Bump gh-aw from v0.74.8 to v0.79.6#11645
Merged
Merged
Conversation
Routine `gh aw upgrade` to refresh action SHAs, dispatcher skill files,
and pick up newer compiler defaults.
* Updates `github/gh-aw-actions/{setup,setup-cli}` from `v0.74.8` to
`v0.79.6` (SHA-pinned).
* Refreshes `.github/aw/actions-lock.json`.
* Renames `.github/agents/agentic-workflows.agent.md` to
`.github/agents/agentic-workflows.md` and adds the regenerated
`.github/skills/agentic-workflows/SKILL.md` dispatcher skill.
* Recompiles `android-reviewer.lock.yml` and
`nightly-fix-finder.lock.yml`.
* Frontmatter cleanup: adds `environment: copilot-pr-reviewer` to both
`.md` sources so the agent jobs run under that GitHub Environment
(matches the convention used in dotnet/java-interop#1460 and
dotnet/android-tools#388). Hand-patched into the `detection` job in
each `.lock.yml` to work around github/gh-aw#38900 (compiler does not
propagate top-level `environment:` to the detection job in v0.79.6).
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
This PR upgrades the repository’s gh-aw integration from v0.74.8 → v0.79.6, refreshing pinned action SHAs and recompiling the generated *.lock.yml workflows. It also updates the agent/skill routing assets and adds environment: copilot-pr-reviewer so these agentic workflows can run under a dedicated GitHub Environment for secret scoping.
Changes:
- Bump
github/gh-aw-actions/setup+setup-clipins to v0.79.6 and refresh.github/aw/actions-lock.json. - Recompile
android-reviewer.lock.ymlandnightly-fix-finder.lock.ymlwith the newer compiler/runtime defaults (guardrails, token usage reporting, etc.). - Add/refresh the agentic-workflows dispatcher assets (
.github/agents/agentic-workflows.md,.github/skills/agentic-workflows/SKILL.md) and set workflowenvironment: copilot-pr-reviewerin the.mdsources.
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/nightly-fix-finder.md | Adds environment: copilot-pr-reviewer to the gh-aw source workflow. |
| .github/workflows/nightly-fix-finder.lock.yml | Recompiled lock workflow with v0.79.6 pins and updated runtime/guardrail steps. |
| .github/workflows/copilot-setup-steps.yml | Updates setup-cli action pin to v0.79.6 SHA. |
| .github/workflows/android-reviewer.md | Adds environment: copilot-pr-reviewer to the gh-aw source workflow. |
| .github/workflows/android-reviewer.lock.yml | Recompiled lock workflow with v0.79.6 pins and updated runtime/guardrail steps. |
| .github/skills/agentic-workflows/SKILL.md | Adds a dispatcher skill for routing gh-aw workflow tasks. |
| .github/aw/actions-lock.json | Refreshes action lock entries for gh-aw setup/setup-cli v0.79.6. |
| .github/agents/agentic-workflows.md | Updates agent frontmatter and routing references for gh-aw prompts/docs. |
Comments suppressed due to low confidence (1)
.github/agents/agentic-workflows.md:39
.github/aw/github-agentic-workflows.md(and the other.github/aw/*.mdreferences later in this agent file) do not exist in this repository —.github/aw/currently only containsactions-lock.json. As written, the agent will instruct users to load non-existent local files. Please either clarify that.github/aw/*.mdfiles should be loaded from the upstreamgithub/gh-awrepository (as the new dispatcher skill does), or vendor the referenced docs into this repo.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Routine
gh aw upgradeto refresh action SHAs, dispatcher skill files, and pick up newer compiler defaults.Changes
github/gh-aw-actions/setupandgithub/gh-aw-actions/setup-clifromv0.74.8tov0.79.6(SHA-pinned)..github/aw/actions-lock.json..github/agents/agentic-workflows.agent.mdto.github/agents/agentic-workflows.mdand adds the regenerated.github/skills/agentic-workflows/SKILL.mddispatcher skill.android-reviewer.lock.ymlandnightly-fix-finder.lock.yml.environment: copilot-pr-reviewerto both.mdsources so the agent jobs run under that GitHub Environment (matches the convention used in Upgrade gh-aw to v0.79.6 and recompile workflows java-interop#1460 and Upgrade gh-aw to v0.79.6 and recompile workflows android-tools#388). Hand-patched into thedetectionjob in each.lock.ymlto work around Top-levelenvironment:frontmatter is not propagated to thedetectionjob github/gh-aw#38900 (the v0.79.6 compiler doesn't propagate the top-levelenvironment:to thedetectionjob).Follow-up after merge
Create the
copilot-pr-reviewerEnvironment under repo Settings → Environments and move the existingCOPILOT_GITHUB_TOKEN,GH_AW_GITHUB_MCP_SERVER_TOKEN,GH_AW_GITHUB_TOKEN, andANDROID_TEAM_PATsecrets into it (with required reviewers / branch protection as appropriate).GITHUB_TOKENstays at the repo level.No CI behavior changes beyond the secret scoping.