v0.79.3

🌟 Release Highlights

v0.79.3 focuses on security hardening — stricter sandbox controls, enforced AI credit guardrails, and improved error surfacing for misconfigured model names.

⚠️ Breaking Changes

• imports.if removed — Conditional frontmatter imports have been removed to keep import chains security-stable. Migrate experiment-driven conditional imports to runtime body-level imports. (#38247)

• sandbox.agent: false requires explicit feature flag — Disabling the agent sandbox now requires the dangerously-disable-sandbox-agent feature flag. Workflows without it will fail to compile, ensuring the security trade-off is always intentional. (#38205)

• Sandbox-disable justification enforced — Sandbox-disable declarations must now include a justification string; new AWF import and safe-output constraints are enforced at compile time. (#38228)

✨ What's New

• Clearer model error messages — Invalid model names (Copilot, Codex, Claude) are now detected and routed to actionable conclusion failures instead of cryptic errors. (#38258)

• AI credit guardrails with built-in defaults — Credit limits now default to 5,000/day and 1,000/run, with a consistent resolution order: frontmatter → imported config → GitHub variable → built-in constant. (#38197)

• Dynamic checkout.repository expressions unblocked — Checkout manifest generation now uses github-script, enabling dynamic repository expressions in workflow definitions. (#38154)

• New execcommandwithoutcontext linter — Auto-mined linter #24 flags bare exec.Command calls in context-aware functions and provides an auto-fix to exec.CommandContext. (#38185)

🐛 Bug Fixes & Improvements

• Init file writers now recursively create parent directories, preventing failures when output paths do not yet exist. (#38204)
• Caller context is properly threaded into pushWorkflowFiles git subprocesses for better tracing and correctness. (#38208)
• GitHub API rate limit is now measured and logged around the daily AI credit guardrail check. (#38256)

📚 Documentation

• on.roles clarified — on.roles is an exact-match allowlist, not a privilege threshold. (#38209)
• Cost Management reference updated with default runaway-cost guardrails and improved formatting. (#38186, #38224)
• OpenTelemetry references and docs updated. (#38196)
• Fixed mcp list-tools example to use the correct --server flag. (#38188)
• Quick-start guide clarifies the githubnext/agentics origin and simplifies the .lock.yml explanation. (#38189)

Generated by 🚀 Release · 109.6 AIC · ⊞ 28.8K

---

What's Changed

• Compile: move checkout-manifest generation to github-script to unblock dynamic checkout.repository expressions by @Copilot in #38154
• docs: add default runaway-cost guardrails to Cost Management reference by @Copilot in #38186
• docs: fix mcp list-tools example to use --server flag by @Copilot in #38188
• Add formal compiler threat-detection test suite for CTR-001/011/014/015/016 by @Copilot in #38166
• docs(quick-start): clarify githubnext/agentics origin and simplify .lock.yml paragraph by @Copilot in #38189
• [linter-miner] feat(linters): add execcommandwithoutcontext linter by @github-actions[bot] in #38185
• Remove extra otlp test/advisor workflows by @mnkiefer in #38200
• Update OpenTelemetry references and docs by @mnkiefer in #38196
• docs: clarify on.roles is an exact-match allowlist, not a privilege threshold by @Copilot in #38209
• Require dangerously-disable-sandbox-agent feature flag to allow sandbox.agent: false by @Copilot in #38205
• Ensure init file writers create parent directories recursively by @Copilot in #38204
• docs(cost-management): replace all tables with headers and lists by @Copilot in #38224
• [caveman] Optimize instruction verbosity — context.md, experiments.md (2026-06-09) by @github-actions[bot] in #38215
• Thread caller context into pushWorkflowFiles git subprocesses by @Copilot in #38208
• docs: widen Starlight content column on large screens without mid-width TOC regressions by @Copilot in #38230
• Enforce AI credit resolution order; set built-in defaults to 5000 (daily) and 1000 (per-run) by @Copilot in #38197
• Enforce sandbox-disable justification strings and surface new AWF import/safe-output constraints by @Copilot in #38228
• chore: bump gh-aw-firewall to v0.27.0 and sync AWF schema artifacts by @Copilot in #38235
• Remove imports.if and migrate experiment-driven import usage to runtime imports by @Copilot in #38247
• [WIP] Fix failing GitHub Actions job 'Integration: CLI Compile & Poutine' by @Copilot in #38262
• Measure and log GitHub API rate limit around daily AIC guardrail by @Copilot in #38256
• Detect invalid model names across Copilot/Codex/Claude and surface as specialized conclusion failures by @Copilot in #38258
• [WIP] Fix failing GitHub Actions job Integration: Workflow Features by @Copilot in #38261

Full Changelog: v0.79.2...v0.79.3