Summary
The release supports .mjs and .cjs modules inside aw.yml packages with path-traversal and extension restrictions. It also coordinates rate-limit handling for multi-target logs and makes failed-run and evaluation credit accounting fail closed.
Why it matters
Reusable package modules expand workflow composition while the restrictions and accounting fixes address execution and cost-control risks.
Related coverage
- GitHub Agentic Workflows adds package-aware updates and safer model accounting
- pnpm 11.27 adds explicit build approval and trust-policy cleanup
- Claude Code fixes long-session permission regressions in read-only Git commands