[ca] CLI Version Updates: Claude Code 2.1.201, MCP Gateway v0.3.33#43358
Conversation
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
…orkflows Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
This comment has been minimized.
This comment has been minimized.
|
Hey A couple of things to wrap up before this moves out of WIP:
If you'd like the agent to finish the remaining steps, here's a ready-to-use prompt:
|
There was a problem hiding this comment.
Pull request overview
This PR updates the default versions for two CLI/runtime components used by gh-aw and refreshes the generated/pinned artifacts that depend on those versions (workflow lockfiles and WASM golden fixtures).
Changes:
- Bump
DefaultClaudeCodeVersionto2.1.201andDefaultMCPGatewayVersiontov0.3.33. - Add the
ghcr.io/github/gh-aw-mcpg:v0.3.33SHA pin to action pin data used for workflow/container pinning. - Regenerate workflow lockfiles and WASM golden fixtures to reflect the new default versions.
Show a summary per file
| File | Description |
|---|---|
| pkg/constants/version_constants.go | Updates the default Claude Code CLI and MCP Gateway container versions. |
| pkg/workflow/data/action_pins.json | Adds the digest pin for gh-aw-mcpg:v0.3.33. |
| pkg/actionpins/data/action_pins.json | Mirrors the new gh-aw-mcpg:v0.3.33 digest pin entry. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden | Updates expected generated output to use gh-aw-mcpg:v0.3.33. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden | Updates expected generated output to use gh-aw-mcpg:v0.3.33. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden | Updates expected generated output to use gh-aw-mcpg:v0.3.33. |
| pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden | Updates expected generated output to use gh-aw-mcpg:v0.3.33. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden | Updates expected generated output to use gh-aw-mcpg:v0.3.33 (including CLI proxy image). |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden | Updates expected generated output to use gh-aw-mcpg:v0.3.33. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden | Updates expected generated output to use gh-aw-mcpg:v0.3.33. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden | Updates expected generated output to use gh-aw-mcpg:v0.3.33. |
| pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden | Updates expected generated output to use Claude Code 2.1.201 and gh-aw-mcpg:v0.3.33. |
| .github/workflows/test-workflow.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/smoke-copilot-sub-agents.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/smoke-copilot-sdk.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/github-remote-mcp-auth-test.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/firewall.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/example-permissions-warning.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/example-failure-category-filter.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/daily-team-status.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/daily-max-ai-credits-test.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/daily-credit-limit-test.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/daily-byok-ollama-test.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/copilot-pr-merged-report.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/copilot-centralization-optimizer.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/copilot-centralization-drilldown.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/codex-github-remote-mcp-test.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
| .github/workflows/ace-editor.lock.yml | Regenerates pinned container references to gh-aw-mcpg:v0.3.33@sha256:…. |
Review details
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 75/271 changed files
- Comments generated: 0
- Review effort level: Low
|
✅ Test Quality Sentinel completed test quality analysis. No test files were added or modified in this PR. Test Quality Sentinel skipped. |
|
✅ PR Code Quality Reviewer completed the code quality review. |
|
🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅ |
|
✅ Design Decision Gate 🏗️ completed the design decision gate check. No ADR enforcement needed: PR #43358 does not have the 'implementation' label and has only 36 new lines of code in business logic directories (threshold: 100). |
There was a problem hiding this comment.
Automated version bump looks clean.
DefaultClaudeCodeVersion2.1.198 → 2.1.201— patch release, no behavioral changeDefaultMCPGatewayVersionv0.3.32 → v0.3.33— SHAf0e1f1d5, consistently pinned across all 258 generated lock files- No stale version references in regenerated lock files
actions-lock.jsoncorrectly adds new container pin and retains historical entries
Minor: indentation in actions-lock.json changed from 2-space to 4-space — cosmetic only, no functional impact.
✅ LGTM.
🧵 Reviewed using Impeccable skills by Impeccable Skills Reviewer · 41.8 AIC · ⌖ 5.71 AIC · ⊞ 4.9K
There was a problem hiding this comment.
Clean version bump, no blocking issues.
All checks pass: SHA pin for v0.3.33 is consistent across all 258 lock files (single digest sha256:f0e1f1d562f01e737f3ef125cb4d7057ff87a68a97927f5ea9fd6d3f5091da06), pinned_image integrity holds for all 118 container entries in actions-lock.json, no stale v0.3.32 or 2.1.198 references remain, and Wasm golden fixtures are correctly updated.
💡 Minor observation (non-blocking)
actions-lock.json has an unremarked whole-file indentation change from 2-space to 4-space, creating ~1500 lines of formatting noise for 4 lines of new content. This doesn't affect runtime behavior, but it obscures the actual semantic diff. If this was an intentional serializer update, consider noting it in the PR description next time to help reviewers quickly identify the real changes.
Warning
Firewall blocked 1 domain
The following domain was blocked by the firewall during workflow execution:
patchdiff.githubusercontent.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "patchdiff.githubusercontent.com"See Network Configuration for more information.
🔎 Code quality review by PR Code Quality Reviewer · 79.2 AIC · ⌖ 6.46 AIC · ⊞ 5.4K
Comment /review to run again
There was a problem hiding this comment.
Skills-Based Review 🧠
Applied /codebase-design — one observation on a formatting inconsistency, otherwise clean execution.
📋 Key Themes & Highlights
Key Themes
- Indentation drift in
actions-lock.json: The file was re-indented from 2-space to 4-space, butmarshalSorted()inpkg/workflow/action_cache.gostill produces 2-space output. The nextmake recompilewill silently revert this to 2-space, creating ~1500 lines of spurious diff. Either align the code to 4-space or revert the file to 2-space (which also matches.prettierrc.json'stabWidth: 2).
Positive Highlights
- ✅ Both version constants bumped correctly and consistently propagated across all 258 lock files
- ✅ SHA pin for new
ghcr.io/github/gh-aw-mcpg:v0.3.33image correctly added - ✅ Stale historical container pins cleanly pruned (v0.2.19 through v0.3.27 range)
- ✅ Golden fixtures updated in lock-step with version changes
- ✅
containersmap re-sorted to maintain lexicographic ordering invariant - ✅ PR description is thorough and accurate
Warning
Firewall blocked 1 domain
The following domain was blocked by the firewall during workflow execution:
proxy.golang.org
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "proxy.golang.org"See Network Configuration for more information.
🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · 119.4 AIC · ⌖ 6.67 AIC · ⊞ 6.6K
Comment /matt to run again
| "repo": { | ||
| "description": "The owner and repository name. e.g.) Codertocat/Hello-World", | ||
| "default": "${{ github.repository }}" | ||
| "entries": { |
There was a problem hiding this comment.
[/codebase-design] The file is now 4-space indented, but marshalSorted() in pkg/workflow/action_cache.go still generates 2-space indentation. The next gh aw compile or make recompile will re-format the file back to 2-space, producing a spurious ~1500-line churn diff with no semantic change.
💡 How to resolve
Either update marshalSorted() in pkg/workflow/action_cache.go to emit 4-space indent to match the file, or revert the re-indentation to 2-space to match both the code and .prettierrc.json (tabWidth: 2 for JSON). The latter is lower risk since it keeps the file consistent with the generator.
@copilot please address this.
|
🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨ |
|
🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨ |
|
🌑 The shadows whisper... Smoke Codex failed to deliver outputs. The oracle requires further meditation... |
|
🚀 Smoke Gemini MISSION COMPLETE! Gemini has spoken. ✨ |
|
🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧 PR comment skipped: add_comment auto-target unavailable because workflow event context is not pull_request despite PR number in metadata; issue was created with results. |
|
✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready. |
|
📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing... |
|
📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing... |
|
📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing... |
Smoke Test Results
Overall status: FAIL Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "localhost"See Network Configuration for more information.
|
Agent Container Tool Check
Result: 12/12 tools available ✅ Overall Status: PASS Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "awmgmcpg"See Network Configuration for more information.
|
This comment has been minimized.
This comment has been minimized.
|
Merged PR title
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment.
|
💥 Smoke Test: Claude — Run 28703756212Core #1-12: ✅ all passed Overall: PASS 🎉 Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
There was a problem hiding this comment.
💥 Automated smoke test review - all systems nominal!
