Community Contributors

Community Contributors

A heartfelt thank you to all community members whose bug reports and feature requests have shaped gh-aw!

This page highlights the most active community contributors. For a complete list of all contributors, see the README Community Contributions section.

Most Active Contributors

@bbonafed

23 issues reported

• #29174 Feature: allow expression inputs for safe-output list constraints
• #29173 Feature: parameterize safe-output PR policy fields in workflow_call workflows
• #29172 Feature: parameterize safe-output boolean controls for reusable workflows
• #29171 Feature: allow safe-outputs.threat-detection to be controlled by workflow_call inputs
• #27670 on.github-app credentials cannot be sourced from a custom job's outputs (jobs.{pre_activation,activation}.pre-steps splicing/needs bugs + missing on.needs API)
• #27472 Allow extending safe_outputs.needs from frontmatter for custom credential-supply jobs
• #26719 pre-steps outputs unavailable to safe_outputs/conclusion/activation jobs that mint GitHub App tokens
• #26045 bug: sandbox agent fails with Argument list too long (E2BIG) when prompt + env exceed ARG_MAX
• #26043 on.github-token not propagated to checkout and hash check steps in activation job (breaks cross-org workflow_call)
• #25646 Compiler does not forward OIDC env vars to MCP Gateway docker run command
• #25224 MCP Gateway container missing ACTIONS_ID_TOKEN_REQUEST_URL / ACTIONS_ID_TOKEN_REQUEST_TOKEN env vars
• #24949 Cross-org workflow_call: resolve_host_repo, checkout, and hash check all fail
• #24918 Cross-repo workflow_call: hash check fails because github.workflow_ref and GITHUB_EVENT_NAME resolve to caller, not callee
• #24896 Runtime import resolver does not handle repo-root-absolute paths (leading /)
• #24323 auth field on HTTP MCP servers rejected by frontmatter schema validation
• #23900 Fix: Flexible import path resolution and cross-repo agent imports
• #23724 Ask: Runtime Parameterization of Compile-Time Frontmatter Fields
• #23566 Feature Request: GitHub OIDC token support for custom HTTP MCP server authentication
• #22564 PR #22012 fix for create-pull-request signed commits on new branches is incorrect — createCommitOnBranch does not auto-create branches
• #21990 create-pull-request signed commits fail when branch does not yet exist on remote
• #20801 Feature Request: skip-if-no-match / skip-if-match support for cross-repo and org-wide queries
• #20378 environment: frontmatter field not propagated to safe_outputs job — breaks environment-level secrets
• #18542 Support for external secret managers

@bryanchen-d

25 issues reported

• #64566 gpt-6-astra stopped working with Actions-token auth on Sep 29: reduced catalog and retries exhausted
• #59785 Recompiling with v0.87.10/v0.88.2 drops contents: read from safe_outputs/conclusion jobs that use setup-steps + local composite checkout
• #50740 push_to_pull_request_branch cannot apply HEAD-only filtered bundles
• #50670 Filtered bundle generation runs checkout hooks and misreports valid branches as missing
• #50362 v0.84.4: checkout@v7 includeIf credential still causes duplicate Authorization headers
• #48952 v0.83.5: fork create_pull_request still sends duplicate Authorization headers
• #48414 Fork-backed create_pull_request fails with duplicate Authorization HTTP 400
• #47157 current checkout: post-agent git credentials assume workspace root
• #47147 trial: remote install omits runtime-import dependencies
• #47146 trial: logical-repo rewrite duplicates existing checkout with mapping
• #45836 Support fork-backed pull requests in safe outputs
• #35284 Feature request: post-agent-steps section that runs after the safe_outputs job
• #35283 add-reviewer safe-output: ignores target-repo + does not use GraphQL botIds for Copilot bot
• #35075 Intermittent 400 The requested model is not supported for claude-opus-4.6 — model catalogue varies between runs (30 vs 39 models)
• #34109 Add a sync-with-base / rebase primitive for merge-conflict-resolution workflows
• #34108 push_to_pull_request_branch: patch base should be the PR's current head SHA, not the target repo's base branch
• #30866 AWF JSON-config printf emits unescaped $schema, bash expands to empty key, AWF rejects with config. is not supported
• #30704 feat: lightweight gh aw lint — actionlint-only over existing .lock.yml files (no recompile, no zizmor/poutine)
• #30695 Compiler JSON-encodes && to \u0026\u0026 inside ${{ }} expressions in AWF config printf, breaking workflow parse
• #30472 compiler: buildSharedPRCheckoutSteps ignores push-to-pull-request-branch.target-repo (and update-pull-request.target-repo) when create-pull-request is not configured
• #28774 copilot-driver: --continue retry fails with 'No authentication information found' after mid-stream server error, no recovery path
• #26696 MCP Gateway: port 80 health check fails with no retry on transient container startup delay
• #26487 markdown.md 4-backtick rule is over-applied to standalone code blocks (e.g. mermaid)
• #25719 bug: compiler single-quotes --allow-domains breaking ${{ }} GA expressions, causing HTTP 422 on workflow dispatch
• #23265 Agent fails with "Failed to get response from the AI model; retried 5 times" after noop safe-output

@corygehr

22 issues reported

• #64311 gh aw --version prints to stderr instead of stdout
• #63472 cache-memory validation marker write fails with EACCES after successful agent run
• #38681 gh aw fix: move-step-run-expressions-to-env-bindings codemod inserts invalid env bindings when GitHub expressions appear in bash comments
• #38214 v0.79.2: PR #38154 (checkout manifest refactor) is not in the released tag
• #38150 Compile fails on v0.78.3+: auto-injected "Build checkout manifest" step embeds workflow_dispatch input expressions directly into shell, tripping template-injection linter
• #36969 Temp-ID resolution is structurally fragile
• #36709 Multi-org GitHub App support: derive github-app.owner per target, or allow a computed value
• #36696 Allow OIDC-based credential setup steps before framework-generated safe_outputs and conclusion jobs mint App tokens
• #35272 Request: pin a default model for the threat-detection sub-job
• #33622 Bug: workflow_install_note.md ENOENT in safe_outputs when PR touches workflow files
• #33436 create_pull_request safe-output never registers temporary_id — #aw_prN references silently break
• #33367 Add body-allowed: false (or equivalent) to close-discussion and close-issue safe-outputs
• #33366 Bash history expansion can silently drop agent-authored safe-output payloads
• #31577 Feature request: first-class file attachments in safe-outputs comments
• #27638 compute_text step strips all non-GitHub URLs from issue/PR/discussion bodies before the agent sees them
• #26539 app-id deprecation warning — migrate to client-id in GitHub App token generation
• #26270 Bug: dispatch-workflow safe-output causes CAPIError: 400 Bad Request in strict mode
• #26268 add-comment: reply_to_id not documented in tool schema, causing agents to skip it
• #25680 Copilot-engine workflows broken: two distinct failures across v0.67.2 and v0.67.4
• #24355 add-comment: support reply_to_id field in agent output for discussion threading
• #23944 [Issue] add-comment for Discussion doesn't allow for replies to a threaded comment reply
• #23753 Request: Allow commenting, editing posts within a Discussion

