[pull] main from github:main

.github/workflows/cgo.yml

@@ -1024,10 +1024,15 @@ jobs:
         run_fuzz_test() {
           local fuzz_name=$1
           local package=$2
+          local tags_arg=""
           local output_file="fuzz-results/${fuzz_name}.txt"
+
+          if [ "${fuzz_name}" = "FuzzSanitizeOutput" ] || [ "${fuzz_name}" = "FuzzSanitizeIncomingText" ]; then
+            tags_arg="-tags=integration"
+          fi
 
           echo "Running ${fuzz_name}..."
-          if go test -run='^$' -fuzz="^${fuzz_name}$" -fuzztime=10s "${package}" 2>&1 | tee "${output_file}"; then
+          if go test -run='^$' -fuzz="^${fuzz_name}$" -fuzztime=10s ${tags_arg:+"${tags_arg}"} "${package}" 2>&1 | tee "${output_file}"; then
             echo "✅ ${fuzz_name} completed successfully"
             return 0
           else
@@ -1718,6 +1723,7 @@ jobs:
           const failedJobs = Object.entries(needs)
             .filter(([, job]) => job.result === 'failure')
             .map(([name]) => name);
+          const hasFuzzFailure = failedJobs.some(name => name === 'fuzz' || name.startsWith('fuzz-'));
 
           if (failedJobs.length === 0) {
             core.info('No jobs failed. Nothing to do.');
@@ -1734,13 +1740,35 @@ jobs:
             state: 'open',
           });
 
-          if (existingIssues.data.length > 0) {
+          if (existingIssues.data.length > 0 && !hasFuzzFailure) {
             core.info(`Existing CGO failure issue #${existingIssues.data[0].number} is still open. Skipping.`);
             return;
           }
 
+          if (hasFuzzFailure) {
+            const existingFuzzIssues = await github.rest.issues.listForRepo({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              labels: 'cgo-fuzz-failure',
+              state: 'open',
+            });
+
+            const existingFuzzIssueForRun = existingFuzzIssues.data.find(issue =>
+              issue.title.includes(`Run #${context.runNumber}`),
+            );
+            if (existingFuzzIssueForRun) {
+              core.info(`Fuzz failure issue #${existingFuzzIssueForRun.number} already exists for run #${context.runNumber}. Skipping.`);
+              return;
+            }
+          }
+
           // Ensure required labels exist, creating them if missing
-          for (const [label, color] of [['cookie', 'e4e669'], ['cgo-failure', 'b60205']]) {
+          const requiredLabels = [['cookie', 'e4e669'], ['cgo-failure', 'b60205']];
+          if (hasFuzzFailure) {
+            requiredLabels.push(['cgo-fuzz-failure', 'd93f0b']);
+          }
+
+          for (const [label, color] of requiredLabels) {
             try {
               await github.rest.issues.getLabel({ owner: context.repo.owner, repo: context.repo.repo, name: label });
             } catch (e) {
@@ -1798,14 +1826,32 @@ jobs:
             ``,
             `> This issue expires at ${expiresAt}. Please investigate the failed jobs above and close once resolved.`,
             `> ${expirationLine}`,
-          ].join('\n');
+          ];
+
+          if (hasFuzzFailure) {
+            body.splice(
+              4,
+              0,
+              `Detected failure in the \`fuzz\` job matrix. A dedicated fuzz failure label was applied so this run is tracked.`,
+              ``,
+            );
+          }
+
+          const issueBody = body.join('\n');
+
+          const issueLabels = ['cookie', 'cgo-failure'];
+          if (hasFuzzFailure) {
+            issueLabels.push('cgo-fuzz-failure');
+          }
 
           const issue = await github.rest.issues.create({
             owner: context.repo.owner,
             repo: context.repo.repo,
-            title: `[CGO] Workflow failure on main - Run #${context.runNumber}`,
-            body,
-            labels: ['cookie', 'cgo-failure'],
+            title: hasFuzzFailure
+              ? `[CGO][FUZZ] Workflow failure on main - Run #${context.runNumber}`
+              : `[CGO] Workflow failure on main - Run #${context.runNumber}`,
+            body: issueBody,
+            labels: issueLabels,
           });
 
           core.info(`Created issue #${issue.data.number}: ${issue.data.html_url}`);

.github/workflows/copilot-pr-nlp-analysis.md

@@ -88,6 +88,12 @@ Generate a daily NLP-based analysis report of Copilot-created PRs merged within
 - **Python Environment**: NumPy, Pandas, Matplotlib, Seaborn, SciPy, NLTK, scikit-learn, TextBlob, WordCloud
 - **Output Directory**: `/tmp/gh-aw/python/charts/`
 
+### Runtime Constraint (Required)
+
+- Python analysis dependencies are already installed by pre-agent workflow steps.
+- **Do NOT run any `pip install` commands in agent turns.**
+- Run Python scripts with `/tmp/gh-aw/venv/bin/python3` to use the preinstalled environment.
+
 ## Task Overview
 
 ### Phase 1: Load and Parse PR Conversation Data