chore: upgrade gh-aw to v0.82.2 pre-release and recompile workflows by lpcox · Pull Request #5946 · github/gh-aw-firewall

lpcox · 2026-07-06T12:55:00Z

Summary

Upgrades the gh-aw extension to the latest pre-release (v0.82.2) and recompiles all agentic workflows.

Changes

Ran gh aw upgrade --pre-releases to update the extension and apply codemods
Ran gh aw compile to regenerate all 47 lock files
Ran post-processing (npx ts-node scripts/ci/postprocess-smoke-workflows.ts) to patch smoke/build-test workflows for local builds
Updated .github/skills/agentic-workflows/SKILL.md with new reference file

Verification

All 3491 tests pass (npm test)
Lint passes (0 errors, warnings only)
TypeScript build succeeds

Ran `gh aw upgrade --pre-releases` and `gh aw compile` followed by post-processing via `npx ts-node scripts/ci/postprocess-smoke-workflows.ts`. All 3491 tests pass. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot

Pull request overview

Upgrades the repository’s pinned gh-aw pre-release version and regenerates the compiled agentic workflow lock files (.lock.yml) so workflows run with the updated gh-aw compiler output and related codemods.

Changes:

Bumped gh-aw to v0.82.2 pre-release and recompiled workflow lock files.
Updated multiple lock workflows to newer gh-aw-emitted steps/flags (checkout sparse-checkout blocks, AWF install step shape, AWF invocation flags, cache-memory caching layout).
Updated .github/skills/agentic-workflows/SKILL.md to reference an additional upstream doc file.

Show a summary per file

File	Description
.github/workflows/update-release-notes.lock.yml	Regenerated workflow lock file for the update-release-notes agentic workflow.
.github/workflows/test-hard-cap-ai-credits.lock.yml	Regenerated workflow lock file for AI credits hard-cap validation workflow.
.github/workflows/test-coverage-reporter.lock.yml	Regenerated workflow lock file for coverage reporter workflow.
.github/workflows/test-coverage-improver.lock.yml	Regenerated workflow lock file for coverage improver workflow.
.github/workflows/smoke-services.lock.yml	Regenerated smoke workflow lock for services-based smoke test.
.github/workflows/smoke-otel-tracing.lock.yml	Regenerated smoke workflow lock for OTEL tracing diagnostics.
.github/workflows/smoke-gemini.lock.yml	Regenerated smoke workflow lock for Gemini runner.
.github/workflows/smoke-copilot.lock.yml	Regenerated smoke workflow lock for Copilot runner.
.github/workflows/smoke-copilot-pat.lock.yml	Regenerated smoke workflow lock for Copilot PAT variant.
.github/workflows/smoke-copilot-byok.lock.yml	Regenerated smoke workflow lock for Copilot BYOK variant.
.github/workflows/smoke-copilot-byok-aoai-entra.lock.yml	Regenerated smoke workflow lock for Copilot BYOK + AOAI Entra variant.
.github/workflows/smoke-copilot-byok-aoai-apikey.lock.yml	Regenerated smoke workflow lock for Copilot BYOK + AOAI API key variant.
.github/workflows/smoke-claude.lock.yml	Regenerated smoke workflow lock for Claude runner.
.github/workflows/smoke-chroot.lock.yml	Regenerated smoke workflow lock for chroot behavior validation.
.github/workflows/self-hosted-runner-doctor.lock.yml	Regenerated workflow lock for self-hosted runner diagnostics.
.github/workflows/self-hosted-runner-doctor-updater.lock.yml	Regenerated workflow lock for updating the runner-doctor docs/catalog.
.github/workflows/security-review.lock.yml	Regenerated workflow lock for security review agentic workflow.
.github/workflows/security-guard.lock.yml	Regenerated workflow lock for security guard enforcement workflow.
.github/workflows/refactoring-scanner.lock.yml	Regenerated workflow lock for refactoring scanner workflow.
.github/workflows/red-team-benchmark.lock.yml	Regenerated workflow lock for red-team benchmark workflow.
.github/workflows/plan.lock.yml	Regenerated workflow lock for planning workflow.
.github/workflows/pelis-agent-factory-advisor.lock.yml	Regenerated workflow lock for PELIS agent-factory advisor workflow.
.github/workflows/model-api-mapping-updater.lock.yml	Regenerated workflow lock for model API mapping updater workflow.
.github/workflows/issue-monster.lock.yml	Regenerated workflow lock for issue-monster workflow.
.github/workflows/issue-duplication-detector.lock.yml	Regenerated workflow lock for issue duplication detection workflow.
.github/workflows/firewall-issue-dispatcher.lock.yml	Regenerated workflow lock for firewall issue dispatch workflow.
.github/workflows/export-audit.lock.yml	Regenerated workflow lock for exporting audit artifacts/workflow output.
.github/workflows/duplicate-code-detector.lock.yml	Regenerated workflow lock for duplicate code detection workflow.
.github/workflows/doc-maintainer.lock.yml	Regenerated workflow lock for documentation maintenance workflow.
.github/workflows/dependency-security-monitor.lock.yml	Regenerated workflow lock for dependency security monitoring workflow.
.github/workflows/copilot-token-usage-analyzer.lock.yml	Regenerated workflow lock for Copilot token usage analysis workflow.
.github/workflows/copilot-token-optimizer.lock.yml	Regenerated workflow lock for Copilot token optimization workflow.
.github/workflows/claude-token-usage-analyzer.lock.yml	Regenerated workflow lock for Claude token usage analysis workflow.
.github/workflows/claude-token-optimizer.lock.yml	Regenerated workflow lock for Claude token optimization workflow.
.github/workflows/cli-flag-consistency-checker.lock.yml	Regenerated workflow lock for CLI flag consistency checks.
.github/workflows/config-consistency-auditor.lock.yml	Regenerated workflow lock for config consistency auditing workflow.
.github/workflows/contribution-check.lock.yml	Regenerated workflow lock for contribution checking workflow.
.github/workflows/ci-doctor.lock.yml	Regenerated workflow lock for CI doctor workflow.
.github/workflows/ci-cd-gaps-assessment.lock.yml	Regenerated workflow lock for CI/CD gaps assessment workflow.
.github/workflows/build-test.lock.yml	Regenerated workflow lock for build-test workflow.
.github/skills/agentic-workflows/SKILL.md	Updated skill documentation to include an additional upstream reference file.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 46/46 changed files
Comments generated: 8
Review effort level: Low

+          sparse-checkout: |
+            .github
+            .agents
+            .antigravity
+            .claude


          fi
          # shellcheck disable=SC1003,SC2016,SC2086
-          awf --config "${RUNNER_TEMP}/gh-aw/awf-config.json" --container-workdir "${GITHUB_WORKSPACE}" --mount "${RUNNER_TEMP}/gh-aw:${RUNNER_TEMP}/gh-aw:ro" --mount "${RUNNER_TEMP}/gh-aw:/host${RUNNER_TEMP}/gh-aw:ro" ${GH_AW_TOOL_CACHE_MOUNT:+--mount "$GH_AW_TOOL_CACHE_MOUNT"} ${GH_AW_DOCKER_HOST:+--docker-host "$GH_AW_DOCKER_HOST"} ${GH_AW_DOCKER_HOST_PATH_PREFIX_ARGS} --env-all --exclude-env COPILOT_GITHUB_TOKEN --exclude-env GITHUB_MCP_SERVER_TOKEN --exclude-env MCP_GATEWAY_API_KEY --log-level info --build-local \
+          awf --config "${RUNNER_TEMP}/gh-aw/awf-config.json" --container-workdir "${GITHUB_WORKSPACE}" --mount "${RUNNER_TEMP}/gh-aw:${RUNNER_TEMP}/gh-aw:ro" --mount "${RUNNER_TEMP}/gh-aw:/host${RUNNER_TEMP}/gh-aw:ro" ${GH_AW_TOOL_CACHE_MOUNT:+--mount "$GH_AW_TOOL_CACHE_MOUNT"} ${GH_AW_DOCKER_HOST:+--docker-host "$GH_AW_DOCKER_HOST"} ${GH_AW_DOCKER_HOST_PATH_PREFIX_ARGS} --env-all --exclude-env COPILOT_GITHUB_TOKEN --exclude-env GITHUB_MCP_SERVER_TOKEN --exclude-env MCP_GATEWAY_API_KEY --log-level info --skip-pull \


        with:
-          key: memory-none-nopolicy-${{ env.GH_AW_WORKFLOW_ID_SANITIZED }}-${{ env.CACHE_MEMORY_DATE }}-${{ github.run_id }}
+          key: memory-none-nopolicy-${{ env.GH_AW_WORKFLOW_ID_SANITIZED }}-${{ github.run_id }}
          path: /tmp/gh-aw/cache-memory
          restore-keys: |
-            memory-none-nopolicy-${{ env.GH_AW_WORKFLOW_ID_SANITIZED }}-${{ env.CACHE_MEMORY_DATE }}-
+            memory-none-nopolicy-${{ env.GH_AW_WORKFLOW_ID_SANITIZED }}-


    concurrency:
-      group: "gh-aw-conclusion-issue-duplication-detector-${{ github.event.issue.number || github.run_id }}"
+      group: "gh-aw-conclusion-issue-duplication-detector"
      cancel-in-progress: false


