Merge branch 'main' into copilot/concurrency-fix-assign-to-agent

Author: github-actions[bot]

.github/workflows/pr-code-quality-reviewer.lock.yml

@@ -18,6 +18,7 @@ on:
     events: [pull_request_comment, pull_request_review_comment]
 engine:
   id: pi
+model: copilot/gpt-5.4
 permissions:
   contents: read
   issues: read

.github/workflows/pr-code-quality-reviewer.md

@@ -46,6 +46,8 @@ Use `duplicate` only when the match is strong and include the issue number in th
 
 `add-labels` and `add-comment` matter for security because the agent does not receive direct write access to issues. gh-aw validates label names and comment output before posting, which reduces the risk of prompt injection turning repository analysis into unrestricted writes.
 
+Every label listed under `allowed` must already exist in the target repository. `bug`, `feature`, and `question` ship as GitHub defaults, but labels such as `needs-info`, `priority/p0`, `priority/p1`, and `priority/p2` do not, and applying a missing label fails at runtime. Create them before the first run with `gh label create needs-info` (repeat per label) or from the repository's Settings > Labels page.
+
 ## Related pages
 
 - [Run Claude Code in GitHub Actions with gh-aw](/gh-aw/engines/claude/)