🌟 Release Highlights
This patch release brings a new configurability option for pull request workflows, a reliable fix for external-repository checkout scenarios, and a round of CLI consistency improvements — plus three community-reported issues resolved.
✨ What's New
- Configurable
create-pull-requestauto-close behavior — Thecreate-pull-requestsafe-output now lets you control whether the triggering issue is automatically closed when the PR is merged. Previously this was always-on; now it can be tuned per workflow. (Requested by the community — see #23736)
🐛 Bug Fixes & Improvements
-
Restore
actions/setupafter external root checkout — When a workflow checks out an external repository to the workspace root (nopath:specified),actions/checkoutwas overwriting$GITHUB_WORKSPACEand deleting the locally checked-outactions/setupdirectory, causing a post-step failure (Can't find 'action.yml'). The compiler now appends aRestore actions folderstep (if: always()) in dev mode when this pattern is detected. (#23751) -
CLI consistency improvements — Addressed redundant flags, unexplained jargon, and discrepancies between help text and documentation to make the CLI more approachable. (#23750)
-
MCP table output routing —
mcp list-toolsandmcp inspectnow route table output through explicitconsole.RenderTable()calls with unambiguous stdout routing, aligning with the established pattern inmcp list. (#23752) -
WASM golden files updated for firewall v0.25.5 (#23743)
-
Release tooling — New releases are now created as pre-releases by default, preventing automated releases from being promoted to "latest" without explicit maintainer action. (#23754)
🌍 Community Contributions
A huge thank you to the community members who reported issues that were resolved in this release!
@abillingsley
@Rubyj
- MCP safe-output tools not accessible to Codex in AWF chroot on self-hosted runners (file permission issue) (direct issue)
@strawgate
- AWF agent PATH misses GITHUB_PATH additions (direct issue)
For complete details, see CHANGELOG.
Generated by Release
What's Changed
- fix: update WASM golden files for firewall version v0.25.5 by @Copilot in #23743
- fix: reduce docs-noob-tester scope to prevent timeout by @Copilot in #23742
- Make
create-pull-requestauto-close issue behavior configurable by @Copilot in #23738 - [slides] Fix mcp-servers allowed field syntax in slides by @github-actions[bot] in #23749
- fix: address CLI consistency issues - redundant flags, unexplained jargon, and doc discrepancies by @Copilot in #23750
- Migrate MCP list/inspect table output to explicit console.RenderTable() with stdout routing by @Copilot in #23752
- Mark new releases as pre-release and suppress auto-latest promotion by @Copilot in #23754
- fix: restore actions/setup after external root checkout in agent job by @Copilot in #23751
Full Changelog: v0.65.1...v0.65.2