chore: Bump AWF firewall version to v0.25.13 by lpcox · Pull Request #24185 · github/gh-aw

lpcox · 2026-04-02T23:12:43Z

Bumps DefaultFirewallVersion from v0.25.11 to v0.25.13.

All 179 workflows recompiled, wasm golden files updated.

✨ PR Review Safe Output Test - Run 23926718969

💥 [THE END] — Illustrated by Smoke Claude · ● 273.8K · ◷

Update DefaultFirewallVersion from v0.25.11 to v0.25.13. Closes #24184 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot

Pull request overview

This PR bumps the default gh-aw-firewall (AWF) version to v0.25.13 and propagates that version through regenerated workflow lockfiles and WASM compilation golden fixtures.

Changes:

Update DefaultFirewallVersion from v0.25.11 to v0.25.13.
Recompile workflows to update pinned AWF install versions, container image tags, and --image-tag values in workflow lockfiles.
Update WASM golden fixture outputs to reflect the new AWF version.

Reviewed changes

Copilot reviewed 111 out of 182 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
pkg/constants/version_constants.go	Bumps `DefaultFirewallVersion` to `v0.25.13`.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden	Updates golden output to reference AWF `v0.25.13` (env/install/images/image-tag).
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden	Updates golden output to reference AWF `v0.25.13` (env/install/images/image-tag).
.github/workflows/workflow-health-manager.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/workflow-generator.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/test-workflow.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/test-project-url-default.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/test-dispatcher.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/sub-issue-closer.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/smoke-gemini.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/security-compliance.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/repo-tree-map.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/refiner.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/pr-triage-agent.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/poem-bot.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/plan.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/notion-issue-summary.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/metrics-collector.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/jsweep.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/issue-triage-agent.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/issue-monster.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/gpclean.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/github-remote-mcp-auth-test.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/firewall.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/example-permissions-warning.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/dictation-prompt.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/dependabot-go-checker.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/dependabot-burner.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/daily-team-status.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/daily-semgrep-scan.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/daily-secrets-analysis.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/daily-malicious-code-scan.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/daily-assign-issue-to-user.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/craft.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/contribution-check.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/constraint-solving-potd.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/code-simplifier.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/changeset.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/brave.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/bot-detection.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/ai-moderator.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.
.github/workflows/ace-editor.lock.yml	Updates pinned AWF version references to `v0.25.13` / `0.25.13`.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

github-actions · 2026-04-02T23:22:45Z

🌑 The shadows whisper... Smoke Codex was cancelled. The oracle requires further meditation...

github-actions · 2026-04-02T23:22:46Z

💫 TO BE CONTINUED... Smoke Claude was cancelled! Our hero faces unexpected challenges...

github-actions · 2026-04-02T23:22:48Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-04-02T23:22:56Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-04-02T23:28:42Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-04-02T23:29:10Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-04-02T23:29:32Z

Smoke Test Results for run §23926552978:

Test	Status
GitHub MCP	✅
MCP Scripts GH CLI	✅
Playwright	✅
Web Fetch	✅
File Writing + Bash	✅
Discussion Interaction	✅
Build gh-aw	✅
Discussion Creation	✅
Workflow Dispatch	✅
PR Review	✅

Overall: PASS ✅

PR by @lpcox

📰 BREAKING: Report filed by Smoke Copilot · ● 1.1M · ◷

github-actions

Smoke test review: PR bumps AWF firewall from v0.25.11 → v0.25.13 across 182 workflow files. Version bump looks consistent and correct across all lock.yml files.

📰 BREAKING: Report filed by Smoke Copilot · ● 1.1M

github-actions · 2026-04-02T23:29:39Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-04-02T23:29:57Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-04-02T23:30:47Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-04-02T23:31:28Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	4.52.4
curl	✅	8.5.0
gh	✅	2.88.1
node	✅	20.20.1
python3	✅	3.12.3
go	✅	1.24.13
java	✅	openjdk 21.0.10
dotnet	✅	10.0.201

Result: 12/12 tools available ✅
Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · ● 114.9K · ◷

github-actions · 2026-04-02T23:37:12Z

🧪 Smoke Test Results for §23926718961

Test	Status
GitHub MCP	✅
GH CLI (mcpscripts)	✅
Serena MCP	❌
Playwright	✅
Web Fetch	✅
File Writing	✅
Bash Tool	✅
Discussion Interaction	✅
Build gh-aw	✅
Discussion Creation	✅
Workflow Dispatch	✅
PR Review	✅

Overall: ⚠️ 11/12 PASS (Serena MCP tools unavailable)

Hey @lpcox! 👋

📰 BREAKING: Report filed by Smoke Copilot · ● 782.8K · ◷

github-actions

Smoke test review of PR #24185 — version bump from AWF v0.25.11 to v0.25.13. Changes look consistent across all workflow files. LGTM! 🚀

📰 BREAKING: Report filed by Smoke Copilot · ● 782.8K

github-actions · 2026-04-02T23:37:13Z

.github/workflows/ace-editor.lock.yml

          GH_AW_INFO_ALLOWED_DOMAINS: '["defaults"]'
          GH_AW_INFO_FIREWALL_ENABLED: "true"
-          GH_AW_INFO_AWF_VERSION: "v0.25.11"
+          GH_AW_INFO_AWF_VERSION: "v0.25.13"


Version bump from v0.25.11 → v0.25.13 ✅ — consistent with the PR intent to upgrade AWF firewall.

github-actions · 2026-04-02T23:37:13Z

.github/workflows/ace-editor.lock.yml

        run: ${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh latest
      - name: Install AWF binary
-        run: bash ${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh v0.25.11
+        run: bash ${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh v0.25.13


Install script also updated to v0.25.13 — version references are in sync 👍

github-actions · 2026-04-02T23:37:35Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-04-02T23:38:35Z

Warning

The push_to_pull_request_branch operation failed: Cannot push to pull request branch: patch modifies files outside the allowed-files list (smoke-test-pr-push-23926718969.md). Add the files to the allowed-files configuration field or remove them from the patch.. The code changes were not applied.

Smoke Test Results — Run §23926718969

Test	Status
GitHub MCP	✅
Make Build	✅
File Write	✅
AW MCP Status	✅
Review Comments	✅
Add Reviewer	✅

Overall: PARTIAL (15 ✅, 2 ⚠️ skipped, 0 ❌)

💥 [THE END] — Illustrated by Smoke Claude · ● 273.8K · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

💥 [THE END] — Illustrated by Smoke Claude · ● 273.8K

github-actions · 2026-04-02T23:38:36Z

.github/workflows/ace-editor.lock.yml

          GH_AW_INFO_ALLOWED_DOMAINS: '["defaults"]'
          GH_AW_INFO_FIREWALL_ENABLED: "true"
-          GH_AW_INFO_AWF_VERSION: "v0.25.11"
+          GH_AW_INFO_AWF_VERSION: "v0.25.13"


Firewall version bump to v0.25.13 looks correct here. Good consistency with the rest of the lock file.

github-actions · 2026-04-02T23:38:36Z

.github/workflows/ace-editor.lock.yml

        run: ${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh latest
      - name: Install AWF binary
-        run: bash ${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh v0.25.11
+        run: bash ${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh v0.25.13


AWF binary install script updated to v0.25.13 — aligns with the firewall version bump above. Looks good.

chore: bump AWF firewall version to v0.25.13

e4edd3f

Update DefaultFirewallVersion from v0.25.11 to v0.25.13. Closes #24184 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot AI review requested due to automatic review settings April 2, 2026 23:12

Copilot started reviewing on behalf of lpcox April 2, 2026 23:13 View session

Copilot AI reviewed Apr 2, 2026

View reviewed changes

pelikhan added the smoke label Apr 2, 2026

github-actions bot removed the smoke label Apr 2, 2026

This comment has been minimized.

Sign in to view

pelikhan added the smoke label Apr 2, 2026

github-actions bot mentioned this pull request Apr 2, 2026

Smoke Test: Copilot - 23926552978 #24187

Closed

github-actions bot added the smoke-copilot label Apr 2, 2026

github-actions bot removed the smoke label Apr 2, 2026

github-actions bot reviewed Apr 2, 2026

View reviewed changes

github-actions bot mentioned this pull request Apr 2, 2026

Smoke Test: Copilot - 23926718961 #24190

Closed

github-actions bot reviewed Apr 2, 2026

View reviewed changes

pelikhan merged commit e209e37 into main Apr 2, 2026
401 of 412 checks passed

pelikhan deleted the copilot/bump-firewall-v0.25.13 branch April 2, 2026 23:37

github-actions bot reviewed Apr 2, 2026

View reviewed changes

Conversation

lpcox commented Apr 2, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

github-actions bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 2, 2026

Uh oh!

This comment has been minimized.

github-actions bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 2, 2026

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Apr 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 2, 2026

Uh oh!

github-actions bot commented Apr 2, 2026

Uh oh!

github-actions bot commented Apr 2, 2026

Agent Container Tool Check

Uh oh!

github-actions bot commented Apr 2, 2026

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot Apr 2, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot Apr 2, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

github-actions bot commented Apr 2, 2026

Uh oh!

github-actions bot commented Apr 2, 2026

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot Apr 2, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot Apr 2, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

lpcox commented Apr 2, 2026 •

edited by github-actions bot

Loading

github-actions bot commented Apr 2, 2026 •

edited

Loading

github-actions bot commented Apr 2, 2026 •

edited

Loading

github-actions bot commented Apr 2, 2026 •

edited

Loading

github-actions bot commented Apr 2, 2026 •

edited

Loading

github-actions bot commented Apr 2, 2026 •

edited

Loading

github-actions bot commented Apr 2, 2026 •

edited

Loading