[gh-aw-upgrade] gh-aw upgrade available: v0.48.1 → v0.48.2 #345

A new version of gh-aw is available. We are currently on v0.48.1, latest is v0.48.2.

Upgrade Assessment

Urgency: Recommended

Relevant Changes

v0.48.2

Breaking Changes

• None identified for our current workflow frontmatter usage.

New Features Worth Adopting

• update-issue supports title-prefix: available for future workflows that use update-issue safe output.
• Auto-inject create-issue safe output: improves safety for new workflows that forget explicit non-builtin safe outputs.

Bug Fixes

• Activation/pre-activation output correctness: release notes call out fixes for invalid needs.pre_activation.outputs.* references and undefined matched_command output.
  • We currently have the exact mismatch in compiled workflows, e.g. .github/workflows/gh-aw-release-update.lock.yml#L403 references needs.pre_activation.outputs.matched_command, but .github/workflows/gh-aw-release-update.lock.yml#L1437-L1439 only defines activated in pre_activation.outputs.
  • This mismatch appears broadly across compiled lock workflows (40 gh-aw-*.lock.yml files with needs.pre_activation.outputs.matched_command references but no matched_command output declared in pre_activation.outputs).
• Safe-output schema validation improvements: better diagnostics for malformed safe-output config, useful for our many safe-outputs workflow definitions.

Security

• No explicit security patch requiring an immediate workflow config change was identified in v0.48.2 notes.

Upgrade Steps

• Update GH_AW_VERSION in Makefile from v0.48.1 to v0.48.2
• Run make compile to regenerate *.lock.yml with compiler fixes (especially pre-activation output wiring)
• Run make lint-workflows and verify 0 errors
• Spot-check representative lock workflows (e.g. gh-aw-release-update.lock.yml) to confirm pre_activation.outputs includes matched_command when referenced

Generated by Upgrade Check

• expires on Feb 28, 2026, 6:41 PM UTC