gh-aw 0.27.0

What's Changed

• Fix action pinning for safe-output jobs and add missing ai-inference pin by @Copilot in #2748
• Update workflow lock files with latest actions/setup-node SHA by @Copilot in #2747
• Update agentic-chat instructions to require task title prefix and compilation step by @Copilot in #2744
• Download full PR data with all fields for clustering analysis by @Copilot in #2742
• Add --mcp flag to init command for Copilot Agent MCP configuration by @Copilot in #2733
• Add daily Copilot PR prompt pattern analysis workflow by @Copilot in #2752
• Remove redundant 24-hour filtering from copilot-pr-prompt-analysis workflow by @Copilot in #2755
• Update GitHub Copilot CLI to 0.0.353 by @Copilot in #2754
• Fix github.workflow expression validation in comparison operators by @Copilot in #2751
• [WIP] Fix error in copilot prompt analysis workflow by @Copilot in #2756
• [WIP] Fix mergeAt error by removing field filtering by @Copilot in #2760
• Fix copilot PR search syntax: use "copilot" instead of "app/copilot" by @Copilot in #2763
• Uncomment and fix failing tests with node/npm availability checks by @Copilot in #2769
• Add permissions validator for GitHub MCP toolsets by @Copilot in #2768
• [tidy] Code cleanup: format code and remove unused function by @github-actions[bot] in #2771
• Add GitHub tool/toolset validator for allowed tools configuration by @Copilot in #2770
• Set ubuntu-slim as default runner for safe-outputs jobs by @Copilot in #2783
• [log] Add debug logging to 5 files for improved troubleshooting by @github-actions[bot] in #2788
• Add permissions support to shared workflows with validation (explicit declaration required) by @Copilot in #2781
• Add top-level agent field to engine configuration for copilot, claude, and codex by @Copilot in #2782
• Reverse template file sync direction: .github → pkg/cli/templates by @Copilot in #2787
• Add JSON formatting to linting workflow by @Copilot in #2786
• Move GitHub MCP toolsets-permissions mapping to embedded JSON with automatic validation by @Copilot in #2784
• Add zizmor security analyzer workflow for daily vulnerability scanning by @Copilot in #2792
• [WIP] Recompile and fix Agentic workflows permissions by @Copilot in #2789
• [WIP] Update permissions check for over-privileged permissions by @Copilot in #2796
• Update Claude Code CLI to 2.0.29 by @Copilot in #2802
• Prettify permissions validation error messages by @Copilot in #2798
• Fix test suite for GitHub MCP toolset permission validation by @Copilot in #2800
• Fix action pins, test frontmatter, and migrate tests from allowed to toolsets by @Copilot in #2805
• Remove permissions over-provisioning validation by @Copilot in #2809
• [tidy] Format code with make fmt by @github-actions[bot] in #2811
• Fix changeset automatic branch resolution failure by @Copilot in #2807
• Fix changeset generator workflow instructions for push_to_pull_request_branch tool by @Copilot in #2812
• Refactor action pins to embedded JSON with on-demand unmarshaling and sorted output by @Copilot in #2810
• [tidy] Format JSON schema file for consistency by @github-actions[bot] in #2816
• Rename engine "agent" field to "custom-agent" by @Copilot in #2814
• [log] Add debug logging to 5 Go files for better troubleshooting by @github-actions[bot] in #2820
• Add schema descriptions for runs-on and concurrency fields by @Copilot in #2819
• Add GitHub custom agent file format instructions by @Copilot in #2818
• Add gh-agent-task CLI extension instructions by @Copilot in #2828
• Consolidate JSON formatting to single prettier invocation per directory by @Copilot in #2823
• Add Ollama Llama Guard 3 threat scanning for safe outputs by @Copilot in #2813
• Refactor technical-doc-writer to use custom agent file with Copilot engine by @Copilot in #2825
• Fix failing tests after permissions validation changes by @Copilot in #2831
• Remove duplicate code for YAML conversion in workflow engines by @Copilot in #2830
• [WIP] Refactor duplicate MCP config loading logic by @Copilot in #2829
• Upgrade setup-node to v6 by @pelikhan in #2833
• 🔑 Add flag for using local secrets during workflow execution by @dsyme in #2841
• [test-coverage] Add comprehensive tests for MCP config and args utilities (+0.0% overall, 3 functions to 100%) by @github-actions[bot] in #2766
• [test-coverage] Add comprehensive tests for frontmatter extraction utilities (+0.1% coverage) by @github-actions[bot] in #2741

Full Changelog: v0.26.0...v0.27.0