[deps-release-notes] awf v0.25.56 action items

[github-actions]

Release Notes Action Items for awf 0.25.48 → 0.25.56

This issue summarizes upstream release notes for the awf dependency between the previously pinned version (0.25.48) and the new pinned version (0.25.56), highlighting items that may need follow-up in ado-aw.

The companion version-bump PR is titled chore(deps): update AWF_VERSION to 0.25.56.

Releases analyzed

• v0.25.49
• v0.25.50
• v0.25.51
• v0.25.52
• v0.25.53
• v0.25.54
• v0.25.55
• v0.25.56

Security fixes

• Hardened Copilot proxy auth normalization — v0.25.49: Fixed to avoid malformed Authorization headers. AWF Copilot proxy now normalizes Authorization headers more robustly.
• Prevent stream_options injection in API proxy — v0.25.56: Fixed stream_options handling to prevent injection attacks.

Notable features for ado-aw to adopt

• Auto-detect DinD split filesystem via sentinel probe — v0.25.51: AWF can now automatically detect Docker-in-Docker split filesystems, reducing the need for --docker-host-path-prefix. If ado-aw generates AWF invocations for DinD environments, this may simplify those code paths.
• Filter unresolvable model aliases from /reflect and models.json — v0.25.56: Improved model reflection API stability by filtering out aliases that cannot be resolved.

---

This issue was opened automatically by the dependency version updater workflow.

Generated by Dependency Version Updater · ● 1.7M · ◷