@dsyme

39 issues reported

• #56145 MCP gateway health timeout races backend startup timeout at 120 seconds
• #56050 add-labels doesn't create labels if missing and there's no option to do this.
• #55468 Proposal: support top-level doclink workflow frontmatter
• #55462 Proposal: add gh aw edit for schema-aware workflow configuration changes
• #52018 repo-memory and cache-memory: add a custom validation extension point before accepting updates
• #51289 Increase the post-result harness watchdog default from 20 seconds to 2 minutes
• #48918 slash_command workflow activation trigger on issue opened leads to confusing warning
• #36244 When working with private repos, better prompting is needed to explain that the coding agent runs without git credentials
• #23936 Invalide temporary ID should probably not fail PR creation
• #22340 Feedback: default footers a bit large
• #20953 Warning about ⚠ push-to-pull-request-branch: target: "*" requires that all PR branches are fetched at checkout. should not be shown in public repos
• #20952 Build/test failures on main
• #20950 Redaction still too strong
• #20787 E2E failures
• #20578 Add warnings about push-to-pull-request-branch
• #20420 Falied create_pull_request or push_to_pull_request_branch due to merge conflict should create better fallback issue
• #20243 Improve the activation summary
• #20241 Staged mode support needs better docs
• #20108 Error: Unhandled error: Error: Cannot find module '/opt/gh-aw/actions/campaign_discovery.cjs'
• #20103 Change to protected file not correctly using a fallback issue
• #19976 repo-memory fails when memory exceeds allowed size
• #19708 gh aw add-wizard for scheduled workflow should offer choice of frequencies
• #19468 Allowed expressions should allow simple defaults
• #19465 "GitHub Actions is not permitted to create or approve pull requests."
• #19219 Cross-repo push-to-pull-request-branch doesn't have access to correct repo contents
• #19120 github.event_name should be an allowed expression
• #19104 Continue to work to remove the dead code
• #19067 Duplicate HANDLER_MAP in JS code - safe_output_unified_handler_manager.cjs is dead code
• #18854 Main failing
• #18831 Automatically do fault investigation analysis if a fault happens
• #18574 In private repos, events triggered in comments PRs are not able to access the PR branch
• #18535 Instructions for issue created when pull request creation failed should be better
• #18485 gh aw add-wizard: If the workflow has an engine declaration, and the user chooses a different engine, the a bad workflow is created
• #18483 gh add-wizard: Failed to commit files in a repo
• #18482 gh add-wizard - if the user doesn't have write access, don't ask them to configure secrets
• #18481 Using gh-aw in forks of repositories
• #18211 Add some notion of embedded resource/file that gets installed with a workflow
• #18018 Lots of failures on push-to-pull-request-branch
• #16145 Add Mistral Vibe as coding agent

@jaroslawgajewski

43 issues reported

• #67175 Downstream jobs read needs.activation.outputs.target_repo, but activation does not declare it in most workflows
• #67172 agentics-maintenance.yml sets DEBUG: "*" on the forecast step, flooding logs with HTTP internals
• #67157 on.bots entry for the Copilot coding agent is ignored: bot status check requires a collaborator that does not exist
• #67156 OTEL_EXPORTER_OTLP_HEADERS and GH_AW_OTLP_ENDPOINTS reach the agent sandbox through awf --env-all
• #67155 Checkout PR branch refuses GitHub Apps listed in on.bots for comment-triggered workflows
• #66175 Daily AIC scan cache never restores for required (ruleset) workflows, and a rate-limited restore fails activation
• #65814 v0.90.3: strict mode rejects documented github-app.repositories: ["*"] (no explicit repositories input)
• #64788 checkout_pr_branch: GitHub App bot actors are always refused since #63011 (collaborator permission API returns "none" for apps)
• #64528 Feature request: fallback model for engine.model when the primary model is unavailable
• #64524 Copilot harness classifies retry-exhausted 5xx (e.g. 503) as capi_quota_exceeded and skips its own retry/backoff
• #62909 assertTrustedCheckoutRuntime() checks base-repository fork flag instead of PR fork status — blocks every PR checkout in any repo that is itself a GitHub fork
• #62551 Daily AI-credit guardrail hard-fails activation when the 24 h window cannot be measured
• #60820 Copilot CLI 1.0.83 (gh-aw v0.89.x): specific models now fail with persistent, zero-token http_400_response_error
• #60054 grok-4.5/grok-4.6 wire_api miscategorized as "completions" — 400 not accessible via /chat/completions
• #59038 threat-detect: "compact fallback prompt" returns 400 Bad Request when the full prompt exceeds 100KB
• #58577 MCP Gateway is unreachable from the agent sandbox: native lock output sets MCP_GATEWAY_DOMAIN=host.docker.internal but still runs the gateway container with --network bridge -p 127.0.0.1::
• #45452 Compiler emits network.isolation + topologyAttach that conflicts with auto-enabled --enable-host-access when "localhost" is allowlisted
• #42749 Compiler warns secret in engine.env "will be leaked" even when it's correctly auto-excluded from the sandbox
• #41172 fix(footer): footer shows "for issue #N" when triggered by PR — should say "for PR #N"
• #38575 400 bad request: Authorization header is badly formatted - GHE
• #38341 queue: max in Concurrency Blocks
• #33644 Mark agent spans as Langfuse "generation" observations and (opt-in) emit prompt/completion content
• #33640 Emit langfuse.session.id and langfuse.user.id (with session.id/user.id aliases) so Langfuse populates Sessions and Users views
• #31678 Workflow-Specific OTEL Service Names
• #31658 Compiled lock files use persist-credentials: false on checkout steps — fails on repos with submodules
• #25593 bug: Copilot CLI 1.0.21 added a startup model validation step: when COPILOT_MODEL is set
• #24373 feat: OTLP trace export from agent runtime
• #24372 feat(mcp): Add per-tool-call metrics to logs response
• #24371 feat(mcp): Include classification label in logs tool response
• #24259 Suspected regression in v0.65.6: Install GitHub Copilot CLI no longer emits GH_HOST: github.com
• #24036 Lock file integrity check should resolve the lock file from the reusable workflow source repository
• #23779 "Check workflow file timestamps" step fails with ERR_CONFIG when workflow runs cross-repo via org rulesets
• #23558 push_repo_memory fails with sparse-checkout error on first run when creating orphan branch
• #22647 Usage of models that consumes 0.33% of premium requests is counted as 1 premium request
• #21816 slash_command activation fails for bot comments that append metadata after a newline
• #20813 Workflow-level GH_HOST leaks into Copilot CLI install step
• #20811 Compiler does not emit GITHUB_HOST in MCP server env for GHES targets
• #19732 GitHub App token is repo scoped
• #18356 workflows run errors if used as required in repository ruleset
• #16467 AWF chroot: COPILOT_GITHUB_TOKEN not passed to Copilot CLI despite --env-all
• #16314 The workflow compiler always adds discussions permission into generated jobs
• #16150 push_repo_memory.cjs script has hardocoded github.com reference

