chore: bump AWF to v0.13.9 by Mossaka · Pull Request #14027 · github/gh-aw

Mossaka · 2026-02-06T01:27:49Z

Summary

Bump AWF (gh-aw-firewall) to v0.13.8 which includes fixes for chroot mode and MCP gateway traffic routing.

Changes in AWF v0.13.8

fix: mount /etc/hosts in chroot mode for localhost resolution ([Custom Engine Test] Test Pull Request - Custom Engine Safe Output #545)
fix: pass BUN_INSTALL to chroot to prevent Bun core dump (Add Playwright MCP configuration support with always-headless browser automation, version customization, and test workflow #546)
fix: bypass Squid for host.docker.internal MCP gateway traffic ([Custom Engine Test] Test Issue Created by Custom Engine #543)

The MCP gateway traffic bypass should fix Codex smoke test failures by ensuring MCP gateway connections aren't routed through the proxy.

Test plan

Verify smoke-claude passes
Verify smoke-copilot passes
Verify smoke-codex passes (expected fix from MCP gateway bypass)

Changeset

Type: patch
Description: Document the agentic workflows ecosystem (runbooks, skills, specs, workflows, and supporting tooling) added in this PR.

Generated by Changeset Generator

Changeset

Type: patch
Description: Upgrade the AWF dependency to v0.13.11 and ensure NO_PROXY covers the gateway hosts so MCP traffic bypasses the Squid proxy.

Generated by Changeset Generator

Key fixes in AWF v0.13.8: - fix: mount /etc/hosts in chroot mode for localhost resolution - fix: pass BUN_INSTALL to chroot to prevent Bun core dump - fix: bypass Squid for host.docker.internal MCP gateway traffic The MCP gateway traffic bypass should fix Codex smoke test failures by ensuring MCP gateway connections aren't routed through the proxy. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions · 2026-02-06T01:28:22Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-06T01:28:24Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-02-06T01:28:25Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-06T01:28:26Z

❌ Changeset Generator failed. Please review the logs for details.

github-actions · 2026-02-06T01:31:11Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.52.2
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	20.20.0
python3	✅	3.12.3
go	✅	1.24.12
java	❌	version check failed (binary exists at `/opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.10-7/x64/bin/java`)
dotnet	❌	version check failed (binary exists at `/usr/bin/dotnet`)

Result: 10/12 tools available ⚠️

Notes:

Java and .NET binaries are present but version checks are failing in the current shell environment
All core development tools (shell, git, JSON/YAML processors, HTTP, GitHub CLI, Node.js, Python, Go) are working correctly

AI generated by Agent Container Smoke Test

Copilot

Pull request overview

This PR bumps the AWF (gh-aw-firewall) version from v0.13.7 to v0.13.8 to incorporate critical fixes for chroot mode, localhost resolution, Bun core dumps, and MCP gateway traffic routing. The update follows the established pattern for version bumps by updating the constant in pkg/constants/constants.go and regenerating all workflow lock files.

Changes:

Updated DefaultFirewallVersion constant from v0.13.7 to v0.13.8 in pkg/constants/constants.go
Regenerated all workflow lock files to reflect the new version in installation commands, Docker image tags, and metadata

Reviewed changes

Copilot reviewed 144 out of 144 changed files in this pull request and generated no comments.

File	Description
pkg/constants/constants.go	Updated DefaultFirewallVersion constant from v0.13.7 to v0.13.8
.github/workflows/*.lock.yml (100+ files)	Regenerated lock files with updated AWF version in install commands, Docker image tags, and workflow metadata

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

github-actions · 2026-02-06T01:33:20Z

Smoke Test Results ✅

✅ GitHub MCP: chore: bump AWF to v0.13.7 #13970, Add telemetry.enterprise.githubcopilot.com to copilot engine default allowlist #14007
✅ Safe Inputs GH CLI: chore: bump AWF to v0.13.9 #14027, Configure payloadDir for MCP gateway to enable large payload sharing #14026
✅ Serena MCP: 128 symbols found
✅ Playwright: GitHub homepage verified
✅ File creation & bash verification
✅ Discussion comment added
✅ Build successful
✅ Workflow dispatch triggered

Status: PASS ✅

@Mossaka

AI generated by Smoke Copilot

github-actions · 2026-02-06T01:33:34Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-06T01:34:39Z

Smoke Test: Claude - PASS ✅

PR Titles:

chore: bump AWF to v0.13.7 #13970: chore: bump AWF to v0.13.7
Add telemetry.enterprise.githubcopilot.com to copilot engine default allowlist #14007: Add telemetry.enterprise.githubcopilot.com to copilot engine default allowlist

Test Results: 11/12 ✅

✅ GitHub MCP
✅ Safe Inputs GH CLI
✅ Serena MCP
✅ Make Build
✅ Playwright
✅ Tavily Search
✅ File Operations
✅ Discussion Interaction
⚠️ AWF MCP (tool error)

Overall: PASS

Full Report

AI generated by Smoke Claude

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions · 2026-02-06T07:31:32Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-06T07:31:33Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-02-06T07:31:37Z

✅ Changeset Generator completed successfully!

github-actions · 2026-02-06T07:31:38Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-06T07:34:09Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.50.1
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	20.20.0
python3	✅	3.12.3
go	✅	1.24.12
java	❌	symlink issue
dotnet	❌	symlink issue

Result: 10/12 tools available ⚠️

Issues Found:

Java and .NET binaries exist but have symlink/execution issues in the container
Both return "cannot execute dotnet when renamed to bash" error
All other development tools are working correctly

AI generated by Agent Container Smoke Test

github-actions · 2026-02-06T08:46:11Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-02-06T08:46:15Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-06T08:48:38Z

Agent Container Tool Check - Smoke Test Results

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.50.1
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	20.20.0
python3	✅	3.12.3
go	✅	1.24.12
java	✅	5.2.21
dotnet	✅	8.x

Result: 12/12 tools available ✅

Status: PASS - All required development tools are accessible in the agent container environment.

AI generated by Agent Container Smoke Test

github-actions · 2026-02-06T08:50:30Z

✅ Smoke Test: PASS (Run 21744362903)

Merged PRs Reviewed:

Fix dispatch_workflow to use PR branch ref and resolve default branch correctly #14062: Fix dispatch_workflow to use PR branch ref
[docs] Update documentation for plugins and payload-dir features #14060: Update documentation for plugins and payload-dir

All tests passed ✅

CC @Mossaka

AI generated by Smoke Copilot

github-actions · 2026-02-06T08:50:47Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

Adds NO_PROXY for host gateway IPs to fully bypass Squid for MCP traffic. See github/gh-aw-firewall#554 for details. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions · 2026-02-06T09:19:12Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-06T09:19:16Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-06T09:19:16Z

✅ Changeset Generator completed successfully!

github-actions · 2026-02-06T09:19:18Z

💫 TO BE CONTINUED... Smoke Claude failed! Our hero faces unexpected challenges...

github-actions · 2026-02-06T09:23:39Z

Smoke test results:
GitHub MCP merged PRs: Fix dispatch_workflow to use PR branch ref and resolve default branch correctly ✅
GitHub MCP merged PRs: [docs] Update documentation for plugins and payload-dir features ✅
safeinputs-gh PR list: [instructions] Sync github-agentic-workflows.md with v0.40.1 ✅
safeinputs-gh PR list: [jsweep] Clean add_comment.cjs ✅
Serena + Playwright + Tavily + File + Bash + Discussion: ✅
Build gh-aw: ❌ (go 1.25 required)
Overall: FAIL

AI generated by Smoke Codex

github-actions · 2026-02-06T09:30:19Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

# Conflicts: # .github/workflows/daily-mcp-concurrency-analysis.lock.yml

…nto update/awf-0.13.8

github-actions · 2026-02-06T15:55:30Z

✅ Changeset Generator completed successfully!

No changeset needed: existing changesets already document the PR changes (docs ecosystem and AWF upgrade).

github-actions · 2026-02-06T15:55:32Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-06T15:55:33Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-02-06T15:55:34Z

💥 WHOOSH! Smoke Claude springs into action on this pull request! [Panel 1 begins...]

github-actions · 2026-02-06T16:01:33Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-02-06T16:01:42Z

AI generated by Smoke Codex

Copilot AI review requested due to automatic review settings February 6, 2026 01:27

Mossaka added the smoke label Feb 6, 2026

Copilot started reviewing on behalf of Mossaka February 6, 2026 01:28 View session

Copilot AI reviewed Feb 6, 2026

View reviewed changes

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Copilot - 21735231926 #14035

Closed

github-actions bot added smoke-copilot and removed smoke labels Feb 6, 2026

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Claude - 21735231947 #14036

Closed

github-actions bot added the smoke-claude label Feb 6, 2026

This was referenced Feb 6, 2026

🌱 Daily Team Evolution Insights - February 6, 2026 #14038

Open

Smoke Test: Claude - 21740597347 #14061

Closed

Mossaka and others added 2 commits February 6, 2026 07:29

Merge remote-tracking branch 'origin/main' into update/awf-0.13.8

2f2188f

chore: bump AWF to v0.13.9

bafdc1d

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Mossaka changed the title ~~chore: bump AWF to v0.13.8~~ chore: bump AWF to v0.13.9 Feb 6, 2026

Mossaka added the smoke label Feb 6, 2026

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Copilot - 21742511628 #14073

Closed

github-actions bot removed the smoke label Feb 6, 2026

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Copilot - 21744362903 #14082

Closed

chore: upgrade AWF to v0.13.11

be41479

Adds NO_PROXY for host gateway IPs to fully bypass Squid for MCP traffic. See github/gh-aw-firewall#554 for details. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Mossaka added the smoke label Feb 6, 2026

Add changeset [skip-ci]

e7dd4d5

github-actions bot mentioned this pull request Feb 6, 2026

[team-status] Daily Team Status - February 6, 2026 #14091

Open

This was referenced Feb 6, 2026

Smoke Test: Claude - 21755113640 #14157

Open

Capture exit codes and stderr when gh CLI commands fail, fix Docker git ownership #14156

Merged

Smoke Test: Copilot - 21755850804 #14161

Open

Mossaka added 2 commits February 6, 2026 15:42

Merge remote-tracking branch 'origin/main' into update/awf-0.13.8

ad5a67b

# Conflicts: # .github/workflows/daily-mcp-concurrency-analysis.lock.yml

Merge branch 'update/awf-0.13.8' of https://github.com/github/gh-aw i…

e82707e

…nto update/awf-0.13.8

Mossaka added smoke and removed smoke labels Feb 6, 2026

Conversation

Mossaka commented Feb 6, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes in AWF v0.13.8

Test plan

Related

Changeset

Changeset

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026

Agent Container Tool Check

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

github-actions bot commented Feb 6, 2026

Smoke Test Results ✅

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026

Smoke Test: Claude - PASS ✅

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026

Agent Container Tool Check

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026

Agent Container Tool Check - Smoke Test Results

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Mossaka commented Feb 6, 2026 •

edited by github-actions bot

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading