chore: CLI version updates 2026-06-21 by Copilot · Pull Request #40618 · github/gh-aw

Copilot · 2026-06-21T13:06:06Z

Bumps five CLI tool versions in pkg/constants/version_constants.go and regenerates all 249 lock files.

Constant	Old	New
`DefaultClaudeCodeVersion`	`2.1.179`	`2.1.185`
`DefaultGitHubMCPServerVersion`	`v1.3.0`	`v1.4.0`
`DefaultCodexVersion`	`0.140.0`	`0.141.0`
`DefaultPiVersion`	`0.79.6`	`0.79.9`
`DefaultCopilotSDKVersion`	`1.0.1`	`1.0.2`

Notable in GitHub MCP Server v1.4.0: create_repository now defaults to private when visibility is omitted; new code quality findings tool; list_issue_types gains repo-scoped support; explicit show_ui parameter on UI-enabled write tools.

✨ PR Review Safe Output Test - Run 27908490831

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 58.6 AIC · ⊞ 8.5K · ◷

…, Codex, Pi, Copilot SDK) Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-06-21T14:34:11Z

@copilot merge main, recompile, update wasm golden

Copilot

Pull request overview

This PR updates default tool versions in gh-aw and regenerates the generated workflow lock files so CI workflows reference the new versions (notably GitHub MCP Server v1.4.0).

Changes:

Bumped five default CLI/library versions in pkg/constants/version_constants.go.
Regenerated workflow .lock.yml files to reflect the updated engine/tool versions (including GitHub MCP Server v1.4.0).

Show a summary per file

File	Description
pkg/constants/version_constants.go	Updates default versions for Claude Code, GitHub MCP Server, Codex, Pi, and Copilot SDK.
.github/workflows/test-workflow.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/test-quality-sentinel.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/test-project-url-default.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/test-dispatcher.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/smoke-workflow-call.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/smoke-workflow-call-with-inputs.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/smoke-temporary-id.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/smoke-service-ports.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/smoke-multi-pr.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/smoke-antigravity.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/schema-feature-coverage.lock.yml	Regenerated lock file; updates Codex CLI references to `0.141.0`.
.github/workflows/pr-description-caveman.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/github-mcp-tools-report.lock.yml	Regenerated lock file; updates Claude Code CLI references to `2.1.185`.
.github/workflows/example-permissions-warning.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/example-failure-category-filter.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/designer-drift-audit.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/daily-windows-terminal-integration-builder.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/daily-team-status.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/daily-max-ai-credits-test.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/daily-credit-limit-test.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/daily-byok-ollama-test.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/copilot-pr-merged-report.lock.yml	Regenerated lock file; bumps `@github/copilot-sdk` install to `1.0.2`.
.github/workflows/copilot-centralization-drilldown.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/codex-github-remote-mcp-test.lock.yml	Regenerated lock file; updates Codex CLI references to `0.141.0`.
.github/workflows/bot-detection.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/agentic-token-optimizer.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.
.github/workflows/ace-editor.lock.yml	Regenerated lock file; updates GitHub MCP Server container reference to `v1.4.0`.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 93/249 changed files
Comments generated: 2

