chore(deps): bump ubuntu from 22.04 to 26.04 in /containers/build-tools in the all-docker-build-tools group by dependabot[bot] · Pull Request #10136 · github/gh-aw-firewall

dependabot · 2026-10-16T19:45:49Z

Bumps the all-docker-build-tools group in /containers/build-tools with 1 update: ubuntu.

Updates ubuntu from 22.04 to 26.04

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-docker-build-tools group in /containers/build-tools with 1 update: ubuntu. Updates `ubuntu` from 22.04 to 26.04 --- updated-dependencies: - dependency-name: ubuntu dependency-version: '26.04' dependency-type: direct:production dependency-group: all-docker-build-tools ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-10-16T19:46:38Z

🚀 Security Guard has started processing this pull request

github-actions · 2026-10-16T19:52:30Z

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	93.45%	93.47%	📈 +0.02%
Statements	92.08%	92.10%	📈 +0.02%
Functions	90.91%	90.91%	➡️ +0.00%
Branches	86.05%	86.08%	📈 +0.03%

📁 Per-file Coverage Changes (3 files)

File	Lines (Before → After)	Statements (Before → After)
`src/enclave/host-executor-server.ts`	91.0% → 91.0% (+0.00%)	89.7% → 90.0% (+0.30%)
`src/nvx/one-shot-adapter.ts`	82.9% → 83.4% (+0.56%)	80.2% → 80.7% (+0.52%)
`src/log-directory-setup.ts`	96.8% → 100.0% (+3.18%)	96.9% → 100.0% (+3.13%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

lpcox · 2026-10-16T22:15:12Z

@copilot fix the failing ci check https://github.com/github/gh-aw-firewall/actions/runs/38957316908/job/117167231024?pr=10136

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a7fbdf27-e7df-41b9-805e-62e0f3fc182b

Copilot · 2026-10-16T22:17:15Z

@copilot fix the failing ci check https://github.com/github/gh-aw-firewall/actions/runs/38957316908/job/117167231024?pr=10136

The failure was caused by the Cloud Hypervisor artifact verifier still expecting Ubuntu 22.04 after the base image moved to 26.04. Commit a8ac83a updates the manifest and verifier and adds a regression test; the rerun is currently in progress.

github-actions · 2026-10-16T22:36:03Z

✅ Build Test Suite completed successfully!

Generated by Build Test Suite for #10136

github-actions · 2026-10-16T22:36:03Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-10-16T22:36:04Z

🔌 Smoke Services — All services reachable! ✅

🔌 Service connectivity validated by Smoke Services

github-actions · 2026-10-16T22:36:05Z

✅ Smoke Claude passed

Generated by Smoke Claude for #10136

github-actions · 2026-10-16T22:36:05Z

🔑 Smoke Copilot BYOK AOAI (api-key) is testing Azure OpenAI BYOK (api-key) mode on this pull request...

github-actions · 2026-10-16T22:36:06Z

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

📡 OTel tracing validated by Smoke OTel Tracing

github-actions · 2026-10-16T22:36:06Z

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

🛡️ Egress verdict from Smoke Copilot Network Isolation

github-actions · 2026-10-16T22:36:07Z

🪪 Smoke Copilot BYOK AOAI (Entra) is testing Azure OpenAI BYOK (Entra / GitHub OIDC) mode on this pull request...

github-actions · 2026-10-16T22:36:07Z

✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

🔑 BYOK report filed by Smoke Copilot BYOK

github-actions · 2026-10-16T22:36:07Z

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

Tested by Smoke Chroot

github-actions · 2026-10-16T22:36:09Z

Smoke Cloud Hypervisor completed. Cloud Hypervisor + Copilot passed.

Cloud Hypervisor + Copilot smoke test by Smoke Cloud Hypervisor

github-actions · 2026-10-16T22:36:10Z

💎 Smoke Gemini is crystallizing results on this pull request...

github-actions · 2026-10-16T22:36:11Z

✅ Security Guard completed successfully!

Security Guard

Outcome: reported_no_action

The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible.

Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.

Generated from Security Guard · haiku45 · 4.59 AIC · ⊞ 6.0K · ◷

Generated by Security Guard for #10136

github-actions · 2026-10-16T22:36:25Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

🔮 The oracle has spoken through Smoke Codex

github-actions · 2026-10-16T22:45:41Z

Smoke Copilot

✅ GitHub MCP: "chore(deps): bump the all-github-actions group with 2 updates"
✅ github.com HTTP 200
✅ File write/read
Overall: PASS — @lpcox

📰 BREAKING: Report filed by Smoke Copilot
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:45:44Z

Smoke Test: Claude Engine Validation

Check	Status
API	✅ PASS
gh CLI	✅ PASS
File access	✅ PASS

Overall result: ✅ PASS

Generated by Smoke Claude for #10136 · claude · haiku45 · 49 AIC · ⊞ 6.1K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:45:49Z

Cloud Hypervisor + Copilot smoke test

Merged PR lookup: PASS
github.com connectivity: PASS (HTTP 200)
File write/read: PASS
example.com blocked: PASS (HTTP 000)
Overall: PASS

Cloud Hypervisor + Copilot smoke test by Smoke Cloud Hypervisor
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:46:14Z

Services smoke test: Redis PING ✅, pg_isready ✅, SELECT 1 ✅. Overall: PASS

🔌 Service connectivity validated by Smoke Services
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:46:16Z

Smoke Test Results (Copilot BYOK)

✅ GitHub MCP connectivity — PR data verified
✅ GitHub.com connectivity — HTTP 200
✅ File write/read test — File exists and readable
✅ BYOK inference test — Direct BYOK mode active (api-proxy → api.githubcopilot.com)

Status: PASS
Running in direct BYOK mode with COPILOT_PROVIDER_API_KEY via api-proxy sidecar.

🔑 BYOK report filed by Smoke Copilot BYOK
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:46:22Z

EGRESS_RESULT allow=pass deny=pass

✅ Allowed: api.github.com → 200
✅ Blocked: example.com → blocked (curl TLS error)
Overall: PASS

cc @lpcox

🛡️ Egress verdict from Smoke Copilot Network Isolation
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:46:29Z

OTEL smoke test

✅ S1 Module: otel.js loads; exports startRequestSpan, setTokenAttributes, setBudgetAttributes, endSpan, endSpanError, shutdown, isEnabled
✅ S2 Tests: 3 OTEL suites, 68/68 passed
✅ S3 Env forwarding: trace/parent span IDs in env-passthrough.ts; OTEL vars in api-proxy-env-config.ts
✅ S4 Token tracker: onUsage hook present in token-tracker-http.js
✅ S5 Diagnostics: /tmp/gh-aw/otel.jsonl has 1 span record (no api-proxy spans expected in this run)

📡 OTel tracing validated by Smoke OTel Tracing
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:47:06Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	❌ (Bun install blocked: `curl \| bash` permission denied)	not run	❌ FAIL
Bun	hono	❌ (same)	not run	❌ FAIL
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	❌ (Deno install blocked)	not run	❌ FAIL
Deno	std	❌ (same)	not run	❌ FAIL
.NET	hello-world	❌	N/A	❌ FAIL
.NET	json-parse	❌	N/A	❌ FAIL
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	❌	not run	❌ FAIL
Java	caffeine	❌	not run	❌ FAIL
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 4/8 ecosystems passed — FAIL

Failure details

Bun / Deno: the install scripts (curl | bash/sh) were denied by the sandbox (no interactive approval), so neither runtime was installed.
.NET: dotnet CLI crashed on first-use setup: IOException ... 'NuGet-Migrations' ... lstat("/run/user/1001") ENOENT (the sandbox is missing the user runtime dir). Restore/build/run did not execute.
Java: Maven failed with LocalRepositoryNotAccessibleException (local repo not accessible in the sandbox); the proxy settings.xml already existed with the required values.

All 8 repos cloned successfully. The build-test label was not added because of the failures.

Generated by Build Test Suite for #10136 · copilot · auto · 23.5 AIC · ⊞ 12K · ◷
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:47:55Z

Chroot version comparison

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.15	Python 3.12.15	✅
Node.js	v24.21.0	v2.98.0	❌
Go	go1.22.12	go1.22.12	✅

Result: Node.js version mismatch, so the smoke-chroot label was not added.

Tested by Smoke Chroot
_{Add label ready-for-aw to run again}

github-actions · 2026-10-16T22:47:57Z

Merged PRs: none found ✅
PR details: none found ❌
Playwright title check ❌
Temp file write/read ✅
Build (npm ci && npm run build) ✅
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex
_{Add label ready-for-aw to run again}

dependabot Bot added dependencies Pull requests that update a dependency file docker Pull requests that update docker code labels Oct 16, 2026

fix: align Cloud Hypervisor guest checks with Ubuntu 26.04

a8ac83a

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a7fbdf27-e7df-41b9-805e-62e0f3fc182b

Copilot started work on behalf of lpcox October 16, 2026 22:15

View session

Copilot finished work on behalf of lpcox October 16, 2026 22:17

Copilot AI requested a review from lpcox October 16, 2026 22:17

lpcox added the ready-for-aw label Oct 16, 2026

lpcox had a problem deploying to aoai-model October 16, 2026 22:36 — with GitHub Actions Failure

lpcox enabled auto-merge (squash) October 16, 2026 22:40

github-actions Bot added the smoke-copilot label Oct 16, 2026

github-actions Bot added the smoke-claude label Oct 16, 2026

github-actions Bot added the smoke-cloud-hypervisor label Oct 16, 2026

github-actions Bot added the smoke-services label Oct 16, 2026

github-actions Bot added smoke-copilot-byok smoke-copilot-network-isolation Copilot network-isolation egress smoke test labels Oct 16, 2026

lpcox deployed to aoai-model October 16, 2026 22:46 — with GitHub Actions Active

lpcox had a problem deploying to aoai-model October 16, 2026 22:47 — with GitHub Actions Failure

lpcox merged commit d1fb9e7 into main Oct 16, 2026
142 of 148 checks passed

lpcox deleted the dependabot/docker/containers/build-tools/all-docker-build-tools-e88f1b6d70 branch October 16, 2026 22:55

Conversation

dependabot Bot commented on behalf of github Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Coverage Check Passed

Overall Coverage

Uh oh!

lpcox commented Oct 16, 2026

Uh oh!

Copilot AI commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Security Guard

Uh oh!

github-actions Bot commented Oct 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026

Smoke Test: Claude Engine Validation

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026

Smoke Test Results (Copilot BYOK)

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

github-actions Bot commented Oct 16, 2026

🏗️ Build Test Suite Results

Uh oh!

github-actions Bot commented Oct 16, 2026

Chroot version comparison

Uh oh!

github-actions Bot commented Oct 16, 2026

Uh oh!

Uh oh!

This branch had an error being deployed

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading

github-actions Bot commented Oct 16, 2026 •

edited

Loading