🌟 Release Highlights
This release focuses on safer, more diagnosable workflow runs: stronger privacy-preserving failure reporting, tighter credential/network scoping, and improved NVX Copilot and model-routing support.
✨ What's New
- In-place
add-commentstatus updates: status comments can be replaced rather than appended, reducing noise (#68013). - GitHub Apps can check out PR branches after reviews when allow-listed (#68012).
- Unified sessions record more context: skill installation, usage and conflicts, plus caller
aw_context(#68017, #67910). - Claude model-routing smoke test and expanded Copilot routed smoke checks (#67835, #67837).
- Compiler warnings surface in MCP dry-run results (#67997).
- NVX Copilot: automatic guest ABI selection, musl guest asset fixes, restricted guest output collection (#67915, #67914, #67842, #67834).
- Logs storage bounded to 1 GB, preferring compact metadata artifacts (#67854).
🔒 Security & Privacy
- Copilot telemetry now requires opt-in during threat detection (#67989).
- Claude transport domains narrowed to least privilege (#67811).
- Selected Copilot assignment credentials are identified without exposing secrets (#68005).
- Privacy-preserving completion evidence added to failure reports (#68003, #68001, #68000).
🐛 Bug Fixes & Improvements
- Removed unsupported Copilot web-search;
gh aw fixnow converges (#67993). - Wait for safe-output gateway tool readiness before agent startup (#67807); clearer explanations for runs missing terminal safe outputs (#67809).
- Skipped threat detection is reported when the detector isn't installed (#67810).
- Fixed coverage tool advertisement and optional cache cold starts (#68004).
- Structured arguments now passed correctly to shared Go and Make MCP tools (#67894).
- Updated default pins for GitHub MCP, Playwright, Syft and Grype (#67886).
📚 Documentation
- Model routing docs explain Copilot CLI vs SDK mode, define
allowed-models, and include compiling examples (#67755). - Release credential changes now require security sign-off (#67803).
Generated by 🚀 Release · copilot · auto · 15.2 AIC · ⊞ 11.7K
What's Changed
- docs(model-routing): explain Copilot CLI vs SDK mode, define allowed-models, add compiling examples by @SivaKesava1 with @Copilot in #67755
- docs: require security sign-off for release credential changes by @pelikhan in #67803
- Add a replay test for the Copilot startup model/endpoint mismatch fail-fast by @SivaKesava1 with @Copilot in #67797
- fix(nvx): hand off guest runtime assets through the workspace by @lpcox in #67834
- [blog] Weekly blog post – 2026-10-12 by @github-actions[bot] in #67850
- test(cli): strengthen scanner finding converter regression coverage by @pelikhan in #67815
- Make ESLint work queue admission and dispatch reliable by @pelikhan in #67801
- refactor(workflow): deduplicate pre-step processing by @pelikhan in #67817
- fix: reuse LintMonster tracking issues by finding category by @pelikhan in #67820
- Provision MCP ShellCheck and report incomplete audit timeouts by @pelikhan in #67819
- Restrict NVX guest output collection to expected artifacts by @lpcox in #67842
- [log] Add debug logging to action pin mapping and cluster lookup paths by @github-actions[bot] in #67855
- fix: align xberg scans with canonical container pins by @pelikhan in #67812
- refactor: deduplicate bounded skip condition parsing by @pelikhan in #67818
- fix: explain runs missing terminal safe outputs by @pelikhan in #67809
- refactor(workflow): share Dependabot dependency collection by @pelikhan in #67813
- Bound logs storage to 1 GB and prefer compact metadata artifacts by @pelikhan in #67854
- [avenger] Fix work queue token-source assertion by @github-actions[bot] in #67875
- [spec-review] Update Safe Outputs conformance checker for recent spec changes by @github-actions[bot] in #67873
- Fix directory-walk linter documentation and CI readiness drift by @pelikhan in #67899
- fix: wait for safe-output gateway tool readiness before agent startup by @pelikhan in #67807
- fix(linters): detect parenthesized discarded errors and synchronize analyzer docs by @pelikhan in #67890
- Collect and render caller aw_context in unified sessions by @pelikhan in #67910
- [avenger] Fix parallel command-group lookup races by @github-actions[bot] in #67925
- [spec-extractor] Update package specifications for agentdrain, cli, console, constants by @github-actions[bot] in #67956
- Update GitHub MCP, Playwright, Syft, and Grype default pins by @pelikhan with @Copilot in #67886
- [instructions] Sync instruction files with release v0.89.21 (post-#67685 audit) by @github-actions[bot] in #67946
- [architecture] Update architecture diagram - 2026-10-12 by @github-actions[bot] in #67948
- [archivx] Update workflow diagram — 2026-10-12 by @github-actions[bot] in #67949
- fix: narrow Claude transport domains to least privilege by @pelikhan in #67811
- Report skipped threat detection when the detector was not installed by @pelikhan with @Copilot in #67810
- [spec-enforcer] Enforce specifications for sliceutil, stats, stringutil by @github-actions[bot] in #67975
- fix: pass structured arguments to shared Go and Make MCP tools by @pelikhan in #67894
- fix: recover daily AIC reads and restore issue-event scan snapshots by @pelikhan in #67884
- Fix coverage tool advertisement and optional cache cold starts by @pelikhan in #68004
- Fix NVX Copilot assets for musl guests by @lpcox in #67914
- Make NVX Copilot guest ABI selection automatic by @lpcox in #67915
- Require opt-in for Copilot telemetry during threat detection by @pelikhan with @Copilot in #67989
- Reduce Claude documentation review invocation overhead by @pelikhan with @Copilot in #68011
- fix: distinguish privacy-preserving tracker outcomes by @pelikhan in #68000
- Surface compiler warnings in MCP dry-run results by @pelikhan with @Copilot in #67997
- Remove unsupported Copilot web-search and make
gh aw fixconverge by @pelikhan with @Copilot in #67993 - Add file-level code-edit-precision trajectory grader by @pelikhan with @Copilot in #67996
- Add Claude-engine model-routing smoke (smoke-claude-routed) by @SivaKesava1 with @Copilot in #67835
- Identify selected Copilot assignment credentials without exposing secrets by @pelikhan in #68005
- Consolidate workqueue helpers and settings parsing by @pelikhan with @Copilot in #67992
- Add privacy-preserving completion evidence to failure reports by @pelikhan in #68003
- Allow allow-listed GitHub Apps to check out PR branches after reviews by @pelikhan with @Copilot in #68012
- Regenerate stale Claude routed smoke workflow lock by @pelikhan in #68053
- Clarify privacy-preserving driver and downstream failure diagnostics by @pelikhan in #68001
- smoke-copilot-routed: run the default threat-detection engine and check that detection stays unrouted (D1–D3) by @SivaKesava1 with @Copilot in #67837
Full Changelog: v0.91.8...v0.91.9