@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"9730c7c13a6b6a076a448fddd9ff08fc4db28bdfdd39392ac40371ff2b888af6","body_hash":"6026d24fd6e26edf7b13fa2e49f662cdc806e8157b3f23a618a036213eba1870","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.63"}}
-# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GH_AW_OTEL_GRAFANA_AUTHORIZATION","GH_AW_OTEL_GRAFANA_ENDPOINT","GH_AW_OTEL_SENTRY_AUTHORIZATION","GH_AW_OTEL_SENTRY_ENDPOINT","GITHUB_TOKEN"],"actions":[{"repo":"actions/cache/restore","sha":"27d5ce7f107fe9357f9df03efb73ab90386fccae","version":"v5.0.5"},{"repo":"actions/cache/save","sha":"27d5ce7f107fe9357f9df03efb73ab90386fccae","version":"v5.0.5"},{"repo":"actions/checkout","sha":"9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0","version":"v7.0.0"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.7","digest":"sha256:aae231e4635c8999d039c132f1602d3df850fe9b84a00aa2b5ac981179b5661c","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.7@sha256:aae231e4635c8999d039c132f1602d3df850fe9b84a00aa2b5ac981179b5661c"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.7","digest":"sha256:009caf2e3d88fa77b64e9a03a95a228fc58db0f1701c6d324b29ba5a3c7c79b6","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.7@sha256:009caf2e3d88fa77b64e9a03a95a228fc58db0f1701c6d324b29ba5a3c7c79b6"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.7","digest":"sha256:deb1d4e19de62d51cee0508057a596a19315c3423ada4d675cad136dc8037c96","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.7@sha256:deb1d4e19de62d51cee0508057a596a19315c3423ada4d675cad136dc8037c96"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.27","digest":"sha256:fe984bddde4ec05d756d9043edb0a32912e6b7b72f6a121b1082f29221421cc7","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.27@sha256:fe984bddde4ec05d756d9043edb0a32912e6b7b72f6a121b1082f29221421cc7"},{"image":"ghcr.io/github/gh-aw-node","digest":"sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b","pinned_image":"ghcr.io/github/gh-aw-node@sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b"},{"image":"ghcr.io/github/github-mcp-server:v1.3.0","digest":"sha256:5c83359327a0bacc3d34db730bea6557d39d341cee0bf6c58c9a896e33150e80","pinned_image":"ghcr.io/github/github-mcp-server:v1.3.0@sha256:5c83359327a0bacc3d34db730bea6557d39d341cee0bf6c58c9a896e33150e80"}]}
+# gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GH_AW_OTEL_GRAFANA_AUTHORIZATION","GH_AW_OTEL_GRAFANA_ENDPOINT","GH_AW_OTEL_SENTRY_AUTHORIZATION","GH_AW_OTEL_SENTRY_ENDPOINT","GITHUB_TOKEN"],"actions":[{"repo":"actions/cache/restore","sha":"27d5ce7f107fe9357f9df03efb73ab90386fccae","version":"v5.0.5"},{"repo":"actions/cache/save","sha":"27d5ce7f107fe9357f9df03efb73ab90386fccae","version":"v5.0.5"},{"repo":"actions/checkout","sha":"9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0","version":"v7.0.0"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.7","digest":"sha256:aae231e4635c8999d039c132f1602d3df850fe9b84a00aa2b5ac981179b5661c","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.7@sha256:aae231e4635c8999d039c132f1602d3df850fe9b84a00aa2b5ac981179b5661c"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.7","digest":"sha256:009caf2e3d88fa77b64e9a03a95a228fc58db0f1701c6d324b29ba5a3c7c79b6","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.7@sha256:009caf2e3d88fa77b64e9a03a95a228fc58db0f1701c6d324b29ba5a3c7c79b6"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.7","digest":"sha256:deb1d4e19de62d51cee0508057a596a19315c3423ada4d675cad136dc8037c96","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.7@sha256:deb1d4e19de62d51cee0508057a596a19315c3423ada4d675cad136dc8037c96"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.27","digest":"sha256:fe984bddde4ec05d756d9043edb0a32912e6b7b72f6a121b1082f29221421cc7","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.27@sha256:fe984bddde4ec05d756d9043edb0a32912e6b7b72f6a121b1082f29221421cc7"},{"image":"ghcr.io/github/gh-aw-node","digest":"sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b","pinned_image":"ghcr.io/github/gh-aw-node@sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b"},{"image":"ghcr.io/github/github-mcp-server:v1.4.0"}]}


@@ -1,5 +1,5 @@
 # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"c9bab836bb878c4cb664b946e823e450632be66ae446ecdbb967468d356d0aa4","body_hash":"7b12d2c5b078e9dc84b294e4b4e2ddfc212056207e00979fb76a5e07be2ac12d","strict":true,"agent_id":"copilot","engine_versions":{"copilot":"1.0.63"}}
-# gh-aw-manifest: {"version":1,"secrets":["GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GH_AW_OTEL_GRAFANA_AUTHORIZATION","GH_AW_OTEL_GRAFANA_ENDPOINT","GH_AW_OTEL_SENTRY_AUTHORIZATION","GH_AW_OTEL_SENTRY_ENDPOINT","GITHUB_TOKEN"],"actions":[{"repo":"actions/cache/restore","sha":"27d5ce7f107fe9357f9df03efb73ab90386fccae","version":"v5.0.5"},{"repo":"actions/cache/save","sha":"27d5ce7f107fe9357f9df03efb73ab90386fccae","version":"v5.0.5"},{"repo":"actions/checkout","sha":"9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0","version":"v7.0.0"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.7","digest":"sha256:aae231e4635c8999d039c132f1602d3df850fe9b84a00aa2b5ac981179b5661c","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.7@sha256:aae231e4635c8999d039c132f1602d3df850fe9b84a00aa2b5ac981179b5661c"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.7","digest":"sha256:009caf2e3d88fa77b64e9a03a95a228fc58db0f1701c6d324b29ba5a3c7c79b6","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.7@sha256:009caf2e3d88fa77b64e9a03a95a228fc58db0f1701c6d324b29ba5a3c7c79b6"},{"image":"ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.7","digest":"sha256:4757f198a3fa20f88bdbe70be7ae1a05f127d9c0a9e96a5d6460ef40c08fc83d","pinned_image":"ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.7@sha256:4757f198a3fa20f88bdbe70be7ae1a05f127d9c0a9e96a5d6460ef40c08fc83d"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.7","digest":"sha256:deb1d4e19de62d51cee0508057a596a19315c3423ada4d675cad136dc8037c96","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.7@sha256:deb1d4e19de62d51cee0508057a596a19315c3423ada4d675cad136dc8037c96"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.27","digest":"sha256:fe984bddde4ec05d756d9043edb0a32912e6b7b72f6a121b1082f29221421cc7","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.27@sha256:fe984bddde4ec05d756d9043edb0a32912e6b7b72f6a121b1082f29221421cc7"},{"image":"ghcr.io/github/gh-aw-node","digest":"sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b","pinned_image":"ghcr.io/github/gh-aw-node@sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b"},{"image":"ghcr.io/github/github-mcp-server:v1.3.0","digest":"sha256:5c83359327a0bacc3d34db730bea6557d39d341cee0bf6c58c9a896e33150e80","pinned_image":"ghcr.io/github/github-mcp-server:v1.3.0@sha256:5c83359327a0bacc3d34db730bea6557d39d341cee0bf6c58c9a896e33150e80"}]}
+# gh-aw-manifest: {"version":1,"secrets":["GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GH_AW_OTEL_GRAFANA_AUTHORIZATION","GH_AW_OTEL_GRAFANA_ENDPOINT","GH_AW_OTEL_SENTRY_AUTHORIZATION","GH_AW_OTEL_SENTRY_ENDPOINT","GITHUB_TOKEN"],"actions":[{"repo":"actions/cache/restore","sha":"27d5ce7f107fe9357f9df03efb73ab90386fccae","version":"v5.0.5"},{"repo":"actions/cache/save","sha":"27d5ce7f107fe9357f9df03efb73ab90386fccae","version":"v5.0.5"},{"repo":"actions/checkout","sha":"9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0","version":"v7.0.0"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.7","digest":"sha256:aae231e4635c8999d039c132f1602d3df850fe9b84a00aa2b5ac981179b5661c","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.7@sha256:aae231e4635c8999d039c132f1602d3df850fe9b84a00aa2b5ac981179b5661c"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.7","digest":"sha256:009caf2e3d88fa77b64e9a03a95a228fc58db0f1701c6d324b29ba5a3c7c79b6","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.7@sha256:009caf2e3d88fa77b64e9a03a95a228fc58db0f1701c6d324b29ba5a3c7c79b6"},{"image":"ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.7","digest":"sha256:4757f198a3fa20f88bdbe70be7ae1a05f127d9c0a9e96a5d6460ef40c08fc83d","pinned_image":"ghcr.io/github/gh-aw-firewall/cli-proxy:0.27.7@sha256:4757f198a3fa20f88bdbe70be7ae1a05f127d9c0a9e96a5d6460ef40c08fc83d"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.7","digest":"sha256:deb1d4e19de62d51cee0508057a596a19315c3423ada4d675cad136dc8037c96","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.7@sha256:deb1d4e19de62d51cee0508057a596a19315c3423ada4d675cad136dc8037c96"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.27","digest":"sha256:fe984bddde4ec05d756d9043edb0a32912e6b7b72f6a121b1082f29221421cc7","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.27@sha256:fe984bddde4ec05d756d9043edb0a32912e6b7b72f6a121b1082f29221421cc7"},{"image":"ghcr.io/github/gh-aw-node","digest":"sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b","pinned_image":"ghcr.io/github/gh-aw-node@sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b"},{"image":"ghcr.io/github/github-mcp-server:v1.4.0"}]}


pelikhan · 2026-06-21T14:40:53Z

@copilot run update to resolve the container digests

…n-updates-2026-06-21 # Conflicts: # .github/workflows/smoke-codex.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

…, update wasm golden Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-06-21T15:01:49Z

@copilot merge main, recompile, update wasm golden

Done. Merged main, added the ghcr.io/github/github-mcp-server:v1.4.0 digest (sha256:2afb26356481d1a350e14544a6e160f7f7ec1561a1ea309b823665abf0309036) to .github/aw/actions-lock.json, recompiled all 249 lock files (the MCP server container is now digest-pinned in all generated YAMLs), and updated the wasm golden files.

github-actions · 2026-06-21T15:12:10Z

⚠️ Security scanning failed for Smoke Claude. Review the logs for details.