-          awf --config "${RUNNER_TEMP}/gh-aw/awf-config.json" --container-workdir "${GITHUB_WORKSPACE}" --mount "${RUNNER_TEMP}/gh-aw:${RUNNER_TEMP}/gh-aw:ro" --mount "${RUNNER_TEMP}/gh-aw:/host${RUNNER_TEMP}/gh-aw:ro" ${GH_AW_TOOL_CACHE_MOUNT:+--mount "$GH_AW_TOOL_CACHE_MOUNT"} ${GH_AW_DOCKER_HOST:+--docker-host "$GH_AW_DOCKER_HOST"} ${GH_AW_DOCKER_HOST_PATH_PREFIX_ARGS} --env-all --exclude-env COPILOT_GITHUB_TOKEN --exclude-env GITHUB_MCP_SERVER_TOKEN --exclude-env MCP_GATEWAY_API_KEY --log-level info --build-local \
-            -- /bin/bash -c 'set +o histexpand; export PATH="${RUNNER_TEMP}/gh-aw/mcp-cli/bin:$PATH" && : "${RUNNER_TOOL_CACHE:?RUNNER_TOOL_CACHE must be set}"; GH_AW_TOOL_CACHE="$RUNNER_TOOL_CACHE"; export PATH="$(find "$GH_AW_TOOL_CACHE" -maxdepth 5 -type d -name bin 2>/dev/null | tr '\''\n'\'' '\'':'\'')$PATH"; [ -n "$GOROOT" ] && export PATH="$GOROOT/bin:$PATH" || true && GH_AW_NODE_EXEC="${GH_AW_NODE_BIN:-}"; if [ -z "$GH_AW_NODE_EXEC" ] || [ ! -x "$GH_AW_NODE_EXEC" ]; then GH_AW_NODE_EXEC="$(command -v node 2>/dev/null || true)"; fi; if [ -z "$GH_AW_NODE_EXEC" ]; then echo "node runtime missing on this runner — check runtimes.node in workflow YAML" >&2; exit 127; fi; GH_AW_NPM_GLOBAL_ROOT="$(npm root -g 2>/dev/null || true)"; if [ -n "$GH_AW_NPM_GLOBAL_ROOT" ]; then export NODE_PATH="${GH_AW_NPM_GLOBAL_ROOT}${NODE_PATH:+:${NODE_PATH}}"; fi; "$GH_AW_NODE_EXEC" ${RUNNER_TEMP}/gh-aw/actions/copilot_harness.cjs /usr/local/bin/copilot --add-dir /tmp/gh-aw/ --log-level all --log-dir /tmp/gh-aw/sandbox/agent/logs/ --disable-builtin-mcps --no-ask-user --allow-all-tools --excluded-tools=browser_close,browser_resize,browser_console_messages,browser_handle_dialog,browser_evaluate,browser_file_upload,browser_fill_form,browser_press_key,browser_type,browser_navigate,browser_navigate_back,browser_network_requests,browser_run_code,browser_take_screenshot,browser_snapshot,browser_click,browser_drag,browser_hover,browser_select_option,browser_tabs,browser_wait_for --allow-all-paths --add-dir "${GITHUB_WORKSPACE}" --prompt-file /tmp/gh-aw/aw-prompts/prompt.txt' 2>&1 | tee -a /tmp/gh-aw/agent-stdio.log
+          awf --config "${RUNNER_TEMP}/gh-aw/awf-config.json" --container-workdir "${GITHUB_WORKSPACE}" --mount "${RUNNER_TEMP}/gh-aw:${RUNNER_TEMP}/gh-aw:ro" --mount "${RUNNER_TEMP}/gh-aw:/host${RUNNER_TEMP}/gh-aw:ro" ${GH_AW_TOOL_CACHE_MOUNT:+--mount "$GH_AW_TOOL_CACHE_MOUNT"} ${GH_AW_DOCKER_HOST:+--docker-host "$GH_AW_DOCKER_HOST"} ${GH_AW_DOCKER_HOST_PATH_PREFIX_ARGS} --env-all --exclude-env COPILOT_GITHUB_TOKEN --exclude-env GITHUB_MCP_SERVER_TOKEN --exclude-env MCP_GATEWAY_API_KEY --log-level info --skip-pull \
+            -- /bin/bash -c 'set +o histexpand; export PATH="${RUNNER_TEMP}/gh-aw/mcp-cli/bin:$PATH" && : "${RUNNER_TOOL_CACHE:?RUNNER_TOOL_CACHE must be set}"; GH_AW_TOOL_CACHE="$RUNNER_TOOL_CACHE"; export PATH="$(find "$GH_AW_TOOL_CACHE" -maxdepth 5 -type d -name bin 2>/dev/null | tr '\''\n'\'' '\'':'\'')$PATH"; [ -n "$GOROOT" ] && export PATH="$GOROOT/bin:$PATH" || true && GH_AW_NODE_EXEC="${GH_AW_NODE_BIN:-}"; if [ -z "$GH_AW_NODE_EXEC" ] || [ ! -x "$GH_AW_NODE_EXEC" ]; then GH_AW_NODE_EXEC="$(command -v node 2>/dev/null || true)"; fi; if [ -z "$GH_AW_NODE_EXEC" ]; then echo "node runtime missing on this runner — check runtimes.node in workflow YAML" >&2; exit 127; fi; GH_AW_NPM_GLOBAL_ROOT="$(npm root -g 2>/dev/null || true)"; if [ -n "$GH_AW_NPM_GLOBAL_ROOT" ]; then export NODE_PATH="${GH_AW_NPM_GLOBAL_ROOT}${NODE_PATH:+:${NODE_PATH}}"; fi; "$GH_AW_NODE_EXEC" ${RUNNER_TEMP}/gh-aw/actions/copilot_harness.cjs /usr/local/bin/copilot --add-dir /tmp/gh-aw/ --log-level all --log-dir /tmp/gh-aw/sandbox/agent/logs/ --disable-builtin-mcps --no-ask-user --allow-all-tools --allow-all-paths --add-dir "${GITHUB_WORKSPACE}" --prompt-file /tmp/gh-aw/aw-prompts/prompt.txt' 2>&1 | tee -a /tmp/gh-aw/agent-stdio.log


