​Copilot in #​71609
• Fix remote repository API requests for experiments by @​pelikhan in #​71681
• fix: substitute empty repo-memory wiki note as a literal by @​pelikhan in #​71782
• Gate generated admission outputs on admission opt-in by @​pelikhan in #​71784
• Add a time budget and debug logging to workflow health checks by @​pelikhan in #​71786
• Fix first-use work-queue pool and worker registration by @​pelikhan in #​71787
• [docs] docs: unbloat MemoryOps pattern page by @​github-actions[bot] in #​71779
• Narrowly exempt compiler-generated PR checkouts from artipacked warnings by @​pelikhan in #​71783
• fix: avoid persisting release checkout credentials by @​pelikhan in #​71802
• Protect behavior-defined engine session capture by @​pelikhan with @​Copilot in #​69586
• fix(workflow): gate conclusion stale-check output references by @​pelikhan in #​71808
• fix: emit compiler-generated constants as quoted strings by @​pelikhan in #​71803
• fix(workflow): avoid prompt tool scanner false positives by @​pelikhan in #​71813
• fix(workflow): accept schema-supported frontmatter shapes by @​pelikhan in #​71809
• Recognize verified compiler-owned checkout cleanup in artipacked lint by @​pelikhan in #​71806
• Fix missing embedded session-parser dependency by @​pelikhan in #​71822

Full Changelog: github/gh-aw@v0.93.3...v0.93.4

v0.93.3

Compare Source

🌟 Release Highlights

This release tightens workflow quality checks and hardens threat detection.

✨ What's New

• Workflow linting on by default – gh aw compile now lints workflows during compilation, surfacing problems earlier (#​71349).
• Work-queue smoke workflows – New daily smoke workflows with Bash 3-compatible validation improve confidence in work-queue behavior (#​71363).

🐛 Bug Fixes & Improvements

• Work-queue Claim settlement now verifies discussion cleanup effects (#​71361).
• Threat detection is pinned to v0.5.3 for reproducible, safer runs (#​71501).

📚 Documentation

• Clarified directory restrictions for reusable agentic workflows (#​71451).

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.6K

---

What's Changed

• Add daily work queue smoke workflows and Bash 3-compatible validation by @​pelikhan in #​71363
• [instructions] Sync instruction files with release v0.93.2 by @​github-actions[bot] in #​71403
• [docs] Update documentation for features from 2026-10-23 by @​github-actions[bot] in #​71415
• feat: lint workflows during compilation by default by @​pelikhan in #​71349
• fix(work-queue): verify discussion cleanup effects during Claim settlement by @​pelikhan in #​71361
• docs: clarify directory restrictions for reusable agentic workflows by @​pelikhan with @​Copilot in #​71451
• [dead-code] chore: remove dead functions — 2 functions removed by @​github-actions[bot] in #​71454
• [blog] Agent of the Day – 2026-10-23 by @​github-actions[bot] in #​71455
• Pin threat detection to v0.5.3 by @​davidslater with @​Copilot in #​71501

Full Changelog: github/gh-aw@v0.93.2...v0.93.3

v0.93.2

Compare Source

🌟 Release Highlights

A reliability-focused release: Copilot CLI installs are more resilient, scanners and reports are more trustworthy, and Pi runs behave correctly on ARC/DinD runners.

🐛 Bug Fixes & Improvements

• Copilot CLI install fallback — when the live compatibility matrix selects a release without a trusted checksum pin, setup now falls back to the bundled default (within the compatibility window), with checksum verification still required. (#​71339)
• Pi on ARC/DinD — Pi streaming logs now go to the writable engine-log directory, fixing log, summary and session export on ARC/DinD runners. (#​71228)
• Custom ledger safe outputs — custom ledger tool schemas now require a record, and invalid envelopes are rejected before queuing so agents can self-correct. (#​71240)
• Grype scan completeness — empty or malformed Grype output is no longer cached as a zero-finding success, and per-image scan status is tracked. (#​71297)
• Report formatting — bold labels in collapsible report summaries now render correctly instead of showing literal <b> tags. (#​71273)
• Release notes — fixed apostrophe encoding guidance so highlights no longer publish u0027. (#​71272)
• Conformance checks — removed false positives for PTI-005 and SEC-005. (#​71287, #​71286)
• Windows CI — POSIX-only outcome API fixtures are skipped on Windows. (#​71247)

📚 Documentation

• Added admission setup and server-size AIC policy guidance to Cost Management. (#​71323)