github-actions · 2026-06-21T15:12:11Z

🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨

github-actions · 2026-06-21T15:12:12Z

⚠️ Security scanning failed for Smoke Gemini. Review the logs for details.

github-actions · 2026-06-21T15:12:20Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-06-21T15:12:25Z

⚠️ Security scanning failed for Smoke Codex. Review the logs for details.

github-actions · 2026-06-21T15:12:51Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-21T15:12:56Z

📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-21T15:13:01Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-21T15:13:07Z

⚠️ Security scanning failed for Smoke Pi. Review the logs for details.

github-actions · 2026-06-21T15:16:04Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.54.0
jq	✅	1.7
yq	✅	v4.53.3
curl	✅	8.5.0
gh	✅	2.94.0
node	✅	v22.22.3
python3	✅	3.11.15 (PyPy 7.3.23)
go	✅	1.24.13
java	✅	openjdk 21.0.11
dotnet	✅	10.0.301

Result: 12/12 tools available — PASS ✅

🔧 Tool validation by Agent Container Smoke Test · 17.2 AIC · ⊞ 5.4K · ◷

github-actions · 2026-06-21T15:16:12Z

Smoke test FAIL

✅ gh CLI
❌ web fetch
✅ file write
✅ bash verify
❌ build

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

proxy.golang.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "proxy.golang.org"

See Network Configuration for more information.

🥧 Smoke Pi — Powered by Pi · 3.37 AIC · ⊞ 1.8K · ◷

github-actions · 2026-06-21T15:16:14Z

Commit pushed: 16487a4

Generated by Changeset Generator · 7.93 AIC · ⊞ 15.3K

github-actions · 2026-06-21T15:16:24Z

Smoke Test Results

✅ GitHub MCP Testing
✅ Web Fetch Testing
✅ File Writing Testing
✅ Bash Tool Testing
❌ Build gh-aw

Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

✨ Smoke Gemini — Powered by Gemini · ◷

github-actions · 2026-06-21T15:18:38Z

Comment Memory

Sunlight on old keys
Tests bloom in quiet terminals
Green lights hold their breath

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · 12.8 AIC · ⊞ 10.7K · ◷

Copilot · 2026-06-21T15:19:02Z

@copilot run update to resolve the container digests

Completed. Added ghcr.io/github/github-mcp-server:v1.4.0 with digest sha256:2afb26356481d1a350e14544a6e160f7f7ec1561a1ea309b823665abf0309036 to .github/aw/actions-lock.json and recompiled all workflows. All 249 lock files now include the digest-pinned container reference in their manifests.

github-actions · 2026-06-21T15:19:09Z

🧪 Smoke Test: Claude — Run 27908490831

Core #1-12: ✅ all passed
PR review #13-18: ✅ all passed
#19 Close PR: ⚠️ skipped (no safe test PR)

Overall: PASS 🎉

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 58.6 AIC · ⊞ 8.5K · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 58.6 AIC · ⊞ 8.5K

github-actions · 2026-06-21T15:19:15Z

      "digest": "sha256:5c83359327a0bacc3d34db730bea6557d39d341cee0bf6c58c9a896e33150e80",
      "pinned_image": "ghcr.io/github/github-mcp-server:v1.3.0@sha256:5c83359327a0bacc3d34db730bea6557d39d341cee0bf6c58c9a896e33150e80"
    },
+    "ghcr.io/github/github-mcp-server:v1.4.0": {


Smoke test: nice to see the github-mcp-server v1.4.0 digest pinned here for reproducibility. 👍

github-actions · 2026-06-21T15:19:16Z

    },
+    "ghcr.io/github/github-mcp-server:v1.4.0": {
+      "image": "ghcr.io/github/github-mcp-server:v1.4.0",
+      "digest": "sha256:2afb26356481d1a350e14544a6e160f7f7ec1561a1ea309b823665abf0309036",


Smoke test: digest pin looks consistent with the versioned tag — good supply-chain hygiene.

github-actions · 2026-06-21T15:22:18Z

Comment Memory

Circuits test the dawn
Small agents whisper through the queue
Green lights hum in sync

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · 258.6 AIC · ⊞ 19.2K · ◷

github-actions · 2026-06-21T15:22:22Z

chore: CLI version updates 2026-06-21
1 ❌ 2 ✅ 3 ✅ 4 ✅
5 ❌ 6 ✅ 7 ✅ 8 ✅
9 ✅ 10 ✅ 11 ✅ 12 ✅
13 ✅ 14 ✅ 15 ✅
Overall: FAIL
Author: app/copilot-swe-agent | Assignees: pelikhan, Copilot

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · 258.6 AIC · ⊞ 19.2K · ◷

github-actions

Smoke review comments attached.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · 258.6 AIC · ⊞ 19.2K

github-actions · 2026-06-21T15:29:45Z

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

Potential security threats were detected in the agent output.

