Skip to content

Commit caaef91

Browse files
lpcoxCopilot
lpcox
and
Copilot
authored
chore: upgrade all workflows to gh-aw v0.68.7 (#2050)
* chore: upgrade all workflows to gh-aw v0.68.7 - Update gh-aw setup actions to v0.68.7 - Update actions/github-script to v9.0.0 - Update softprops/action-gh-release to v3.0.0 - Pin 17 container images with digest hashes - Run post-processing on all lock files Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: bump Copilot CLI to v1.0.31 in smoke-copilot-byok The gh-aw compiler pins v1.0.21 but the latest release is v1.0.31. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
1 parent a473de1 commit caaef91

31 files changed

+2237
-1452
lines changed

‎.github/agents/agentic-workflows.agent.md‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ Workflows may optionally include:
3030
- Workflow files: `.github/workflows/*.md` and `.github/workflows/**/*.md`
3131
- Workflow lock files: `.github/workflows/*.lock.yml`
3232
- Shared components: `.github/workflows/shared/*.md`
33-
- Configuration: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/github-agentic-workflows.md
33+
- Configuration: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/github-agentic-workflows.md
3434

3535
## Problems This Solves
3636

@@ -52,7 +52,7 @@ When you interact with this agent, it will:
5252
### Create New Workflow
5353
**Load when**: User wants to create a new workflow from scratch, add automation, or design a workflow that doesn't exist yet
5454

55-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/create-agentic-workflow.md
55+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/create-agentic-workflow.md
5656

5757
**Use cases**:
5858
- "Create a workflow that triages issues"
@@ -62,7 +62,7 @@ When you interact with this agent, it will:
6262
### Update Existing Workflow
6363
**Load when**: User wants to modify, improve, or refactor an existing workflow
6464

65-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/update-agentic-workflow.md
65+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/update-agentic-workflow.md
6666

6767
**Use cases**:
6868
- "Add web-fetch tool to the issue-classifier workflow"
@@ -72,7 +72,7 @@ When you interact with this agent, it will:
7272
### Debug Workflow
7373
**Load when**: User needs to investigate, audit, debug, or understand a workflow, troubleshoot issues, analyze logs, or fix errors
7474

75-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/debug-agentic-workflow.md
75+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/debug-agentic-workflow.md
7676

7777
**Use cases**:
7878
- "Why is this workflow failing?"
@@ -82,7 +82,7 @@ When you interact with this agent, it will:
8282
### Upgrade Agentic Workflows
8383
**Load when**: User wants to upgrade workflows to a new gh-aw version or fix deprecations
8484

85-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/upgrade-agentic-workflows.md
85+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/upgrade-agentic-workflows.md
8686

8787
**Use cases**:
8888
- "Upgrade all workflows to the latest version"
@@ -92,7 +92,7 @@ When you interact with this agent, it will:
9292
### Create a Report-Generating Workflow
9393
**Load when**: The workflow being created or updated produces reports — recurring status updates, audit summaries, analyses, or any structured output posted as a GitHub issue, discussion, or comment
9494

95-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/report.md
95+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/report.md
9696

9797
**Use cases**:
9898
- "Create a weekly CI health report"
@@ -102,7 +102,7 @@ When you interact with this agent, it will:
102102
### Create Shared Agentic Workflow
103103
**Load when**: User wants to create a reusable workflow component or wrap an MCP server
104104

105-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/create-shared-agentic-workflow.md
105+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/create-shared-agentic-workflow.md
106106

107107
**Use cases**:
108108
- "Create a shared component for Notion integration"
@@ -112,7 +112,7 @@ When you interact with this agent, it will:
112112
### Fix Dependabot PRs
113113
**Load when**: User needs to close or fix open Dependabot PRs that update dependencies in generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`)
114114

115-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/dependabot.md
115+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/dependabot.md
116116

