Community Contributors

Community Contributors

A heartfelt thank you to all community members whose bug reports and feature requests have shaped gh-aw!

This page highlights the most active community contributors. For a complete list of all contributors, see the README Community Contributions section.

Most Active Contributors

@yskopets

53 issues reported

• #49424 Non-Copilot stdio/container MCP server env secrets are raw-substituted into gateway JSON config, breaking on quote/backslash characters
• #43846 discussion-task-miner: repo-memory never persists — Step 1/6 write to a subdirectory excluded by the default file-glob
• #39605 Feature: configurable custom OTel resource attributes for observability traces
• #39595 OTEL_RESOURCE_ATTRIBUTES: un-encoded workflow names (spaces) make strict OTel consumers discard the entire resource
• #39462 engine.env: non-string values (numbers/booleans) are silently dropped at compile time

@strawgate

48 issues reported

• #51723 Skip ripgrep apt install when rg is already available on custom runners
• #51513 upload-asset: concurrent runs race on the shared assets branch (single non-retried push)
• #51373 Copilot engine: spawn /usr/local/bin/copilot ENOENT on tool-cache hit (installer skips wrapper when GITHUB_PATH is set)
• #47365 models.providers custom pricing never reaches the api-proxy; custom/BYOK models still 400 with unknown_model_ai_credits
• #43307 gh-aw-firewall images emitted tag-only in v0.82.2 lock files (regression of #38561)

@jaroslawgajewski

43 issues reported

• #67175 Downstream jobs read needs.activation.outputs.target_repo, but activation does not declare it in most workflows
• #67172 agentics-maintenance.yml sets DEBUG: "*" on the forecast step, flooding logs with HTTP internals
• #67157 on.bots entry for the Copilot coding agent is ignored: bot status check requires a collaborator that does not exist
• #67156 OTEL_EXPORTER_OTLP_HEADERS and GH_AW_OTLP_ENDPOINTS reach the agent sandbox through awf --env-all
• #67155 Checkout PR branch refuses GitHub Apps listed in on.bots for comment-triggered workflows

@dsyme

39 issues reported

• #56145 MCP gateway health timeout races backend startup timeout at 120 seconds
• #56050 add-labels doesn't create labels if missing and there's no option to do this.
• #55468 Proposal: support top-level doclink workflow frontmatter
• #55462 Proposal: add gh aw edit for schema-aware workflow configuration changes
• #52018 repo-memory and cache-memory: add a custom validation extension point before accepting updates

@samuelkahessay

30 issues reported

• #33016 Generated locks emit secret-shaped dummy COPILOT_API_KEY value
• #33015 tools.github.allowed-repos cannot express current repository for generated workflows
• #24756 gh-aw treats a comment-based review verdict as successful even when the agent only reported tool failures
• #24755 bot-gated PR review runs can disappear with no review check or surfaced skip reason
• #24754 gh-aw MCP server exposes 8 CLI tools but not checks, forcing review workflows to shell out to gh aw checks

@theletterf

28 issues reported

• #66203 Threat detection inherits the main engine's provider env when it runs on a different engine
• #63221 Successful 200 NONE_NONE records produce false firewall blocked-domain warnings
• #62167 claude engine: base-folder restore deletes APM-installed .claude/skills before the agent starts
• #54296 Codex harness retries deterministic 400 invalid_request_error as "partial execution"
• #54048 Secret validation accepts the literal string "null", deferring failure to an opaque upstream 401

@bryanchen-d

25 issues reported

• #64566 gpt-6-astra stopped working with Actions-token auth on Sep 29: reduced catalog and retries exhausted
• #59785 Recompiling with v0.87.10/v0.88.2 drops contents: read from safe_outputs/conclusion jobs that use setup-steps + local composite checkout
• #50740 push_to_pull_request_branch cannot apply HEAD-only filtered bundles
• #50670 Filtered bundle generation runs checkout hooks and misreports valid branches as missing
• #50362 v0.84.4: checkout@v7 includeIf credential still causes duplicate Authorization headers

