Skip to content

Bump gh-aw from v0.74.8 to v0.79.6#11645

Merged
jonathanpeppers merged 1 commit into
mainfrom
jonathanpeppers/audit-workflow-secrets
Jun 12, 2026
Merged

Bump gh-aw from v0.74.8 to v0.79.6#11645
jonathanpeppers merged 1 commit into
mainfrom
jonathanpeppers/audit-workflow-secrets

Conversation

@jonathanpeppers

Copy link
Copy Markdown
Member

Routine gh aw upgrade to refresh action SHAs, dispatcher skill files, and pick up newer compiler defaults.

Changes

Follow-up after merge

Create the copilot-pr-reviewer Environment under repo Settings → Environments and move the existing COPILOT_GITHUB_TOKEN, GH_AW_GITHUB_MCP_SERVER_TOKEN, GH_AW_GITHUB_TOKEN, and ANDROID_TEAM_PAT secrets into it (with required reviewers / branch protection as appropriate). GITHUB_TOKEN stays at the repo level.

No CI behavior changes beyond the secret scoping.

Routine `gh aw upgrade` to refresh action SHAs, dispatcher skill files,
and pick up newer compiler defaults.

* Updates `github/gh-aw-actions/{setup,setup-cli}` from `v0.74.8` to
  `v0.79.6` (SHA-pinned).
* Refreshes `.github/aw/actions-lock.json`.
* Renames `.github/agents/agentic-workflows.agent.md` to
  `.github/agents/agentic-workflows.md` and adds the regenerated
  `.github/skills/agentic-workflows/SKILL.md` dispatcher skill.
* Recompiles `android-reviewer.lock.yml` and
  `nightly-fix-finder.lock.yml`.
* Frontmatter cleanup: adds `environment: copilot-pr-reviewer` to both
  `.md` sources so the agent jobs run under that GitHub Environment
  (matches the convention used in dotnet/java-interop#1460 and
  dotnet/android-tools#388). Hand-patched into the `detection` job in
  each `.lock.yml` to work around github/gh-aw#38900 (compiler does not
  propagate top-level `environment:` to the detection job in v0.79.6).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings June 12, 2026 19:39
@jonathanpeppers jonathanpeppers temporarily deployed to copilot-pr-reviewer June 12, 2026 19:39 — with GitHub Actions Inactive
@jonathanpeppers jonathanpeppers temporarily deployed to copilot-pr-reviewer June 12, 2026 19:41 — with GitHub Actions Inactive

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades the repository’s gh-aw integration from v0.74.8 → v0.79.6, refreshing pinned action SHAs and recompiling the generated *.lock.yml workflows. It also updates the agent/skill routing assets and adds environment: copilot-pr-reviewer so these agentic workflows can run under a dedicated GitHub Environment for secret scoping.

Changes:

  • Bump github/gh-aw-actions/setup + setup-cli pins to v0.79.6 and refresh .github/aw/actions-lock.json.
  • Recompile android-reviewer.lock.yml and nightly-fix-finder.lock.yml with the newer compiler/runtime defaults (guardrails, token usage reporting, etc.).
  • Add/refresh the agentic-workflows dispatcher assets (.github/agents/agentic-workflows.md, .github/skills/agentic-workflows/SKILL.md) and set workflow environment: copilot-pr-reviewer in the .md sources.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
.github/workflows/nightly-fix-finder.md Adds environment: copilot-pr-reviewer to the gh-aw source workflow.
.github/workflows/nightly-fix-finder.lock.yml Recompiled lock workflow with v0.79.6 pins and updated runtime/guardrail steps.
.github/workflows/copilot-setup-steps.yml Updates setup-cli action pin to v0.79.6 SHA.
.github/workflows/android-reviewer.md Adds environment: copilot-pr-reviewer to the gh-aw source workflow.
.github/workflows/android-reviewer.lock.yml Recompiled lock workflow with v0.79.6 pins and updated runtime/guardrail steps.
.github/skills/agentic-workflows/SKILL.md Adds a dispatcher skill for routing gh-aw workflow tasks.
.github/aw/actions-lock.json Refreshes action lock entries for gh-aw setup/setup-cli v0.79.6.
.github/agents/agentic-workflows.md Updates agent frontmatter and routing references for gh-aw prompts/docs.
Comments suppressed due to low confidence (1)

.github/agents/agentic-workflows.md:39

  • .github/aw/github-agentic-workflows.md (and the other .github/aw/*.md references later in this agent file) do not exist in this repository — .github/aw/ currently only contains actions-lock.json. As written, the agent will instruct users to load non-existent local files. Please either clarify that .github/aw/*.md files should be loaded from the upstream github/gh-aw repository (as the new dispatcher skill does), or vendor the referenced docs into this repo.

Comment thread .github/skills/agentic-workflows/SKILL.md
Comment thread .github/skills/agentic-workflows/SKILL.md
@jonathanpeppers jonathanpeppers merged commit c665afe into main Jun 12, 2026
7 of 12 checks passed
@jonathanpeppers jonathanpeppers deleted the jonathanpeppers/audit-workflow-secrets branch June 12, 2026 19:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants