chore: bump gh-aw-firewall to v0.27.0 and sync AWF schema artifacts by Copilot · Pull Request #38235 · github/gh-aw

Copilot · 2026-06-09T23:46:16Z

This updates gh-aw to consume gh-aw-firewallv0.27.0 end-to-end, including default version pins and generated workflow artifacts that reference AWF container tags. It also reconciles embedded AWF schema content with the v0.27.0 release schema so compiled configs and lock outputs stay aligned with upstream.

Version + image pin updates
- Bumped DefaultFirewallVersion to v0.27.0 in pkg/constants/version_constants.go.
- Regenerated workflow lock files so AWF image refs now resolve to ghcr.io/github/gh-aw-firewall/*:0.27.0.
AWF schema synchronization
- Replaced embedded pkg/workflow/schemas/awf-config.schema.json with the v0.27.0 release schema.
- This pulls in upstream schema additions (including AI-credits and runtime config surface updates) and updates schema $id to the release-pinned URL.
Schema-validation compatibility adjustment
- Added normalization in validateAWFConfigJSON for templated apiProxy.modelFallback.enabled values (${{ ... }}) so compile-time validation remains compatible with expression-based workflow config while the upstream schema now types this field as boolean.
- Added focused test coverage for this behavior.
Generated fixture refresh
- Updated wasm golden fixtures impacted by AWF versioned schema/image references.
- Added patch changeset for release notes.

// pkg/constants/version_constants.goconstDefaultFirewallVersionVersion="v0.27.0"

✨ PR Review Safe Output Test - Run 27246838084

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 61.2 AIC · ⌖ 9.07 AIC · ◷

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

pelikhan · 2026-06-10T01:05:11Z

@copilot merge main and recompile

Copilot

Pull request overview

This pull request bumps gh-aw’s default gh-aw-firewall (AWF) dependency to v0.27.0, updates the embedded AWF JSON schema to match the v0.27.0 release schema, and refreshes generated workflow/golden artifacts that pin or reference AWF versions and container tags.

Changes:

Bump DefaultFirewallVersion to v0.27.0 and regenerate workflow lock + golden fixture outputs to reference 0.27.0 container tags / v0.27.0 schema URLs.
Sync the embedded awf-config.schema.json to the AWF v0.27.0 release schema (including new/updated fields and updated $id).
Keep compile-time schema validation compatible with expression-templated apiProxy.modelFallback.enabled by normalizing ${{ ... }} strings during validation, and add a focused test.

Show a summary per file

File	Description
`pkg/constants/version_constants.go`	Updates the default AWF version pin to `v0.27.0`.
`pkg/workflow/schemas/awf-config.schema.json`	Replaces the embedded schema content with the AWF `v0.27.0` release schema and updates `$id`.
`pkg/workflow/awf_config.go`	Normalizes templated `apiProxy.modelFallback.enabled` expressions before schema validation.
`pkg/workflow/awf_config_test.go`	Adds coverage ensuring expression-templated `modelFallback.enabled` passes compile-time schema validation.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden`	Regenerates golden fixture to reference `v0.27.0` / `0.27.0` AWF artifacts.
`.github/workflows/test-workflow.lock.yml`	Regenerates lock workflow manifest + embedded AWF config/schema URLs for `0.27.0`.
`.github/workflows/smoke-opencode.lock.yml`	Regenerates lock workflow manifest + embedded AWF config/schema URLs for `0.27.0`.
`.github/workflows/smoke-crush.lock.yml`	Regenerates lock workflow manifest + embedded AWF config/schema URLs for `0.27.0`.
`.github/workflows/example-permissions-warning.lock.yml`	Regenerates lock workflow manifest + embedded AWF config/schema URLs for `0.27.0`.
`.github/workflows/daily-malicious-code-scan.lock.yml`	Regenerates lock workflow manifest + embedded AWF config/schema URLs for `0.27.0`.
`.github/workflows/codex-github-remote-mcp-test.lock.yml`	Regenerates lock workflow manifest + embedded AWF config/schema URLs for `0.27.0`.
`.github/workflows/bot-detection.lock.yml`	Regenerates lock workflow manifest + embedded AWF config/schema URLs for `0.27.0`.
`.changeset/patch-bump-awf-v0-27-0.md`	Adds release notes entry for the AWF version bump + regenerated artifacts.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 46/259 changed files
Comments generated: 0

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-06-10T01:23:52Z

@copilot merge main and recompile

Done. I merged main and recompiled, then refreshed the wasm golden fixtures to match the merged state.

Commits:

c991f8b15e (merge + recompile)
1baf39c875 (wasm golden refresh)

github-actions · 2026-06-10T01:33:36Z

🚀 Smoke AntigravityMISSION COMPLETE! Antigravity has spoken. ✨

github-actions · 2026-06-10T01:33:43Z

🚀 Smoke PiMISSION COMPLETE! Pi delivered. 🥧

github-actions · 2026-06-10T01:33:48Z

⚠️Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-06-10T01:34:06Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-06-10T01:34:07Z

🎬 THE END — Smoke ClaudeMISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-06-10T01:34:09Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-10T01:34:11Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-06-10T01:34:22Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-10T01:37:56Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.54.0
jq	✅	1.7
yq	✅	4.53.2
curl	✅	8.5.0
gh	✅	2.92.0
node	✅	24.16.0
python3	✅	3.13.13
go	✅	1.24.13
java	✅	21.0.11
dotnet	✅	10.0.300

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · 40.4 AIC · ⌖ 12.2 AIC · ◷

github-actions · 2026-06-10T01:41:09Z

Smoke test for: chore: bump gh-aw-firewall to v0.27.0 and sync AWF schema artifacts\n✅ GitHub PR reads\n✅ Serena symbol search\n✅ Playwright GitHub title\n❌ Web-fetch MCP\n✅ Build\nOverall: FAIL

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · 46 AIC · ⌖ 4.13 AIC · ◷

github-actions · 2026-06-10T01:41:10Z

Comment Memory

Dawn checks GitHub
Symbols and titles align
Build hums through the code

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · 46 AIC · ⌖ 4.13 AIC · ◷

github-actions · 2026-06-10T01:42:28Z

🤖 Smoke Test: Claude — Run 27246838084

Core (#1-12): all ✅
PR Review (#13-19):#13 ✅ #14 ✅ #15 ✅ #16⚠️#17 ✅ #18 ✅ #19⚠️

Overall: PARTIAL (all executable tests passed; #16 & #19 skipped — no unresolved threads / no safe PR).

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 61.2 AIC · ⌖ 9.07 AIC · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 61.2 AIC · ⌖ 9.07 AIC

github-actions · 2026-06-10T01:42:36Z

@@ -0,0 +1,5 @@
+---


Smoke test review: frontmatter delimiter looks correct here. ✅

github-actions · 2026-06-10T01:42:36Z

+"gh-aw": patch
+---
+
+Bump the default gh-aw-firewall version to v0.27.0 and regenerate pinned workflow artifacts.


Smoke test review: clear changeset description for the version bump. 👍

github-actions · 2026-06-10T01:46:11Z

Smoke run.
PR: chore: bump gh-aw-firewall to v0.27.0 and sync AWF schema artifacts
1✅ 2✅ 3✅ 4✅ 5✅
6✅ 7✅ 8✅ 9✅ 10✅
11✅ 12✅ 13✅ 14✅ 15✅
PASS
Author: app/copilot-swe-agent
Assignees: lpcox, Copilot

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · 107.6 AIC · ⌖ 16.2 AIC · ◷

Initial plan
0ff8ffc

CopilotAI assigned Copilot and lpcox Jun 9, 2026

CopilotAI linked an issue Jun 9, 2026 that may be closed by this pull request
chore: bump AWF firewall version to v0.27.0 #38234
Closed

Copilotstarted work on behalf of lpcox June 9, 2026 23:46 View session

Bump AWF firewall to v0.27.0
dc8662d
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

CopilotAI changed the title ~~[WIP] Bump AWF firewall version to v0.27.0~~chore: bump gh-aw-firewall to v0.27.0 and sync AWF schema artifactsJun 10, 2026

Copilotfinished work on behalf of lpcox June 10, 2026 00:09

CopilotAI requested a review from lpcox June 10, 2026 00:09

pelikhan marked this pull request as ready for review June 10, 2026 01:04

CopilotAI review requested due to automatic review settings June 10, 2026 01:04

Copilotstarted reviewing on behalf of pelikhan June 10, 2026 01:05 View session

Copilotstarted work on behalf of pelikhan June 10, 2026 01:05 View session

CopilotAI reviewed Jun 10, 2026
View reviewed changes

CopilotAIand others added 2 commits June 10, 2026 01:18

Merge main and recompile workflows
c991f8b
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

test: refresh wasm golden fixtures after merge-main recompile
1baf39c
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilotfinished work on behalf of pelikhan June 10, 2026 01:24

CopilotAI requested a review from pelikhan June 10, 2026 01:24

pelikhan added the smoke label Jun 10, 2026

github-actionsBot mentioned this pull request Jun 10, 2026
[aw] No-Op Runs #37963
Closed

github-actionsBot mentioned this pull request Jun 10, 2026
Smoke Test: Claude - 27246838084 #38253
Closed

github-actionsBot added the smoke-claude label Jun 10, 2026

github-actionsBot reviewed Jun 10, 2026
View reviewed changes

github-actionsBot mentioned this pull request Jun 10, 2026
Smoke Test: Copilot - 27247112858 #38255
Closed

pelikhan merged commit cb24361 into mainJun 10, 2026
202 of 205 checks passed

pelikhan deleted the copilot/bump-awf-firewall-version-v0270 branch June 10, 2026 01:46

github-actionsBot mentioned this pull request Jun 10, 2026
[PR Triage Report] PR Triage Report - 2026-06-10 (Run 27261352444) #38307
Closed

Uh oh!

Conversation

CopilotAI commented Jun 9, 2026• edited by github-actions BotLoading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pelikhan commented Jun 10, 2026

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

CopilotAI commented Jun 10, 2026

Uh oh!

github-actionsBot commented Jun 10, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Jun 10, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Jun 10, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Jun 10, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Jun 10, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Jun 10, 2026

Uh oh!

github-actionsBot commented Jun 10, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented Jun 10, 2026

Uh oh!

github-actionsBot commented Jun 10, 2026

Agent Container Tool Check

Uh oh!

github-actionsBot commented Jun 10, 2026

Uh oh!

github-actionsBot commented Jun 10, 2026

Comment Memory

Uh oh!

github-actionsBot commented Jun 10, 2026

🤖 Smoke Test: Claude — Run 27246838084

Uh oh!

github-actionsBot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actionsBotJun 10, 2026

Choose a reason for hiding this comment

Uh oh!

github-actionsBotJun 10, 2026

Choose a reason for hiding this comment

Uh oh!

github-actionsBot commented Jun 10, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

CopilotAI commented Jun 9, 2026•
edited by github-actions Bot
Loading

github-actionsBot commented Jun 10, 2026•
edited
Loading

github-actionsBot commented Jun 10, 2026•
edited
Loading

github-actionsBot commented Jun 10, 2026•
edited
Loading

github-actionsBot commented Jun 10, 2026•
edited
Loading

github-actionsBot commented Jun 10, 2026•
edited
Loading

github-actionsBot commented Jun 10, 2026•
edited
Loading