@bbonafed

23 issues reported

• #29174 Feature: allow expression inputs for safe-output list constraints
• #29173 Feature: parameterize safe-output PR policy fields in workflow_call workflows
• #29172 Feature: parameterize safe-output boolean controls for reusable workflows
• #29171 Feature: allow safe-outputs.threat-detection to be controlled by workflow_call inputs
• #27670 on.github-app credentials cannot be sourced from a custom job's outputs (jobs.{pre_activation,activation}.pre-steps splicing/needs bugs + missing on.needs API)

@corygehr

22 issues reported

• #64311 gh aw --version prints to stderr instead of stdout
• #63472 cache-memory validation marker write fails with EACCES after successful agent run
• #38681 gh aw fix: move-step-run-expressions-to-env-bindings codemod inserts invalid env bindings when GitHub expressions appear in bash comments
• #38214 v0.79.2: PR #38154 (checkout manifest refactor) is not in the released tag
• #38150 Compile fails on v0.78.3+: auto-injected "Build checkout manifest" step embeds workflow_dispatch input expressions directly into shell, tripping template-injection linter

@alondahari

18 issues reported

• #64443 close-issue: intent-path failures silently fall back to an unreviewed legacy close
• #46925 Expose schema-derived safeoutputs CLI syntax and validate strict labels synchronously
• #46853 Intent-aware mutation descriptions should encourage optional metadata and clearly require strict metadata
• #46833 Issue-intent handlers use wrong payload shape (close_issue + assign_to_agent): metadata must be nested, not top-level
• #46825 Allow close_issue agents to choose from permitted state reasons at runtime

@tore-unumed

17 issues reported

• #60021 safe-outputs: find_repo_checkout git-scan fallback cannot see step-cloned repositories inside the container (dubious ownership); error message points at actions/checkout which fails the same way
• #36885 Cache read tokens are reported as 0 in run usage despite cache hits in per-response metadata
• #35446 Sub-agent model selection is ignored and the parent session model is used instead
• #35159 safe_outputs: cross-repo base_branch still causes checkout failure (not fixed in v0.76.1)
• #33545 safe-outputs: base_branch derived from target repo HEAD causes extract-base-branch to checkout wrong branch

@sg650

16 issues reported

• #52161 BUG: on a non-default-branch workflow_dispatch, generate_git_patch bases the patch on the default branch instead of GITHUB_SHA
• #52140 BUG: v0.86.2 does not fix #51433 — --allow-host-service-ports is inert because legacy-security never leaves network-isolation mode (your smoke-service-ports test cannot pass)
• #51433 BUG: services: ports are unreachable from the sandboxed agent — --allow-host-ports is hardcoded and allowHostServicePorts is never emitted
• #45787 update_issue body is capped at 10 KB while create_issue / add_comment allow 65 KB
• #44073 Extra empty commit for CI triggering is pushed as github-actions[bot], so GH_AW_CI_TRIGGER_TOKEN / github-token-for-extra-empty-commit does not trigger CI

@benissimo

14 issues reported

• #68453 Codex context-rebuild circuit breaker: document its env vars and give guidance for long runs that are still making progress
• #64953 Claude engine: pass --strict-mcp-config to avoid a TCP_DENIED for api.anthropic.com on every run
• #62948 Unified 'agent' artifact bundles the agent's scratch dir unconditionally, ballooning re-download cost for every downstream job
• #62942 gh aw audit: single-run mode unconditionally downloads a second 'baseline' run's full artifacts
• #61584 Claude engine: ${{ experiments.model }} not rewritten — workflow fails to parse with 'Unrecognized named-value: experiments'

