chore(release): promote dev to main (v1.1.0) by tamirdresher · Pull Request #2241 · github/squad

tamirdresher · 2026-10-19T07:52:58Z

Summary

Sanitized promotion of dev through d5076d91 to main for Squad v1.1.0, rebuilt from main at 2aabd8dfe444dcabf95f44ec04119b7837842095 using the release promotion merge strategy from .github/workflows/squad-promote.yml.

Promotion preparation

Merged upstream/dev with --no-commit --no-ff -X theirs -X no-renames
Removed internal-only paths: .ai-team/, .squad/, .ai-team-templates/, team-docs/, and docs/proposals/
Removed consumed .changeset/*.md files, retaining .changeset/README.md
Preserved dev's model catalog without semantic merge duplication
Kept repository-audit tests compatible with the sanitized release tree
Refreshed the branch with the npm publication verification hardening from fix: harden npm publish verification #2261
Confirmed there are no unresolved conflicts or tracked internal-only paths

Release verification

Root, SDK, CLI, and lockfile package versions are 1.1.0
CLI SDK dependency floor is >=1.1.0 in both manifest and lockfile
CHANGELOG.md contains ## [1.1.0] - 2026-10-19, 1.0.1, and 1.0.0
Standalone release workflow contains the anonymous read-clone fix from fix(release): repair Homebrew/WinGet publish auth for external-repo checkouts #2164
npm publication verification polls for up to 20 attempts at 15-second intervals
Existing packages with temporarily stale dist-tags reach the retrying verification step
Stable release promote-latest waits for release, npm, and standalone
Only .changeset/README.md remains

Validation

npm -w packages/squad-sdk run build
npm -w packages/squad-cli run build
npx vitest run test/standalone-release-workflow.test.ts test/publish-policy.test.ts test/squad-cli-pin.test.ts test/promote-insider-tag.test.ts — 106 passed, 0 failed
node --test test/*.test.cjs — 134 passed, 0 failed
Working tree remained clean after validation

Promotion head: 7ca30467c4f189a6c911382e9baf84c709977f94

Bumps [devalue](https://github.com/sveltejs/devalue) from 5.8.1 to 5.9.2. - [Release notes](https://github.com/sveltejs/devalue/releases) - [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md) - [Commits](sveltejs/devalue@v5.8.1...v5.9.2) --- updated-dependencies: - dependency-name: devalue dependency-version: 5.9.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brady Gaster <41929050+bradygaster@users.noreply.github.com>

…ithub#2058) Bumps the minor-patch group with 2 updates in the /docs directory: [@astrojs/markdown-remark](https://github.com/withastro/astro/tree/HEAD/packages/markdown/remark) and [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro). Updates `@astrojs/markdown-remark` from 7.3.0 to 7.3.1 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/markdown/remark/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/@astrojs/markdown-remark@7.3.1/packages/markdown/remark) Updates `astro` from 7.3.1 to 7.3.3 - [Release notes](https://github.com/withastro/astro/releases) - [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md) - [Commits](https://github.com/withastro/astro/commits/astro@7.3.3/packages/astro) --- updated-dependencies: - dependency-name: "@astrojs/markdown-remark" dependency-version: 7.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: astro dependency-version: 7.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brady Gaster <41929050+bradygaster@users.noreply.github.com>

Bumps Microsoft.Agents.AI.GitHub.Copilot from 1.20.0 to 1.22.0 Bumps Microsoft.Extensions.AI from 10.9.0 to 10.10.0 --- updated-dependencies: - dependency-name: Microsoft.Agents.AI.GitHub.Copilot dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages - dependency-name: Microsoft.Extensions.AI dependency-version: 10.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: microsoft-packages ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brady Gaster <41929050+bradygaster@users.noreply.github.com>

--- updated-dependencies: - dependency-name: GitHub.Copilot.SDK dependency-version: 1.0.14 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brady Gaster <41929050+bradygaster@users.noreply.github.com>