@samuelkahessay

30 issues reported

• #33016 Generated locks emit secret-shaped dummy COPILOT_API_KEY value
• #33015 tools.github.allowed-repos cannot express current repository for generated workflows
• #24756 gh-aw treats a comment-based review verdict as successful even when the agent only reported tool failures
• #24755 bot-gated PR review runs can disappear with no review check or surfaced skip reason
• #24754 gh-aw MCP server exposes 8 CLI tools but not checks, forcing review workflows to shell out to gh aw checks
• #22380 conclusion job reports missing agent_output.json instead of the actual engine failure
• #22364 safe-outputs prompt says "exactly one" even when config allows multiple calls
• #22161 docs(engines): model field example/comment mismatch
• #22138 Release community attribution silently misses valid fixes when resolution flows through follow-up issues or PR body omits source-issue reference
• #21975 Warn when GitHub App-authored safe-outputs can self-cancel comment-triggered workflows via shared concurrency
• #21955 GitHub App auth exempts public repos from automatic min-integrity: approved protection even though repo scoping does not address same-repo untrusted content
• #21784 Targeted dispatch can drift into scheduled backlog triage when bound issues are integrity-filtered on public repos
• #21501 workflow_dispatch targeted issue binding ignored — agent never reads bound issue, emits noop, workflow succeeds
• #21304 Built safe-outputs prompt says to use safeoutputs for all GitHub operations, but GitHub MCP read tools are mounted separately
• #20035 safe-outputs: handler failures (success: false) computed in failureCount but never escalated to core.setFailed()
• #20031 dispatch-workflow validation is compile-order dependent and can require a second pass for same-batch targets
• #20030 on.bots matching is exact-string only and fails for <slug> vs <slug>[bot] GitHub App identities
• #19605 handle_create_pr_error: unhandled exceptions on API calls crash conclusion job
• #19476 push_repo_memory.cjs has no retry/backoff, fails on concurrent pushes
• #19475 get_current_branch.cjs leaks stderr when not in a git repository
• #19474 Unconditional agent-output artifact download causes ENOENT noise on pre-agent failures
• #19473 Copilot engine fallback model path uses --model CLI flag instead of COPILOT_MODEL env var
• #19158 gh aw checks --json collapses optional third-party failures into top-level state
• #19024 Malformed #aw_* references in body text pass through without validation
• #19023 Mixed-trigger workflows collapse workflow_dispatch runs into degenerate concurrency group
• #19020 Auto-merge gating has no way to ignore non-required third-party deployment statuses
• #19018 EACCES on /tmp/gh-aw/mcp-logs — no ownership repair between workflow runs
• #19017 Permanently deferred safe-output items do not fail the workflow
• #18992 Safe-output sanitizer strips HTML comments — no structured metadata channel for downstream workflows
• #18991 create_pull_request / push_to_pull_request_branch: patch applied against latest base, not the SHA it was generated from

@strawgate

48 issues reported

• #51723 Skip ripgrep apt install when rg is already available on custom runners
• #51513 upload-asset: concurrent runs race on the shared assets branch (single non-retried push)
• #51373 Copilot engine: spawn /usr/local/bin/copilot ENOENT on tool-cache hit (installer skips wrapper when GITHUB_PATH is set)
• #47365 models.providers custom pricing never reaches the api-proxy; custom/BYOK models still 400 with unknown_model_ai_credits
• #43307 gh-aw-firewall images emitted tag-only in v0.82.2 lock files (regression of #38561)
• #33597 Add create-check-run safe output for multi-agent PR analysis
• #24422 Remote workflow call still broken
• #24199 Remote workflow_call appears broken
• #23935 Integrity check fails for cross-repo workflow_call: GITHUB_WORKFLOW_REF points to caller, not callee
• #23768 Compiled prompt inlines ${{ }} expressions, re-triggering expression-size limit
• #21157 Safe outputs tools.json block triggers expression-size limit when target uses ${{ }}
• #21144 AWF agent PATH misses GITHUB_PATH additions
• #21135 sandbox.mcp.payloadSizeThreshold is ignored during frontmatter extraction
• #21028 Feature: support explicit custom key for close-older matching
• #20910 workflow_call safe_outputs can download unprefixed agent artifact name
• #20259 safe-outputs: create_pull_request_review_comment does not treat pull_request_target as PR context
• #20168 safe-outputs: target="triggering" rejects pull_request_target PR context
• #20125 safe_outputs: created_issue_* outputs missing because emitter is never called
• #20033 Agent sandbox git identity missing: first commit fails, then agent self-configures
• #19982 safe-outputs: preserve merge/rebase commit history in code-push flow
• #19972 Support sticky comments
• #19172 close-older-issues closes issues from different calling workflows
• #18945 submit_pull_request_review: REQUEST_CHANGES/APPROVE fails on own PR despite override check
• #18900 Replace format-patch/git-am pipeline with tree diff + GraphQL commit API
• #18744 feat: add target config to resolve-pull-request-review-thread
• #18565 Commits via git are unverified; switch to GraphQL for commits
• #18563 Check-out from Fork does not work with workflow_call
• #18547 safe_outputs checkout fails for pull_request_review events
• #18545 bug: duplicate env vars when import and main workflow reference the same repository variable
• #18501 create_pull_request fails with large commits
• #18362 Safe Output custom token source
• #18226 fix: imported safe-output fragments override explicit threat-detection: false
• #17839 Retry downloads automatically
• #17828 Feature request: add flag to disable activation/fallback comments
• #17522 update-pull-request should honor footer: false
• #17521 Add safe-output fail-fast mode for code push operations
• #17352 Consider verifying paths in pushes and create PRs
• #16896 Customize Checkout Depth
• #16673 add-comment doesn't actually require pull_requests: write
• #16664 Support repository-local mcp.json
• #16511 Add inline-prompt option to compile workflows without runtime-import macros
• #16370 Nested remote imports resolve against hardcoded .github/workflows/ instead of parent workflowspec base path
• #16036 Add fuzzy scheduling for running on weekdays
• #15982 Nested local path imports in remote workflows should resolve
• #15976 add-comment tool enforces rules during safe-outputs instead of during call
• #15836 Create a comment with a link to create a pull request
• #15583 Consider dedicated setting for PR Review Footer w/o Body
• #15576 Add safe outputs for replying to and resolving pull request review comments

