Download Latest Version windows-amd64.exe (32.7 MB)
Email in envelope

Get an email when there's a new version of GitHub Agentic Workflows

Home / v0.82.14
Name Modified Size InfoDownloads / Week
Parent folder
linux-arm64 2026-07-20 28.6 MB
0
windows-amd64.exe 2026-07-20 32.1 MB
0
windows-arm64.exe 2026-07-20 28.9 MB
0
gh-aw-wasm-v0.82.14.tar.gz 2026-07-20 6.1 MB
0
linux-386 2026-07-20 30.1 MB
0
linux-amd64 2026-07-20 31.4 MB
0
linux-arm 2026-07-20 29.7 MB
0
freebsd-arm64 2026-07-20 28.6 MB
0
android-arm64 2026-07-20 31.1 MB
0
checksums.txt 2026-07-20 1.0 kB
0
darwin-amd64 2026-07-20 31.9 MB
0
darwin-arm64 2026-07-20 29.3 MB
0
freebsd-386 2026-07-20 29.8 MB
0
freebsd-amd64 2026-07-20 31.3 MB
0
README.md 2026-07-20 24.4 kB
0
v0.82.14 source code.tar.gz 2026-07-20 246.8 MB
0
v0.82.14 source code.zip 2026-07-20 250.6 MB
0
Totals: 17 Items   866.3 MB 0

🌟 Release Highlights

This release focuses on safe-outputs reliability, workshop UX polish, a new top-level model field, and a wave of new linters and security guardrails.

✨ What's New

  • Top-level model field — You can now specify the model at the top level of your workflow (e.g., model: claude-sonnet-4-5), deprecating the nested engine.model path. Reference docs
  • auto_upgrade_cron in aw.json — Configure a custom auto-upgrade schedule directly in your project manifest instead of relying on defaults.
  • Evals enabled across 64 agentic workflows — Broader evaluation coverage improves regression detection and workflow quality assurance.
  • --rootless flag for install_copilot_cli.sh — ARC/DinD runners can now install the Copilot CLI without root privileges.
  • Mode-specific intent guidance for safe-output tools — Mutation tools now surface targeted guidance based on the current workflow mode, reducing misuse and improving agent decision quality.
  • Fail-fast guardrail for schema file changes — The compiler now rejects schema changes that were made without a rebuild, preventing subtle runtime mismatches.
  • Workshop: journey/adventure filtering, GFM alerts & task lists — Workshop steps now support filtering by journey/adventure tags, render GitHub-flavored alerts (> [!NOTE]), and display task-list checkboxes.
  • Workshop URL hash navigation — Browser back/forward now restores workshop state via URL hash encoding.
  • DeepSec & VulnHunter security scan workflows — On-demand and daily security scanning workflows added for continuous vulnerability detection.
  • errgroup for structured concurrency in MCP inspector — Replaces ad-hoc goroutine management with proper error propagation.

🐛 Bug Fixes & Improvements

  • tools.startup-timeout now propagates to gateway.startupTimeout — Fixes safeoutputs eviction on slow runners where the gateway was timing out before the tool server was ready.
  • OTEL_SERVICE_NAME respected — User-defined OpenTelemetry service names are no longer overridden when OTLP observability is enabled.
  • MCP CLI prompt list reflects --disable-builtin-mcps — The listed MCP servers now accurately reflect which servers are actually mounted.
  • logs tool fixed for missing workflow_name filter — Previously caused a context deadline exceeded error; now handled gracefully.
  • safe.directory trust bridged via GIT_CONFIG_* env vars — Fixes git operations in safe-outputs on restrictive runners.
  • partial_execution + terminal safe-output treated as success — Prevents false failure signals when an agent completes its final safe-output action after a partial execution state.
  • Stable cron schedule in make recompile — Pins --schedule-seed to eliminate drift in auto-upgrade lock files across recompiles.
  • #nosec justification separators normalized — - and — variants are now normalised to -- for consistent security annotation parsing.
  • close_issue and assign_to_agent payloads — Issue-intent metadata is now correctly nested in the payload structure.
  • update_issue MCP body length regression coverage — Added tests to guard against silent truncation above 10 KB.

⚡ Performance

  • parseEngineDefinitionFromJSON cached — Eliminates a per-compile JSON→YAML round-trip, reducing compilation overhead for workflows with engine definitions.
  • Reduced ambient context token usage — 4 workflows updated to use narrower context windows, lowering AI-credit burn.
  • Scheduled workflow staggering — Midnight batch workflows staggered to reduce peak AI-credit consumption.

🔒 Security

  • SHA-256 checksum pinned for sentrux binary install — Resolves RGS-018 supply-chain finding.
  • no-exec-interpolated-command ESLint rule — Flags shell commands constructed from interpolated strings.
  • no-github-request-interpolated-route extended — Now recognises global.getOctokit() aliases.
  • Cross-repo regex tightened (SEC-005) — Eliminates false positive on frontmatter_hash_pure.cjs.

🔧 New Linters

  • timenowsub — Flags time.Now().Sub(t) patterns that should be time.Since(t).
  • trimleftright — Detects distinct-character prefix/suffix bugs from strings.TrimLeft/TrimRight misuse.
  • appendoneelement — Catches single-element append patterns that could use assignment.
  • no-core-error-then-process-exit (ESLint) — Prevents error-then-exit anti-patterns in GitHub Scripts.
  • prefer-core-logging (ESLint) — Enforces structured logging via core.* instead of bare console.*.

📚 Documentation

  • ARC/DinD guide expanded — Covers troubleshooting, log paths, and tool cache guidance for rootless runners.
  • COPILOT_GITHUB_TOKEN vs GITHUB_TOKEN clarified — New section explains why the tokens are intentionally separate.
  • Quick Start: .lock.yml commit intent documented — Clarifies that committing lock files is intentional and expected.
  • Workshop relocated to /workshop/ — Canonical URL is now /workshop/ (legacy /workshops/<date-org>/ redirected).

Generated by 🚀 Release · 18.2 AIC · ⊞ 7.9K

What's Changed

Full Changelog: https://github.com/github/gh-aw/compare/v0.82.13...v0.82.14

Source: README.md, updated 2026-07-20