117117
**Use cases**:
118118
- "Fix the open Dependabot PRs for npm dependencies"
@@ -122,7 +122,7 @@ When you interact with this agent, it will:
122122
### Analyze Test Coverage
123123
**Load when**: The workflow reads, analyzes, or reports test coverage — whether triggered by a PR, a schedule, or a slash command. Always consult this prompt before designing the coverage data strategy.
124124

125-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/test-coverage.md
125+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/test-coverage.md
126126

127127
**Use cases**:
128128
- "Create a workflow that comments coverage on PRs"
@@ -169,10 +169,10 @@ gh aw compile --validate
169169

170170
## Important Notes
171171

172-
- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/github-agentic-workflows.md for complete documentation
172+
- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/github-agentic-workflows.md for complete documentation
173173
- Use the MCP tool `agentic-workflows` when running in GitHub Copilot Cloud
174174
- Workflows must be compiled to `.lock.yml` files before running in GitHub Actions
175175
- **Bash tools are enabled by default** - Don't restrict bash commands unnecessarily since workflows are sandboxed by the AWF
176176
- Follow security best practices: minimal permissions, explicit network access, no template injection
177-
- **Network configuration**: Use ecosystem identifiers (`node`, `python`, `go`, etc.) or explicit FQDNs in `network.allowed`. Bare shorthands like `npm` or `pypi` are **not** valid. See https://github.com/github/gh-aw/blob/v0.68.1/.github/aw/network.md for the full list of valid ecosystem identifiers and domain patterns.
177+
- **Network configuration**: Use ecosystem identifiers (`node`, `python`, `go`, etc.) or explicit FQDNs in `network.allowed`. Bare shorthands like `npm` or `pypi` are **not** valid. See https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/network.md for the full list of valid ecosystem identifiers and domain patterns.
178178
- **Single-file output**: When creating a workflow, produce exactly **one** workflow `.md` file. Do not create separate documentation files (architecture docs, runbooks, usage guides, etc.). If documentation is needed, add a brief `## Usage` section inside the workflow file itself.

