Skip to content

Upgrade gh-aw to v0.79.6 and recompile workflows#1460

Merged
jonathanpeppers merged 1 commit into
mainfrom
jonathanpeppers/scope-pr-reviewer-secrets-to-environment
Jun 12, 2026
Merged

Upgrade gh-aw to v0.79.6 and recompile workflows#1460
jonathanpeppers merged 1 commit into
mainfrom
jonathanpeppers/scope-pr-reviewer-secrets-to-environment

Conversation

@jonathanpeppers

Copy link
Copy Markdown
Member

Bumps the gh-aw compiler from v0.68.3 to v0.79.6 and regenerates the lock files via gh aw upgrade. Source .md files are unchanged apart from minor frontmatter cleanup.

Notable supply-chain improvements in the regenerated output

  • Container images now pinned by digest in addition to tag (firewall agent, api-proxy, squid, mcpg, github-mcp-server).
  • Action SHAs refreshed:
    • actions/checkout v6.0.2 → v6.0.3
    • actions/github-script v9 → v9.0.0
    • github/gh-aw-actions/setup v0.68.3 → v0.79.6
    • (new) actions/setup-node v6.4.0 pin
  • Lock-file schema bumped v3 → v4 (adds body_hash to metadata).
  • linguist-generated=true merge=ours marker added in .gitattributes for *.lock.yml so GitHub diff views collapse them and merges prefer the regenerated copy.

Files changed

  • .gitattributes — linguist-generated marker for lock files
  • .github/agents/agentic-workflows.md — new dispatcher agent file installed by gh aw upgrade
  • .github/skills/agentic-workflows/SKILL.md — companion skill reference
  • .github/aw/actions-lock.json — refreshed action pin entries
  • .github/workflows/java-interop-reviewer.md — frontmatter cleanup (job environment: for protection rules)
  • .github/workflows/java-interop-reviewer.lock.yml — regenerated lock for the existing reviewer workflow

Verification

> gh aw version
gh aw version v0.79.6
> gh aw upgrade
ℹ Updating dispatcher skill...
ℹ Applying codemods to all workflows...
ℹ ✓ No fixes needed
ℹ Updating GitHub Actions versions...
ℹ Compiling all workflows...
✓ .github\workflows\java-interop-reviewer.md (104.3 KB)
✓ Upgrade complete

Bumps the gh-aw compiler from v0.68.3 to v0.79.6 and regenerates the lock file via 'gh aw upgrade'.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings June 12, 2026 19:23

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Upgrades the repository’s GitHub Agentic Workflows (gh-aw) toolchain to v0.79.6 and regenerates the compiled workflow lock output, primarily to refresh pinned action/container references and adopt the newer lock schema.

Changes:

  • Adds an environment: to the source workflow frontmatter and recompiles the corresponding .lock.yml with updated gh-aw runtime scaffolding.
  • Introduces new dispatcher documentation files for agentic-workflows (agent + skill) and adds an actions lock JSON for refreshed action pins.
  • Updates .gitattributes to mark lock files as generated and influence merge behavior.

Reviewed changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated 5 comments.

Show a summary per file
File Description
.gitattributes Marks workflow lock files as generated and sets a merge strategy for them.
.github/workflows/java-interop-reviewer.md Adds workflow environment to support environment protection rules in compiled jobs.
.github/workflows/java-interop-reviewer.lock.yml Regenerated compiled workflow output with updated pins, schema v4 metadata, and new gh-aw runtime steps/guardrails.
.github/aw/actions-lock.json Adds refreshed action SHA pin entries for gh-aw-managed actions.
.github/agents/agentic-workflows.md Adds a dispatcher agent doc for gh-aw workflow authoring/debugging/upgrades.
.github/skills/agentic-workflows/SKILL.md Adds a dispatcher skill to route gh-aw requests to the correct upstream prompt(s).

Comment thread .gitattributes
Comment thread .github/workflows/java-interop-reviewer.lock.yml
Comment thread .github/skills/agentic-workflows/SKILL.md
Comment thread .github/skills/agentic-workflows/SKILL.md
Comment thread .github/agents/agentic-workflows.md
@jonathanpeppers jonathanpeppers merged commit cfca8ad into main Jun 12, 2026
2 of 3 checks passed
@jonathanpeppers jonathanpeppers deleted the jonathanpeppers/scope-pr-reviewer-secrets-to-environment branch June 12, 2026 19:30
jonathanpeppers added a commit to dotnet/android that referenced this pull request Jun 12, 2026
Routine `gh aw upgrade` to refresh action SHAs, dispatcher skill files,
and pick up newer compiler defaults.

* Updates `github/gh-aw-actions/{setup,setup-cli}` from `v0.74.8` to
  `v0.79.6` (SHA-pinned).
* Refreshes `.github/aw/actions-lock.json`.
* Renames `.github/agents/agentic-workflows.agent.md` to
  `.github/agents/agentic-workflows.md` and adds the regenerated
  `.github/skills/agentic-workflows/SKILL.md` dispatcher skill.
* Recompiles `android-reviewer.lock.yml` and
  `nightly-fix-finder.lock.yml`.
* Frontmatter cleanup: adds `environment: copilot-pr-reviewer` to both
  `.md` sources so the agent jobs run under that GitHub Environment
  (matches the convention used in dotnet/java-interop#1460 and
  dotnet/android-tools#388). Hand-patched into the `detection` job in
  each `.lock.yml` to work around github/gh-aw#38900 (compiler does not
  propagate top-level `environment:` to the detection job in v0.79.6).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants