Release new gh-aw CLI version with firewall v0.25.29 (healthcheck fix)

[haavamoa]

Problem

The awf-api-proxy container healthcheck is flaky, causing agentic workflow failures at a high rate. We've analyzed 164 workflow runs in our repository over the period April 23 – May 4, 2026:

Firewall version	Runs	Failures	Failure rate
v0.25.20 (CLI v0.68.3)	33	27	82%
v0.25.28 (CLI v0.71.1)	131	29	22%

All failures occur in the "Execute GitHub Copilot CLI" step — the api-proxy container fails its healthcheck before the CLI can connect.

Root cause

The healthcheck start_period is too short (2s), causing the container to be marked unhealthy before it's ready. This was identified and fixed in:

• Issue: #2154
• PR: #2155 (firewall v0.25.29)

However, no released CLI version includes firewall v0.25.29. The latest CLI (v0.71.1) still pins firewall v0.25.28.

Request

Release a new gh-aw CLI version that includes firewall v0.25.29 so the healthcheck fix is available to consumers.

Workaround

We've implemented an automatic rerun workflow that retries failed agentic runs (max 2 attempts), which reduces the effective failure rate to near-zero — but it wastes CI minutes and adds latency.

[pelikhan]

@haavamoa please try the prerelease 0.71.4
@lpcox can we cook a new release?

[haavamoa]

@haavamoa please try the prerelease 0.71.4 @lpcox can we cook a new release?

Thanks, I am not familiar with how I can use pre-releases of gh-aw. Can you link me a how-to on that?

[arthurfvives]

@haavamoa please try the prerelease 0.71.4 @lpcox can we cook a new release?

Thanks, I am not familiar with how I can use pre-releases of gh-aw. Can you link me a how-to on that?

My method:

gh extension remove gh-aw
gh extension install github/gh-aw --pin v0.71.4

[haavamoa]

Thanks. We now are running prerelease for 1 day, no errors so far! 👌