updated to awf 0.27.2 by pelikhan · Pull Request #38660 · github/gh-aw

pelikhan · 2026-06-11T16:25:18Z

✨ PR Review Safe Output Test - Run 27361655884

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 94.7 AIC · ⌖ 25.7 AIC · ◷

github-actions · 2026-06-11T16:27:37Z

🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨

github-actions · 2026-06-11T16:27:48Z

🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧

github-actions · 2026-06-11T16:28:07Z

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

github-actions · 2026-06-11T16:28:14Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-06-11T16:28:24Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-06-11T16:28:26Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-06-11T16:28:40Z

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-06-11T16:28:45Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

Copilot

Pull request overview

This PR updates the repository’s default gh-aw-firewall (AWF) version to v0.27.2 and refreshes the generated/pinned artifacts that depend on that version (container image SHA pins and compiled *.lock.yml workflows).

Changes:

Bump DefaultFirewallVersion from v0.27.1 to v0.27.2.
Add container image pin entries for AWF 0.27.2 (agent, api-proxy, cli-proxy, squid) to the action/container pin datasets.
Regenerate compiled *.lock.yml workflows to reference AWF v0.27.2 (install script arg, schema URL, container digests/pinned images).

Show a summary per file

File	Description
pkg/constants/version_constants.go	Bumps the default AWF version constant to `v0.27.2`.
pkg/workflow/data/action_pins.json	Adds AWF 0.27.2 container digest/pinned-image entries used by workflow compilation.
pkg/actionpins/data/action_pins.json	Mirrors the AWF 0.27.2 container digest/pinned-image additions in the actionpins dataset.
.github/aw/actions-lock.json	Adds AWF 0.27.2 container digest/pinned-image entries for workflow locking/pinning.
.github/workflows/test-workflow.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/smoke-ci.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/hippo-embed.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/firewall.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/example-permissions-warning.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/daily-malicious-code-scan.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/codex-github-remote-mcp-test.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/bot-detection.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/ai-moderator.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).
.github/workflows/agentic-token-optimizer.lock.yml	Regenerates locked workflow to use AWF v0.27.2, including cli-proxy image pin updates.
.github/workflows/ace-editor.lock.yml	Regenerates locked workflow to use AWF v0.27.2 (schema URL, install arg, pinned images).

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 39/258 changed files
Comments generated: 0

github-actions · 2026-06-11T16:32:49Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.54.0
jq	✅	1.7
yq	✅	v4.53.3
curl	✅	8.5.0
gh	✅	2.93.0
node	✅	v22.22.3
python3	✅	3.11.15 (PyPy)
go	✅	1.24.13
java	✅	available
dotnet	✅	10.0.300

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · 30.7 AIC · ⌖ 12.6 AIC · ◷

github-actions · 2026-06-11T16:34:03Z

✅ smoke-ci: safeoutputs CLI comment + comment-memory run (27361772545)

Generated by 🧪 Smoke CI for issue #38660 · ◷

github-actions · 2026-06-11T16:34:04Z

Comment Memory

CI lights the path
Green checks bloom at dawn
Quiet bots still sing

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Generated by 🧪 Smoke CI for issue #38660 · ◷

github-actions · 2026-06-11T16:37:53Z

Smoke test: PASS
PRs: #38630, #38622
1 ✅ 2 ✅ 3 ✅ 4 ⚪ 5 ✅ 6 ✅ 7 ✅ 8 ✅ 9 ✅ 10 ⚪

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · 29.3 AIC · ⌖ 8.26 AIC · ◷

github-actions · 2026-06-11T16:37:54Z

Comment Memory

Silent smoke drifts up
Fresh caches hum beneath the build
GitHub waits in light

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · 29.3 AIC · ⌖ 8.26 AIC · ◷

github-actions · 2026-06-11T16:38:57Z

Smoke Test 27361686786: FAIL

GitHub MCP ✅
mcpscripts-gh ❌
Serena CLI ❌
Playwright CLI ❌
Web fetch ✅
File + bash ✅
Build ✅
9-15. Other tests ❌
Author: @pelikhan Assignees: @

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot - AOAI (apikey) · 60.4 AIC · ⌖ 7.61 AIC · ◷

github-actions · 2026-06-11T16:39:03Z

Smoke Test 27361686786: FAIL

GitHub MCP ✅
mcpscripts-gh ❌
Serena CLI ❌
Playwright CLI ❌
Web fetch ✅
File + bash ✅
Build ✅
9-15. Other tests ❌
Author: @pelikhan Assignees: @