…ithub#2062) Bumps the minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.2.2` | `10.3.3` | | [markdown-it](https://github.com/markdown-it/markdown-it) | `15.0.1` | `15.0.2` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.6.1` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [@github/copilot-sdk](https://github.com/github/copilot-sdk) | `1.0.13` | `1.0.14` | Updates `cspell` from 10.2.2 to 10.3.3 - [Release notes](https://github.com/streetsidesoftware/cspell/releases) - [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md) - [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.3/packages/cspell) Updates `markdown-it` from 15.0.1 to 15.0.2 - [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/markdown-it@15.0.1...15.0.2) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/node` from 26.5.0 to 26.6.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@github/copilot-sdk` from 1.0.13 to 1.0.14 - [Release notes](https://github.com/github/copilot-sdk/releases) - [Changelog](https://github.com/github/copilot-sdk/blob/main/CHANGELOG.md) - [Commits](github/copilot-sdk@v1.0.13...v1.0.14) --- updated-dependencies: - dependency-name: cspell dependency-version: 10.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: markdown-it dependency-version: 15.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@types/node" dependency-version: 26.6.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: "@github/copilot-sdk" dependency-version: 1.0.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Brady Gaster <41929050+bradygaster@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Add patch release metadata for the CLI and SDK templates changed by PR github#2072. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep the fail-closed CLI and SDK release note from the review-fix commit as the single changeset for this documentation update. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

…te-agentic-workflow-failures docs: require Issues before gh-aw installation

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Closes github#2075 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Keep the revision focused on the seven reviewed blockers and generate resource-free package workflow sources so remote gh-aw v0.89.21 installs the exact 7/15/1 topology without duplicate resources.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Normalize gh-aw's immutable source annotation when checking installed workflow bytes and match v0.89.21's 23-entry ownership record while verifying the skill separately.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Normalize only the two immutable source annotations emitted by gh-aw v0.89.21 before comparing installed workflow bytes to canonical digests.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Allow gh-aw v0.89.21's downloaded workflow representation to omit the canonical source's single final newline while preserving exact content verification.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Remove the build-generated prerelease SDK dependency floor from package-lock.json so the stable workspace policy remains satisfied.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Replace stale six-workflow, ambient-version, and top-level Markdown assumptions with the current nested seven-workflow package contract.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Replace the duplicate ambient-compiler install test with assertions for the exact nested package and pinned v0.89.21 strict-compile job.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Reject symlinked manifest/runtime paths and require explicit credential-bearing child processes, including separation of source-read and mutation tokens.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Part of github#2075 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

…ng-gh-aw-bootstrap Harden gh-aw distribution and add hosted bootstrap E2E

…upgrade (github#2186) (github#2221) Manage Squad instructions inside .github/copilot-instructions.md using  and  markers instead of overwriting the entire file. Closes github#2186 Co-authored-by: Copilot <Copilot@users.noreply.github.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5cf0811c-a02a-41a7-ab00-904b6900db7b

…ithub#2206) (github#2222) Require granular activation (impl-accepted and impl-phases-accepted) to uniquely reference the selected implementation plan comment revision and match any recorded Implementation SHA-256 before reservation or issue creation. Closes github#2206 Co-authored-by: Copilot <Copilot@users.noreply.github.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5cf0811c-a02a-41a7-ab00-904b6900db7b

…h --execute (github#2070) (github#2224) Closes github#2070 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot <Copilot@users.noreply.github.com> Copilot-Session: 5cf0811c-a02a-41a7-ab00-904b6900db7b

* feat(gh-aw): opt-in CAO research wave evidence gate Add a trusted, opt-in CAO evidence provider hook. Without a .squad/cao-evidence-provider.json descriptor, Squad behaves exactly as before. - research: hash-pinned runtime collects run-bound evidence pre-agent (App auth only in native v1; PAT fails as unsupported), native validation, immutable artifact retention, publication gate, deterministic provenance writer - triage/plan modes: restore referenced wave artifact, validate natively and via CAO --validate-bundle before the agent; failure blocks publication - manifest capability marker evidence_provider_schema; regenerated package copies, aw.yml, manifest and digests via native integrity tooling Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: c26cd4b2-4915-4ada-991d-29493af6106d * fix(gh-aw): preserve research paths and producer attempt binding Restore the trusted checkout in legacy research writer fixtures without changing no-provider publication. Validate descriptive source paths separately from extracted bundle paths so spaces and bracketed route names are accepted. Restore the referenced successful workflow attempt rather than the latest rerun, retaining exact producer identity and all bundle validation gates. Add direct path and retry regressions and regenerate the runtime digest. Closes github#2226 review findings. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: c26cd4b2-4915-4ada-991d-29493af6106d --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: c26cd4b2-4915-4ada-991d-29493af6106d

…sion opt-in (github#2225) * feat(sdk): central model resolver with config, session and fallback sources resolveModel now applies MODEL_RESOLUTION_PRECEDENCE (user-override > config > session > charter > task-auto > default), returns a rationale for every choice, passes a session-picked model through to sub-agent spawns with source `session`, and selects from the tier fallback chain (source `fallback`) when the chosen model is listed in unavailableModels. Task-auto picks now read the tier chain head instead of hard-coding IDs. Coordinator spawn guidance (squad.agent.md) and model-selection-reference are model-ID agnostic: they defer to the resolver precedence, acknowledge model + source + rationale, and keep catalog IDs in a separate appendix. A coordinator contract test enforces the no-model-ID rule. Refs github#1720 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 79bd3e85-5096-4dae-a1ef-937c21d2c48e * fix(sdk): wire central model resolver into spawning; forward fallback and auto sentinel Revision of the central model resolver after review: - The root `resolveModel` export is now a compatible string adapter over the central resolver, so it reads .squad/config.json through the same precedence and no longer returns a literal `auto`. Guidance names the provenance-returning entry point `@bradygaster/squad-sdk/agents`. - AgentLifecycleManager.spawnAgent applies persistent config (agentModelOverrides, defaultModel, economyMode) and records provenance on AgentHandle.modelResolution, OTel span attributes and an agent:milestone `model.resolved` event. - Availability fallback moves forward from the chosen chain position; out-of-chain models search from the head; no remaining candidate sets omitModel. - `auto` (any case/whitespace) is no preference at every layer, including the per-spawn override. - ResolvedModel.rationale stays optional for consumer-built values; resolveModel returns ModelResolution with rationale guaranteed. Refs github#1720 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: e022a055-6a4e-4c88-b619-bd46be161840 * fix(sdk): wire session/unavailable models into spawn; forward-only fallback under cost policy - SpawnAgentOptions gains sessionModel and unavailableModels, forwarded to the central resolver (user-override > config > session > charter > task > default); an exhausted chain omits the model key from the SDK session config. - Explicit over-ceiling cost-policy finalization keeps only chain entries after the chosen model, so availability fallback never moves back toward the head. - Export resolveAgentModel from @bradygaster/squad-sdk/agents as an additive alias of resolveModel; docs, changeset and tests name the literal export. Refs github#1720 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 8a345356-f72f-4e9d-a28b-678c7c934eaa * fix(sdk): availability fallback honors the active cost ceiling An unavailable out-of-catalog pick (e.g. session-selected hydrafusion) bypassed cost-ceiling pruning, so availability fallback could choose a catalog model above config.costPolicy / sessionCostPolicy. Fallback now skips catalog-known candidates above the effective ceiling and omits the model when none remain; available explicit picks still pass through. Refs github#1720 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: befc2d3a-18c3-4002-9194-2fbd510375d5 * feat(sdk): quality-profile and public-catalog aware model selection Task-aware selection runs under a quality profile: quality-first (default), balanced or economy (explicit opt-in via session, economyMode or persistent modelProfile). Profiles flow through the central resolver, spawn and the compatibility adapter; explicit overrides and cost ceilings are untouched. availableModels (live runtime list) is authoritative for availability. Catalog, fallback chains and economy map now list only public GA models (docs.github.com supported-models), tiered by Copilot model-picker category. Removed from recommendations: claude-opus-4.7, claude-opus-4.6, claude-sonnet-4.6, claude-sonnet-4.5, gemini-3.1-pro (still passed through when named explicitly). Closes github#1598 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: eeb9fa1f-ceee-4184-afcd-5cd32d9d04dc * feat(sdk): opt-in HydraFusion model support Add hydrafusion and hydrafusion-max as preview, opt-in catalog entries (premium tier) excluded from every default chain and GA profile, and an opt-in 'hydrafusion' quality profile that sends quality-sensitive tasks to hydrafusion first, then the quality-first premium chain. Scribe and mechanical work stay fast. hydrafusion-max is used only when named explicitly. Implicit in-ceiling replacement never picks a preview model. Docs updated in .squad-templates and synced to mirrors. Closes github#2014 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 0a61585a-655c-46db-8ea9-52e83531d7eb * docs: update model-selection guide for quality profiles and HydraFusion opt-in (github#2225) Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5958f622-3345-44b2-b0ac-f0394b732686 * fix(sdk): address PR github#2225 review findings (fallback chain, omitModel, preview recs, economy profile) - Normalize resolveModel fallbackChain: availability-filtered and forward-only from the selected model; out-of-chain picks keep head-first fallback. - ModelFallbackExecutor.execute handles omitModel via an optional platformDefault callback; never calls fn with an empty model id. - ModelRegistry.getRecommendedModels excludes preview entries. - readEconomyMode recognizes modelProfile 'economy'; economy off removes it. - AgentLifecycleManager: a profile-picked preview model that is unavailable or rejected by createSession falls forward to the premium chain with a single user notice instead of failing the spawn. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5958f622-3345-44b2-b0ac-f0394b732686 * fix: address PR github#2225 follow-ups Part of github#2225 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5958f622-3345-44b2-b0ac-f0394b732686 --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 79bd3e85-5096-4dae-a1ef-937c21d2c48e Copilot-Session: e022a055-6a4e-4c88-b619-bd46be161840 Copilot-Session: 8a345356-f72f-4e9d-a28b-678c7c934eaa Copilot-Session: befc2d3a-18c3-4002-9194-2fbd510375d5 Copilot-Session: eeb9fa1f-ceee-4184-afcd-5cd32d9d04dc Copilot-Session: 0a61585a-655c-46db-8ea9-52e83531d7eb Copilot-Session: 5958f622-3345-44b2-b0ac-f0394b732686

