[deps-release-notes] awf v0.27.12 action items #1241

Release Notes Action Items for awf 0.27.9 → 0.27.12

This issue summarizes upstream release notes for the awf dependency between the previously pinned version (0.27.9) and the new pinned version (0.27.12), highlighting items that may need follow-up in ado-aw.

The companion version-bump PR is titled chore(deps): update AWF_VERSION to 0.27.12.

Releases analyzed

• v0.27.10
• v0.27.11
• v0.27.12

Security fixes

• June 2026 security dependency refresh (v0.27.12): "Apply safe dependency updates for June 2026 security refresh" — routine security-motivated dependency upgrades in the AWF runtime. No consumer API changes, but upgrading is recommended to keep transitive dependencies current.

Notable features for ado-aw to adopt

• Portable self-hosted runner doctor agent (v0.27.11): "Add portable self-hosted runner doctor agent" — new AWF-bundled diagnostic tool for self-hosted runner environments. ado-aw's troubleshooting documentation could reference this tool for consumers diagnosing runner setup issues (e.g., ARC/DinD path collisions, firewall startup failures).
• OIDC config propagation fix (v0.27.12): "fix: propagate apiProxy.auth OIDC config fields to all layers" — fixes a bug where OIDC auth configuration fields on apiProxy.auth were not propagated to all proxy layers. Relevant for consumers using OIDC-based API proxy auth in AWF; previously configured OIDC fields may have been silently ignored.
• Network-isolation topology deadlock fix (v0.27.11): "fix(network-isolation): break topology-attach ordering deadlock starving cli-proxy health gate" — fixes a startup ordering deadlock in the network isolation stack that could starve the CLI proxy health gate. Consumers seeing intermittent AWF startup failures may benefit from this fix.

This issue was opened automatically by the dependency version updater workflow.

Generated by Dependency Version Updater · 603 AIC · ⌖ 32.5 AIC · ⊞ 39.7K · ◷