‎.github/aw/actions-lock.json‎

Lines changed: 97 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -10,15 +10,10 @@
1010
"version": "v8",
1111
"sha": "ed597411d8f924073f98dfc5c65a23a2325f34cd"
1212
},
13-
"actions/github-script@v9": {
14-
"repo": "actions/github-script",
15-
"version": "v9",
16-
"sha": "373c709c69115d41ff229c7e5df9f8788daa9553"
17-
},
1813
"actions/github-script@v9.0.0": {
1914
"repo": "actions/github-script",
2015
"version": "v9.0.0",
21-
"sha": "d746ffe35508b1917358783b479e04febd2b8f71"
16+
"sha": "3a2844b7e9c422d3c10d287c895573f7108da1b3"
2217
},
2318
"actions/setup-node@v6.3.0": {
2419
"repo": "actions/setup-node",
@@ -45,20 +40,107 @@
4540
"version": "v4.0.0",
4641
"sha": "4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd"
4742
},
48-
"github/gh-aw-actions/setup@v0.68.4": {
43+
"github/gh-aw-actions/setup@v0.68.7": {
4944
"repo": "github/gh-aw-actions/setup",
50-
"version": "v0.68.4",
51-
"sha": "57583dfa129051b855aa5d750d36fbeb8a885579"
45+
"version": "v0.68.7",
46+
"sha": "f52802884d655622f0a2dfd6d6a2250983c95523"
5247
},
53-
"github/gh-aw/actions/setup@v0.68.1": {
48+
"github/gh-aw/actions/setup@v0.68.7": {
5449
"repo": "github/gh-aw/actions/setup",
55-
"version": "v0.68.1",
56-
"sha": "5a06d310cf45161bde77d070065a1e1489fc411c"
50+
"version": "v0.68.7",
51+
"sha": "f916d5de5199f770e46151d455ab1f0288981cc9"
5752
},
58-
"softprops/action-gh-release@v2.6.1": {
53+
"softprops/action-gh-release@v3.0.0": {
5954
"repo": "softprops/action-gh-release",
60-
"version": "v2.6.1",
61-
"sha": "153bb8e04406b158c6c84fc1615b65b24149a1fe"
55+
"version": "v3.0.0",
56+
"sha": "b4309332981a82ec1c5618f44dd2e27cc8bfbfda"
57+
}
58+
},
59+
"containers": {
60+
"alpine:latest": {
61+
"image": "alpine:latest",
62+
"digest": "sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11",
63+
"pinned_image": "alpine:latest@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11"
64+
},
65+
"ghcr.io/github/gh-aw-firewall/agent:0.25.18": {
66+
"image": "ghcr.io/github/gh-aw-firewall/agent:0.25.18",
67+
"digest": "sha256:c77e8c26bab6c39e8568d8e2f8c17015944849a8cbcdfb4bd9725d8893725ca2",
68+
"pinned_image": "ghcr.io/github/gh-aw-firewall/agent:0.25.18@sha256:c77e8c26bab6c39e8568d8e2f8c17015944849a8cbcdfb4bd9725d8893725ca2"
69+
},
70+
"ghcr.io/github/gh-aw-firewall/agent:0.25.20": {
71+
"image": "ghcr.io/github/gh-aw-firewall/agent:0.25.20",
72+
"digest": "sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682",
73+
"pinned_image": "ghcr.io/github/gh-aw-firewall/agent:0.25.20@sha256:9161f2415a3306a344aca34dd671ee69f122317e0a512e66dc64c94b9c508682"
74+
},
75+
"ghcr.io/github/gh-aw-firewall/agent:0.25.21": {
76+
"image": "ghcr.io/github/gh-aw-firewall/agent:0.25.21",
77+
"digest": "sha256:3ed25df81d5dffd754c794d156e4091fd314ca6c438a14fb6df9ea67c80a349f",
78+
"pinned_image": "ghcr.io/github/gh-aw-firewall/agent:0.25.21@sha256:3ed25df81d5dffd754c794d156e4091fd314ca6c438a14fb6df9ea67c80a349f"
79+
},
80+
"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.18": {
81+
"image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.25.18",
82+
"digest": "sha256:d16a40a3ca6e989896d0cef9f31b9412bb1fcc8755bafcafb95012ae1078539b",
83+
"pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.25.18@sha256:d16a40a3ca6e989896d0cef9f31b9412bb1fcc8755bafcafb95012ae1078539b"
84+
},
85+
"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20": {
86+
"image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20",
87+
"digest": "sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519",
88+
"pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.25.20@sha256:6971639e381e82e45134bcd333181f456df3a52cd6f818a3e3d6de068ff91519"
89+
},
90+