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

…prep chore(release): prepare v1.0.2

github-actions · 2026-10-19T07:53:14Z

🛫 PR Readiness Check

ℹ️ This comment updates on each push. Last checked: commit 7ca3046

PR Scope: 📦🔧 Mixed (product + infrastructure)

⚠️ 3 item(s) to address before review

Status	Check	Details
❌	Single commit	250 commits — consider squashing before review
✅	Not in draft	Ready for review
✅	Branch up to date	Up to date with main
❌	Copilot review	No Copilot review yet — it may still be processing
✅	Changeset present	Changeset file found
✅	Scope clean	No .squad/ or docs/proposals/ files
✅	No merge conflicts	No merge conflicts
✅	Copilot threads resolved	No Copilot review threads
❌	CI passing	1 check(s) failing: docs-quality

Files Changed (358 files, +31712 −10845)

File	+/−
`.changeset/1493-upgrade-workflow-backup.md`	+0 −5
`.changeset/1494-templates-readme.md`	+0 −5
`.changeset/1555-fs-storage-rootdir.md`	+0 −5
`.changeset/1605-squad-health.md`	+0 −6
`.changeset/1608-team-capability-advertisement.md`	+0 −10
`.changeset/1641-pid-tracker-identity-check.md`	+0 −5
`.changeset/1973-gh-aw-enlistment-credentials.md`	+0 −6
`.changeset/2056-doctor-remote-state-dir.md`	+0 −5
`.changeset/2106-windows-durable-casting.md`	+0 −5
`.changeset/2107-linked-team-root-forms.md`	+0 −10
`.changeset/2155-heartbeat-fork-pr-labels.md`	+0 −10
`.changeset/agent-command-prompt-placeholder.md`	+0 −5
`.changeset/agent-identity-provenance.md`	+0 −25
`.changeset/automate-release-distribution.md`	+0 −6
`.changeset/automatic-squad-bootstrap.md`	+0 −8
`.changeset/bright-gh-aw-central-ops.md`	+0 −6
`.changeset/calm-casts-preserve-support.md`	+0 −6
`.changeset/casting-runtime-state.md`	+0 −6
`.changeset/coordinator-scope-persistence.md`	+0 −6
`.changeset/dedicated-review-app.md`	+0 −12
`.changeset/doctor-worktree-eol-check.md`	+0 −5
`.changeset/exact-gh-aw-enlistment-version.md`	+0 −8
`.changeset/fail-closed-gh-aw-resource-verification.md`	+0 −8
`.changeset/fix-1490-watch-external-state.md`	+0 −7
`.changeset/fix-1526-ado-legacy-url-decode.md`	+0 −5
`.changeset/fix-bootstrap-payload-transport.md`	+0 −7
`.changeset/fix-bootstrap-triage-continuity.md`	+0 −8
`.changeset/fix-router-author-binding.md`	+0 −6
`.changeset/fix-squad-command-relay-defects.md`	+0 −10
`.changeset/formalize-charter-profile.md`	+0 −5
`.changeset/gh-aw-compiled-expression.md`	+0 −8
`.changeset/gh-aw-enlistment-skill.md`	+0 −6
`.changeset/gh-aw-ga-review-hardening.md`	+0 −83
`.changeset/gh-aw-issues-prerequisite.md`	+0 −6
`.changeset/gh-aw-native-review-warning.md`	+0 −6
`.changeset/gh-aw-runtime-resource-closure.md`	+0 −8
`.changeset/harden-bootstrap-provenance.md`	+0 −8
`.changeset/identity-neutral-squad-templates.md`	+0 −10
`.changeset/lucky-model-routing.md`	+0 −6
`.changeset/lucky-moons-shake.md`	+0 −19
`.changeset/max-reasoning-effort.md`	+0 −5
`.changeset/preserve-gh-aw-builtins.md`	+0 −12
`.changeset/preserve-mcp-json-env.md`	+0 −9
`.changeset/prevent-command-replay.md`	+0 −6
`.changeset/recast-label-slugs.md`	+0 −6
`.changeset/reject-legacy-revision-tokens.md`	+0 −5
`.changeset/remove-alpha-status-messaging.md`	+0 −5
`.changeset/remove-mutable-gh-aw-router.md`	+0 −6
`.changeset/reskill-template-skills.md`	+0 −8
`.changeset/scheduler-quoted-task-ref.md`	+0 −32
...	+308 more files

Total: +31712 −10845

This check runs automatically on every push. Fix any ❌ items and push again.
See CONTRIBUTING.md and PR Requirements for details.

tamirdresher · 2026-10-19T08:30:15Z

Superseded by a collaborator-authored promotion PR from the same validated head so the required independent approval can be recorded.

Add a human-triggered promotion mode that revalidates an existing sanitized branch and opens the protected-main PR with github-actions[bot], allowing an independent maintainer approval. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

fix(release): open validated promotions as bot PRs

tamirdresher · 2026-10-19T09:10:36Z

Superseded by the bot-authored promotion PR path. Closing so the validated promotion workflow can create a same-repository PR owned by github-actions[bot].

tamirdresher · 2026-10-19T09:14:09Z

Release v1.1.0 promotion is rebuilt and force-updated at validated head d6907e29. Local release-gate validation passed (134/134). The remaining blocker is the required independent approving review on main; the GitHub Actions bot path is unavailable because repository settings currently disallow Actions from creating or approving pull requests.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

…prep chore(release): re-version 1.0.2 prep to v1.1.0

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

Closes github#2227 Closes github#2230 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

…m-publish-verification fix: harden npm publish verification

Include the npm publication verification hardening merged in github#2261. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

dependabot Bot and others added 30 commits September 24, 2026 12:08

docs: require Issues before gh-aw install

ad8eb28

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

docs: add gh-aw enlistment changeset

ad6af27

Add patch release metadata for the CLI and SDK templates changed by PR github#2072. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

docs: fail closed when enabling Issues

244d770

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

docs: deduplicate gh-aw Issues changeset

a6a8c95

Keep the fail-closed CLI and SDK release note from the review-fix commit as the single changeset for this documentation update. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge pull request github#2072 from bradygaster/bradygaster-investiga…

a5893d4

…te-agentic-workflow-failures docs: require Issues before gh-aw installation

Harden gh-aw workflow distribution integrity

7b65644

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

test: add hosted gh-aw bootstrap e2e harness

a6e403a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

test: align hosted e2e with bundle manifest

5341c7c

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

test: consume native gh-aw bundle contract

dbcbf66

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

test: bind hosted e2e to resolved source

cb5eaf5

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: normalize generated workflow whitespace

09c3c61

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: harden native gh-aw package

7679639

Closes github#2075 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: capture gh-aw version output

567bd89

Closes github#2075 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: use public registries for locked packages

c8519e1

Closes github#2075 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: accept pinned gh-aw source annotations

3735243

Normalize only the two immutable source annotations emitted by gh-aw v0.89.21 before comparing installed workflow bytes to canonical digests.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: restore stable workspace lock dependency

45eb044

Remove the build-generated prerelease SDK dependency floor from package-lock.json so the stable workspace policy remains satisfied.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

test: align native package expectations

45b2fd6

Replace stale six-workflow, ambient-version, and top-level Markdown assumptions with the current nested seven-workflow package contract.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

test: delegate native install proof to CI

264b8d2

Replace the duplicate ambient-compiler install test with assertions for the exact nested package and pinned v0.89.21 strict-compile job.\n\nCloses github#2075\n\nCo-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: bind hosted bootstrap evidence (Part of github#2075)

cd6d7d6

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

fix: bind bootstrap outputs to run provenance

e299d76

Part of github#2075 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Merge pull request github#2075 from bradygaster/bradygaster-e2e-testi…

0f2586e

…ng-gh-aw-bootstrap Harden gh-aw distribution and add hosted bootstrap E2E

tamirdresher and others added 7 commits October 14, 2026 18:02

chore(release): prepare v1.0.2

f4041ba

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

Merge pull request github#2240 from tamirdresher/chore/release-1.0.2-…

0c9d113

…prep chore(release): prepare v1.0.2

tamirdresher requested a review from bradygaster as a code owner October 19, 2026 07:52

tamirdresher closed this Oct 19, 2026

tamirdresher reopened this Oct 19, 2026

tamirdresher added 3 commits October 19, 2026 11:47

chore(release): record promotion PR workflow change

d3173f2

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

Merge pull request github#2250 from tamirdresher/chore/promotion-pr-bot

610139b

fix(release): open validated promotions as bot PRs

tamirdresher closed this Oct 19, 2026

tamirdresher reopened this Oct 19, 2026

tamirdresher requested a review from IEvangelist October 19, 2026 09:15

tamirdresher added 3 commits October 19, 2026 18:20

chore(release): re-version 1.0.2 prep to v1.1.0

74a450d

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

Merge pull request github#2259 from tamirdresher/chore/release-1.1.0-…

2cd1fa9

…prep chore(release): re-version 1.0.2 prep to v1.1.0

chore(release): promote dev to main (v1.1.0)

d6907e2

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

tamirdresher force-pushed the chore/promote-1.0.2 branch from 1fab800 to d6907e2 Compare October 19, 2026 15:53

tamirdresher changed the title ~~chore(release): promote dev to main (v1.0.2)~~ chore(release): promote dev to main (v1.1.0) Oct 19, 2026

Copilot and others added 3 commits October 20, 2026 10:38

fix: harden npm publish verification

7c7be82

Closes github#2227 Closes github#2230 Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

Merge pull request github#2261 from tamirdresher/squad/2230-harden-np…

d5076d9

…m-publish-verification fix: harden npm publish verification

chore(release): refresh v1.1.0 promotion

7ca3046

Include the npm publication verification hardening merged in github#2261. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 58833b4b-f8e7-42b8-bf04-9121f362f68c

bradygaster approved these changes Oct 20, 2026

View reviewed changes

bradygaster merged commit c24da2a into github:main Oct 20, 2026
22 of 25 checks passed

Navigation Menu

Repository navigation

chore(release): promote dev to main (v1.1.0) - #2241

chore(release): promote dev to main (v1.1.0)#2241
bradygaster merged 849 commits into
github:mainfrom
tamirdresher:chore/promote-1.0.2

tamirdresher commented Oct 19, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Oct 19, 2026 •

edited

Loading

Uh oh!

tamirdresher commented Oct 19, 2026

Uh oh!

tamirdresher commented Oct 19, 2026

Uh oh!

tamirdresher commented Oct 19, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

Conversation

tamirdresher commented Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Promotion preparation

Release verification

Validation

Uh oh!

github-actions Bot commented Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🛫 PR Readiness Check

⚠️ 3 item(s) to address before review

Files Changed (358 files, +31712 −10845)

Uh oh!

tamirdresher commented Oct 19, 2026

Uh oh!

tamirdresher commented Oct 19, 2026

Uh oh!

tamirdresher commented Oct 19, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

tamirdresher commented Oct 19, 2026 •

edited

Loading

github-actions Bot commented Oct 19, 2026 •

edited

Loading

tamirdresher commented Oct 19, 2026 •

edited

Loading