GitHub Agentic Workflows Files

🌟 Release Highlights

This release focuses on work-queue reliability, safer checkout credential handling, and a broad set of compiler and workflow fixes.

✨ What's New

• Work queues: pools and workers now install on first use, with clearer diagnostics for missing pools and privacy-preserving GraphQL errors.
• Safe outputs: standardized machine-readable error codes, add_comment constraints disclosed in the tool description, and visible staged-preview notices on PR and Claim guards.
• Threat detection: matching-engine detection now inherits agent API targets, and validated status-only jobs are allowed after detection.
• Environments: workflow environments now propagate to activation jobs.
• Faster update: fewer network fetches, plus verbose request timings.

🐛 Bug Fixes & Improvements

• Release checkouts no longer persist credentials; compiler-generated PR checkouts are narrowly exempted from artipacked warnings.
• Compiler-generated constants are emitted as quoted strings, and schema-supported frontmatter shapes are accepted.
• Copilot BYOK HTTP API targets are preserved.
• Unmatched checkout.fetch refs no longer block other fetches.
• Fixed prompt tool scanner false positives, mapdeletecheck with asymmetric parentheses, and empty repo-memory wiki note substitution.
• Fixed missing embedded session-parser and grader runtime dependencies.
• Workflow health checks now have a time budget and debug logging; log storage admission and observability audits are bounded.
• Behavior-defined engine session capture is now protected.

📚 Documentation

• MemoryOps pattern page streamlined and docs updated for recent features.

Generated by 🚀 Release · copilot · auto · ~14 AIC · ⊞ 12.6K

What's Changed

• [log] Add debug logging to repository package manifest import/resource/skill paths by @github-actions[bot] in https://github.com/github/gh-aw/pull/71541
• Report missing work queue pools with actionable recovery diagnostics by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71495
• Prevent arXiv researcher Codex startup failure by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71608
• [docs] Update documentation for features from 2026-10-24 by @github-actions[bot] in https://github.com/github/gh-aw/pull/71631
• Keep TYPE-016 conformance check compatible with added parameters by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71615
• Require item-level verification in daily queue reports by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71607
• Fix Update Astro dependency downloads and upgrade command by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71619
• Fix mapdeletecheck detection with asymmetric parentheses by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71618
• Strengthen ledger formal-spec coverage by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71625
• Replace unavailable Copilot model in video analyzer by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71620
• Disclose add_comment constraints in tool description by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71614
• Add visible staged-preview notices to PR and Claim guards by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71612
• [instructions] Sync instruction files with release v0.93.2 by @github-actions[bot] in https://github.com/github/gh-aw/pull/71598
• [dead-code] chore: remove dead functions — 1 functions removed by @github-actions[bot] in https://github.com/github/gh-aw/pull/71660
• [Safe Outputs] Standardize machine-readable error codes by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71613
• Inherit agent API targets in matching-engine threat detection by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71624
• Propagate workflow environments to activation jobs by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71617
• Add detail-level A/B campaign to commit-changes-analyzer by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71666
• Update CLI and scanner image versions by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71616
• Approve libatomic container runtime license exception by @pelikhan in https://github.com/github/gh-aw/pull/71678
• fix: refresh verified TLA runtime checksum by @pelikhan in https://github.com/github/gh-aw/pull/71679
• Preflight agent assignment credentials before processing issues by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71611
• Skip unmatched checkout.fetch refs without blocking other fetches by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71622
• Fix external workflow sources for documentation jobs by @pelikhan in https://github.com/github/gh-aw/pull/71677
• Install configured work queue pools on first use by @pelikhan in https://github.com/github/gh-aw/pull/71675
• Fix missing work-queue diagnostic guidance by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71665
• Fix logs storage admission and bound observability audits by @pelikhan in https://github.com/github/gh-aw/pull/71686
• fix(workflow): preserve Copilot BYOK HTTP API targets by @pelikhan in https://github.com/github/gh-aw/pull/71680
• Fix remaining CI diagnostic guidance gaps by @pelikhan in https://github.com/github/gh-aw/pull/71688
• Fix missing grader runtime error codes dependency by @pelikhan in https://github.com/github/gh-aw/pull/71689
• Improve privacy-preserving work queue GraphQL diagnostics by @pelikhan in https://github.com/github/gh-aw/pull/71676
• Allow validated status-only jobs after detection by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71623
• Fix compiler integration fixtures for action pin linting by @pelikhan in https://github.com/github/gh-aw/pull/71692
• Fix Pi evals reading stale workflow prompts by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71664
• Reduce update network fetches and add verbose request timings by @dsyme in https://github.com/github/gh-aw/pull/71687
• Restore safe-output handler and tool-description conformance by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71609
• Fix remote repository API requests for experiments by @pelikhan in https://github.com/github/gh-aw/pull/71681
• fix: substitute empty repo-memory wiki note as a literal by @pelikhan in https://github.com/github/gh-aw/pull/71782
• Gate generated admission outputs on admission opt-in by @pelikhan in https://github.com/github/gh-aw/pull/71784
• Add a time budget and debug logging to workflow health checks by @pelikhan in https://github.com/github/gh-aw/pull/71786
• Fix first-use work-queue pool and worker registration by @pelikhan in https://github.com/github/gh-aw/pull/71787
• [docs] docs: unbloat MemoryOps pattern page by @github-actions[bot] in https://github.com/github/gh-aw/pull/71779
• Narrowly exempt compiler-generated PR checkouts from artipacked warnings by @pelikhan in https://github.com/github/gh-aw/pull/71783
• fix: avoid persisting release checkout credentials by @pelikhan in https://github.com/github/gh-aw/pull/71802
• Protect behavior-defined engine session capture by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/69586
• fix(workflow): gate conclusion stale-check output references by @pelikhan in https://github.com/github/gh-aw/pull/71808
• fix: emit compiler-generated constants as quoted strings by @pelikhan in https://github.com/github/gh-aw/pull/71803
• fix(workflow): avoid prompt tool scanner false positives by @pelikhan in https://github.com/github/gh-aw/pull/71813
• fix(workflow): accept schema-supported frontmatter shapes by @pelikhan in https://github.com/github/gh-aw/pull/71809
• Recognize verified compiler-owned checkout cleanup in artipacked lint by @pelikhan in https://github.com/github/gh-aw/pull/71806
• Fix missing embedded session-parser dependency by @pelikhan in https://github.com/github/gh-aw/pull/71822

Full Changelog: https://github.com/github/gh-aw/compare/v0.93.3...v0.93.4