Commit list:
Add raw response logging to collect steps; remove collect_copilot_api_models job (daily-model-inventory: log raw responses in collect steps, drop copilot-api job #48636 ) (6c76795 )
Add Copilot SDK billing inventory job (Add Copilot SDK billing inventory job #48619 ) (7c7febf )
fix: wrap fork push sequences in withGitHubHostToken to prevent duplicate Authorization (HTTP 400) (fix: wrap fork push sequences in withGitHubHostToken to prevent duplicate Authorization (HTTP 400) #48595 ) (a3b2478 )
Bump @github/copilot-sdk from 1.0.7 to 1.0.8 in /actions/setup/js (Bump @github/copilot-sdk from 1.0.7 to 1.0.8 in /actions/setup/js #48578 ) (4f95ca9 )
fix: legacy-security mode installs awf non-rootless, uses plain sudo for log parsing (fix: legacy-security mode installs awf non-rootless, uses plain sudo for log parsing #48098 ) (4859983 )
[model-inventory] Refresh mirrored model catalog and add missing gemini-3.6-flash entry ([model-inventory] Refresh mirrored model catalog and add missing gemini-3.6-flash entry #48614 ) (7543da7 )
compiler: error on inputs declared under custom jobs (compiler: error on inputs declared under custom jobs #48607 ) (295dcec )
Fix cross-repo dynamic target-repo silently dropping PR (forward GH_AW_INPUT_* to agent step env) (Fix cross-repo dynamic target-repo silently dropping PR (forward GH_AW_INPUT_* to agent step env) #48598 ) (4c14213 )
Bump minimatch from 10.2.5 to 10.2.6 in /actions/setup/js (Bump minimatch from 10.2.5 to 10.2.6 in /actions/setup/js #48579 ) (e5a95da )
fix: full pricing snippet and suppress engine error on missing model pricing (fix: full pricing snippet and suppress engine error on missing model pricing #48594 ) (d283192 )
fix: change copilot default model examples from opus to sonnet (claude-sonnet-5) (fix: use sonnet-level model as copilot default, not opus #48605 ) (15a07df )
Split oversized engine_validation.go (521 lines) into domain-focused files (Split oversized engine_validation.go (521 lines) into domain-focused files #48568 ) (d1f49ec )
[eslint-miner] feat(eslint): add prefer-get-error-message-over-string rule ([eslint-miner] feat(eslint): add prefer-get-error-message-over-string rule #48575 ) (24bd618 )
Add cookie label to create-issue safe output in high-value security/analysis workflows (Add cookie label to create-issue safe outputs in security/static-analysis workflows #48597 ) (3e487cf )
Bump @primer/octicons from 19.29.2 to 19.31.0 in /docs (Bump @primer/octicons from 19.29.2 to 19.31.0 in /docs #48577 ) (f73c761 )
fix: introduce options structs for over-parameterized CLI functions (fix: introduce options structs for over-parameterized CLI functions #48569 ) (2f34877 )
Bump @playwright/test from 1.61.1 to 1.62.0 in /docs (Bump @playwright/test from 1.61.1 to 1.62.0 in /docs #48580 ) (629f9a0 )
Bump @astrojs/starlight from 0.41.3 to 0.41.5 in /docs (Bump @astrojs/starlight from 0.41.3 to 0.41.5 in /docs #48581 ) (38bd52d )
Bump astro from 7.1.3 to 7.1.4 in /docs (Bump astro from 7.1.3 to 7.1.4 in /docs #48582 ) (7f12f1a )
docs: update glossary - daily scan ([docs] Update glossary - daily scan #48587 ) (ab90de0 )
Refactor six non-workflow large functions via targeted helper extraction (Refactor six non-workflow large functions via targeted helper extraction #48535 ) (05db336)
Retry Copilot startup no-output watchdog failures in scheduled/push runs (Retry Copilot startup no-output watchdog failures in scheduled/push runs #48514 ) (82f3267 )
fix: add post-result watchdog to codex_harness to prevent CLI hang-on-exit (fix: add post-result watchdog to codex_harness to prevent CLI hang-on-exit #48499 ) (dd42d63)
feat: honor engine.version for copilot; add version tests for copilot and gemini (feat: honor engine.version for copilot; add version tests for copilot and gemini #48519 ) (106dbdc )
fix: remove docker.io/mcp/brave-search — Critical/High CVEs, no upstream fix available (fix: remove docker.io/mcp/brave-search — Critical/High CVEs, no upstream fix available #48561 ) (907b7cf )
fix: resolve three targeted lint-monster diagnostics (defer-in-loop, excess params, hardcoded path) (fix: resolve three targeted lint-monster diagnostics (defer-in-loop, excess params, hardcoded path) #48520 ) (93c37c8 )
fix: constrain list_code_scanning_alerts with state:open and severity:critical,high in structural analysis prompt (fix: constrain list_code_scanning_alerts with state:open and severity:critical,high in structural analysis prompt #48551 ) (60c750a )
fix: remove ghcr.io/chopratejas/headroom due to 67 CVEs and 131 license violations (fix: remove ghcr.io/chopratejas/headroom due to 67 CVEs and 131 license violations #48550 ) (f866a5c )
fix: update brace-expansion to 5.0.8 and upgrade Alpine base image to 3.22 (fix: update brace-expansion to 5.0.8 and upgrade Alpine base image to 3.22 #48521 ) (e9961c0 )
Stabilize smoke-copilot-auto lock output by skipping dynamic auto pricing injection (Stabilize smoke-copilot-auto lock output by skipping dynamic auto pricing injection #48516 ) (c71eafd )
Summary:
Most commits focused on workflow and agent runtime reliability, including fixes around fork push handling, watchdogs, and environment propagation. There was also substantial security and dependency maintenance work, with CVE-related image and package removals plus model/pricing updates. Several engine validation, lint, and documentation improvements round out the batch.
Bash tool test: ✅
Overall status: PASS
Run URL: https://github.com/github/gh-aw/actions/runs/30366652378
Timestamp: 2026-07-28T14:08:30Z
Generated by ⚡ Smoke Copilot MAI · mai10 · 3.18 AIC · ⌖ 1.67 AIC · ⊞ 18.8K · ◷
Comment /smoke-copilot-mai to run again
Add label smoke to run again
Commit list:
@github/copilot-sdkfrom 1.0.7 to 1.0.8 in /actions/setup/js (Bump @github/copilot-sdk from 1.0.7 to 1.0.8 in /actions/setup/js #48578) (4f95ca9)cookielabel to create-issue safe outputs in security/static-analysis workflows #48597) (3e487cf)@primer/octiconsfrom 19.29.2 to 19.31.0 in /docs (Bump @primer/octicons from 19.29.2 to 19.31.0 in /docs #48577) (f73c761)@playwright/testfrom 1.61.1 to 1.62.0 in /docs (Bump @playwright/test from 1.61.1 to 1.62.0 in /docs #48580) (629f9a0)@astrojs/starlightfrom 0.41.3 to 0.41.5 in /docs (Bump @astrojs/starlight from 0.41.3 to 0.41.5 in /docs #48581) (38bd52d)smoke-copilot-autolock output by skipping dynamicautopricing injection (Stabilizesmoke-copilot-autolock output by skipping dynamicautopricing injection #48516) (c71eafd)Summary:
Most commits focused on workflow and agent runtime reliability, including fixes around fork push handling, watchdogs, and environment propagation. There was also substantial security and dependency maintenance work, with CVE-related image and package removals plus model/pricing updates. Several engine validation, lint, and documentation improvements round out the batch.
Bash tool test: ✅
Overall status: PASS
Run URL: https://github.com/github/gh-aw/actions/runs/30366652378
Timestamp: 2026-07-28T14:08:30Z