@IEvangelist

14 issues reported

• #50905 safe-outputs checkout auto-detection downgrades contents: write to read
• #43021 SideRepoOps maintenance workflow ignores github-app checkout auth and falls back to unset GH_AW_GITHUB_TOKEN
• #34998 safe_outputs add_comment hard-fails on locked source PR (pr-docs-check recurring failures)
• #33285 create_pull_request: git am fallback also fails and cancels unrelated safe outputs — needs stronger retry
• #33069 Copilot CLI retry loop in copilot_driver.cjs is futile after entrypoint unsets COPILOT_GITHUB_TOKEN between attempts

@mnkiefer

13 issues reported

• #56652 Safe-outputs JSON serialization escapes && as \u0026\u0026 and breaks compiled workflows
• #56006 gh aw add omits grader evaluator files from packages
• #54075 gh aw update does not install new includes added to an aw.yml
• #53937 Generated Install ripgrep step can block the agent job indefinitely
• #53932 gh aw update leaves shared package dependencies stale

@benvillalobos

12 issues reported

• #25717 inputs.* expressions in prompt body not resolved when called via workflow_call
• #20885 Safe-outputs MCP transport silently closes on idle during long agent runs — no outputs produced, workflow reports success
• #19467 Default concurrency group for workflow_dispatch causes concurrent runs to cancel each other
• #18557 network: { allowed: [] } still allows infrastructure domains — same behavior as network: {}
• #18407 Feature request: per-tool call limits (max-calls) in tools.github.allowed

@jeffhandley

12 issues reported

• #46499 Treat an empty expression-based engine.model as omitted
• #43924 Allow memory (comment-memory / cache-memory / repo-memory) to be consumed by a deterministic job that runs before the agent, for work-planning
• #43918 Allow frontmatter to augment the needs list of any compiler-generated job
• #43917 Threat detection 'needs' does not incorporate jobs in engine.env expressions
• #41993 Support repo-specific instruction overlays for installed gh-aw agents

@anthonymastreanvae

11 issues reported

• #41043 engine: copilot never discovers APM-delivered skills (.agents/skills/) — supported, or inline-only?
• #39889 GitHub Enterprise Server (GHES) compatibility
• #39886 gh aw trial is unusable on GitHub Enterprise Server — git clone operations hardcode github.com (ignore GH_HOST)
• #39882 gh aw compile never prunes orphaned entries from actions-lock.json
• #39881 gh aw trial --clone-repo clones the source from github.com, ignoring GH_HOST (breaks on GitHub Enterprise Server)

@blozano-tt

11 issues reported

• #63980 assign-to-agent: add required-labels support (other safe-outputs already have it)
• #63669 shared/pr-diff-data-fetch.md: 3 bugs in the slash-command / cache / error-handling paths
• #56121 dispatch-workflow: omitted ref on command (issue_comment) triggers silently dispatches the default branch, bypassing allowed-refs
• #54169 Question: gh-aw vs copilot review
• #50027 dispatch-workflow: per-call ref override lands in inputs, causing 422 "Unexpected inputs provided" and/or dispatching the wrong ref

@github-actions

11 issues reported

• #51114 [deep-report] Investigate why the image/container/digest Copilot PR cluster has the lowest merge rate (58.8% vs 74.3% fleet average)
• #38226 [awf-feature-surfacing] AWF surfacing gaps: conditional if: imports, dangerously-disable-sandbox-agent flag, and create_issue body minLength
• #31288 [community-attribution] Workflow execution blocker: sandbox prevents data processing scripts
• #30740 [community-attribution] Community attribution workflow blocked: permission denied on data files
• #29561 [deep-report] Triage unlabeled community issue #29545 — Docs accessibility problem on Android Chrome

@johnwilliams-12

11 issues reported

• #21205 call-workflow is not wired into the consolidated safe_outputs handler-manager path
• #21074 HTTP safe-outputs server does not register generated call-workflow tools
• #21071 call-workflow generated caller jobs omit required permissions: for reusable workflows
• #21062 call-workflow fan-out jobs do not forward declared workflow_call.inputs beyond payload
• #20821 GitHub App token fallback uses full slug instead of repo name in workflow_call relays