Review the workflow run logs for details.

Smoke tests PASS ✅ See issue #40646

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot - AOAI (Entra) · 210.4 AIC · ⊞ 18.2K · ◷

Initial plan

79106fd

Copilot AI assigned Copilot and pelikhan Jun 21, 2026

Copilot started work on behalf of pelikhan June 21, 2026 13:19 View session

chore: CLI version updates 2026-06-21 (Claude Code, GitHub MCP Server…

723a724

…, Codex, Pi, Copilot SDK) Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update CLI version constants for multiple tools~~ chore: CLI version updates 2026-06-21 Jun 21, 2026

Copilot AI requested a review from pelikhan June 21, 2026 13:30

Copilot finished work on behalf of pelikhan June 21, 2026 13:30

pelikhan marked this pull request as ready for review June 21, 2026 14:33

Copilot AI review requested due to automatic review settings June 21, 2026 14:33

Copilot started reviewing on behalf of pelikhan June 21, 2026 14:34 View session

Copilot AI reviewed Jun 21, 2026

View reviewed changes

Copilot started work on behalf of pelikhan June 21, 2026 14:45 View session

Copilot AI and others added 2 commits June 21, 2026 14:52

Merge remote-tracking branch 'origin/main' into copilot/ca-cli-versio…

bf679d8

…n-updates-2026-06-21 # Conflicts: # .github/workflows/smoke-codex.lock.yml Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

chore: merge main, recompile, add github-mcp-server v1.4.0 digest pin…

a45dad1

…, update wasm golden Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan June 21, 2026 15:02

Copilot started work on behalf of pelikhan June 21, 2026 15:02 View session

pelikhan added the smoke label Jun 21, 2026

github-actions Bot temporarily deployed to aoai-model June 21, 2026 15:11 Inactive

github-actions Bot temporarily deployed to aoai-model June 21, 2026 15:13 Inactive

github-actions Bot mentioned this pull request Jun 21, 2026

[aw] Smoke Antigravity produced no safe outputs #40636

Open

Add changeset for CLI version updates

16487a4

This was referenced Jun 21, 2026

[aw] Smoke Copilot - AOAI (apikey) produced no safe outputs #40574

Closed

Smoke Test: Claude - 27908490831 #40640

Open

github-actions Bot added the smoke-claude label Jun 21, 2026

github-actions Bot reviewed Jun 21, 2026

View reviewed changes

Copilot finished work on behalf of pelikhan June 21, 2026 15:19

github-actions Bot mentioned this pull request Jun 21, 2026

Smoke Test: Copilot - 27908514467 #40643

Open

github-actions Bot reviewed Jun 21, 2026

View reviewed changes

pelikhan merged commit e792740 into main Jun 21, 2026
30 checks passed

pelikhan deleted the copilot/ca-cli-version-updates-2026-06-21 branch June 21, 2026 15:40

Conversation

Copilot AI commented Jun 21, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pelikhan commented Jun 21, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

pelikhan commented Jun 21, 2026

Uh oh!

Copilot AI commented Jun 21, 2026

Uh oh!

github-actions Bot commented Jun 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 21, 2026

Uh oh!

github-actions Bot commented Jun 21, 2026

Uh oh!

github-actions Bot commented Jun 21, 2026

Uh oh!

github-actions Bot commented Jun 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 21, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented Jun 21, 2026

Uh oh!

github-actions Bot commented Jun 21, 2026

Uh oh!

github-actions Bot commented Jun 21, 2026

Smoke Test Results

Uh oh!

github-actions Bot commented Jun 21, 2026

Comment Memory

Uh oh!

Copilot AI commented Jun 21, 2026

Uh oh!

github-actions Bot commented Jun 21, 2026

🧪 Smoke Test: Claude — Run 27908490831

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jun 21, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jun 21, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 21, 2026

Comment Memory

Uh oh!

github-actions Bot commented Jun 21, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 21, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Copilot AI commented Jun 21, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jun 21, 2026 •

edited

Loading

github-actions Bot commented Jun 21, 2026 •

edited

Loading

github-actions Bot commented Jun 21, 2026 •

edited

Loading

github-actions Bot commented Jun 21, 2026 •

edited

Loading

github-actions Bot commented Jun 21, 2026 •

edited

Loading

github-actions Bot commented Jun 21, 2026 •

edited

Loading