Skip to content

chore: bump AWF to v0.13.12#14027

Merged
Mossaka merged 11 commits intomainfrom
update/awf-0.13.8
Feb 6, 2026
Merged

chore: bump AWF to v0.13.12#14027
Mossaka merged 11 commits intomainfrom
update/awf-0.13.8

Conversation

@Mossaka
Copy link
Collaborator

@Mossaka Mossaka commented Feb 6, 2026

Summary

Bump AWF (gh-aw-firewall) to v0.13.12 to fix MCP server connectivity in chroot mode.

What's in AWF v0.13.12

  • fix: resolve host.docker.internal DNS in chroot mode for MCP servers (#555)
    • In chroot mode, MCP servers (github, playwright, safeoutputs) were failing to connect because host.docker.internal doesn't resolve inside the chroot
    • Docker adds this entry to the container's /etc/hosts via extra_hosts, but the chroot uses the host's /etc/hosts which lacks this entry
    • Fix: Mount a writable copy of /etc/hosts and inject the host.docker.internal entry from docker-manager.ts

Test plan

  • Smoke Claude passes (verify MCP servers connect)
  • Smoke Copilot passes (verify MCP tools available)
  • Smoke Chroot passes

Related

🤖 Generated with Claude Code


Changeset

  • Type: patch
  • Description: Bump AWF to v0.13.12 so chroot-mode MCP servers resolve host.docker.internal and stay connected.

Generated by Changeset Generator


Changeset

  • Type: patch
  • Description: Bump AWF to v0.13.12 so chroot-mode MCP servers resolve host.docker.internal and stay connected.

Generated by Changeset Generator

Key fixes in AWF v0.13.8:
- fix: mount /etc/hosts in chroot mode for localhost resolution
- fix: pass BUN_INSTALL to chroot to prevent Bun core dump
- fix: bypass Squid for host.docker.internal MCP gateway traffic

The MCP gateway traffic bypass should fix Codex smoke test failures
by ensuring MCP gateway connections aren't routed through the proxy.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings February 6, 2026 01:27
@Mossaka Mossaka added the smoke label Feb 6, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🎬 THE ENDSmoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Changeset Generator failed. Please review the logs for details.

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Agent Container Tool Check

Tool Status Version
bash 5.2.21
sh available
git 2.52.0
jq 1.7
yq 4.52.2
curl 8.5.0
gh 2.86.0
node 20.20.0
python3 3.12.3
go 1.24.12
java version check failed (binary exists at /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.10-7/x64/bin/java)
dotnet version check failed (binary exists at /usr/bin/dotnet)

Result: 10/12 tools available ⚠️

Notes:

  • Java and .NET binaries are present but version checks are failing in the current shell environment
  • All core development tools (shell, git, JSON/YAML processors, HTTP, GitHub CLI, Node.js, Python, Go) are working correctly

AI generated by Agent Container Smoke Test

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR bumps the AWF (gh-aw-firewall) version from v0.13.7 to v0.13.8 to incorporate critical fixes for chroot mode, localhost resolution, Bun core dumps, and MCP gateway traffic routing. The update follows the established pattern for version bumps by updating the constant in pkg/constants/constants.go and regenerating all workflow lock files.

Changes:

  • Updated DefaultFirewallVersion constant from v0.13.7 to v0.13.8 in pkg/constants/constants.go
  • Regenerated all workflow lock files to reflect the new version in installation commands, Docker image tags, and metadata

Reviewed changes

Copilot reviewed 144 out of 144 changed files in this pull request and generated no comments.

File Description
pkg/constants/constants.go Updated DefaultFirewallVersion constant from v0.13.7 to v0.13.8
.github/workflows/*.lock.yml (100+ files) Regenerated lock files with updated AWF version in install commands, Docker image tags, and workflow metadata

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Smoke Test Results ✅

Status: PASS ✅

@Mossaka

AI generated by Smoke Copilot

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Smoke Test: Claude - PASS ✅

PR Titles:

Test Results: 11/12 ✅

  • ✅ GitHub MCP
  • ✅ Safe Inputs GH CLI
  • ✅ Serena MCP
  • ✅ Make Build
  • ✅ Playwright
  • ✅ Tavily Search
  • ✅ File Operations
  • ✅ Discussion Interaction
  • ⚠️ AWF MCP (tool error)

Overall: PASS

Full Report

AI generated by Smoke Claude

Mossaka and others added 2 commits February 6, 2026 07:29
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@Mossaka Mossaka changed the title chore: bump AWF to v0.13.8 chore: bump AWF to v0.13.9 Feb 6, 2026
@Mossaka Mossaka added the smoke label Feb 6, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🎬 THE ENDSmoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Changeset Generator completed successfully!

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Agent Container Tool Check

Tool Status Version
bash 5.2.21
sh available
git 2.52.0
jq 1.7
yq 4.50.1
curl 8.5.0
gh 2.86.0
node 20.20.0
python3 3.12.3
go 1.24.12
java symlink issue
dotnet symlink issue

Result: 10/12 tools available ⚠️

Issues Found:

  • Java and .NET binaries exist but have symlink/execution issues in the container
  • Both return "cannot execute dotnet when renamed to bash" error
  • All other development tools are working correctly

AI generated by Agent Container Smoke Test

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🎬 THE ENDSmoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Smoke Test Results ✅

PR Titles:

Test Results:

  • ✅ GitHub MCP
  • ✅ Safe Inputs GH CLI
  • ✅ Serena MCP
  • ✅ Make Build
  • ✅ Playwright
  • ✅ Tavily Search
  • ✅ File Writing
  • ✅ Bash Tool
  • ✅ Discussion Interaction
  • ✅ Agentic Workflows MCP

Overall: PASS

AI generated by Smoke Claude

@Mossaka Mossaka added the smoke label Feb 6, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🎬 THE ENDSmoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Changeset Generator completed successfully!

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Agent Container Tool Check

Tool Status Version
bash 5.2.21
sh available
git 2.52.0
jq 1.7
yq 4.50.1
curl 8.5.0
gh 2.86.0
node 20.20.0
python3 3.12.3
go 1.24.12
java 21.0.10 (binary exists)
dotnet ⚠️ 9.0.102 (binary exists, execution issue)

Result: 11/12 tools fully functional ✅
Note: dotnet binary present but encounters execution error

Status: PASS (all required tools available)


Tool Details

  • All shell, version control, JSON/YAML processing, and HTTP tools work correctly
  • All programming runtimes (Node.js, Python, Go, Java) are functional
  • Java binary exists at /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.10-7/x64/bin/java
  • dotnet binary exists at /usr/share/dotnet/dotnet but has execution issues in this shell context

AI generated by Agent Container Smoke Test

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Smoke Test Results - Run §21763914317

Overall Status: PASS

@Mossaka

AI generated by Smoke Copilot

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🤖 beep boop The smoke test agent just zoomed through here like a caffeinated robot on roller skates! ⚡🛼

Everything's working splendidly - all systems go, all tests green! Your auto-triage report looks fantastic, by the way. Keep up the great work organizing those issues!

zips away to the next test 🚀✨

AI generated by Smoke Copilot

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

PR titles: Add Dependabot Project Manager workflow with bundling and Copilot assignment; chore: bump AWF to v0.13.12
MCP merged PRs ✅ | safeinputs gh ✅
Serena ✅ | Playwright ✅
Tavily ✅ | File write ✅ | Bash cat ✅
Discussion comment ✅ | Build ❌ (go 1.23.12 < 1.25)
Overall: FAIL

AI generated by Smoke Codex

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

@Mossaka Mossaka added the smoke label Feb 6, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Changeset Generator completed successfully!

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🎬 THE ENDSmoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Agent Container Tool Check

Tool Status Version
bash 5.2.21(1)-release
sh available
git 2.52.0
jq 1.7
yq v4.50.1
curl 8.5.0
gh 2.86.0
node v20.20.0
python3 3.12.3
go 1.24.12
java ⚠️ Available but version check blocked by shell behavior
dotnet ⚠️ Available but version check blocked by shell behavior

Result: 10/12 tools fully verified, 2/12 tools present but version check issues

Status: ⚠️ PARTIAL PASS

Notes:

  • Java binary exists at /opt/hostedtoolcache/Java_Temurin-Hotspot_jdk/21.0.10-7/x64/bin/java (ELF 64-bit executable)
  • Dotnet binary exists at /usr/share/dotnet/dotnet (ELF 64-bit executable)
  • Both tools encounter shell behavior issues during version checks that output bash version instead
  • This appears to be a shell environment issue, not missing tools
  • All 10 core tools (bash, sh, git, jq, yq, curl, gh, node, python3, go) are fully functional ✅

AI generated by Agent Container Smoke Test

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

Merged PRs (GitHub MCP): ✅ Add Dependabot Project Manager workflow with bundling and Copilot assignment | docs: replace ChatGPT references with generic AI chatbot terminology
safeinputs-gh pr list: ✅
Serena MCP activate+find_symbol: ✅
Playwright github.com title contains GitHub: ✅
Tavily search results returned: ✅
File write /tmp/gh-aw/agent/smoke-test-codex-21764262271.txt: ✅
Bash cat verify: ✅
Discussion comment posted: ✅
make build (GOCACHE/GOMODCACHE): ❌ (go.mod requires go >= 1.25.0; go 1.23.12)
Overall: FAIL

AI generated by Smoke Codex

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

🔥 Smoke Test Results §21764262272

PRs: #14182, #14214 (GitHub MCP) | #14027, #13792 (GH CLI)

✅ GitHub MCP | ✅ GH CLI | ❌ Serena | ✅ Playwright | ✅ File Write | ✅ Bash | ✅ Discussion | ✅ Build

Status: ⚠️ PARTIAL PASS (Serena connection issue)

cc @Mossaka

AI generated by Smoke Copilot

@github-actions
Copy link
Contributor

github-actions bot commented Feb 6, 2026

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

@Mossaka Mossaka merged commit 5d14550 into main Feb 6, 2026
45 checks passed
@Mossaka Mossaka deleted the update/awf-0.13.8 branch February 6, 2026 20:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant