## Release Notes Action Items for `awf` `0.27.9` → `0.27.12` This issue summarizes upstream release notes for the `awf` dependency between the previously pinned version (`0.27.9`) and the new pinned version (`0.27.12`), highlighting items that may need follow-up in ado-aw. The companion version-bump PR is titled `chore(deps): update AWF_VERSION to 0.27.12`. ### Releases analyzed - [v0.27.10](https://github.com/github/gh-aw-firewall/releases/tag/v0.27.10) - [v0.27.11](https://github.com/github/gh-aw-firewall/releases/tag/v0.27.11) - [v0.27.12](https://github.com/github/gh-aw-firewall/releases/tag/v0.27.12) ### Security fixes - **June 2026 security dependency refresh** ([v0.27.12](https://github.com/github/gh-aw-firewall/releases/tag/v0.27.12)): "Apply safe dependency updates for June 2026 security refresh" — routine security-motivated dependency upgrades in the AWF runtime. No consumer API changes, but upgrading is recommended to keep transitive dependencies current. ### Notable features for ado-aw to adopt - **Portable self-hosted runner doctor agent** ([v0.27.11](https://github.com/github/gh-aw-firewall/releases/tag/v0.27.11)): "Add portable self-hosted runner doctor agent" — new AWF-bundled diagnostic tool for self-hosted runner environments. ado-aw's troubleshooting documentation could reference this tool for consumers diagnosing runner setup issues (e.g., ARC/DinD path collisions, firewall startup failures). - **OIDC config propagation fix** ([v0.27.12](https://github.com/github/gh-aw-firewall/releases/tag/v0.27.12)): "fix: propagate apiProxy.auth OIDC config fields to all layers" — fixes a bug where OIDC auth configuration fields on `apiProxy.auth` were not propagated to all proxy layers. Relevant for consumers using OIDC-based API proxy auth in AWF; previously configured OIDC fields may have been silently ignored. - **Network-isolation topology deadlock fix** ([v0.27.11](https://github.com/github/gh-aw-firewall/releases/tag/v0.27.11)): "fix(network-isolation): break topology-attach ordering deadlock starving cli-proxy health gate" — fixes a startup ordering deadlock in the network isolation stack that could starve the CLI proxy health gate. Consumers seeing intermittent AWF startup failures may benefit from this fix. --- *This issue was opened automatically by the dependency version updater workflow.* > Generated by [Dependency Version Updater](https://github.com/githubnext/ado-aw/actions/runs/28320548433) · 603 AIC · ⌖ 32.5 AIC · ⊞ 39.7K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fado-aw+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fado-aw%2Fupdate-awf-version%22&type=issues) <!-- gh-aw-agentic-workflow: Dependency Version Updater, engine: copilot, version: 1.0.60, model: claude-sonnet-4.6, id: 28320548433, workflow_id: update-awf-version, run: https://github.com/githubnext/ado-aw/actions/runs/28320548433 --> <!-- gh-aw-workflow-id: update-awf-version --> <!-- gh-aw-workflow-call-id: githubnext/ado-aw/update-awf-version -->