Require AWF v0.28.13 for GitHub CLI proxy mode

[Copilot]

gh issue list and gh pr list fail inside older AWF CLI-proxy sidecars because gh misclassifies the proxy host as GHES and attempts an invalid version check.

• Compatibility

  • Require AWF v0.28.13+ for tools.github.mode: gh-proxy.
  • Report an actionable compile-time error for incompatible pinned versions.

• Regression coverage

  • Cover default, pre-v0.28.13, and v0.28.13 boundary behavior.
  • Document the restored list-command support in the existing release changeset.

• Fixes gh issue list and gh pr list fail with malformed version: inside the agent sandbox under tools.github.mode: gh-proxy (Pi engine) #58371

---

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 36.3 AIC · ⌖ 8.69 AIC · ⊞ 9K · ◷
_{Comment /souschef to run again}

[github-actions]

Category: chore | Risk: medium | Score: 42 (impact 24 + urgency 10 + quality 8) | Action: batch_review | Batch: none

Generated by 🔧 PR Triage Agent · copilot · mai10 · 22.2 AIC · ⌖ 2.85 AIC · ⊞ 15.1K · ◷

[github-actions]

Category: chore | Risk: medium | Score: 42 (impact 24 + urgency 10 + quality 8) | Action: batch_review | Batch: none

Generated by 🔧 PR Triage Agent · copilot · mai10 · 22.2 AIC · ⌖ 2.85 AIC · ⊞ 15.1K · ◷

[Copilot]

🟢 Approval recommended

The compatibility gate, boundary coverage, and release documentation consistently address the reported proxy failure.

Pull request overview

Adds compile-time enforcement of AWF v0.28.13+ for GitHub CLI proxy mode, preventing known gh issue list and gh pr list failures.

Changes:

• Adds AWF compatibility validation and boundary tests.
• Defines the v0.28.13 CLI-proxy minimum.
• Updates release notes and regenerated workflow artifacts.

File summaries

File	Description
pkg/workflow/compiler_validators.go	Adds CLI-proxy version validation.
pkg/workflow/compiler_validators_test.go	Tests default, older, and boundary versions.
pkg/workflow/awf_feature_flags.go	Corrects CLI-proxy introduction documentation.
pkg/constants/version_constants.go	Defines the minimum compatible AWF version.
pkg/constants/spec_test.go	Verifies the new version constant.
.github/workflows/technical-doc-writer.lock.yml	Refreshes generated eval execution.
.github/workflows/smoke-issues.lock.yml	Refreshes generated PATH setup.
.github/workflows/glossary-maintainer.lock.yml	Refreshes generated eval execution.
.github/workflows/daily-file-diet.lock.yml	Refreshes generated eval execution.
.github/workflows/contribution-check.lock.yml	Refreshes generated eval execution.
.github/workflows/archie.lock.yml	Refreshes generated eval execution.
.changeset/bump-firewall-v0-28-13.md	Documents restored list-command support.

Review details

• Files reviewed: 12/12 changed files
• Comments generated: 0
• Review effort level: Balanced

---

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

[gh-aw-bot]

pr-sous-chef

@copilot Please take the next forward-progress pass on this PR.

• Please inspect the latest PR state, refresh the branch if needed, and run the pr-finisher skill on current HEAD.
• If review feedback or failing checks remain, address them directly and summarize the maintainer-facing outcome.
• A branch refresh was requested from this run: https://github.com/github/gh-aw/actions/runs/33885234704

Generated by 👨🍳 PR Sous Chef · pi · gpt54
_{Comment /souschef to run again}

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 36.3 AIC · ⌖ 8.69 AIC · ⊞ 9K · ◷
_{Comment /souschef to run again}

[Copilot]

pr-sous-chef
```...

Current HEAD is already refreshed against main (134fc10). No unresolved review threads or actionable failed checks remain; make fmt, make lint, make test-unit, make test, and make recompile all pass. No further code changes were needed.