Bump gh-aw-firewall to v0.27.16 and sync AWF integration artifacts by Copilot · Pull Request #42542 · github/gh-aw

Copilot · 2026-06-30T18:38:20Z

This updates gh-aw to consume gh-aw-firewall v0.27.16 and aligns embedded AWF config schema/artifacts with that release. The change is scoped to version pinning, schema sync, and regenerated outputs that depend on AWF release metadata.

Version pin
- Updated DefaultFirewallVersion in pkg/constants/version_constants.go:
```
const DefaultFirewallVersion Version = "v0.27.16"
```
AWF config schema sync
- Refreshed pkg/workflow/schemas/awf-config.schema.json from upstream gh-aw-firewall v0.27.16 canonical schema.
- Captures upstream schema updates (including runner topology shape and updated apiProxy.maxTurns HTTP status wording).
Regenerated AWF-dependent artifacts
- Recompiled workflow lock outputs under .github/workflows/*.lock.yml to pick up the new AWF release pin and image metadata.
- Updated wasm golden expectations under pkg/workflow/testdata/TestWasmGolden_* to match regenerated compiler output.
Release note/changelog plumbing
- Added patch changeset: .changeset/patch-bump-awf-v0-27-16.md.

✨ PR Review Safe Output Test - Run 28471293291

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 65.7 AIC · ⌖ 25.6 AIC · ⊞ 8.7K · ◷
_{Comment /smoke-claude to run again}

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

lpcox · 2026-06-30T19:00:02Z

@copilot resolve the merge conflicts in this pull request

Copilot

Pull request overview

This pull request bumps the default gh-aw-firewall (AWF) version consumed by gh-aw to v0.27.16, syncs the embedded AWF config JSON schema to match that release, and regenerates AWF-dependent generated artifacts (workflow lock files and wasm golden outputs) so the repository stays internally consistent with the new AWF release metadata.

Changes:

Bumped the pinned default AWF version to v0.27.16.
Synced pkg/workflow/schemas/awf-config.schema.json with upstream (including updated runner topology shape and updated apiProxy.maxTurns wording).
Regenerated workflow lock outputs and wasm golden expectations to reflect the new AWF pin and updated image/schema references.

Show a summary per file

File	Description
pkg/constants/version_constants.go	Updates `DefaultFirewallVersion` to `v0.27.16`.
pkg/workflow/schemas/awf-config.schema.json	Refreshes embedded AWF config schema to match `v0.27.16` (runner topology + wording updates).
.changeset/patch-bump-awf-v0-27-16.md	Adds a patch changeset documenting the AWF bump + artifact sync.
.github/workflows/test-workflow.lock.yml	Regenerated lockfile to reference `0.27.16` AWF images/binary/schema URL.
.github/workflows/example-permissions-warning.lock.yml	Regenerated lockfile to reference `0.27.16` AWF images/binary/schema URL.
.github/workflows/daily-max-ai-credits-test.lock.yml	Regenerated lockfile to reference `0.27.16` AWF images/binary/schema URL.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Regenerated lockfile to reference `0.27.16` AWF images/binary/schema URL.
.github/workflows/bot-detection.lock.yml	Regenerated lockfile to reference `0.27.16` AWF images/binary/schema URL.
.github/workflows/agentic-token-optimizer.lock.yml	Regenerated lockfile (upstream-sourced workflow) to reference `0.27.16` AWF images/binary/schema URL.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.
pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.
pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.
pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.
pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.
pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden	Updates wasm golden output to reflect `v0.27.16` pins/URLs/images.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 43/269 changed files
Comments generated: 0
Review effort level: Low

github-actions · 2026-06-30T19:05:24Z

🤖 PR Triage

Field	Value
Category	`chore`
Risk	🟢 Low
Score	18 / 100
Action	⏸ `defer`
Batch	`draft-small` (with #42537, #42535)

Score breakdown: Impact 8/50 · Urgency 5/30 · Quality 5/20

Rationale: WIP/DRAFT firewall version bump (v0.27.16, +1/-1). No CI yet. Mark ready when complete; part of the draft-small batch for low-overhead group review.

Generated by 🔧 PR Triage Agent · 83.9 AIC · ⌖ 17.1 AIC · ⊞ 1.6K · ◷

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot · 2026-06-30T19:19:37Z

@copilot resolve the merge conflicts in this pull request

Resolved. I merged origin/main, resolved the lock-file merge conflicts, and pushed merge commit dca8912b82.

github-actions · 2026-06-30T19:50:18Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-06-30T19:50:30Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-06-30T19:50:36Z

🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧

github-actions · 2026-06-30T19:51:11Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-30T19:51:19Z

📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-30T19:51:25Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-30T19:56:00Z

Smoke Test Results

GitHub Fetch: ✅
Web Fetch: ✅
File Writing: ✅
Bash Tool: ✅
Build gh-aw: ❌

Overall Status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

✨ Smoke Gemini — Powered by Gemini · ◷
_{Comment /smoke-gemini to run again}

github-actions · 2026-06-30T19:56:36Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.54.0
jq	✅	1.7
yq	✅	v4.53.3
curl	✅	8.5.0
gh	✅	2.95.0
node	✅	v22.23.0
python3	✅	3.11.15 (PyPy)
go	✅	1.24.13
java	✅	21.0.11
dotnet	✅	10.0.301

Result: 12/12 tools available ✅

Overall Status: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

🔧 Tool validation by Agent Container Smoke Test · 16.7 AIC · ⌖ 6.41 AIC · ⊞ 4.7K · ◷
_{Comment /smoke-test-tools to run again}

github-actions · 2026-06-30T20:00:12Z

Merged PRs:

[42538] [linter-miner] linter: add sprintfint — flag fmt.Sprintf("%d", x) where x is int
[42537] eslint-factory: remove useless rethrow from require-json-parse-try-catch suggestion

Results:

PASS 1,2,3,4,6,7,8,9
FAIL 5
SKIP 10

Overall: FAIL

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · 10.3 AIC · ⌖ 1.64 AIC · ⊞ 10.9K · ◷
_{Comment /smoke-codex to run again}

github-actions · 2026-06-30T20:00:13Z

Comment Memory

Silent morning code
Git branches hold their breath for tests
Signals cross at dawn

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · 10.3 AIC · ⌖ 1.64 AIC · ⊞ 10.9K · ◷
_{Comment /smoke-codex to run again}

github-actions · 2026-06-30T20:01:15Z

💨 Smoke Test: Claude — Run 28471293291

Core #1-12: ✅ all passed
PR Review #13-15,17,18: ✅ passed | #16: ⚠️ skipped (no unresolved threads) | #19: ⚠️ skipped (no safe test PR)

Overall: PARTIAL (all functional tests passed) 🎉

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 65.7 AIC · ⌖ 25.6 AIC · ⊞ 8.7K · ◷
_{Comment /smoke-claude to run again}

github-actions

💥 Automated smoke test review - all systems nominal!

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 65.7 AIC · ⌖ 25.6 AIC · ⊞ 8.7K
_{Comment /smoke-claude to run again}

github-actions · 2026-06-30T20:01:22Z

@@ -0,0 +1,5 @@
+---
+"gh-aw": patch


Smoke test: changeset version bump entry looks correct. 👍

github-actions · 2026-06-30T20:01:22Z

+"gh-aw": patch
+---
+
+Bump the default gh-aw-firewall version to v0.27.16, sync the embedded AWF config schema, and regenerate pinned workflow artifacts.


Smoke test: clear changelog description of the firewall bump. ✅

github-actions

Smoke review queued: validated inline comment creation and review submission for this PR.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · 362.3 AIC · ⌖ 23 AIC · ⊞ 19.1K
_{Comment /smoke-copilot to run again}
_{Add label smoke to run again}

github-actions · 2026-06-30T20:04:54Z

Smoke tests run 28471598126: FAIL overall; see issue aw_smoke1 for details.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot - AOAI (Entra) · 129.2 AIC · ⌖ 6.65 AIC · ⊞ 17.7K · ◷
_{Comment /smoke-copilot-aoai-entra to run again}
_{Add label smoke to run again}

github-actions · 2026-06-30T23:05:46Z

🎉 This pull request is included in a new release.

Release: v0.82.1

Initial plan

621bc4b

Copilot AI assigned Copilot and lpcox Jun 30, 2026

Copilot started work on behalf of lpcox June 30, 2026 18:38 View session

Copilot AI linked an issue Jun 30, 2026 that may be closed by this pull request

Bump gh-aw-firewall to v0.27.16 #42540

Closed

Copilot AI and others added 2 commits June 30, 2026 18:42

Plan: bump gh-aw-firewall to v0.27.16

2218743

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Bump gh-aw-firewall to v0.27.16 and regenerate artifacts

a108b1a

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update gh-aw-firewall to version 0.27.16~~ Bump gh-aw-firewall to v0.27.16 and sync AWF integration artifacts Jun 30, 2026

Copilot AI requested a review from lpcox June 30, 2026 18:54

Copilot finished work on behalf of lpcox June 30, 2026 18:54

lpcox marked this pull request as ready for review June 30, 2026 19:00

Copilot AI review requested due to automatic review settings June 30, 2026 19:00

Copilot started work on behalf of lpcox June 30, 2026 19:00 View session

Copilot started reviewing on behalf of lpcox June 30, 2026 19:00 View session

Copilot AI reviewed Jun 30, 2026

View reviewed changes

github-actions Bot added pr-action:defer pr-agent:copilot-swe-agent pr-batch:draft-small pr-priority:low pr-risk:low pr-type:chore labels Jun 30, 2026

This was referenced Jun 30, 2026

eslint-factory: remove useless rethrow from require-json-parse-try-catch suggestion #42537

Merged

Auto-label PR Triage report issues on creation #42535

Merged

[PR Triage Report] 2026-06-30 18:51 UTC — 13 agent PRs (11 new, 2 carried over) #42545

Closed

Merge origin/main to resolve PR conflicts

dca8912

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox June 30, 2026 19:19

Merge branch 'main' into copilot/github-42540-bump-gh-aw-firewall

40db302

github-actions Bot temporarily deployed to aoai-model June 30, 2026 19:51 Inactive

github-actions Bot mentioned this pull request Jun 30, 2026

[aw] Smoke Antigravity produced no safe outputs #42553

Closed

github-actions Bot mentioned this pull request Jun 30, 2026

Smoke Test: Claude - 28471293291 #42557

Closed

github-actions Bot added the smoke-claude label Jun 30, 2026

github-actions Bot reviewed Jun 30, 2026

View reviewed changes

github-actions Bot mentioned this pull request Jun 30, 2026

[aw] Smoke Codex is missing required tool #42559

Closed

github-actions Bot temporarily deployed to aoai-model June 30, 2026 20:02 Inactive

github-actions Bot reviewed Jun 30, 2026

View reviewed changes

github-actions Bot temporarily deployed to aoai-model June 30, 2026 20:04 Inactive

github-actions Bot mentioned this pull request Jun 30, 2026

Smoke Test: Copilot - AOAI - 28471598126 #42563

Closed

github-actions Bot added smoke-copilot-aoai-entra and removed smoke labels Jun 30, 2026

github-actions Bot temporarily deployed to aoai-model June 30, 2026 20:05 Inactive

github-actions Bot mentioned this pull request Jun 30, 2026

[aw] Smoke Copilot reported incomplete result #42565

Closed

pelikhan merged commit 5329117 into main Jun 30, 2026
214 of 215 checks passed

pelikhan deleted the copilot/github-42540-bump-gh-aw-firewall branch June 30, 2026 20:11

Uh oh!

Conversation

Copilot AI commented Jun 30, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

lpcox commented Jun 30, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

github-actions Bot commented Jun 30, 2026

🤖 PR Triage

Uh oh!

Copilot AI commented Jun 30, 2026

Uh oh!

github-actions Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

github-actions Bot commented Jun 30, 2026

Smoke Test Results

Uh oh!

github-actions Bot commented Jun 30, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

github-actions Bot commented Jun 30, 2026

Comment Memory

Uh oh!

github-actions Bot commented Jun 30, 2026

💨 Smoke Test: Claude — Run 28471293291

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jun 30, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jun 30, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jun 30, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented Jun 30, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jun 30, 2026 •

edited

Loading

github-actions Bot commented Jun 30, 2026 •

edited

Loading

github-actions Bot commented Jun 30, 2026 •

edited

Loading