"ghcr.io/github/gh-aw-firewall/api-proxy:0.25.21": {
91+
"image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.25.21",
92+
"digest": "sha256:537a179ce94a18c7e7a3415ac11a25b91e8182cfd5c81a9d2ff9cd2d11f8f39a",
93+
"pinned_image": "ghcr.io/github/gh-aw-firewall/api-proxy:0.25.21@sha256:537a179ce94a18c7e7a3415ac11a25b91e8182cfd5c81a9d2ff9cd2d11f8f39a"
94+
},
95+
"ghcr.io/github/gh-aw-firewall/cli-proxy:0.25.18": {
96+
"image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.25.18",
97+
"digest": "sha256:de03b36f973671bf9a317d1d7af7a7b90bf1c6b267410d6233a1f66e4fb67e70",
98+
"pinned_image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.25.18@sha256:de03b36f973671bf9a317d1d7af7a7b90bf1c6b267410d6233a1f66e4fb67e70"
99+
},
100+
"ghcr.io/github/gh-aw-firewall/cli-proxy:0.25.20": {
101+
"image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.25.20",
102+
"digest": "sha256:ba368badce544dbde51a97325aa8473d0640684d7e22cc905f6c6b58b91863d6",
103+
"pinned_image": "ghcr.io/github/gh-aw-firewall/cli-proxy:0.25.20@sha256:ba368badce544dbde51a97325aa8473d0640684d7e22cc905f6c6b58b91863d6"
104+
},
105+
"ghcr.io/github/gh-aw-firewall/squid:0.25.18": {
106+
"image": "ghcr.io/github/gh-aw-firewall/squid:0.25.18",
107+
"digest": "sha256:eb102afcfbae26ffcec016adebb74d3be7b0a5bf376ba306599cdf3effbe288e",
108+
"pinned_image": "ghcr.io/github/gh-aw-firewall/squid:0.25.18@sha256:eb102afcfbae26ffcec016adebb74d3be7b0a5bf376ba306599cdf3effbe288e"
109+
},
110+
"ghcr.io/github/gh-aw-firewall/squid:0.25.20": {
111+
"image": "ghcr.io/github/gh-aw-firewall/squid:0.25.20",
112+
"digest": "sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236",
113+
"pinned_image": "ghcr.io/github/gh-aw-firewall/squid:0.25.20@sha256:5411d903f73ee597e6a084971c2adef3eb0bd405910df3ed7bf5e3d6bd58a236"
114+
},
115+
"ghcr.io/github/gh-aw-firewall/squid:0.25.21": {
116+
"image": "ghcr.io/github/gh-aw-firewall/squid:0.25.21",
117+
"digest": "sha256:477156aeb003c45873eedc92a820a460954ef316af245ebc8b5249dd1d90d465",
118+
"pinned_image": "ghcr.io/github/gh-aw-firewall/squid:0.25.21@sha256:477156aeb003c45873eedc92a820a460954ef316af245ebc8b5249dd1d90d465"
119+
},
120+
"ghcr.io/github/gh-aw-mcpg:v0.2.17": {
121+
"image": "ghcr.io/github/gh-aw-mcpg:v0.2.17",
122+
"digest": "sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8",
123+
"pinned_image": "ghcr.io/github/gh-aw-mcpg:v0.2.17@sha256:a6dec6ec535a11c565d982afa2f98589805ed0598862b9ea9d3c751fc71afae8"
124+
},
125+
"ghcr.io/github/gh-aw-mcpg:v0.2.19": {
126+
"image": "ghcr.io/github/gh-aw-mcpg:v0.2.19",
127+
"digest": "sha256:44d4d8de7e6c37aaea484eba489940c52df6a0b54078ddcbc9327592d5b3c3dd",
128+
"pinned_image": "ghcr.io/github/gh-aw-mcpg:v0.2.19@sha256:44d4d8de7e6c37aaea484eba489940c52df6a0b54078ddcbc9327592d5b3c3dd"
129+
},
130+
"ghcr.io/github/github-mcp-server:v0.32.0": {
131+
"image": "ghcr.io/github/github-mcp-server:v0.32.0",
132+
"digest": "sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28",
133+
"pinned_image": "ghcr.io/github/github-mcp-server:v0.32.0@sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28"
134+
},
135+
"mcr.microsoft.com/playwright/mcp": {
136+
"image": "mcr.microsoft.com/playwright/mcp",
137+
"digest": "sha256:7b82f29c6ef83480a97f612d53ac3fd5f30a32df3fea1e06923d4204d3532bb2",
138+
"pinned_image": "mcr.microsoft.com/playwright/mcp@sha256:7b82f29c6ef83480a97f612d53ac3fd5f30a32df3fea1e06923d4204d3532bb2"
139+
},
140+
"node:lts-alpine": {
141+
"image": "node:lts-alpine",
142+
"digest": "sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f",
143+
"pinned_image": "node:lts-alpine@sha256:d1b3b4da11eefd5941e7f0b9cf17783fc99d9c6fc34884a665f40a06dbdfc94f"
62144
}
63145
}
64146
}

0 commit comments

Comments
 (0)