@MattSkala

11 issues reported

• #67933 add-comment: option to edit the previous comment in place instead of posting a new one
• #66917 Daily AIC guardrail fails closed on transient 5xx and never restores scan cache for issues-triggered workflows
• #63987 gh-proxy: search-based gh commands still fail with "malformed version" after #58383
• #63223 Copilot installer may activate a cached CLI older than CopilotWebSearchMinVersion while the lock file grants web_search
• #61580 Slash command followed by CRLF is not activated (activation if: lacks '/cmd\r\n' shape)

@norrietaylor

11 issues reported

• #61490 Copilot harness classifies AWF max_cache_misses_exceeded HTTP 403 as authentication_failed and retries the spent proxy; detection job surfaces nothing
• #61489 Threat detection ignores max-turn-cache-misses; detection always runs at the compile-time default (5)
• #54626 sandbox filesystem.allowWrite grants tool permissions instead of restricting writes (contradicts schema description)
• #37067 observability.otlp with headers produces invalid YAML in safe-outputs job (v0.74.3, v0.77.5)
• #36700 safe-outputs: deterministically normalize issue-closing keywords (un-backtick Closes #N) before create-pull-request / create-issue / add-comment

@deyaaeldeen

10 issues reported

• #28966 COPILOT_MODEL and GH_AW_INFO_MODEL use different defaults in compiled lock files
• #26486 Compiled lock file requests broader permissions than workflow needs (discussions:write, pull-requests:write)
• #25573 Codemod 'Convert write permissions to read' incorrectly changes id-token: write to read
• #25359 Compiler v0.67.3 pins runtime setup action to v0.67.1, leaving stale entries in actions-lock.json
• #23198 Feature: allow restricting Copilot CLI built-in tools via frontmatter

@ivancea

10 issues reported

• #50835 update_project pages all ProjectV2 items and forces overly broad fine-grained PAT repo access
• #50538 jobs.*.permissions.id-token dropped from compiled lock for safe_outputs and conclusion
• #50282 Safe-outputs allowed-teams ignored and mentions sanitized because of wrong github token
• #47766 Allow ${{ steps.*.outputs.* }} in safe-outputs.github-token for same-job token minting
• #46791 [aw] No sha added to "ruby/setup-ruby@" in compiled workflow

@microsasa

10 issues reported

• #53062 create-check-run.target is parsed by the compiler and documented, but rejected by the frontmatter schema
• #41551 copilot-cli: process hangs indefinitely after final safe-output is submitted; MCP gateway SSE streams remain open until action-step timeout
• #38859 zizmor: ignore[<audit>] comments emitted by generators are placed on the wrong line — suppression silently fails (regression from #37586)
• #27715 Feature request: pin container images by digest in compiled lock files
• #21130 Upgrade pinned github-mcp-server from v0.32.0 to v0.33.0+ to fix thread resolution

@PureWeen

10 issues reported

• #50923 Action-failure expiry does not trigger maintenance workflow generation
• #50922 slash_command job gate rejects leading whitespace accepted by runtime matcher
• #50616 Safe-output artifacts can expose base64 CI trigger tokens
• #47142 Regression: OAuth validation breaks multiline engine.env.COPILOT_GITHUB_TOKEN
• #47141 gh aw fix dry-run mutates dispatcher files without --write

@ekbritecore

9 issues reported

• #65173 protected-files exclude unprotects a file name at every depth: no way to allow only the root pyproject.toml
• #65105 conclusion job: collect_usage_artifact_files.sh calls bare node (exit 127) on runners without node on PATH
• #64344 gh-aw.aic/turns/gen_ai.usage.* missing on summary spans under runner.topology: arc-dind (parse_token_usage.cjs hardcodes /tmp/gh-aw, same class as #63717)
• #63717 engine: pi on runner.topology arc-dind exits 1 after a successful run: tee target rewritten onto AWF's read-only ${RUNNER_TEMP}/gh-aw mount
• #63240 pi_models_json.cjs registers aw-gateway models with no contextWindow, so pi falls back to a 128k default well below the real model's capacity

@grahame-white

9 issues reported

• #23643 defect: YAML indentation bug in compiler causes job permissions block to be mis-indented
• #23093 BUG: 'GH_HOST' set with GITHUB_OUTPUT (not env or env-threaded), breaking Process Safe Outputs on GHES
• #23092 BUG: Downstream 'GH_AW_SAFE_OUTPUTS_CONFIG_PATH' and 'GH_AW_SAFE_OUTPUTS_TOOLS_PATH' variables not available as env vars due to GITHUB_OUTPUT-only write
• #23088 BUG: 'setup-cli' action referenced by mutable tag instead of commit SHA in maintenance workflow
• #23083 Agentic Plan: Improve gh aw upgrade warning for github/gh-aw-actions/setup when no GitHub Releases exist

@heiskr

9 issues reported

• #62712 checkout: entry for the workflow's own repo is indistinguishable from $GITHUB_WORKSPACE in the agent prompt
• #54052 copilot/auto has no catalog pricing, so the zero-config default 400s intermittently
• #51843 Cached Copilot CLI activation skips the /usr/local/bin wrapper, so agent spawn fails with ENOENT
• #48934 create_pull_request: pushed commit can contain files that allowed-files/excluded-files should have kept out
• #47638 runtime: push_to_pull_request_branch resolves branch/base against workspace root in multi-repo checkout when subrepo origin/HEAD is unset

@mason-tim

9 issues reported

• #68368 tools.timeout makes MCP Gateway fail to start: runtime writes gateway.toolTimeout as a string
• #45755 OTLP OIDC audience auth: id-token: write missing on activation/conclusion/safe_outputs jobs → "Unable to get ACTIONS_ID_TOKEN_REQUEST_URL"
• #33084 push_repo_memory broken on signed-commit rulesets: ls-remote missing gitAuthEnv (regression from #31478)
• #33074 Compound || expressions in prompt markdown body never substitute at runtime (compiler/runtime env-var naming mismatch)
• #31489 Regression of #29301: orphan-branch first commit pushes unsigned, fails on "Require signed commits" rulesets

@v1v

9 issues reported

• #63646 When using Opentelemetry we see the firewall blocked warning
• #60228 Feature Request: Support GH_AW_DEFAULT_OTLP_ENDPOINT as a Secret
• #59213 Request: OTLP empty-secret guard misses Authorization headers with a literal scheme prefix
• #57960 feature: disable opentelemetry if secrets in the Authorization key are empty
• #56584 feature: honour inputs for reusable workflows

@arthurfvives

8 issues reported

• #35682 gh aw add fails to parse valid workflow path when repository name contains multiple hyphens
• #35483 BYOK Azure OpenAI routing fails with 404 or 401 across base URL variants
• #35157 gh aw add rejects a direct workflow file path with a branch ref
• #30356 BYOK with external Azure AI Foundry deployment — model not found in proxy catalog (HTTP 404)
• #30088 Bug: mode: cli for Playwright not recognized during gh aw compile

@Calidus

8 issues reported

• #52547 Top-level workflow concurrency group omits queue: max, so push-triggered workflows silently drop queued runs
• #50632 Docs: safe-outputs.jobs custom jobs run once per workflow run, not once per tool call
• #47804 legacy-security: enable emits sudo -E awf but installs awf with --rootless, so the agent fails at startup with sudo: awf: command not found
• #47643 Safe-outputs sanitizer breaks Slack mrkdwn links (<url|label>) in custom safe-job string inputs
• #42490 Feature: support runtime/dynamic reviewers & assignees on create-pull-request (e.g. triggering PR author)

