Update changeset generator to use codex gpt-5-mini

[Copilot]

Switch the changeset generator workflow from copilot to codex engine with gpt-5-mini model.

Changes

• Changed engine from copilot to codex with model: gpt-5-mini
• Added strict: false — codex doesn't support network firewall
• Removed firewall: true from network config

engine:
  id: codex
  model: gpt-5-mini
strict: false  # Required: codex engine doesn't support network firewall

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com//advisories
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (http block)
• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Update changeset generator to use codex gpt-5-mini

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

---

Changeset

• Type: patch
• Description: Updated the changeset generator workflow to use the codex engine with the gpt-5-mini model. Added strict: false and removed the firewall: true network setting to accommodate the codex engine's network behavior.

Note: I attempted to run make agent-finish before committing as required by repository guidelines, but the command failed due to network restrictions in this environment (could not download Go modules). The changeset file was still added and pushed.

AI generated by Changeset Generator

---

---

Smoke Test Summary

Test Run: 2025-11-29T16:28:12Z
Status: PASS
Summary: All smoke tests passed - GitHub MCP, file writing, bash tools, and Playwright validated

AI generated by Smoke Copilot No Firewall

[github-actions]

🔮 The ancient spirits stir... Smoke Codex awakens to divine this pull request...

[github-actions]

💥 WHOOSH! Smoke Claude springs into action on this pull request! [Panel 1 begins...]

[github-actions]

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

[github-actions]

🤖 SYSTEM_INIT: Smoke Copilot No Firewall ACTIVATED. PROCESSING pull request. ALL SUBSYSTEMS ONLINE.

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

Smoke Test Summary

Test Run: 2025-11-29T16:22:26Z
Status: FAIL

Results

• ✅ GitHub MCP: PR Update workflow compiler to generate secure template expansion patterns #5084 "Update workflow compiler to generate secure template expansion patterns", PR docs: Add sub-issues section to IssueOps page #5087 "docs: Add sub-issues section to IssueOps page"
• ❌ File Writing: File created but $(date) not evaluated (literal string written)
• ✅ Bash Tool: File read successful
• ✅ Playwright MCP: GitHub page loaded, title confirmed

💥 [THE END] — Illustrated by Smoke Claude fer issue #5088 🗺️

[github-actions]

Smoke Test Results (2025-11-29 16:28:12)

Last 2 Merged PRs:

• docs: Add sub-issues section to IssueOps page #5087: docs: Add sub-issues section to IssueOps page
• Update workflow compiler to generate secure template expansion patterns #5084: Update workflow compiler to generate secure template expansion patterns

Test Results:

• ✅ GitHub MCP: Retrieved PR titles
• ✅ File Writing: Created test file successfully
• ✅ Bash Tool: Verified file creation
• ✅ Playwright MCP: Confirmed title contains "GitHub"

Overall Status: PASS

🤖 DIAGNOSTIC REPORT GENERATED BY Smoke Copilot No Firewall fer issue #5088 🗺️

[github-actions]

Update workflow compiler to generate secure template expansion patterns
docs: Add sub-issues section to IssueOps page
✅ GitHub MCP last-2 PR titles
✅ File write /tmp/smoke-test-codex-19786394171.txt
✅ Bash cat verification
✅ Playwright github.com title contains "GitHub"
Overall: PASS

🔮 The oracle has spoken through Smoke Codex fer issue #5088 🗺️