🌟 Release Highlights

A focused release strengthening infrastructure dependencies, compile/audit reliability, and validation.

✨ What's New

• Updated runtime stack: MCP Gateway bumped to v0.5.0 and the firewall to v0.29.0.
• Better expression validation: missing step references in Actions/AW expressions are now detected at compile time.
• Resilient MCP tooling: compile and audit timeouts now return stage-aware partial results instead of failing outright.

🐛 Bug Fixes & Improvements

• Threat detection that is skipped no longer reports inherited agent tokens.
• Fixed a compile-progress file permission policy violation.
• Hardened fetch-script portability and structured lint reporting.
• Cached state is now read before workflow analysis, and title-parsing benchmarks are separated from file I/O costs.

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.6K

What's Changed

• Separate workflow title parsing from file-I/O benchmark costs by @pelikhan with @Copilot in #71927
• Read cached state before workflow analysis by @pelikhan with @Copilot in #71878
• Detect missing step references in Actions/AW expressions by @pelikhan with @Copilot in #71926
• Return stage-aware partial results for MCP compile and audit timeouts by @pelikhan with @Copilot in #71886
• Fix compile-progress file permission policy violation by @pelikhan with @Copilot in #71947
• Prevent skipped threat detection from reporting inherited agent tokens by @pelikhan with @Copilot in #71933
• Harden fetch-script portability and structured lint reporting by @pelikhan with @Copilot in #71932
• Bump MCPG to v0.5.0 and firewall to v0.29.0 by @lpcox with @Copilot in #71957
• [blog] Weekly blog post – 2026-10-26 by @github-actions[bot] in #71984
• [community] Update community contributions in README by @github-actions[bot] in #71976

Full Changelog: v0.93.5...v0.93.6