+          if [ -f /tmp/gh-aw/sandbox/firewall/logs/api-proxy/otel.jsonl ]; then
            echo "OTEL spans exported:"
-            wc -l /tmp/gh-aw/sandbox/firewall/logs/api-proxy-logs/otel.jsonl
+            wc -l /tmp/gh-aw/sandbox/firewall/logs/api-proxy/otel.jsonl
            echo "Sample spans:"
-            head -5 /tmp/gh-aw/sandbox/firewall/logs/api-proxy-logs/otel.jsonl
+            head -5 /tmp/gh-aw/sandbox/firewall/logs/api-proxy/otel.jsonl


          COPILOT_DUMMY_BYOK: dummy-byok-key-for-offline-mode
          COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}
-          COPILOT_MODEL: ${{ env.COPILOT_MODEL }}
+          COPILOT_MODEL: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || vars.GH_AW_DEFAULT_MODEL_COPILOT || 'claude-sonnet-4.6' }}


+          if [ -f /tmp/gh-aw/sandbox/firewall/logs/api-proxy/token-usage.jsonl ]; then
            echo ""
            echo "Token usage records (existing tracking):"
-            wc -l /tmp/gh-aw/sandbox/firewall/logs/api-proxy-logs/token-usage.jsonl
+            wc -l /tmp/gh-aw/sandbox/firewall/logs/api-proxy/token-usage.jsonl


Copilot AI review requested due to automatic review settings July 6, 2026 12:55

Copilot started reviewing on behalf of lpcox July 6, 2026 12:55 View session

Copilot AI reviewed Jul 6, 2026

View reviewed changes

lpcox merged commit 805749a into main Jul 6, 2026
24 of 25 checks passed

lpcox deleted the upgrade-gh-aw-prerelease branch July 6, 2026 13:05

lpcox mentioned this pull request Jul 6, 2026

fix(test): update BYOK workflow test to match recompiled lock files #5950

Merged

github-actions Bot mentioned this pull request Jul 6, 2026

fix: handle EPERM when chmod'ing pre-existing mcp-logs directory #5956

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: upgrade gh-aw to v0.82.2 pre-release and recompile workflows#5946

chore: upgrade gh-aw to v0.82.2 pre-release and recompile workflows#5946
lpcox merged 1 commit into
mainfrom
upgrade-gh-aw-prerelease

lpcox commented Jul 6, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

lpcox commented Jul 6, 2026

Summary

Changes

Verification

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants