chore: bump AWF to v0.13.7 by Mossaka · Pull Request #13970 · github/gh-aw

Mossaka · 2026-02-05T18:27:20Z

Summary

Bump AWF (gh-aw-firewall) to v0.13.6 which includes fixes for chroot mode (etc/hosts, resolv.conf, permissions) and HTTPS_PROXY restoration.

Changes in AWF v0.13.6

fix: restore HTTPS_PROXY, fix chroot hosts/permissions, fix Bun crash ([Custom Engine Test] Test Issue Created by Custom Engine #530)
fix: mount /etc/hosts in chroot mode and handle missing resolv.conf (Remove create-discussion feature and all associated files #522)
fix: ensure .copilot directory permissions before CLI install
fix: remove HTTP_PROXY and fix HTTP blocking test

Test plan

Verify smoke-claude passes
Verify smoke-copilot passes
Verify smoke-codex passes

This release includes the fix for Squid intercept mode for NAT-redirected traffic, which resolves the Codex smoke test OAuth discovery timeouts. Key change: AWF now properly handles transparent proxy traffic by using Squid's intercept mode (port 3129) for NAT-redirected requests. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Copilot

Pull request overview

This PR bumps the gh-aw-firewall (AWF) version from v0.13.4 to v0.13.5 to include a fix for Squid intercept mode. The fix addresses an issue where NAT-redirected traffic was failing with "Invalid URL - Missing hostname" errors because clients sent relative URLs while Squid expected absolute URLs in normal proxy mode. The new version uses Squid's intercept mode (port 3129) for NAT-redirected traffic.

Changes:

Updated DefaultFirewallVersion constant from "v0.13.4" to "v0.13.5" in pkg/constants/constants.go
Updated AWF version references in smoke-codex.lock.yml workflow file (4 occurrences)

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
pkg/constants/constants.go	Updated the DefaultFirewallVersion constant to v0.13.5
.github/workflows/smoke-codex.lock.yml	Updated AWF binary installation, Docker image downloads, configuration, and awf command invocations to use version 0.13.5

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-05T18:30:24Z

pkg/constants/constants.go


 // DefaultFirewallVersion is the default version of the gh-aw-firewall (AWF) binary
-const DefaultFirewallVersion Version = "v0.13.4"
+const DefaultFirewallVersion Version = "v0.13.5"


The version bump from v0.13.4 to v0.13.5 is incomplete. While this PR updates the constant in pkg/constants/constants.go and the smoke-codex.lock.yml workflow file, there are hundreds of other locked workflow files in .github/workflows/ that still reference v0.13.4 and 0.13.4.

All workflow lock files should be updated consistently to use the new v0.13.5 version to ensure the intercept mode fix is applied across all workflows that use AWF. This includes files such as:

smoke-claude.lock.yml

smoke-copilot.lock.yml

All other *.lock.yml files in .github/workflows/

The incomplete update could result in some workflows still using the old version with the Squid intercept mode issue, while only smoke-codex gets the fix.

github-actions · 2026-02-05T18:36:55Z

🎉 Smoke Test PASSED - Run §21723712906

Test Results:
✅ GitHub MCP - Reviewed PRs #13966, #13948
✅ Safe-inputs gh CLI - Queried PRs #13970, #13969
✅ Serena MCP - Found 15 symbols in main.go
✅ Playwright - Verified GitHub homepage
✅ File write - Created test file
✅ Bash - Verified file creation
✅ Discussion - Queried discussion #13941
✅ Build - Successfully built gh-aw
✅ Workflow dispatch - Triggered haiku-printer

Overall Status: ✅ PASS

cc @Mossaka

AI generated by Smoke Copilot

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions · 2026-02-05T18:52:57Z

📰 DEVELOPING STORY: Smoke Copilot reports was cancelled. Our correspondents are investigating the incident...

github-actions · 2026-02-05T18:57:51Z

❌ Changeset Generator failed. Please review the logs for details.

github-actions · 2026-02-05T18:57:51Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-05T18:57:56Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-05T18:57:56Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-02-05T19:00:30Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	1.7
yq	✅	4.52.2
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	20.20.0
python3	✅	3.12.3
go	✅	1.24.12
java	✅	21.0.6 (corrected)
dotnet	❌	not found

Result: 11/12 tools available ❌

Missing: .NET runtime (dotnet) is not installed in the agent container.

All other common development tools are present and functional.

AI generated by Agent Container Smoke Test

github-actions · 2026-02-05T19:02:16Z

🎭 The Smoke Test Agent Has Arrived! 🎭

Like a digital phantom, I materialize from the ether...

Just passing through on my automated rounds, testing the boundaries between code and execution. Found this fascinating discussion on secret management—quite the treasure trove of security wisdom!

✨ Run ID: §21724483593

Now vanishing back into the workflow pipelines... 👻

AI generated by Smoke Copilot

github-actions · 2026-02-06T00:57:09Z

Smoke Test Results

✅ GitHub MCP
✅ Safe Inputs GH
✅ Serena MCP (168 symbols)
✅ Make Build
✅ Playwright
✅ Tavily Search
✅ File Writing
✅ Bash Tools
✅ Discussion Comment
⚠️ AWF MCP (accessible)

Status: PASS

View Details

AI generated by Smoke Claude

Remove --agent-image act from all engine implementations (claude, copilot, codex) and update docker image download to use the default agent container instead of agent-act. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

# Conflicts: # .github/workflows/agent-performance-analyzer.lock.yml # .github/workflows/agent-persona-explorer.lock.yml # .github/workflows/ai-moderator.lock.yml # .github/workflows/archie.lock.yml # .github/workflows/artifacts-summary.lock.yml # .github/workflows/auto-triage-issues.lock.yml # .github/workflows/brave.lock.yml # .github/workflows/breaking-change-checker.lock.yml # .github/workflows/chroma-issue-indexer.lock.yml # .github/workflows/ci-coach.lock.yml # .github/workflows/ci-doctor.lock.yml # .github/workflows/cli-consistency-checker.lock.yml # .github/workflows/code-scanning-fixer.lock.yml # .github/workflows/code-simplifier.lock.yml # .github/workflows/copilot-cli-deep-research.lock.yml # .github/workflows/copilot-pr-merged-report.lock.yml # .github/workflows/copilot-pr-nlp-analysis.lock.yml # .github/workflows/copilot-pr-prompt-analysis.lock.yml # .github/workflows/craft.lock.yml # .github/workflows/daily-assign-issue-to-user.lock.yml # .github/workflows/daily-cli-performance.lock.yml # .github/workflows/daily-compiler-quality.lock.yml # .github/workflows/daily-copilot-token-report.lock.yml # .github/workflows/daily-file-diet.lock.yml # .github/workflows/daily-firewall-report.lock.yml # .github/workflows/daily-malicious-code-scan.lock.yml # .github/workflows/daily-news.lock.yml # .github/workflows/daily-regulatory.lock.yml # .github/workflows/daily-repo-chronicle.lock.yml # .github/workflows/daily-secrets-analysis.lock.yml # .github/workflows/daily-semgrep-scan.lock.yml # .github/workflows/daily-syntax-error-quality.lock.yml # .github/workflows/daily-team-status.lock.yml # .github/workflows/daily-testify-uber-super-expert.lock.yml # .github/workflows/daily-workflow-updater.lock.yml # .github/workflows/delight.lock.yml # .github/workflows/dependabot-go-checker.lock.yml # .github/workflows/dev-hawk.lock.yml # .github/workflows/dev.lock.yml # .github/workflows/dictation-prompt.lock.yml # .github/workflows/discussion-task-miner.lock.yml # .github/workflows/docs-noob-tester.lock.yml # .github/workflows/draft-pr-cleanup.lock.yml # .github/workflows/example-custom-error-patterns.lock.yml # .github/workflows/example-permissions-warning.lock.yml # .github/workflows/firewall-escape.lock.yml # .github/workflows/firewall.lock.yml # .github/workflows/functional-pragmatist.lock.yml # .github/workflows/github-remote-mcp-auth-test.lock.yml # .github/workflows/glossary-maintainer.lock.yml # .github/workflows/grumpy-reviewer.lock.yml # .github/workflows/hourly-ci-cleaner.lock.yml # .github/workflows/issue-monster.lock.yml # .github/workflows/issue-triage-agent.lock.yml # .github/workflows/jsweep.lock.yml # .github/workflows/layout-spec-maintainer.lock.yml # .github/workflows/mcp-inspector.lock.yml # .github/workflows/mergefest.lock.yml # .github/workflows/metrics-collector.lock.yml # .github/workflows/notion-issue-summary.lock.yml # .github/workflows/org-health-report.lock.yml # .github/workflows/pdf-summary.lock.yml # .github/workflows/plan.lock.yml # .github/workflows/poem-bot.lock.yml # .github/workflows/portfolio-analyst.lock.yml # .github/workflows/pr-nitpick-reviewer.lock.yml # .github/workflows/pr-triage-agent.lock.yml # .github/workflows/python-data-charts.lock.yml # .github/workflows/q.lock.yml # .github/workflows/release.lock.yml # .github/workflows/repo-audit-analyzer.lock.yml # .github/workflows/repo-tree-map.lock.yml # .github/workflows/repository-quality-improver.lock.yml # .github/workflows/research.lock.yml # .github/workflows/security-compliance.lock.yml # .github/workflows/security-fix-pr.lock.yml # .github/workflows/security-guard.lock.yml # .github/workflows/security-review.lock.yml # .github/workflows/slide-deck-maintainer.lock.yml # .github/workflows/smoke-copilot.lock.yml # .github/workflows/smoke-test-tools.lock.yml # .github/workflows/stale-repo-identifier.lock.yml # .github/workflows/sub-issue-closer.lock.yml # .github/workflows/super-linter.lock.yml # .github/workflows/technical-doc-writer.lock.yml # .github/workflows/terminal-stylist.lock.yml # .github/workflows/test-dispatcher.lock.yml # .github/workflows/test-project-url-default.lock.yml # .github/workflows/test-workflow.lock.yml # .github/workflows/tidy.lock.yml # .github/workflows/ubuntu-image-analyzer.lock.yml # .github/workflows/video-analyzer.lock.yml # .github/workflows/weekly-issue-summary.lock.yml # .github/workflows/workflow-generator.lock.yml # .github/workflows/workflow-health-manager.lock.yml # .github/workflows/workflow-normalizer.lock.yml # .github/workflows/workflow-skill-extractor.lock.yml

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

github-actions · 2026-02-06T01:16:26Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-02-06T01:16:27Z

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

github-actions · 2026-02-06T01:16:30Z

❌ Changeset Generator failed. Please review the logs for details.

github-actions · 2026-02-06T01:16:32Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-02-06T01:20:11Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.52.0
jq	✅	jq-1.7
yq	✅	v4.50.1
curl	✅	8.5.0
gh	✅	2.86.0
node	✅	v20.20.0
python3	✅	3.12.3
go	✅	go1.24.12
java	⚠️	Installed but execution error
dotnet	⚠️	Installed but execution error

Result: 10/12 tools available, 2/12 have execution issues ⚠️

Issues Found:

java: Binary exists at /usr/lib/jvm/temurin-17-jdk-amd64/bin/java but executes as bash (possible container/runtime issue)
dotnet: Binary exists at /usr/share/dotnet/dotnet but fails with "cannot execute dotnet when renamed to bash" error

Working Tools: bash, sh, git, jq, yq, curl, gh, node, python3, go

AI generated by Agent Container Smoke Test

github-actions · 2026-02-06T01:22:12Z

Smoke Test: Copilot - Run 21734996717

Results: ✅ PASS ⚠️

✅ GitHub MCP: Add telemetry.enterprise.githubcopilot.com to copilot engine default allowlist #14007, Fix test assertions in parse_mcp_gateway_log.test.cjs #14003
✅ Safe Inputs: chore: bump AWF to v0.13.7 #13970, Fix firewall SSL-bump field extraction in frontmatter parser #13920
⚠️ Serena: Activated, 0 symbols found
✅ Playwright: github.com verified
✅ File & Bash: Test file created
✅ Discussion: Comment added
✅ Build: Success
✅ Workflow Dispatch: Haiku sent

Overall: 9/9 tests completed

@Mossaka

AI generated by Smoke Copilot

github-actions · 2026-02-06T01:22:26Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

Copilot AI review requested due to automatic review settings February 5, 2026 18:27

Copilot started reviewing on behalf of Mossaka February 5, 2026 18:27 View session

Copilot AI reviewed Feb 5, 2026

View reviewed changes

github-actions bot added the smoke-copilot label Feb 5, 2026

github-actions bot mentioned this pull request Feb 5, 2026

Smoke Test: Copilot - 21723712906 #13972

Closed

Mossaka added smoke-copilot smoke-claude and removed smoke-copilot labels Feb 5, 2026

chore: recompile all workflow lock files for AWF v0.13.5

b1d162e

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Mossaka added smoke-copilot smoke-claude and removed smoke-claude smoke-copilot labels Feb 5, 2026

Mossaka added smoke-copilot smoke-claude smoke and removed smoke-claude smoke-copilot labels Feb 5, 2026

github-actions bot mentioned this pull request Feb 5, 2026

Smoke Test: Copilot - 21724483593 #13975

Closed

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Claude - 21734446127 #14015

Closed

github-actions bot added the smoke-claude label Feb 6, 2026

Mossaka added smoke and removed smoke labels Feb 6, 2026

Mossaka and others added 2 commits February 6, 2026 01:14

chore: merge main and recompile workflows with default container

3d7460a

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Mossaka removed the smoke label Feb 6, 2026

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Copilot - 21734871931 #14022

Closed

Mossaka added the smoke label Feb 6, 2026

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Copilot - 21734954041 #14023

Closed

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Copilot - 21734996717 #14024

Closed

github-actions bot removed the smoke label Feb 6, 2026

github-actions bot mentioned this pull request Feb 6, 2026

Smoke Test: Claude - 21734996692 #14025

Closed

Mossaka merged commit fed348b into main Feb 6, 2026
93 of 95 checks passed

Mossaka deleted the update/awf-0.13.5 branch February 6, 2026 01:26

This was referenced Feb 6, 2026

Smoke Test: Copilot - 21735231926 #14035

Open

chore: bump AWF to v0.13.8 #14027

Open

Smoke Test: Claude - 21735231947 #14036

Open

Conversation

Mossaka commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes in AWF v0.13.6

Test plan

Related

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 5, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Feb 5, 2026

Uh oh!

github-actions bot commented Feb 5, 2026

Uh oh!

github-actions bot commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 5, 2026

Uh oh!

github-actions bot commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 5, 2026

Agent Container Tool Check

Uh oh!

github-actions bot commented Feb 5, 2026

Uh oh!

github-actions bot commented Feb 6, 2026

Smoke Test Results

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

github-actions bot commented Feb 6, 2026

Agent Container Tool Check

Uh oh!

github-actions bot commented Feb 6, 2026

Smoke Test: Copilot - Run 21734996717

Uh oh!

github-actions bot commented Feb 6, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Mossaka commented Feb 5, 2026 •

edited

Loading

github-actions bot commented Feb 5, 2026 •

edited

Loading

github-actions bot commented Feb 5, 2026 •

edited

Loading

github-actions bot commented Feb 5, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading

github-actions bot commented Feb 6, 2026 •

edited

Loading