@danielmeppiel

8 issues reported

• #56949 Make Copilot SDK tool catalogs match compiled workflow tools
• #56948 Use authoritative AWF AI-credit totals in usage reporting
• #35688 Expression-harvesting pass hoists ${{ ... }} tokens from inside bash # comments into step env, breaking workflow load (regression since v0.76)
• #29076 Import-input arrays are stringified as Go-slice [a b] instead of JSON, breaking jq --argjson consumers
• #28678 Feature request: first-class label-name filter on pull_request_target.types: [labeled] (avoid red "skip via exit 1" idiom)

@loganrosen

8 issues reported

• #62994 Allow workflows to narrow safe-output tool schemas (e.g. require per-item fields for add_labels)
• #57792 Support independently pinned threat-detect artifacts
• #56365 Runtime-imported prompt preserves needs output expression literally
• #55893 remove-labels always requests pull-requests: write; add an issue-only opt-out
• #50584 trial: forwards issue_number to workflows that don't declare it, causing HTTP 422 and a silently skipped dispatch

@lpcox

8 issues reported

• #51252 Make Docker sandbox the default runtime on GitHub-hosted runners
• #51124 add-labels safe output fails on pull requests with invalid UpdatePullRequestInput mutation
• #35972 Bump firewall to v0.25.58 and gateway to v0.3.22
• #35937 [awf] Compiler lacks Anthropic WIF support — EngineAuthConfig and ClaudeEngine need extension
• #30634 Support importing engine.mcp.tool-timeout from shared workflows

@niebloomj

8 issues reported

• #68110 push_to_pull_request_branch ignores an explicit target and errors naming the default "triggering"
• #68108 Failure classifier attaches model_not_supported_error to every failure regardless of cause
• #65061 push_to_pull_request_branch: explicit target not consumed; error names the "triggering" default instead
• #65060 run wedges silently on an MCP tool call: no timeout, no classified error, step just ends
• #65059 safe-output transport JSON decode fails with EOF parse error on larger bodies; retry limit exhausted

@chrizbo

7 issues reported

• #34980 Use Codex structured outputs for threat detection parsing
• #32446 Codex OpenAI proxy fails because OPENAI_API_KEY is excluded from AWF sandbox
• #31399 labels: filter causes push-triggered runs to fail instead of skip
• #28158 create-pull-request with target-repo: safe_outputs checkout uses triggering repo's ref instead of target repo's default branch
• #22510 upload-asset safe output doesn't work for private repos

@mrjf

7 issues reported

• #32271 push_to_pull_request_branch: merge commits blocked by both signed and unsigned push paths
• #32069 safe_outputs: git fetch fails when bundle targets the currently checked-out branch
• #31600 Bundle transport still fails in shallow checkout: git fetch rejects bundle prerequisites
• #29152 create_pull_request should reuse existing branch when preserve-branch-name is enabled
• #28955 create_pull_request patch uses stale origin/branchName instead of merge-base with default branch

@seesharprun

7 issues reported

• #61144 How do I select an agent provided by an installed Agent Plugin?
• #55797 Support target-only checkout for MultiRepoOps
• #55775 Support authenticated Agent Plugin installation from private repositories
• #49210 Potentially allow per-output github-app override in safe-outputs
• #48903 {ai_credits_suffix} is the only footer variable for AI cost metadata — expose individual components ({ai_model}, {ai_credits}) for custom formatting

@SivaKesava1

7 issues reported

• #66740 audit: sub-agent attribution is guessed from agent-stdio.log, so real sub-agents and their spend are invisible
• #66716 Safe outputs: blank optional fields (e.g. create_pull_request stack_position: "") get MCP "success" but are rejected by the collector, dropping the output
• #66715 pi engine silently ignores inline sub-agents and their models; agent fakes delegation on the main model
• #66638 Model routing: show AWF routing decisions in gh aw logs and gh aw audit
• #66637 gh aw audit, view, outcomes and logs build OWNER\REPO on Windows, so artifact downloads fail

