Skip to content

chore(ci): upgrade gh-aw pre-release - #9748

Merged
lpcox merged 3 commits into
mainfrom
lpcox-upgrade-gh-aw-prerelease-146
Oct 9, 2026
Merged

lpcox merged 3 commits into
mainfrom
lpcox-upgrade-gh-aw-prerelease-146

Conversation

@lpcox

@lpcox lpcox commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • ran gh aw upgrade --pre-releases from the latest main
  • recompiled all 64 agentic workflows with gh-aw v0.91.6
  • ran the required smoke/build workflow post-processing
  • refreshed the pinned ghcr.io/github/gh-aw-node digest across generated lock files

Validation

  • npm test — 441 suites passed, 7,804 tests passed
  • git diff --check

Notes

The latest available pre-release remains gh-aw v0.91.6, so this upgrade updates the mutable gh-aw-node image pin rather than the compiler version.

Regenerate all agentic workflow locks with the latest pre-release tooling.

Refresh the pinned gh-aw-node image digest across compiled workflows.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot AI balanced review requested due to automatic review settings October 9, 2026 12:06

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The coverage reporter lock unintentionally changes its daily execution time.

1 open finding
What changed in this PR

Refreshes generated workflow locks while retaining gh-aw v0.91.6.

Changes:

  • Updates the pinned gh-aw-node digest across affected locks.
  • Refreshes generated manifests and download commands.
  • Re-scatters one daily cron schedule.
File Description
test-hard-cap-ai-credits.lock.yml Refreshes image pin
test-coverage-reporter.lock.yml Refreshes pin and cron
test-coverage-improver.lock.yml Refreshes image pin
smoke-services.lock.yml Refreshes image pin
smoke-playwright-runc.lock.yml Refreshes image pin
smoke-otel-tracing.lock.yml Refreshes image pin
smoke-gemini.lock.yml Refreshes image pin
smoke-enclave-cloud-hypervisor.lock.yml Refreshes metadata hash
smoke-copilot.lock.yml Refreshes image pin
smoke-copilot-network-isolation.lock.yml Refreshes image pin
smoke-copilot-byok.lock.yml Refreshes image pin
smoke-copilot-byok-aoai-entra.lock.yml Refreshes image pin
smoke-copilot-byok-aoai-apikey.lock.yml Refreshes image pin
smoke-cloud-hypervisor.lock.yml Refreshes image pin
smoke-claude.lock.yml Refreshes image pin
security-review.lock.yml Refreshes image pin
secret-digger-claude.lock.yml Refreshes image pin
refactoring-scanner.lock.yml Refreshes image pin
network-isolation-test.lock.yml Refreshes image pin
issue-duplication-detector.lock.yml Refreshes image pin
export-audit.lock.yml Refreshes image pin
duplicate-code-detector.lock.yml Refreshes image pin
doc-maintainer.lock.yml Refreshes image pin
copilot-token-optimizer.lock.yml Refreshes image pin
contribution-check.lock.yml Refreshes image pin
claude-token-optimizer.lock.yml Refreshes image pin

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

- src/**/*.ts
schedule:
- cron: "25 18 * * *" # Friendly format: daily (scattered)
- cron: "25 4 * * *" # Friendly format: daily (scattered)
@github-actions

github-actions Bot commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

✅ Coverage Check Passed

Overall Coverage

Metric Base PR Delta
Lines 93.04% 93.04% ➡️ +0.00%
Statements 91.56% 91.56% ➡️ +0.00%
Functions 90.23% 90.23% ➡️ +0.00%
Branches 85.29% 85.29% ➡️ +0.00%
📁 Per-file Coverage Changes (2 files)
File Lines (Before → After) Statements (Before → After)
src/nvx/one-shot-adapter.ts 82.3% → 81.7% (-0.56%) 79.6% → 79.1% (-0.52%)
src/log-directory-setup.ts 96.8% → 100.0% (+3.18%) 96.9% → 100.0% (+3.13%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

@lpcox

lpcox commented Oct 9, 2026

Copy link
Copy Markdown
Collaborator Author

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot AI commented Oct 9, 2026

Copy link
Copy Markdown
Contributor

@copilot fix this failing ci check https://github.com/github/gh-aw-firewall/actions/runs/37927876441/job/113811100851?pr=9748

Added narrowly scoped Grype exceptions for the new Go 1.26.8 findings in the enclave Docker CLI, limited to /usr/bin/docker; config validation passed. Commit: 123f1a9.

@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown
Contributor

✅ Copilot review passed with no inline comments.

@lpcox Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@lpcox lpcox changed the title Upgrade workflows with latest gh-aw pre-release chore(workflows): upgrade gh-aw pre-release Oct 9, 2026
@lpcox lpcox changed the title chore(workflows): upgrade gh-aw pre-release chore(ci): upgrade gh-aw pre-release Oct 9, 2026
@lpcox
lpcox merged commit cd0aaeb into main Oct 9, 2026
32 of 34 checks passed
@lpcox
lpcox deleted the lpcox-upgrade-gh-aw-prerelease-146 branch October 9, 2026 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants