Repository navigation
chore(ci): upgrade gh-aw pre-release - #9748
Conversation
Regenerate all agentic workflow locks with the latest pre-release tooling. Refresh the pinned gh-aw-node image digest across compiled workflows. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
There was a problem hiding this comment.
🟡 Changes recommended
The coverage reporter lock unintentionally changes its daily execution time.
1 open finding
What changed in this PR
Refreshes generated workflow locks while retaining gh-aw v0.91.6.
Changes:
- Updates the pinned
gh-aw-nodedigest across affected locks. - Refreshes generated manifests and download commands.
- Re-scatters one daily cron schedule.
| File | Description |
|---|---|
| test-hard-cap-ai-credits.lock.yml | Refreshes image pin |
| test-coverage-reporter.lock.yml | Refreshes pin and cron |
| test-coverage-improver.lock.yml | Refreshes image pin |
| smoke-services.lock.yml | Refreshes image pin |
| smoke-playwright-runc.lock.yml | Refreshes image pin |
| smoke-otel-tracing.lock.yml | Refreshes image pin |
| smoke-gemini.lock.yml | Refreshes image pin |
| smoke-enclave-cloud-hypervisor.lock.yml | Refreshes metadata hash |
| smoke-copilot.lock.yml | Refreshes image pin |
| smoke-copilot-network-isolation.lock.yml | Refreshes image pin |
| smoke-copilot-byok.lock.yml | Refreshes image pin |
| smoke-copilot-byok-aoai-entra.lock.yml | Refreshes image pin |
| smoke-copilot-byok-aoai-apikey.lock.yml | Refreshes image pin |
| smoke-cloud-hypervisor.lock.yml | Refreshes image pin |
| smoke-claude.lock.yml | Refreshes image pin |
| security-review.lock.yml | Refreshes image pin |
| secret-digger-claude.lock.yml | Refreshes image pin |
| refactoring-scanner.lock.yml | Refreshes image pin |
| network-isolation-test.lock.yml | Refreshes image pin |
| issue-duplication-detector.lock.yml | Refreshes image pin |
| export-audit.lock.yml | Refreshes image pin |
| duplicate-code-detector.lock.yml | Refreshes image pin |
| doc-maintainer.lock.yml | Refreshes image pin |
| copilot-token-optimizer.lock.yml | Refreshes image pin |
| contribution-check.lock.yml | Refreshes image pin |
| claude-token-optimizer.lock.yml | Refreshes image pin |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| - src/**/*.ts | ||
| schedule: | ||
| - cron: "25 18 * * *" # Friendly format: daily (scattered) | ||
| - cron: "25 4 * * *" # Friendly format: daily (scattered) |
✅ Coverage Check PassedOverall Coverage
📁 Per-file Coverage Changes (2 files)
Coverage comparison generated by |
|
@copilot fix this failing ci check https://github.com/github/gh-aw-firewall/actions/runs/37927876441/job/113811100851?pr=9748 |
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>
Added narrowly scoped Grype exceptions for the new Go 1.26.8 findings in the enclave Docker CLI, limited to |
|
✅ Copilot review passed with no inline comments. @lpcox Add the |
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Summary
gh aw upgrade --pre-releasesfrom the latestmainghcr.io/github/gh-aw-nodedigest across generated lock filesValidation
npm test— 441 suites passed, 7,804 tests passedgit diff --checkNotes
The latest available pre-release remains gh-aw v0.91.6, so this upgrade updates the mutable gh-aw-node image pin rather than the compiler version.