Generated by 🚀 Release · copilot · auto · ~18 AIC · ⊞ 12.6K

---

What's Changed

• Fix Pi streaming logs on ARC/DinD runners by @​pelikhan in #​71228
• fix: enforce custom ledger record contract before queuing by @​pelikhan in #​71240
• fix: skip POSIX outcome API fixtures on Windows by @​pelikhan in #​71247
• Fix release highlights apostrophe encoding guidance by @​pelikhan in #​71272
• fix: preserve bold formatting in collapsible report summaries by @​pelikhan in #​71273
• fix: exempt display-only session metadata from SEC-005 by @​pelikhan in #​71286
• fix: accept integrity-first deadline guard in PTI-005 conformance check by @​pelikhan in #​71287
• [log] Add debug logging to webhook, model-routing, and JS taint-summary files by @​github-actions[bot] in #​71327
• Document admission setup and server-size AIC policies by @​pelikhan with @​Copilot in #​71323
• fix: reject incomplete Grype scans and verify per-image completion by @​pelikhan in #​71297
• Fall back to pinned Copilot CLI when live compatibility targets lack trusted checksums by @​pelikhan with @​Copilot in #​71339

Full Changelog: github/gh-aw@v0.93.1...v0.93.2

v0.93.1

Compare Source

🌟 Release Highlights

v0.93.1 focuses on engine reliability, MCP trust configuration, and audit tooling, plus many CI and workflow stability fixes.

✨ What's New

• Per-server custom CA trust for HTTP MCP servers — connect to MCP servers behind private PKI without weakening global trust (#​71229). Learn more
• BM25 audit search — unified-session audit now supports search with automatic evidence grouping (#​70998). Learn more
• Outcome evaluation moved into logs — the separate outcomes command is removed (#​71218).
• Detection gates enforced for custom workflow jobs (#​70997) and hosted threat detection is isolated (#​71244).
• Work-queue diagnostics included in health reports (#​70965).
• MCP Gateway bumped to v0.4.37 (#​71219).

🐛 Bug Fixes & Improvements

• Codex stages native TOML sub-agents with resolved models and fails closed before startup (#​70945); Copilot SDK refuses silent model substitution (#​70943).
• Model-routing allowed-models now expands aliases (#​70942); Claude detection model aliases resolve before CLI launch (#​70861).
• Pi main/sub-agent requests are attributed with x-awf-caller (#​71043).
• CLI proxy and MCP gateway containers honor runner proxy settings (#​70347).
• Scalar allowed-repos normalized in GitHub guard policies (#​70346); trusted-bot policy compilation covered and documented (#​70343).
• Footer AIC costs show as rounded-up estimates (#​71193).
• Dry-run telemetry disabled via documented opt-outs (#​71032).
• Fixed Ollama CPU warm-up, Aider command replay, reviewer checkout after branch deletion, and unavailable prompt job output detection.

📚 Documentation

Daily documentation, glossary, and instruction syncs, plus an unbloated audit reference.

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.4K

---

What's Changed

• Preserve failed Claim delivery diagnostics for investigation by @​pelikhan in #​70971
• Copilot SDK: observe the main-session model and refuse silent substitution by @​SivaKesava1 with @​Copilot in #​70943
• Stabilize smoke-copilot-sub-agents: mandatory delegation, experiment-independent contract checks by @​SivaKesava1 with @​Copilot in #​70944
• Codex: stage native TOML sub-agents with resolved models and fail closed before startup by @​SivaKesava1 with @​Copilot in #​70945
• feat(cli): include work-queue diagnostics in health reports by @​pelikhan in #​70965
• build(deps): apply docs updates available in 1ES by @​pelikhan in #​70996
• fix: bound daily AIC quota recovery and snapshot discovery by @​pelikhan in #​70968
• [docs] docs: unbloat reference/audit.md by @​github-actions[bot] in #​70991
• Update CLI and scanner pins with 1ES-compatible Claude by @​pelikhan in #​70999
• Add unified-session BM25 audit search with automatic evidence grouping by @​pelikhan in #​70998
• fix: detect and rewrite unavailable prompt job outputs by @​pelikhan in #​70973
• Fix authority-scoped work queue Issue mirror synchronization by @​pelikhan in #​70992
• Resolve Claude detection model aliases before CLI launch by @​pelikhan with @​Copilot in #​70861
• Expand aliases in engine.model-routing.allowed-models by @​SivaKesava1 with @​Copilot in #​70942
• Disable dry-run telemetry using documented environment opt-outs by @​pelikhan with @​Copilot in #​71032
• Enforce detection gates for custom workflow jobs by @​pelikhan in #​70997
• [docs] Update documentation for features from 2026-10-22 by @​github-actions[bot] in #​71114
• [ci-coach] Fix modernize embedlit lint failures in pkg/cli by @​github-actions[bot] in #​71146
• [docs] Update glossary - daily scan by @​github-actions[bot] in #​71108
• [instructions] Sync instruction files with release v0.92.0 by @​github-actions[bot] in #​71091
• Fix Contribution Check tool-denial aborts with prefetched PR evidence by @​pelikhan in #​71162
• Fix Super Linter analysis and runtime failure recovery by @​pelikhan in #​71169
• fix: precompute Daily File Diet source metrics by @​pelikhan in #​71161
• Improve work queue failure diagnostics by @​pelikhan in #​71163
• [dead-code] chore: remove dead functions — 3 functions removed by @​github-actions[bot] in #​71155
• Normalize scalar allowed-repos in GitHub guard policies by @​pelikhan with @​Copilot in #​70346
• fix: filter expired approval runs from health failure candidates by @​pelikhan in #​71164
• [blog] Agent of the Day – 2026-10-22 by @​github-actions[bot] in #​71154
• Attribute Pi main/sub-agent requests with x-awf-caller and preserve caller metadata by @​SivaKesava1 with @​Copilot in #​71043
• build(deps): consolidate 1ES-supported Dependabot npm updates by @​pelikhan in #​71195
• fix: repair CI documentation contracts and regression fixtures by @​pelikhan in #​71194
• Show footer AIC costs as rounded-up estimates by @​pelikhan in #​71193
• build(deps-dev): bump @​playwright/test from 1.64.0 to 1.64.1 in /docs by @​dependabot[bot] in #​70493
• build(deps): bump starlight-changelogs from 0.7.0 to 0.7.1 in /docs by @​dependabot[bot] in #​70489
• fix(ci): preserve explicit embedded struct literals by @​pelikhan in #​71209
• Fix Aider command replay and daily Go workflow completion by @​pelikhan in #​71211
• Fix reviewer checkout after merged PR branch deletion by @​pelikhan in #​71210
• build(deps): bump the pip group across 1 directory with 2 updates by @​dependabot[bot] in #​70876
• [actions-aw-linter] Fix workflow_run positive branch cancellation detection by @​github-actions[bot] in #​71189
• build(deps): bump dompurify from 3.4.16 to 3.4.17 in /docs in the npm_and_yarn group across 1 directory by @​dependabot[bot] in #​71216
• build(deps): bump geo-optimizer-skill from 4.18.3 to 4.19.4 in /.github/workflows by @​dependabot[bot] in #​70485
• Honor runner proxy settings in CLI proxy and MCP gateway containers by @​pelikhan with @​Copilot in #​70347
• Bump MCPG to v0.4.37 by @​lpcox with @​Copilot in #​71219
• Support per-server custom CA trust for HTTP MCP servers by @​pelikhan in #​71229
• Unify debugging bootstraps and verify instruction routing by @​pelikhan in #​71223
• Move outcome evaluation into logs and remove outcomes command by @​pelikhan in #​71218
• Cover trusted-bot policy compilation and document platform bot support by @​pelikhan with @​Copilot in #​70343
• Fix CI instruction drift and registry-dependent negative tests by @​pelikhan in #​71241
• Fix code quality reviewer finalization sequencing by @​pelikhan in #​71242
• Fix Ollama CPU warm-up and isolate hosted threat detection by @​pelikhan in #​71244

Full Changelog: github/gh-aw@v0.93.0...v0.93.1

v0.93.0

Compare Source

🌟 Release Highlights

v0.93.0 focuses on security hardening, safer dry-run compilation, and more reliable safe outputs and sub-agent model resolution.

⚠️ Breaking Changes

• The missing-diagnostic safe-output tools are now named report_missing_tool and report_missing_data (#​70738). Update any workflows or prompts that use the old names. Learn more
• Admission jobs are now opt-in through frontmatter or aw.json (#​70763).

✨ Whats New

• Read-only health tool in the MCP server for checking server status (#​70527).
• Artifact-first admission conclusion session delivery (#​70622) and routing analytics recorded in aw_session.jsonl, including model config, baseline estimate, upstream errors and harness identity (#​70672).
• Claude inline sub-agents are registered and Claude/Codex sub-agent models resolve before engine startup (#​70671).
• Shared /review alias for PR reviewer workflows (#​70863).
• New Go linters (formatintitoa, osisnotexist) and a needs-consistency linter (#​70801, #​70546).
• Firewall bumped to v0.28.70 and MCP Gateway to v0.4.36.

🔒 Security

• Dry-run compilation is hardened against hosted execution effects, and dry-run workflows use a read-only cache (#​70851, #​70788).
• Compiler bootstrap is hardened against compromised certificate authorities (#​70549).
• OTLP token environment-file injection is prevented (#​70597).
• Unsafe action pins are rejected (#​70616), and fixable Node image CVEs were cleared (#​70615).
• Redaction must now succeed for all agent artifact uploads (#​70875).

🐛 Bug Fixes & Improvements

• Safe outputs honor target repos in invocation context (#​70912) and fix discussion temporary IDs and missing terminal outputs (#​70696).
• Copilot URL approvals follow the finalized runtime firewall policy (#​70750).
• Runner-label indentation in custom jobs is fixed (#​70840).
• Fixed webhook integer overflow in 32-bit builds (#​70775).
• Better engine driver crash and secret-redaction failure classification (#​70605).
• MCP log continuation cursors are preserved (#​70856); AIC telemetry attribution is corrected (#​70864).
• Work queue replay prefers local Git lookups (#​70617).

📚 Documentation

• Debug playbook now covers empty-output failure codes (#​70676), and the work queue reference was streamlined.

Generated by 🚀 Release · copilot · auto · 14.9 AIC · ⊞ 12.4K

---

What's Changed

• Fix PR reviewer safe-output payload quoting guidance by @​pelikhan in #​70913
• fix(health): ignore evidence-confirmed PR lifecycle interruptions by @​pelikhan in #​70915
• [safe-output-integrator] Add safe-output fixtures for report-missing-tool and report-missing-data by @​github-actions[bot] in #​70930
• Fix stale CI expectations and schema regressions by @​pelikhan in #​70918
• Reuse workflow metadata in OTLP attributes by @​pelikhan with @​Copilot in #​70860
• fix: honor safe-output target repos in invocation context by @​pelikhan in #​70912

Full Changelog: github/gh-aw@v0.92.8...v0.93.0

v0.92.6

Compare Source

🌟 Release Highlights

v0.92.6 strengthens the work queue, episode-based log analysis, model-catalogue resilience, and static security linting.

⚠️ Breaking Changes

• gh aw logs now requires canonical episode identity and reports coverage (#​70277). Update any tooling that relied on non-canonical episode identifiers.

✨ What is New

• Episode analytics: bounded canonical episode retrieval, usage joined with recorded outcome accounting, and better unified-session episode lineage (#​70322, #​70281, #​70205).
• Work queue: guarded clear/hard-reset commands, deterministic expiration of unclaimed entries, better diagnostics, and stronger delivery recovery (#​70022, #​70025, #​70027, #​69951, #​69790).
• Security linting: new AST linters for checkout trust, prompt expressions, secret-leak taint analysis, and history-backed zizmor checks (#​70131, #​69813, #​70356).
• Provenance & redaction: agent provenance tracking, coarse issue-body redaction, and early activation failure for stale provenance workflows (#​70032, #​70348).
• Model resilience: consistent model alias resolution across engines, a Copilot SDK check against the live model catalogue, and a daily model-pin checker (#​69487, #​70320, #​70295).
• Engines: OpenCode integration migrated to v2 (#​69950).
• Pure graders: graders are now pure unified-session computations (#​70130).

🐛 Bug Fixes & Improvements

• Custom safe-output jobs are gated on threat detection success; threat detection applies warn-mode policy when the detection engine fails (#​69995, #​70325).
• Placeholder issue titles are rejected before consuming create_issue quota (#​69994).
• Fixed empty configured_model for routed/fallback Copilot CLI runs (#​69966).
• Fixed OTLP placeholder masks suppressing boolean job outputs (#​69996).
• Safe-output footers include Work and Claim references (#​69865).
• Fixed Goose release redirects, Crush stdin startup, and Aider discovery (#​70282, #​70214, #​70021).
• Fixed PR lifecycle races and merged-base-ancestor detection (#​70141, #​69998).

📚 Documentation

• Specified OIDC-based AW activation admission and aligned episode specs (#​70286, #​70279).
• Documented claim delivery diagnostics (#​69987).

Generated by 🚀 Release · copilot · auto · 15.9 AIC · ⊞ 12.3K

---

What's Changed

• Allow narrowly gated Cloud Hypervisor agent acceptance fixture by @​lpcox in #​69777
• Surface sub-agent failures and replace unpriced kiwi workflow models by @​pelikhan in #​69788
• Finalize work-queue workers inline and recover stranded runs by @​pelikhan in #​69790
• Resolve model aliases the same way on every engine by @​SivaKesava1 with @​Copilot in #​69487
• Fix Pi model availability in multi-device docs tester by @​pelikhan in #​69869
• Fix container scan analysis tool-permission mismatch by @​pelikhan in #​69867
• fix: use per-model SDK providers for Contribution Check delegates by @​pelikhan in #​69870
• fix: include Work and Claim references in safe-output footers by @​pelikhan in #​69865
• [eslint-miner] eslint-factory: add no-split-filter-trim-without-trim-map rule by @​github-actions[bot] in #​69831
• fix(workflows): report PR content integrity blockers accurately by @​pelikhan in #​69866
• Fix bounded CLI coverage and delegated-failure audit reporting by @​pelikhan in #​69868
• [dead-code] chore: remove dead functions — 2 func

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.