Fix runtime release and workflow regressions (#2501)

* Fix Node runtime package provenance

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

* Fix release package verification

Run Node package verification before artifact upload, validate source repository metadata at runtime, and honor explicit CLI paths for legacy .NET E2E connections.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

* Upgrade agentic workflows to gh-aw 0.88.2

Regenerate all workflow locks with the latest compiler, apply required explicit no-shell settings, and pin compiled-workflow verification to the same release.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

* Fix flaky shell and pending work E2E tests

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

* Fix flaky multi-client permission test

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

* Normalize aborted shell cleanup results

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

* Keep replay fix surgical

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

* Assert idle event after permission denial

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

---------

Copilot-Session: 3043824d-becf-4b5d-b62b-4754511894f7

Author: devm33

.gitattributes

@@ -1,4 +1,4 @@
-.github/workflows/*.lock.yml linguist-generated=true merge=ours
+.github/workflows/*.lock.yml linguist-generated=true
 
 # Cross-platform tools rewrite these files, so keep their output deterministic.
 java/**/*.java text eol=lf

.github/aw/actions-lock.json

@@ -20,15 +20,10 @@
       "version": "v7.0.1",
       "sha": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
     },
-    "github/gh-aw-actions/setup-cli@v0.83.1": {
-      "repo": "github/gh-aw-actions/setup-cli",
-      "version": "v0.83.1",
-      "sha": "8bdba8075360648fe6802302a5b4e016361dc6ac"
-    },
-    "github/gh-aw-actions/setup@v0.83.1": {
+    "github/gh-aw-actions/setup@v0.88.2": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.83.1",
-      "sha": "8bdba8075360648fe6802302a5b4e016361dc6ac"
+      "version": "v0.88.2",
+      "sha": "9271a1804551c0dc4fb0085a97979950aa2f8489"
     }
   }
 }

.github/skills/agentic-workflows/SKILL.md

@@ -15,13 +15,16 @@ Repository overlay (optional):
 
 Read only the files you need:
 Load these files from `github/gh-aw` (they are not available locally).
+- `.github/aw/action-container-substitutions.md`
+- `.github/aw/agent-runtime-instructions.md`
 - `.github/aw/agentic-chat.md`
 - `.github/aw/agentic-workflows-mcp.md`
 - `.github/aw/asciicharts.md`
 - `.github/aw/campaign.md`
 - `.github/aw/charts-trending.md`
 - `.github/aw/charts.md`
 - `.github/aw/cli-commands.md`
+- `.github/aw/compat.md`
 - `.github/aw/configure-agentic-engine.md`
 - `.github/aw/context.md`
 - `.github/aw/create-agentic-workflow-trigger-details.md`
@@ -30,15 +33,24 @@ Load these files from `github/gh-aw` (they are not available locally).
 - `.github/aw/debug-agentic-workflow.md`
 - `.github/aw/dependabot.md`
 - `.github/aw/deployment-status.md`
+- `.github/aw/designer-mappings.md`
 - `.github/aw/designer.md`
+- `.github/aw/drive-memory.md`
+- `.github/aw/enclaves.md`
 - `.github/aw/evals.md`
 - `.github/aw/experiments.md`
 - `.github/aw/github-agentic-workflows.md`
+- `.github/aw/github-mcp-server-pagination.md`
+- `.github/aw/github-mcp-server-tools.md`
 - `.github/aw/github-mcp-server.md`
 - `.github/aw/instructions.md`
+- `.github/aw/intent.md`
+- `.github/aw/jobs.md`
+- `.github/aw/linter-workflows.md`
 - `.github/aw/llms.md`
 - `.github/aw/loop.md`
 - `.github/aw/lsp.md`
+- `.github/aw/maintainer.md`
 - `.github/aw/mcp-clis.md`
 - `.github/aw/memory-stateful-patterns.md`
 - `.github/aw/memory.md`
@@ -47,7 +59,9 @@ Load these files from `github/gh-aw` (they are not available locally).
 - `.github/aw/network.md`
 - `.github/aw/optimize-agentic-workflow.md`
 - `.github/aw/patterns.md`
+- `.github/aw/playwright.md`
 - `.github/aw/pr-reviewer.md`
+- `.github/aw/release-workflow.md`
 - `.github/aw/report.md`
 - `.github/aw/reuse.md`
 - `.github/aw/safe-outputs-automation.md`
@@ -61,10 +75,13 @@ Load these files from `github/gh-aw` (they are not available locally).
 - `.github/aw/subagents.md`
 - `.github/aw/syntax-agentic.md`
 - `.github/aw/syntax-core.md`
+- `.github/aw/syntax-engine.md`
 - `.github/aw/syntax-tools-imports.md`
 - `.github/aw/syntax.md`
 - `.github/aw/test-coverage.md`
 - `.github/aw/test-expression.md`
+- `.github/aw/token-optimization-caching-budgets.md`
+- `.github/aw/token-optimization-observability.md`
 - `.github/aw/token-optimization.md`
 - `.github/aw/triggers.md`
 - `.github/aw/update-agentic-workflow.md`
@@ -90,5 +107,6 @@ After loading the matching workflow prompt or skill, follow it directly:
 - Choose workflow architecture and patterns: `.github/aw/patterns.md`
 - Optimize token usage and cost: `.github/aw/token-optimization.md`
 - Design long-running multi-agent research workflows: `.github/aw/multi-agent-research.md`
+- Add skills or agent plugins requested by the user (`skills:` / `plugins:` frontmatter, never on-the-fly installs): `.github/aw/skills.md`
 
 When the task involves OTEL, OTLP, traces, observability backends, or telemetry-driven analysis, also read and follow `skills/otel-queries/SKILL.md` after loading the matching workflow prompt or skill.