Bump AWF to v0.27.44 and MCP Gateway to v0.4.8 by lpcox · Pull Request #50599 · github/gh-aw

lpcox · 2026-08-05T15:53:30Z

Summary

bump the default gh-aw-firewall version from v0.27.43 to v0.27.44
bump the default gh-aw-mcpg version from v0.4.7 to v0.4.8
refresh container digest pins and regenerate all workflow lock files
sync the embedded AWF configuration schema with the v0.27.44 canonical runtime schema
lower the bounded-queries feature gate from the unreleased v0.28.0 placeholder to its first released version, v0.27.44, and update related documentation

Release review

AWF v0.27.44 introduces confidentiality-aware bounded-query budgets, bounded-agent schema support, API proxy reflection mode, OIDC trace-context handling, and related fixes. The existing gh-aw bounded-query implementation matches the released object-form repository configuration. Bounded agents and reflection mode remain AWF-only capabilities and do not require new gh-aw compiler flags in this bump.

MCPG v0.4.8 contains guard, visibility, jq validation, and test hardening changes without configuration changes required in gh-aw.

Closes #50585

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: b5add198-bfe0-430d-98f8-6aa4e96723b6

Copilot

Pull request overview

Bumps AWF v0.27.43 → v0.27.44 and MCP Gateway v0.4.7 → v0.4.8.

Changes:

Updates runtime versions and container digest pins.
Synchronizes the AWF schema and bounded-query version gate.
Regenerates workflow lock files and documentation.

Review finding: The new schema uses unsupported regex lookaheads, causing AWF configuration to be omitted from generated workflows.

Show a summary per file

File	Description
`pkg/workflow/tools_types.go`	Updates bounded-query requirement.
`pkg/workflow/schemas/awf-config.schema.json`	Synchronizes AWF schema.
`pkg/workflow/data/action_pins.json`	Adds new image pins.
`pkg/workflow/bounded_queries_test.go`	Updates minimum-version test.
`pkg/parser/schemas/main_workflow_schema.json`	Updates generated schema text.
`pkg/constants/version_constants.go`	Bumps runtime versions and gate.
`pkg/constants/spec_test.go`	Updates expected gate version.
`pkg/actionpins/data/action_pins.json`	Adds action-pin image records.
`docs/src/content/docs/reference/frontmatter-full.md`	Updates generated reference.
`.github/workflows/smoke-ci.lock.yml`	Regenerates smoke workflow.
`.github/workflows/notion-issue-summary.lock.yml`	Regenerates Notion workflow.
`.github/workflows/hippo-embed.lock.yml`	Regenerates Hippo workflow.
`.github/workflows/firewall.lock.yml`	Regenerates firewall workflow.
`.github/workflows/example-permissions-warning.lock.yml`	Regenerates permissions example.
`.github/workflows/daily-arxiv-researcher.lock.yml`	Regenerates research workflow.
`.github/workflows/codex-github-remote-mcp-test.lock.yml`	Regenerates Codex workflow.
`.github/aw/syntax-agentic.md`	Updates syntax guidance.
`.github/aw/designer.md`	Updates designer guidance.
`.github/aw/create-agentic-workflow.md`	Updates workflow-authoring guidance.
`.github/aw/actions-lock.json`	Adds new digest pins.
`.changeset/patch-bump-awf-v0-27-44-mcpg-v0-4-8.md`	Records the patch release.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 23/289 changed files
Comments generated: 1
Review effort level: Balanced

+              {
+                "type": "string",
+                "maxLength": 140,
+                "pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})/(?!\\.\\.?$)(?!.*\\.\\.)[A-Za-z0-9._-]{1,100}$"


lpcox · 2026-08-05T16:00:38Z

@copilot address review feedback

github-actions · 2026-08-05T16:09:53Z

💫 TO BE CONTINUED... Smoke Claude failed! Our hero faces unexpected challenges...

github-actions · 2026-08-05T16:10:30Z

⚠️ Smoke Pi failed. Pi encountered unexpected challenges...

github-actions · 2026-08-05T16:10:36Z

❌ Tool validation failed! Agent Container Smoke Test detected missing tools: failed

github-actions · 2026-08-05T16:10:43Z

❌ Smoke Copilot Auto failed. Please review the logs for details.

github-actions · 2026-08-05T16:10:44Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-08-05T16:10:53Z

❌ Smoke Copilot Small failed. Please review the logs for details.

github-actions · 2026-08-05T16:10:57Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-08-05T16:11:03Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-08-05T16:11:03Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-08-05T16:11:18Z

📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-08-05T16:11:27Z

❌ Smoke OTEL failed. Please review the logs for details.

github-actions · 2026-08-05T16:11:59Z

❌ Smoke Copilot MAI failed. Please review the logs for details.

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

lpcox · 2026-08-05T16:45:47Z

@copilot merge main and recompile workflows

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

# Conflicts: # .github/workflows/avenger.lock.yml # .github/workflows/dev-hawk.lock.yml # .github/workflows/tidy.lock.yml Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

pelikhan · 2026-08-05T16:49:59Z

@copilot resolve the merge conflicts on this branch.

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

gh-aw-bot · 2026-08-05T17:01:44Z

@copilot please run make merge-main to resolve merge conflicts on this branch, then run the pr-finisher skill and recompile any workflow markdown changes if needed.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 5.24 AIC · ⌖ 9.9 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

gh-aw-bot · 2026-08-05T18:34:36Z

@copilot please run make merge-main to resolve merge conflicts on this branch, then run the pr-finisher skill and recompile any workflow markdown changes if needed.

Run: https://github.com/github/gh-aw/actions/runs/31034308996

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 27.8 AIC · ⌖ 5.07 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

pelikhan · 2026-08-05T19:06:40Z

@copilot resolve the merge conflicts on this branch.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

gh-aw-bot · 2026-08-05T20:29:31Z

@copilot please resolve merge conflicts on this PR.

run make merge-main to reconcile the branch with main and push the result.
then run the pr-finisher skill and push any follow-up fixes.

Generated by 👨🍳 PR Sous Chef · run: https://github.com/github/gh-aw/actions/runs/31043697225

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 12.2 AIC · ⌖ 6.03 AIC · ⊞ 8.3K · ◷
_{Comment /souschef to run again}

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Bump AWF and MCP Gateway versions

34cfe46

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: b5add198-bfe0-430d-98f8-6aa4e96723b6

Copilot AI balanced review requested due to automatic review settings August 5, 2026 15:53

Copilot started reviewing on behalf of lpcox August 5, 2026 15:54 View session

Copilot AI reviewed Aug 5, 2026

View reviewed changes

Comment thread pkg/workflow/schemas/awf-config.schema.json Outdated

{

"type": "string",

"maxLength": 140,

"pattern": "^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})/(?!\\.\\.?$)(?!.*\\.\\.)[A-Za-z0-9._-]{1,100}$"

Copilot started work on behalf of lpcox August 5, 2026 16:00 View session

lpcox added the smoke label Aug 5, 2026

github-actions Bot temporarily deployed to aoai-model August 5, 2026 16:09 Inactive

github-actions Bot removed the smoke label Aug 5, 2026

github-actions Bot had a problem deploying to aoai-model August 5, 2026 16:11 Failure

Fix unsupported regex lookaheads in AWF config schema

ab8ac1b

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Merge branch 'main' into bump-mcpg-awf-versions

71db96e

Copilot AI and others added 2 commits August 5, 2026 16:48

Fix stale test version in TestBoundedQueryRuntimeVersionGate

92ff84e

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Merge remote-tracking branch 'origin/main' into bump-mcpg-awf-versions

79a12f2

# Conflicts: # .github/workflows/avenger.lock.yml # .github/workflows/dev-hawk.lock.yml # .github/workflows/tidy.lock.yml Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Merge main and regenerate lock files

0a1a24c

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot finished work on behalf of lpcox August 5, 2026 16:59

Copilot started work on behalf of pelikhan August 5, 2026 17:00 View session

github-actions Bot mentioned this pull request Aug 5, 2026

[pr-sous-chef] pr-sous-chef run report #50440

Closed

Copilot finished work on behalf of pelikhan August 5, 2026 17:07

Copilot AI requested a review from pelikhan August 5, 2026 17:07

Copilot started work on behalf of gh-aw-bot August 5, 2026 17:08 View session

Copilot finished work on behalf of gh-aw-bot August 5, 2026 17:15

Copilot AI requested a review from gh-aw-bot August 5, 2026 17:15

Merge branch 'main' into bump-mcpg-awf-versions

9fcc837

Copilot started work on behalf of gh-aw-bot August 5, 2026 18:35 View session

Merge main and recompile workflows

6f9a0fa

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot finished work on behalf of gh-aw-bot August 5, 2026 18:43

Copilot started work on behalf of pelikhan August 5, 2026 19:07 View session

Merge main and recompile workflows

2fa1da2

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan August 5, 2026 19:33

Copilot started work on behalf of gh-aw-bot August 5, 2026 20:30 View session

Merge main and recompile workflows

7b8498d

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

Copilot finished work on behalf of gh-aw-bot August 5, 2026 20:38

pelikhan merged commit 55f52a8 into main Aug 5, 2026

pelikhan deleted the bump-mcpg-awf-versions branch August 5, 2026 21:44

Uh oh!

Conversation

lpcox commented Aug 5, 2026

Summary

Release review

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

lpcox commented Aug 5, 2026

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

lpcox commented Aug 5, 2026

Uh oh!

pelikhan commented Aug 5, 2026

Uh oh!

gh-aw-bot commented Aug 5, 2026

Uh oh!

gh-aw-bot commented Aug 5, 2026

Uh oh!

pelikhan commented Aug 5, 2026

Uh oh!

gh-aw-bot commented Aug 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

github-actions Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading

github-actions Bot commented Aug 5, 2026 •

edited

Loading