@arezero

6 issues reported

• #20515 (Feature Request): allowed-files is an allowlist, not an "additionally allow" list — undocumented and counterintuitive
• #20514 AGENTS.md in protected_files list blocks legitimate modifications
• #20513 protected_path_prefixes overrides allowed-files — no way to allow .github/ files via frontmatter
• #20512 reply_to_pull_request_review_comment tool generated in tools.json but missing from config.json
• #20511 clean_git_credentials.sh breaks push_to_pull_request_branch

@dsfaccini

6 issues reported

• #64050 Repoint the pydantic-ai engine import at pydantic/pydantic-ai
• #59755 Repoint the pydantic-ai catalog entry to pydantic/pydantic-ai-harness and retire the shared copy
• #58340 engine.command skips the AWF firewall install, so the hand-pinned binary drifts from the config gh-aw writes
• #56225 Gateway credential lands in the agent's own workspace as a readable file, not just in process state
• #50971 Pydantic AI as an agentic engine

@Evangelink

6 issues reported

• #63202 [gh-aw-wizard] UI element placement errors
• #48358 DefaultCopilotVersion drifts past compat.json max-agent, forcing a network install on every job and disabling the toolcache path
• #43189 ^Gll: + write-only scope expands to invalid id-token: read in generated lock file
• #38566 Feature: built-in AI-authorship disclosure footer for safe-outputs (or shared snippet support)
• #38565 Feature: classify failure causes (infra vs agent) before eport-failure-as-issue triggers

@j-srodka

6 issues reported

• #25199 Configurable or documented runs-on for generated agentics maintenance workflow (self-hosted fleets)
• #23485 Generated jobs lack a compile-stable runner override/inheritance mechanism
• #23484 Compiled can omit custom safe-output tools/jobs
• #23483 Custom safe-output jobs cannot declare needs / ordering relative to generated jobs (e.g. safe_outputs)
• #23482 Compiler-generated repo-memory push concurrency is broader than the actual write surface

@srgibbs99

6 issues reported

• #22939 BUG: AWF agent cannot reach Postgres started via services:
• #19640 Bug: gh aw upgrade wraps uses value in quotes, including the inline comment
• #19622 Bug: gh aw upgrade and gh aw compile produce different lock files — toggle endlessly
• #18751 Bug Report: safeoutputs MCP server crashes with context is not defined on create_pull_request
• #18745 Bug: | block scalar description in safe-inputs breaks generated Python script

@straub

6 issues reported

• #44951 safe_outputs: support local body file references with strict runtime safeguards
• #44842 SM-IS-01 maxLength exemption missing from body/content fields across most tools — follow-up to #43867
• #43867 create_discussion and create_issue body fields silently capped at 10 KB — missing maxLength to opt out of SM-IS-01 global cap (cf. add_comment)
• #24569 Bug: github_mcp_app_token activation output silently skipped — regression introduced in #24251
• #19631 gh aw upgrade Reformats copilot-setup-steps

@tsm-harmoney

6 issues reported

• #64021 update-pull-request target from a safe-outputs.needs job output is blanked in the agent config and rejected on workflow_dispatch
• #41039 Sub-agent model: override silently ignored under the Copilot engine
• #39544 Sub-agent model: frontmatter is ignored — sub-agent always runs on parent model
• #39382 Inline sub-agents not extracted when workflow suppresses github-context block
• #31695 Edit tool fails with GPT-5.4: 400 Invalid type for 'messages[x].tool_calls[x].type': expected one of 'function', 'all...ols', or 'custom', but got null instead.

@DeagleGross

5 issues reported

• #66564 Support an explicit strict-mode policy for pull_request_target workflows with fixed external checkouts
• #62680 create_pull_request fails for same-organization fork because head_repo is omitted
• #53654 add_labels: GraphQL intent path silently removes an already-applied label when confidence is below the repo automation threshold
• #46826 Copilot MCP tools fail on v0.82.x: Squid denies internal gateway (awmg-mcpg) with 403 TCP_DENIED
• #35161 safe-outputs.call-workflow workers cancel each other under parallel fan-out due to gh-aw-copilot-${{ github.workflow }} job concurrency group'