v0.75.4

🌟 Release Highlights

This release brings significant improvements to the Codex engine harness, OTel tracing for child SDKs, compiler guardrails, and overall tooling reliability — alongside a migration to Go 1.26.

✨ What's New

• Codex Harness Hardened — Secret diagnostics, missing-key fast-fail, and --json streaming mode are now built into the Codex harness. dev.md has been switched to the Codex engine for improved developer experience (#34459).
• OTel Child SDK Correlation — OTEL_RESOURCE_ATTRIBUTES are now injected into gh-aw workflows so child processes using the OpenTelemetry SDK automatically inherit trace context, enabling end-to-end distributed tracing. Learn more (#34450).
• opusplan Model Alias — The opusplan alias is now a built-in route in Claude model routing, making it easier to invoke structured planning via the Claude engine (#34263).
• list_repository_collaborators in Repos Toolset — The GitHub MCP repos toolset now includes list_repository_collaborators, giving workflows richer repository access (#34447).
• Effective Token Footer: Resolved Model Names — The effective-token footer now shows the actual resolved model name (not a user alias) and prefixes values with deterministic 5-char model IDs for consistent identification (#34300, #34291).
• Codex Secret Isolation Aligned with Claude — Codex AWF secret isolation now matches the Claude engine's approach, improving consistency and security posture (#34446).
• Go 1.26 — The project has migrated to Go 1.26 (#34318).

🐛 Bug Fixes & Improvements

• IsCompatible Semver Fix — IsCompatible now correctly returns false for invalid semver inputs instead of panicking or giving wrong results (#34312).
• Copilot Harness: GITHUB_OUTPUT ENOENT — Fixed a crash when GITHUB_OUTPUT is inaccessible inside the AWF sandbox (#34266).
• awf-reflect 503 Warmup Hardening — Startup is now resilient against transient 503 errors from the API proxy's /v1/models endpoint (#34265).
• 18 Panic-in-Library-Code Violations Resolved — A new panicinlibrarycode linter was added to CI and 18 pre-existing violations were resolved, making library code safer to import (#34268, #34374, #34389).
• Compiler /tmp/ Path Warning — The compiler now warns when a workflow prompt directly references /tmp/ or /tmp/gh-aw/, helping authors avoid hard-coded ephemeral paths (#34239).
• Compilation Performance — CompileSimpleWorkflow skips manifest baseline resolution when the safe-update feature is off, reducing overhead for common workflows (#34252).

📚 Documentation

• FAQ Condensed (~21% reduction) — The FAQ has been streamlined and verbose answers condensed for easier scanning (#34488).
• Debugging Guide Unbloated (48% reduction) — The debugging guide is significantly leaner with focused, actionable content (#34261).

---

For complete details, see CHANGELOG.

