Bump gh-aw-firewall version from v0.6.0 to v0.7.0

[Copilot]

Updates AWF to v0.7.0 per https://github.com/githubnext/gh-aw-firewall/releases/tag/v0.7.0

Changes

• Updated DefaultFirewallVersion constant in pkg/constants/constants.go
• Updated corresponding test expectation
• Recompiled all workflow lock files

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login d-artifact.git d-artifact.git 0/x64/bin/node -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linuconfig -V=f�� 4/create_discussion.js -tests (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login tags/v6 -importcfg (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login ithub/workflows --json e/git --jq .owner.login + "secret 64/bin/go e/git rev-�� 3901-19395/test-870473097/.github/workflows om/haskell-actions/setup.git /usr/bin/git t ./...)" ]; the/usr/bin/git (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

bump up awf version to v0.7.0 https://github.com/githubnext/gh-aw-firewall/releases/tag/v0.7.0

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[github-actions]

🤖 DIAGNOSTIC COMPLETE: Smoke Copilot No Firewall STATUS: ALL_UNITS_OPERATIONAL. MISSION_SUCCESS.

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🎉 Yo ho ho! Smoke Copilot Safe Inputs found the treasure and completed successfully! ⚓💰

[github-actions]

🎬 THE END — Smoke ClaudeMISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

🎬 THE END — Smoke ClaudeMISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

🤖 DIAGNOSTIC COMPLETE: Smoke Copilot No Firewall STATUS: ALL_UNITS_OPERATIONAL. MISSION_SUCCESS.

[github-actions]

🎉 Yo ho ho! Smoke Copilot Safe Inputs found the treasure and completed successfully! ⚓💰

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🎭 Copilot Engine Smoke Test Results

Last 2 Merged PRs:

• Disable sandbox.agent: false in strict mode for copilot engine #6903: Disable sandbox.agent: false in strict mode for copilot engine
• Remove stdio mode from safe-inputs, keep HTTP-only transport #6900: Remove stdio mode from safe-inputs, keep HTTP-only transport

Test Results:

• ✅ GitHub MCP Testing: Successfully retrieved merged PRs
• ✅ File Writing: Agent directory test file created
• ✅ Bash Tool: Verified file creation successful
• ⚠️ GitHub MCP Default Toolset: get_me tool not available (expected - requires user toolset, not in default)
• ✅ Cache Memory: Cache file created and verified

Overall Status: ✅ PASS

Author:@Copilot | Assignees:@pelikhan, @Mossaka

📰 BREAKING: Report filed by Smoke Copilot fer issue #6898 🗺️

[github-actions]

Copilot Smoke Test Results

Recent PRs: #307 (Fix OIDC token), #306 (Fix MCP server registry)

✅ GitHub MCP
✅ File Writing
✅ Bash Tool
✅ Serena MCP (9 classes found)
✅ Safe Input gh Tool (3 issues listed)

Status: PASS

Ahoy! This treasure was crafted by 🏴‍☠️ Smoke Copilot Safe Inputs fer issue #6898 🗺️

[github-actions]

PRs reviewed: Disable sandbox.agent: false in strict mode for copilot engine; Remove stdio mode from safe-inputs, keep HTTP-only transport
GitHub MCP PR titles: ✅
File write /tmp/gh-aw/agent/...: ✅
Playwright github.com title check: ✅
Cache memory file write: ✅
safeinputs-gh gh issues list: ❌ (tool unavailable)
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex fer issue #6898 🗺️

[github-actions]

Smoke Test Results

Last 2 Merged PRs:

• Disable sandbox.agent: false in strict mode for copilot engine #6903: Disable sandbox.agent: false in strict mode for copilot engine
• [WIP] Disable sandbox agent flag in strict mode #6902: [WIP] Disable sandbox agent flag in strict mode

Test Results:

• ✅ GitHub MCP: Retrieved PR info
• ✅ File Writing: Created test file successfully
• ✅ Bash Tool: Verified file with cat
• ✅ Playwright MCP: Navigated to github.com, title contains "GitHub"
• ❌ Safe Input gh Tool: Tool not available (safeinputs-gh not found)

Overall Status: PASS (4/5 tests passed - gh tool test blocked by missing safeinputs-gh tool)

🤖 DIAGNOSTIC REPORT GENERATED BY Smoke Copilot No Firewall fer issue #6898 🗺️

[github-actions]

Smoke Test Results - Claude Engine

Last 2 merged PRs:

• Disable sandbox.agent: false in strict mode for copilot engine #6903: Disable sandbox.agent: false in strict mode for copilot engine
• Remove stdio mode from safe-inputs, keep HTTP-only transport #6900: Remove stdio mode from safe-inputs, keep HTTP-only transport

Test Results:

• ✅ GitHub MCP: Fetched recent PRs
• ✅ File Writing: Created /tmp/gh-aw/agent/smoke-test-claude-20359159084.txt
• ✅ Bash Tool: Verified file contents
• ✅ Playwright MCP: Navigated to GitHub, title contains "GitHub"
• ✅ Cache Memory: Created /tmp/gh-aw/cache-memory/smoke-test-20359159084.txt
• ❌ Safe Inputs gh Tool: Not authenticated (expected, per documentation)

Overall Status: PASS (5/6 tests passed, gh auth expected to fail)

💥 [THE END] — Illustrated by Smoke Claude fer issue #6898 🗺️