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
💥 [THE END] — Illustrated by Smoke Claude · 99.4 AIC · ⌖ 31.5 AIC · ⊞ 8.7K
Comment /smoke-claude to run again
| # - ghcr.io/github/gh-aw-firewall/api-proxy:0.27.22@sha256:afb9ff9140b17d38871dfb9dbac5ff8689ea634c2f91c435da2825192d4881c1 | ||
| # - ghcr.io/github/gh-aw-firewall/squid:0.27.22@sha256:3cdcc1e2b4b4fe602ba69fd3e21aac7ac512d5c1fce24df4ce69dc4f98164b59 | ||
| # - ghcr.io/github/gh-aw-mcpg:v0.3.32@sha256:63e46b56dfd70895a701b6fc6dd0189e11e2d875f327f1781e81b31848735477 | ||
| # - ghcr.io/github/gh-aw-mcpg:v0.3.33@sha256:f0e1f1d562f01e737f3ef125cb4d7057ff87a68a97927f5ea9fd6d3f5091da06 |
There was a problem hiding this comment.
Smoke test review: MCP Gateway pin bumped to v0.3.33 — digest looks correct. ✅
| # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"cd4d39aa2cc775e945a501c39bc5f93956f9c16e93b692398b6495bae094c8d6","body_hash":"30d40738b32791caae633af85d6d2bb8aac971f646c1bab499220afd3c17b8a2","agent_id":"copilot","engine_versions":{"copilot":"1.0.68"}} | ||
| # gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GH_AW_OTEL_GRAFANA_AUTHORIZATION","GH_AW_OTEL_GRAFANA_ENDPOINT","GH_AW_OTEL_SENTRY_AUTHORIZATION","GH_AW_OTEL_SENTRY_ENDPOINT","GITHUB_TOKEN"],"actions":[{"repo":"actions/cache/restore","sha":"55cc8345863c7cc4c66a329aec7e433d2d1c52a9","version":"v6.1.0"},{"repo":"actions/cache/save","sha":"55cc8345863c7cc4c66a329aec7e433d2d1c52a9","version":"v6.1.0"},{"repo":"actions/checkout","sha":"9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0","version":"v7.0.0"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.22","digest":"sha256:55f06588411008b7148eb64b8dfe28602a0cce3675b36c6b190b54aca138468e","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.22@sha256:55f06588411008b7148eb64b8dfe28602a0cce3675b36c6b190b54aca138468e"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.22","digest":"sha256:afb9ff9140b17d38871dfb9dbac5ff8689ea634c2f91c435da2825192d4881c1","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.22@sha256:afb9ff9140b17d38871dfb9dbac5ff8689ea634c2f91c435da2825192d4881c1"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.22","digest":"sha256:3cdcc1e2b4b4fe602ba69fd3e21aac7ac512d5c1fce24df4ce69dc4f98164b59","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.22@sha256:3cdcc1e2b4b4fe602ba69fd3e21aac7ac512d5c1fce24df4ce69dc4f98164b59"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.32","digest":"sha256:63e46b56dfd70895a701b6fc6dd0189e11e2d875f327f1781e81b31848735477","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.32@sha256:63e46b56dfd70895a701b6fc6dd0189e11e2d875f327f1781e81b31848735477"},{"image":"ghcr.io/github/gh-aw-node","digest":"sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b","pinned_image":"ghcr.io/github/gh-aw-node@sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b"},{"image":"ghcr.io/github/github-mcp-server:v1.5.0","digest":"sha256:e25564dccc9110a70a77b9df560cbde11aa392fcb5f08b9abe5c4ebc6d146ea4","pinned_image":"ghcr.io/github/github-mcp-server:v1.5.0@sha256:e25564dccc9110a70a77b9df560cbde11aa392fcb5f08b9abe5c4ebc6d146ea4"}]} | ||
| # gh-aw-manifest: {"version":1,"secrets":["COPILOT_GITHUB_TOKEN","GH_AW_GITHUB_MCP_SERVER_TOKEN","GH_AW_GITHUB_TOKEN","GH_AW_OTEL_GRAFANA_AUTHORIZATION","GH_AW_OTEL_GRAFANA_ENDPOINT","GH_AW_OTEL_SENTRY_AUTHORIZATION","GH_AW_OTEL_SENTRY_ENDPOINT","GITHUB_TOKEN"],"actions":[{"repo":"actions/cache/restore","sha":"55cc8345863c7cc4c66a329aec7e433d2d1c52a9","version":"v6.1.0"},{"repo":"actions/cache/save","sha":"55cc8345863c7cc4c66a329aec7e433d2d1c52a9","version":"v6.1.0"},{"repo":"actions/checkout","sha":"9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0","version":"v7.0.0"},{"repo":"actions/download-artifact","sha":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","version":"v8.0.1"},{"repo":"actions/github-script","sha":"3a2844b7e9c422d3c10d287c895573f7108da1b3","version":"v9.0.0"},{"repo":"actions/upload-artifact","sha":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","version":"v7.0.1"}],"containers":[{"image":"ghcr.io/github/gh-aw-firewall/agent:0.27.22","digest":"sha256:55f06588411008b7148eb64b8dfe28602a0cce3675b36c6b190b54aca138468e","pinned_image":"ghcr.io/github/gh-aw-firewall/agent:0.27.22@sha256:55f06588411008b7148eb64b8dfe28602a0cce3675b36c6b190b54aca138468e"},{"image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.22","digest":"sha256:afb9ff9140b17d38871dfb9dbac5ff8689ea634c2f91c435da2825192d4881c1","pinned_image":"ghcr.io/github/gh-aw-firewall/api-proxy:0.27.22@sha256:afb9ff9140b17d38871dfb9dbac5ff8689ea634c2f91c435da2825192d4881c1"},{"image":"ghcr.io/github/gh-aw-firewall/squid:0.27.22","digest":"sha256:3cdcc1e2b4b4fe602ba69fd3e21aac7ac512d5c1fce24df4ce69dc4f98164b59","pinned_image":"ghcr.io/github/gh-aw-firewall/squid:0.27.22@sha256:3cdcc1e2b4b4fe602ba69fd3e21aac7ac512d5c1fce24df4ce69dc4f98164b59"},{"image":"ghcr.io/github/gh-aw-mcpg:v0.3.33","digest":"sha256:f0e1f1d562f01e737f3ef125cb4d7057ff87a68a97927f5ea9fd6d3f5091da06","pinned_image":"ghcr.io/github/gh-aw-mcpg:v0.3.33@sha256:f0e1f1d562f01e737f3ef125cb4d7057ff87a68a97927f5ea9fd6d3f5091da06"},{"image":"ghcr.io/github/gh-aw-node","digest":"sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b","pinned_image":"ghcr.io/github/gh-aw-node@sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b"},{"image":"ghcr.io/github/github-mcp-server:v1.5.0","digest":"sha256:e25564dccc9110a70a77b9df560cbde11aa392fcb5f08b9abe5c4ebc6d146ea4","pinned_image":"ghcr.io/github/github-mcp-server:v1.5.0@sha256:e25564dccc9110a70a77b9df560cbde11aa392fcb5f08b9abe5c4ebc6d146ea4"}]} | ||
| # This file was automatically generated by gh-aw. DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md |
There was a problem hiding this comment.
Smoke test review: manifest container list re-sorted lexicographically — consistent with invariant. 👍
|
[ca] CLI Version Updates: Claude Code 2.1.201, MCP Gateway v0.3.33 Warning Firewall blocked 5 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 5 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
There was a problem hiding this comment.
Smoke validation posted two inline notes and completed its review pass.
Warning
Firewall blocked 5 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
📰 BREAKING: Report filed by Smoke Copilot · 142.9 AIC · ⌖ 4.57 AIC · ⊞ 19K
Comment /smoke-copilot to run again
Add label smoke to run again
Bumps two component versions and regenerates all 258 lock files.
Version changes (
pkg/constants/version_constants.go)DefaultClaudeCodeVersion:2.1.198→2.1.201(patch releases, no surface change)DefaultMCPGatewayVersion:v0.3.32→v0.3.33(internal refactors, gojq improvements, dedup fix — no generated-workflow impact)Pin resolution (
.github/aw/actions-lock.json)ghcr.io/github/gh-aw-mcpg:v0.3.33(sha256:f0e1f1d562f01e737f3ef125cb4d7057ff87a68a97927f5ea9fd6d3f5091da06)containersmap to satisfy lexicographic ordering invariantArtifacts
✨ PR Review Safe Output Test - Run 28703756212
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.comSee Network Configuration for more information.