Generated by 🚀 Release · sonnet46 849.9K

---

What's Changed

• Propagate AWF runtime version to all setup-emitted OTel spans by @Copilot in #34221
• Normalize agent workflow temp paths to /tmp/gh-aw/agent by @Copilot in #34225
• Inline Copilot error detection into copilot_harness and remove detect-copilot-errors step generation by @Copilot in #34230
• Optimize mattpocock-skills-reviewer by offloading PR triage to an inline small-model sub-agent by @Copilot in #34229
• compiler: warn when prompt references /tmp/ or /tmp/gh-aw/ directly by @Copilot in #34239
• safeoutputs: make Strategy 3 choose nearest remote merge-base in generate_git_patch by @Copilot in #34222
• Replace mutable pkg/cli test seams with per-flow dependency injection by @Copilot in #34224
• Pin Agent Persona Explorer to explicit Copilot model to avoid Anthropic beta-header failures by @Copilot in #34244
• SPDD spec alignment: add enforcement flows, failure safeguards, and sync protocols by @Copilot in #34247
• deps: update golang.org/x/crypto v0.51.0 → v0.52.0 by @Copilot in #34251
• Clarify stable vs prerelease upgrade messaging by @Copilot in #34245
• Raise daily-code-metrics max-patch-size from 50 KB to 128 KB by @Copilot in #34253
• [docs] docs: unbloat debugging.md (48% line reduction) by @github-actions[bot] in #34261
• Add opusplan builtin alias to Claude model routing by @Copilot in #34263
• Reduce CompileSimpleWorkflow overhead by skipping manifest baseline resolution when safe-update is off by @Copilot in #34252
• [linter-miner] feat: add panic-in-library-code linter by @github-actions[bot] in #34268
• Harden awf-reflect startup against api-proxy warmup 503s on /v1/models by @Copilot in #34265
• fix(copilot-harness): handle ENOENT when GITHUB_OUTPUT is inaccessible inside AWF sandbox by @Copilot in #34266
• Improve test quality in pkg/repoutil/spec_test.go by @Copilot in #34287
• Prefix effective-token footer values with deterministic 5-char model IDs by @Copilot in #34291
• fix: pin chaos-pr-bundle-fuzzer to claude-sonnet-4.6 to avoid deprecated 1M context beta header by @Copilot in #34295
• fix: use actual resolved model name in effective tokens footer, not user-provided alias by @Copilot in #34300
• Set executable bit on jqschema.sh to unblock Copilot PR data fetch by @Copilot in #34301
• deps(go): bump charmbracelet golden to 798e623 pseudo-version by @Copilot in #34304
• bump: Claude Code 2.1.150, Copilot CLI 1.0.51, GitHub MCP Server v1.0.5 by @Copilot in #34307
• fix: IsCompatible returns false for invalid semver inputs by @Copilot in #34312
• fix: lint Go, update node:lts-alpine SHA, recompile lock files by @Copilot in #34316
• Refactor pkg/parser long production functions into focused helper units by @Copilot in #34297
• feat: add Avenger hourly CI fixer workflow by @Copilot in #34322
• move to go 1.26 by @pelikhan in #34318
• Disable npm release-age cooldown for Claude, Codex, and Gemini engine installs by @Copilot in #34338
• chore: bump AWF firewall to v0.25.53 by @Copilot in #34321
• [log] Add debug logging to fuzzy match, bot aliases, manifest updates, and templatables by @github-actions[bot] in #34364
• Enforce panicinlibrarycode in CI and tune it for accepted repo patterns by @Copilot in #34374
• Replace magic time.Sleep literals in pkg/cli with named duration constants by @Copilot in #34373
• [docs] Update dictation skill instructions by @github-actions[bot] in #34387
• [spec-enforcer] Enforce specifications for jsonutil, linters, logger by @github-actions[bot] in #34416
• [docs] Update documentation for features from 2026-05-24 by @github-actions[bot] in #34413
• [spec-extractor] Update package specification for stringutil by @github-actions[bot] in #34409
• [instructions] Sync safe-outputs.md with v0.74.8 — document allow-body by @github-actions[bot] in #34405
• [community] Update community contributions in README by @github-actions[bot] in #34354
• Bump pinned Copilot/Codex/GitHub MCP versions and regenerate workflow artifacts by @Copilot in #34390
• refactor: reduce function-length violations across pkg/workflow, pkg/cli, pkg/parser, pkg/actionpins, pkg/linters by @Copilot in #34388
• Refine footer effective-token suffix formatting and short model alias rendering by @Copilot in #34428
• Refactor ResolveActionPin into focused helpers to reduce large-function lint debt by @Copilot in #34339
• Defer file closes in pkg/cli workflow readers and logs cache writer by @Copilot in #34372
• fix(linters): resolve 18 panic-in-library-code violations by @Copilot in #34389
• Add list_repository_collaborators to repos toolset mapping by @Copilot in #34447
• Align Codex AWF secret isolation with Claude engine by @Copilot in #34446
• gpclean: add tool_verbosity A/B experiment by @Copilot in #34448
• Align package specs with spec-librarian audit findings for linters, syncutil, and errorutil by @Copilot in #34453
• Inject OTEL_RESOURCE_ATTRIBUTES for child OTel SDK correlation in gh-aw workflows by @Copilot in #34450
• codex harness: secret diagnostics, missing-key fast-fail, --json streaming; switch dev.md to codex by @Copilot in #34459
• Optimize daily malicious code scan prompt with shared git artifacts and inline scoring/classification sub-agents by @Copilot in #34466
• [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in #34469
• SPDD 2026-05-24: Strengthen MCP Scripts norms, expand ET sync notes, add forecast/fuzzy-schedule tests by @Copilot in #34479
• [docs] docs: unbloat FAQ — condense verbose answers (~21% reduction) by @github-actions[bot] in #34488
• Unblock recompile pipeline by fixing Go linter modernizations and Codex WASM golden drift by @Copilot in #34493

Full Changelog: v0.75.3...v0.75.4