@theletterf

29 issues reported

• #68666 Log code_search/search rate-limit buckets and surface GitHub MCP search_code 429 hints

• #66203 Threat detection inherits the main engine's provider env when it runs on a different engine

• #63221 Successful 200 NONE_NONE records produce false firewall blocked-domain warnings

• #62167 claude engine: base-folder restore deletes APM-installed .claude/skills before the agent starts

• #54296 Codex harness retries deterministic 400 invalid_request_error as "partial execution"

• #54048 Secret validation accepts the literal string "null", deferring failure to an opaque upstream 401

• #54047 No supported way to set a per-phase model when splitting engines between agent and threat detection

• #54046 Threat-detection model usage is invisible to token-usage artifacts and AI-credits accounting

• #54045 Threat detection loops and retries for ~20 minutes when its file cleanup command fails in the sandbox

• #52269 Footer 'related runs' link leaks as raw markdown due to unencoded double-quote in search URL

• #51782 False-positive prompt-injection detection: detection LLM flags its own block as a threat in the agent output

• #39793 Safe-output sanitizer rewrites custom-protocol links inside suggestion blocks

• #39369 Expose explicit skill invocation visibility for APM-restored skills

• #36423 Clarify Copilot provider 401 errors for agentic workflows

• #34981 feat: Reconcile per-run token usage against GitHub billing API for ground-truth cost attribution

• #33963 Spurious 'permission none does not meet requirements' warning when bots: allowlist actor triggers workflow

• #32846 Compiler omits pull-requests: read from activation job despite Vale pre-step using gh pr diff

• #30964 submit-pull-request-review fails on issue_comment trigger when no inline comments are buffered

• #30365 APM cache key collides across reusable workflows when called from a downstream repo

• #30338 Activation/agent artifact-name collision when multiple reusable gh-aw workflows are dispatched in parallel from one orchestrator

• #30327 Confused-deputy check denies legitimate bot-posted-menu / user-checks-box pattern on issue_comment(edited)

• #28898 Flaky awf-api-proxy unhealthy failure in downstream Copilot workflow

• #28895 PR labels can be applied too late for opened-event required-label checks

• #28691 Safe-output sanitizer escapes template delimiters inside GitHub suggestion blocks

• #28672 shared/apm.md checkout step fails in private caller repos with metadata-only token

• #28221 PR-context workflows still lose APM-restored skills after v0.71.0

• #27566 PR-context base-branch restore overwrites APM-restored .github/skills before Copilot starts

• #25494 Copilot CLI exits with code 1 silently when compiled with v0.67.3 (pre-release)

• #18465 safe_output_handler_manager ignores allowed-domains, redacts URLs from allowlisted domains

@yskopets

53 issues reported

• #49424 Non-Copilot stdio/container MCP server env secrets are raw-substituted into gateway JSON config, breaking on quote/backslash characters
• #43846 discussion-task-miner: repo-memory never persists — Step 1/6 write to a subdirectory excluded by the default file-glob
• #39605 Feature: configurable custom OTel resource attributes for observability traces
• #39595 OTEL_RESOURCE_ATTRIBUTES: un-encoded workflow names (spaces) make strict OTel consumers discard the entire resource
• #39462 engine.env: non-string values (numbers/booleans) are silently dropped at compile time
• #38924 Regression: Setup Scripts step in activation job jumped ~1s → ~1m39s (npm install of @actions/artifact when AI-credits guardrail enabled)
• #38905 Feature request: propagate W3C TRACEPARENT/TRACESTATE into the agent engine (Claude Code) so engine spans join the workflow trace
• #38901 MCP gateway (gh-aw-mcpg) spans export only to the primary OTLP endpoint, not the full GH_AW_OTLP_ENDPOINTS fan-out set — non-primary backends get incomplete traces
• #38897 OTLP attribute gh-aw.cli.version (and scope/service.version) carries the engine version, not the gh-aw CLI version
• #38893 MCP gateway (gh-aw-mcpg) emits spans with an empty OTel Resource (no service.name) — resource detection fails on semconv schema-URL conflict, breaking trace stitching
• #38890 Clarify the purpose and expected contents of the agent/otel.jsonl local mirror artifact (observed 1 span, full run produced 12)
• #37724 bug: environment variables in sandbox.agent.mounts are not expanded at runtime
• #37722 feat(shared-workflows): support sandbox field in shared workflow partials with merge semantics
• #37705 compiler: env var values containing : are not quoted in compiled YAML, producing invalid output
• #36678 Prompt content from imports with steps: appears after prompt-only imports, breaking declared import order
• #34772 push_to_pull_request_branch + safe_outputs mutual incompatibility: merge commits rejected, making rebase requests unserviceable
• #34256 Add support for opus and opusplan model aliases in the claude engine
• #34250 api-proxy healthcheck race: /v1/models returns 503 before upstream LLM connection is ready
• #34166 safeoutputs generate_git_patch: Strategy 3 picks the alphabetically-first remote ref as the base, producing huge patches in side-repo-ops setups
• #34134 safe_outputs job fails with cryptic git exit-1 when agent outputs base_branch == branch
• #32022 feat: support glob patterns in allowed for add-labels safe-outputs
• #31831 dispatch-workflow validation fails for workflows in target repo (Side Repo Ops pattern)
• #31086 SideRepoOps: creating a PR against a non-default branch generates E003 without a custom DEFAULT_BRANCH override
• #31073 bug: detection job silently passes when Claude Code CLI exits with code 1; 429 rate-limit not classified as rate-limit error
• #30872 add_comment.cjs: invocation.workflowRepo resolved but discarded when building footer run URL
• #30705 gh aw v0.71.1 compiles workflows referencing non-existent gh-aw-firewall v0.25.28, causing 404 on AWF binary install
• #27935 bug: push-to-pull-request-branch tracking comment links to wrong commit SHA
• #27898 feat: support 'administration' permission scope in workflow frontmatter
• #27881 gh run download fails on macOS when artifact contains both MEMORY.md and memory.md
• #27773 add_comment: reply to pull_request_review_comment in the review thread, not at PR level
• #27757 push_to_pull_request_branch does not support multi-repo (side-repo) checkout pattern
• #26922 Refactor *.cjs scripts to support SideRepoOps pattern natively
• #26569 agent: "Redact secrets in logs" step emits 3 warnings — EACCES permission denied on MCP log files
• #26468 default value in ${{ github.aw.import-inputs.* }} expressions is not being resolved in shared imports
• #26358 Support auto-generation of agentics-maintenance.yml for target repository in SideRepoOps pattern
• #26346 audit-workflows: gh aw logs MCP tool fails with 'unable to find git executable in PATH'
• #26345 audit-workflows: agent incorrectly classifies all workflows as Copilot-engine due to false positive string matching
• #26280 bug: tools.github: false does not override tools.github.* from a shared import
• #26279 feat: support checkout field in importable shared workflows
• #26120 docs: add working-directory navigation example to side-repo-ops pattern
• #26101 Docs: add top-level github-app to Allowed Import Fields in imports reference
• #26085 Support env field in shared imports
• #26080 engine.max-turns is silently dropped when engine config is sourced from a shared import
• #26067 Remove Docker dependency from gh aw compile --validate
• #25959 bug: push_repo_memory job runs when workflow is triggered by a bot comment (pre_activation skipped)
• #25946 bug: GOROOT not propagated into agent container despite --env-all and spec §8.5
• #25833 safeoutputs create_pull_request fails with ENOBUFS on large diffs (spawnSync buffer overflow)
• #25363 Docs: No guidance on using slash commands in SideRepoOps pattern
• #25362 gh aw list: 'Compiled: No' false positive after git checkout due to mtime comparison
• #25125 feat: allow ${{ github.aw.import-inputs.* }} expressions in frontmatter imports section
• #24897 Cross-repo checkout fails: GitHub Actions suppresses checkout_app_token_0 job output as secret
• #24573 Bug: duplicate 'Generate GitHub App token' step in activation job when checkout + tools.github used with top-level github-app
• #23914 add_labels.cjs only fetches first page of labels (pagination bug)