Skip to content

chore: bump default firewall version to v0.25.16#25238

Merged
lpcox merged 2 commits intomainfrom
bump-firewall-v0.25.16
Apr 8, 2026
Merged

chore: bump default firewall version to v0.25.16#25238
lpcox merged 2 commits intomainfrom
bump-firewall-v0.25.16

Conversation

@lpcox
Copy link
Copy Markdown
Collaborator

@lpcox lpcox commented Apr 8, 2026

Bumps DefaultFirewallVersion from v0.25.14 to v0.25.16.

  • Updated DefaultFirewallVersion in pkg/constants/version_constants.go
  • Recompiled all workflow lock files under .github/workflows/ and pkg/cli/workflows/
  • Updated WASM golden test fixtures

Update DefaultFirewallVersion from v0.25.14 to v0.25.16 and recompile
all 182 workflow lock files and WASM golden test fixtures.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings April 8, 2026 04:52
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Bumps the repository’s default gh-aw-firewall (AWF) version to v0.25.16 and regenerates the derived workflow lockfiles and WASM golden fixtures that embed the pinned version.

Changes:

  • Updated DefaultFirewallVersion from v0.25.14v0.25.16.
  • Regenerated GitHub Actions workflow *.lock.yml files to reference v0.25.16 / 0.25.16 image tags.
  • Updated WASM golden fixtures to reflect the new default firewall version.
Show a summary per file
File Description
pkg/constants/version_constants.go Bumps DefaultFirewallVersion to v0.25.16.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden Updates golden output to reflect v0.25.16 in env/install/image tags.
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden Updates golden output to reflect v0.25.16 in env/install/image tags.
.github/workflows/workflow-health-manager.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/workflow-generator.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/weekly-blog-post-writer.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/test-workflow.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/test-project-url-default.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/test-dispatcher.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/sub-issue-closer.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/smoke-gemini.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/security-compliance.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/repo-tree-map.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/refiner.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/q.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/poem-bot.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/plan.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/notion-issue-summary.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/metrics-collector.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/jsweep.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/issue-triage-agent.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/issue-monster.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/gpclean.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/github-remote-mcp-auth-test.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/firewall.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/example-permissions-warning.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/dictation-prompt.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/dev.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/dependabot-burner.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/daily-team-status.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/daily-secrets-analysis.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/daily-malicious-code-scan.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/craft.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/copilot-token-optimizer.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/contribution-check.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/constraint-solving-potd.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/codex-github-remote-mcp-test.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/code-simplifier.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/changeset.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/brave.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/bot-detection.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/ai-moderator.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.
.github/workflows/ace-editor.lock.yml Updates pinned AWF version/image tags to v0.25.16 / 0.25.16.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 109/185 changed files
  • Comments generated: 1

Comment on lines 49 to +50
// DefaultFirewallVersion is the default version of the gh-aw-firewall (AWF) binary
const DefaultFirewallVersion Version = "v0.25.14"
const DefaultFirewallVersion Version = "v0.25.16"
Copy link

Copilot AI Apr 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

PR description says all workflow lock files were recompiled, but there are still references to AWF v0.25.14 in pkg/cli/workflows/example-blocked-domains.lock.yml (e.g., GH_AW_INFO_AWF_VERSION/install_awf_binary.sh/image tags). If that file is also generated/kept in sync, it should be updated to v0.25.16; otherwise, please clarify in the PR description which set of lock files was recompiled and why this one remains pinned.

Copilot uses AI. Check for mistakes.
@lpcox
Copy link
Copy Markdown
Collaborator Author

lpcox commented Apr 8, 2026

@copilot apply changes based on the comments in this thread

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 8, 2026

@copilot apply changes based on the comments in this thread

Recompiled pkg/cli/workflows/example-blocked-domains.lock.yml — all AWF references now point to v0.25.16. Commit: bb1aecc.

Copilot finished work on behalf of lpcox April 8, 2026 05:01
@lpcox lpcox merged commit d594aef into main Apr 8, 2026
85 checks passed
@lpcox lpcox deleted the bump-firewall-v0.25.16 branch April 8, 2026 05:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants