Bump gh-aw-firewall default to v0.28.62 by Copilot · Pull Request #69526 · github/gh-aw

Copilot · 2026-10-17T00:06:29Z

Upgrade the default AWF version from v0.28.59 to v0.28.62 and integrate its versioned router image. Preserve compatibility with older AWF pins.

Version and routing: Select the AWF-published router image for v0.28.62 and retain the legacy router for older versions.
```
const DefaultFirewallVersion Version = "v0.28.62"
```
Generated artifacts: Add sorted digest pins for AWF images and regenerate workflow lock files.
Docs and release notes: Update model-routing documentation and add a patch changeset.

Fixes Bump gh-aw-firewall to v0.28.62 #69525

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

pelikhan · 2026-10-17T01:07:04Z

@copilot resolve the merge conflicts in this pull request

…rewall-v02862 # Conflicts: # .github/workflows/daily-spending-forecast.lock.yml # .github/workflows/daily-workflow-security-model.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-10-17T01:27:55Z

@copilot resolve the merge conflicts in this pull request

Merged main, resolved both generated lock conflicts, and pushed merge commit 56707f9.

Copilot

🔵 Needs a closer look

The firewall and router-image migration still needs verified runtime compatibility and final human review.

1 open issue

Use double quotes for gh-aw package key in changeset · New

What changed in this PR

Updates gh-aw’s default firewall to v0.28.62 and adopts its published router image while retaining the legacy router for older pins.

Changes:

Updates version defaults, router selection, and compatibility assertions.
Refreshes image digests and generated workflow locks.
Updates routing documentation and adds a patch changeset.

File	Description
`pkg/workflow/sandbox_agent_images.go`	Selects the versioned AWF router.
`pkg/workflow/model_routing_test.go`	Checks current and legacy router selection.
`pkg/workflow/data/action_pins.json`	Adds compiler image pins.
`pkg/workflow/awf_feature_flags.go`	Adds the router-release version gate.
`pkg/constants/version_constants.go`	Updates AWF default and router threshold.
`pkg/constants/version_constants_test.go`	Updates version assertions.
`pkg/actionpins/data/action_pins.json`	Adds shared image pins.
`docs/src/content/docs/reference/model-routing.md`	Documents AWF-owned router releases.
`.github/workflows/smoke-pi-auto.lock.yml`	Refreshes Pi smoke runtime and pins.
`.github/workflows/smoke-github-codex.lock.yml`	Refreshes GitHub Codex smoke artifacts.
`.github/workflows/smoke-codex-bare-auto.lock.yml`	Refreshes bare-auto Codex artifacts.
`.github/workflows/smoke-codex-auto.lock.yml`	Refreshes auto Codex artifacts.
`.github/workflows/smoke-claude-copilot-auto.lock.yml`	Refreshes Claude Copilot smoke artifacts.
`.github/workflows/smoke-claude-auto.lock.yml`	Refreshes auto Claude artifacts.
`.github/workflows/smoke-ci.lock.yml`	Refreshes CI smoke runtime and pins.
`.github/workflows/engine-conformance-opencode.lock.yml`	Refreshes OpenCode conformance artifacts.
`.github/workflows/engine-conformance-goose.lock.yml`	Refreshes Goose conformance artifacts.
`.github/aw/actions-lock.json`	Adds repository image digest pins.
`.changeset/patch-bump-gh-aw-firewall-v0-28-62.md`	Adds the upgrade release note.

_{Review effort: Max}

lpcox · 2026-10-17T01:44:22Z

@copilot address review feedback

Bump the default gh-aw-firewall version and update router image. Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

pelikhan · 2026-10-17T01:52:22Z

/smoke-copilot

github-actions · 2026-10-17T01:52:56Z

📰 BREAKING: Smoke Copilot is now investigating this issue comment. Sources say the story is developing...

gh-aw-bot · 2026-10-17T02:14:12Z

@copilot address the following outstanding work in one pass:

Update this branch with the latest main using make merge-main, resolving any conflicts and preserving the intended changes.
Fix failing check agent (FAILURE): https://github.com/github/gh-aw/actions/runs/38992703035/job/117278593870.
Fix failing check conclusion (FAILURE): https://github.com/github/gh-aw/actions/runs/38992703035/job/117279417176.
Fix failing check detection (FAILURE): https://github.com/github/gh-aw/actions/runs/38992703035/job/117279294248.

Push the necessary fixes, reply to each listed review thread and resolve it when addressed. Ignore feedback already answered or resolved. Use the pr-finisher skill and stop when only human review or CI remains; do not trigger CI.

Sous-chef head: e026328
Sous-chef work: 34f38971738f6a752a646bd7797a6c8d47fb096e4eb6f91e946a91255433c8c4 51e2287c3d1ee41b7e13769862add61dcd292a623cf943abc5968c984e246bcf a121abdb6f7ec1d76bbf7f04ffacc47490c3a82a0a8351c53214073a3902577d
Sous-chef state: 808794aee61779973d329aa5e11d177e057836beaec1d138a46ed353db2f57bb

Generated by 👨‍🍳 PR Sous Chef · pi · haiku45 · 3.22 AIC · ⌖ 6.97 AIC · ⊞ 1.1K · ◷
_{Comment /souschef to run again}

…rewall-v02862 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot · 2026-10-17T02:33:29Z

@copilot address the following outstanding work in one pass:

Update this branch with the latest main using make merge-main, resolving any conflicts and preserving the intended changes....

Merged the latest main in aa46657 and fixed the cyclic v0.28.62 image digests in 39d5bcc. The agent and detection failures traced to manifest unknown; conclusion was downstream. Local formatting, lint, impacted tests, workflow-lock checks, and GHCR digest checks pass. I did not trigger CI; a maintainer must re-run it. The only review thread is already resolved.

pelikhan · 2026-10-17T13:48:43Z

/smoke-copilot

github-actions · 2026-10-17T13:49:19Z

📰 BREAKING: Smoke Copilot is now investigating this issue comment. Sources say the story is developing...

github-actions · 2026-10-17T13:57:21Z

Smoke Copilot: FAIL
✅ PRs, build, file
❌ Serena, Playwright, curl, many others not run

📰 BREAKING: Report filed by Smoke Copilot · copilot · auto · 15.3 AIC · ⊞ 11.6K · ◷
_{Comment /smoke-copilot to run again}
_{Add label smoke to run again}

github-actions · 2026-10-17T22:26:29Z

🎉 This pull request is included in a new release.

Release: v0.92.5

Initial plan

193489b

Copilot AI assigned Copilot and lpcox Oct 17, 2026

Copilot started work on behalf of lpcox October 17, 2026 00:07

View session

Copilot AI linked an issue Oct 17, 2026 that may be closed by this pull request

Bump gh-aw-firewall to v0.28.62 #69525

Closed

6 tasks

Copilot AI and others added 2 commits October 17, 2026 00:34

Bump AWF default to v0.28.62

56e989d

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Sort AWF image pin catalogs

3d45483

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update gh-aw-firewall to version v0.28.62~~ Bump gh-aw-firewall default to v0.28.62 Oct 17, 2026

Copilot finished work on behalf of lpcox October 17, 2026 00:56

Copilot AI requested a review from lpcox October 17, 2026 00:56

Copilot started work on behalf of pelikhan October 17, 2026 01:07

View session

github-actions Bot mentioned this pull request Oct 17, 2026

[Contribution Check Report] Contribution Check — 2026-10-17 #69579

Closed

lpcox marked this pull request as ready for review October 17, 2026 01:22

Copilot AI max review requested due to automatic review settings October 17, 2026 01:22

Copilot started reviewing on behalf of lpcox October 17, 2026 01:23

View session

Merge remote-tracking branch 'origin/main' into copilot/bump-gh-aw-fi…

56707f9

…rewall-v02862 # Conflicts: # .github/workflows/daily-spending-forecast.lock.yml # .github/workflows/daily-workflow-security-model.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan October 17, 2026 01:28

Copilot AI requested a review from pelikhan October 17, 2026 01:28

Copilot AI reviewed Oct 17, 2026

View reviewed changes

Comment thread .changeset/patch-bump-gh-aw-firewall-v0-28-62.md Outdated

Update gh-aw-firewall version to v0.28.62

e026328

Bump the default gh-aw-firewall version and update router image. Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Copilot started work on behalf of lpcox October 17, 2026 01:44

View session

Copilot stopped work on behalf of lpcox due to an error October 17, 2026 01:46
The session was cancelled by the user.

pelikhan added the smoke-copilot label Oct 17, 2026

github-actions Bot mentioned this pull request Oct 17, 2026

[aw] Smoke Copilot failed before agent execution started #69583

Closed

github-actions Bot mentioned this pull request Oct 17, 2026

[pr-sous-chef] Sous Chef 🍳 | 2026-10-17T00:54:05Z #69570

Closed

Copilot started work on behalf of gh-aw-bot October 17, 2026 02:14

View session

Copilot AI and others added 2 commits October 17, 2026 02:20

Merge remote-tracking branch 'origin/main' into copilot/bump-gh-aw-fi…

aa46657

…rewall-v02862 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Fix AWF v0.28.62 image digest pins

39d5bcc

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot finished work on behalf of gh-aw-bot October 17, 2026 02:35

Copilot AI requested a review from gh-aw-bot October 17, 2026 02:35

This was referenced Oct 17, 2026

[PR Triage Report] PR triage report: 2026-10-17 #69641

Closed

[PR Triage Report] PR triage report: 2026-10-17 #69701

Closed

github-actions Bot mentioned this pull request Oct 17, 2026

Smoke Test: Copilot - 39038138874 #69712

Closed

pelikhan merged commit 693e845 into main Oct 17, 2026
48 checks passed

pelikhan deleted the copilot/bump-gh-aw-firewall-v02862 branch October 17, 2026 14:06

github-actions Bot mentioned this pull request Oct 17, 2026

[PR Triage Report] PR triage report: 7 open Copilot-authored PRs #69761

Closed

Navigation Menu

Repository navigation

Bump gh-aw-firewall default to v0.28.62 - #69526

Bump gh-aw-firewall default to v0.28.62#69526
pelikhan merged 7 commits into
mainfrom
copilot/bump-gh-aw-firewall-v02862

Copilot AI commented Oct 17, 2026 •

edited

Loading

Uh oh!

pelikhan commented Oct 17, 2026

Uh oh!

Copilot AI commented Oct 17, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

lpcox commented Oct 17, 2026

Uh oh!

pelikhan commented Oct 17, 2026

Uh oh!

github-actions Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

gh-aw-bot commented Oct 17, 2026

Uh oh!

Copilot AI commented Oct 17, 2026

Uh oh!

pelikhan commented Oct 17, 2026

Uh oh!

github-actions Bot commented Oct 17, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 17, 2026

Uh oh!

Uh oh!

github-actions Bot commented Oct 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

Copilot AI commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pelikhan commented Oct 17, 2026

Uh oh!

Copilot AI commented Oct 17, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🔵 Needs a closer look

Uh oh!

Uh oh!

lpcox commented Oct 17, 2026

Uh oh!

pelikhan commented Oct 17, 2026

Uh oh!

github-actions Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gh-aw-bot commented Oct 17, 2026

Uh oh!

Copilot AI commented Oct 17, 2026

Uh oh!

pelikhan commented Oct 17, 2026

Uh oh!

github-actions Bot commented Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 17, 2026

Uh oh!

Uh oh!

github-actions Bot commented Oct 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Copilot AI commented Oct 17, 2026 •

edited

Loading

github-actions Bot commented Oct 17, 2026 •

edited

Loading

github-actions Bot commented Oct 17, 2026 •

edited

Loading