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot - AOAI (apikey) · 60.4 AIC · ⌖ 7.61 AIC · ◷

github-actions · 2026-06-11T16:39:45Z

🤖 Smoke Test: Claude — Run 27361655884

Core #1-12: ✅ all passed (MCP, gh CLI, build, Playwright, Tavily, file/bash, discussion, AW status, Slack, code-scan, check-run)
PR review #13-19: ✅ update, ✅ review comments, ✅ submit review, ⚠️ resolve thread (none unresolved), ✅ add reviewer, ✅ push, ⚠️ close PR (no safe test PR)

Overall: PARTIAL (2 skipped, 0 failed)

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 94.7 AIC · ⌖ 25.7 AIC · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · 94.7 AIC · ⌖ 25.7 AIC

github-actions · 2026-06-11T16:39:49Z

      "digest": "sha256:55149fa2daf8fa8afa2803f2ac1a3534591a7c96f173ee2aec9545fbe67305df",
      "pinned_image": "ghcr.io/github/gh-aw-firewall/agent:0.27.1@sha256:55149fa2daf8fa8afa2803f2ac1a3534591a7c96f173ee2aec9545fbe67305df"
    },
+    "ghcr.io/github/gh-aw-firewall/agent:0.27.2": {


Smoke test review: new 0.27.2 agent image pin added — looks consistent with existing entries. 👍

github-actions · 2026-06-11T16:39:49Z

      "digest": "sha256:2802437f05830336ea3ae8639f628776608d14d95b5b3cf30f161eb505e29752",
      "pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.27.1@sha256:2802437f05830336ea3ae8639f628776608d14d95b5b3cf30f161eb505e29752"
    },
+    "ghcr.io/github/gh-aw-firewall/api-proxy:0.27.2": {


Smoke test review: api-proxy 0.27.2 digest pinned correctly. Nit: consider grouping image entries by component for readability.

github-actions · 2026-06-11T16:43:33Z

updated to awf 0.27.2
T1❌ T2✅ T3✅ T4✅ T5✅
T6✅ T7✅ T8✅ T9✅ T10✅
T11✅ T12✅ T13✅ T14✅ T15✅
Overall: FAIL
Author: @pelikhan
Assignees: none

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "accounts.google.com"
    - "android.clients.google.com"
    - "clients2.google.com"
    - "contentautofill.googleapis.com"
    - "safebrowsingohttpgateway.googleapis.com"
    - "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · 335.6 AIC · ⌖ 10.7 AIC · ◷

updated to awf 0.27.2

e942b1e

Copilot AI review requested due to automatic review settings June 11, 2026 16:25

pelikhan added the smoke label Jun 11, 2026

Copilot started reviewing on behalf of pelikhan June 11, 2026 16:26 View session

refresh golden

44d2b98

Copilot AI reviewed Jun 11, 2026

View reviewed changes

This was referenced Jun 11, 2026

[aw] Smoke Pi failed #38582

Closed

[aw] Smoke Antigravity failed #38581

Closed

github-actions Bot mentioned this pull request Jun 11, 2026

Smoke Test: Claude - 27361655884 #38667

Closed

pelikhan merged commit 9c481b8 into main Jun 11, 2026
29 checks passed

pelikhan deleted the firewall-0.27.2 branch June 11, 2026 16:39

github-actions Bot added the smoke-claude label Jun 11, 2026

github-actions Bot reviewed Jun 11, 2026

View reviewed changes

github-actions Bot mentioned this pull request Jun 11, 2026

Smoke Test: Copilot - 27361695491 #38669

Closed

github-actions Bot added smoke-copilot and removed smoke labels Jun 11, 2026

This was referenced Jun 11, 2026

[aw] Smoke Copilot reported incomplete result #38671

Closed

Smoke Test: Claude - 27368962830 #38695

Closed

Smoke Test: Copilot - 27369048194 #38701

Closed

Smoke Test: Copilot - 27369249383 #38702

Closed

Conversation

pelikhan commented Jun 11, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

github-actions Bot commented Jun 11, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

github-actions Bot commented Jun 11, 2026

Comment Memory

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

github-actions Bot commented Jun 11, 2026

Comment Memory

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jun 11, 2026

🤖 Smoke Test: Claude — Run 27361655884

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Jun 11, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Jun 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

pelikhan commented Jun 11, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Jun 11, 2026 •

edited

Loading

github-actions Bot commented Jun 11, 2026 •

edited

Loading

github-actions Bot commented Jun 11, 2026 •

edited

Loading

github-actions Bot commented Jun 11, 2026 •

edited

Loading

github-actions Bot commented Jun 11, 2026 •

edited

Loading

github-actions Bot commented Jun 11, 2026 •

edited

Loading