GitHub Agentic Workflows Files

🌟 Release Highlights

v1.0.1 focuses on safer pull request outputs, smoother compile and update workflows, and improved observability.

✨ What's New

• Lock-safe pull request outputs: code-producing workflows now use lock-safe PR outputs, with a suggested lock exclusion when workflow permission pushes fail (#72396, [#72423]).
• Actions-lock integration: compile can now optionally integrate with actions-lock (#72395).
• Guided pull_request_target fixes: guided remediation with safe role restriction (#72412).
• Interactive org and enterprise update rollouts (#72418).
• Native Actions expression grammar replaces legacy expression parsing (#72413).
• Richer unified sessions: safe-output, safe job/script, and memory-save outcomes are now recorded (#72146, [#72138], [#72133]), plus harness retry telemetry in spans and usage artifacts (#71934).
• Copilot CLI upgraded to 1.0.103 with a reviewed checksum pin (#72099).

🐛 Bug Fixes & Improvements

• Preserve cancelled startup failure diagnostics and suppress noisy startup-failure reports for cancelled jobs (#72432, [#72405]).
• Fix privileged AWF environment forwarding on sudo-rs (#72409).
• Merge imported job outputs with main workflow precedence (#72407).
• Honor newer cached action pins in runtime setup (#72272).
• Trust same-repository bot PRs triggered by labels (#72074).
• Enforce ubuntu-slim timeout limits and upgrade default runners for longer jobs (#72131).
• Fill model pricing gaps and accept none/max for pinned Codex routing (#72414, [#70952]).
• Harden AWF release download retries and fix work-queue provisioning recovery (#72157, [#72400]).

📚 Documentation

• New explanation of the activation gate and CAO integration (#72379) and a leaner troubleshooting guide (#72280).

Generated by 🚀 Release · copilot · auto · \~15 AIC · ⊞ 12.9K

What's Changed

• Trust same-repository bot PRs triggered by labels by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72074
• Upgrade Copilot CLI to 1.0.103 with reviewed checksum pin by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72099
• [blog] Agent of the Day – 2026-10-26 by @github-actions[bot] in https://github.com/github/gh-aw/pull/72127
• Soften container pin update failure messages by @dsyme in https://github.com/github/gh-aw/pull/72093
• Use Gonum helpers for grader descriptive statistics by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72100
• Correct map tool usage in built-in ledger smoke workflow by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72095
• Make setup action reference tests deterministic by @pelikhan in https://github.com/github/gh-aw/pull/72155
• Enforce ubuntu-slim timeout limits and upgrade default runners for longer jobs by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72131
• Record memory save outcomes in unified sessions and conclusion data by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72133
• Model routing: accept none/max for pinned Codex and add routed Codex smoke by @SivaKesava1 with @Copilot in https://github.com/github/gh-aw/pull/70952
• Preserve harness retry telemetry in spans and usage artifacts by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/71934
• Record safe job and script outcomes in unified sessions by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72146
• Record privacy-preserving safe-output outcomes in unified sessions by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72138
• Fix Aider Go test stub package declarations by @pelikhan in https://github.com/github/gh-aw/pull/72164
• Harden AWF release download retries and diagnostics by @pelikhan in https://github.com/github/gh-aw/pull/72157
• Preview Notices by @salilsub in https://github.com/github/gh-aw/pull/72217
• Revert "Preview Notices (#72217)" by @pelikhan in https://github.com/github/gh-aw/pull/72281
• Retry transient PR Sous Chef API failures by @pelikhan in https://github.com/github/gh-aw/pull/72282
• [docs] docs: unbloat troubleshooting/common-issues.md by @github-actions[bot] in https://github.com/github/gh-aw/pull/72280
• [log] Add debug logging to unlogged branches in cli package-manifest/actionlint code by @github-actions[bot] in https://github.com/github/gh-aw/pull/72299
• [instructions] Sync instruction files with release v0.93.5 by @github-actions[bot] in https://github.com/github/gh-aw/pull/72363
• Honor newer cached action pins in runtime setup by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72272
• docs: explain the activation gate and CAO integration by @pelikhan in https://github.com/github/gh-aw/pull/72379
• chore: update action and container pins by @pelikhan in https://github.com/github/gh-aw/pull/72377
• build(deps-dev): bump fast-uri from 3.1.8 to 3.1.9 in /actions/setup/js in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/github/gh-aw/pull/71506
• build(deps): bump undici from 6.29.0 to 6.29.1 in /actions/setup/js in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/github/gh-aw/pull/72384
• build(deps): bump library/alpine from 294b683 to be26560 by @dependabot[bot] in https://github.com/github/gh-aw/pull/72393
• Refactor arXiv paper memory to use a built-in ledger by @pelikhan in https://github.com/github/gh-aw/pull/72394
• build(deps): apply pending Dependabot updates by @pelikhan in https://github.com/github/gh-aw/pull/72397
• [docs] Update documentation for features from 2026-10-27 by @github-actions[bot] in https://github.com/github/gh-aw/pull/72406
• Fix work-queue provisioning transport recovery by @pelikhan in https://github.com/github/gh-aw/pull/72400
• fix: fill model pricing gaps and restore 1ES-compatible Vite by @pelikhan in https://github.com/github/gh-aw/pull/72414
• feat: add optional actions-lock integration to compile by @pelikhan in https://github.com/github/gh-aw/pull/72395
• Suppress startup-failure reports for cancelled agent jobs by @pelikhan with @Copilot in https://github.com/github/gh-aw/pull/72405
• Add guided pull_request_target fixes and safe role restriction by @pelikhan in https://github.com/github/gh-aw/pull/72412
• Merge imported job outputs with main workflow precedence by @pelikhan in https://github.com/github/gh-aw/pull/72407
• Add lock-safe pull request outputs and migrate code-producing workflows by @pelikhan in https://github.com/github/gh-aw/pull/72396
• Add interactive org and enterprise update rollouts by @pelikhan in https://github.com/github/gh-aw/pull/72418
• Replace legacy expression parsing with native Actions grammar by @pelikhan in https://github.com/github/gh-aw/pull/72413
• Suggest lock exclusion for workflow permission push failures by @pelikhan in https://github.com/github/gh-aw/pull/72423
• fix: refresh vendored Node image pin to patched build by @pelikhan in https://github.com/github/gh-aw/pull/72382
• [blog] Agent of the Day – 2026-10-27 by @github-actions[bot] in https://github.com/github/gh-aw/pull/72460
• Preserve cancelled startup failure diagnostics by @pelikhan in https://github.com/github/gh-aw/pull/72432
• [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in https://github.com/github/gh-aw/pull/72463
• Refactor issue and comment Markdown into report trees by @pelikhan in https://github.com/github/gh-aw/pull/72415
• Fix privileged AWF environment forwarding on sudo-rs by @pelikhan in https://github.com/github/gh-aw/pull/72409

Full Changelog: https://github.com/github/gh-aw/compare/v1.0.0...v1.0.1