chore: upgrade gh-aw extension to v0.83.0 (pre-release)#6524
Conversation
Upgrade the gh-aw extension from v0.82.15 to v0.83.0 pre-release, recompile all workflows, and fix test assertion for inlined MCP CLI servers list in test-coverage-reporter workflow. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
✅ Coverage Check PassedOverall Coverage
📁 Per-file Coverage Changes (1 files)
Coverage comparison generated by |
There was a problem hiding this comment.
Pull request overview
Upgrades gh-aw to v0.83.0 and regenerates the repository’s agentic workflows.
Changes:
- Updates gh-aw action pins and engine versions.
- Regenerates and post-processes 59 workflow locks.
- Updates workflow routing documentation and coverage assertions.
Show a summary per file
| File | Description |
|---|---|
.github/aw/actions-lock.json |
Updates gh-aw action pins. |
.github/skills/agentic-workflows/SKILL.md |
Adds the container-substitution guide. |
scripts/ci/test-coverage-reporter-workflow.test.ts |
Updates MCP-list assertion. |
.github/workflows/build-test-network-isolation.lock.yml |
Regenerates workflow. |
.github/workflows/build-test.lock.yml |
Regenerates workflow. |
.github/workflows/ci-cd-gaps-assessment.lock.yml |
Regenerates workflow. |
.github/workflows/ci-doctor.lock.yml |
Regenerates workflow. |
.github/workflows/claude-token-optimizer.lock.yml |
Regenerates workflow. |
.github/workflows/claude-token-usage-analyzer.lock.yml |
Regenerates workflow. |
.github/workflows/cli-flag-consistency-checker.lock.yml |
Regenerates workflow. |
.github/workflows/config-consistency-auditor.lock.yml |
Regenerates workflow. |
.github/workflows/contribution-check.lock.yml |
Regenerates workflow. |
.github/workflows/copilot-token-optimizer.lock.yml |
Regenerates workflow. |
.github/workflows/copilot-token-usage-analyzer.lock.yml |
Regenerates workflow. |
.github/workflows/dependency-security-monitor.lock.yml |
Regenerates workflow. |
.github/workflows/doc-maintainer.lock.yml |
Regenerates workflow. |
.github/workflows/duplicate-code-detector.lock.yml |
Regenerates workflow. |
.github/workflows/export-audit.lock.yml |
Regenerates workflow. |
.github/workflows/firewall-issue-dispatcher.lock.yml |
Regenerates workflow. |
.github/workflows/issue-duplication-detector.lock.yml |
Regenerates workflow. |
.github/workflows/issue-monster.lock.yml |
Regenerates workflow. |
.github/workflows/model-api-mapping-updater.lock.yml |
Regenerates workflow. |
.github/workflows/network-isolation-test.lock.yml |
Regenerates workflow. |
.github/workflows/pelis-agent-factory-advisor.lock.yml |
Regenerates workflow. |
.github/workflows/plan.lock.yml |
Regenerates workflow. |
.github/workflows/red-team-benchmark.lock.yml |
Regenerates workflow. |
.github/workflows/refactoring-scanner.lock.yml |
Regenerates workflow. |
.github/workflows/sbx-gvisor-doc-updater.lock.yml |
Regenerates workflow. |
.github/workflows/schema-sync.lock.yml |
Regenerates workflow. |
.github/workflows/secret-digger-claude.lock.yml |
Regenerates workflow. |
.github/workflows/secret-digger-codex.lock.yml |
Regenerates workflow. |
.github/workflows/secret-digger-copilot.lock.yml |
Regenerates workflow. |
.github/workflows/security-guard.lock.yml |
Regenerates workflow. |
.github/workflows/security-review.lock.yml |
Regenerates workflow. |
.github/workflows/self-hosted-runner-doctor-updater.lock.yml |
Regenerates workflow. |
.github/workflows/self-hosted-runner-doctor.lock.yml |
Regenerates workflow. |
.github/workflows/smoke-chroot.lock.yml |
Regenerates smoke workflow. |
.github/workflows/smoke-claude.lock.yml |
Regenerates Claude smoke workflow. |
.github/workflows/smoke-codex.lock.yml |
Regenerates Codex smoke workflow. |
.github/workflows/smoke-copilot-byok-aoai-apikey.lock.yml |
Regenerates BYOK smoke workflow. |
.github/workflows/smoke-copilot-byok-aoai-entra.lock.yml |
Regenerates BYOK smoke workflow. |
.github/workflows/smoke-copilot-byok.lock.yml |
Regenerates BYOK smoke workflow. |
.github/workflows/smoke-copilot-network-isolation.lock.yml |
Regenerates isolation smoke workflow. |
.github/workflows/smoke-copilot-pat.lock.yml |
Regenerates PAT smoke workflow. |
.github/workflows/smoke-copilot.lock.yml |
Regenerates Copilot smoke workflow. |
.github/workflows/smoke-docker-sbx-build-test.lock.yml |
Regenerates sbx build workflow. |
.github/workflows/smoke-docker-sbx-claude.lock.yml |
Regenerates sbx Claude workflow. |
.github/workflows/smoke-docker-sbx-codex.lock.yml |
Regenerates sbx Codex workflow. |
.github/workflows/smoke-docker-sbx.lock.yml |
Regenerates sbx smoke workflow. |
.github/workflows/smoke-gemini.lock.yml |
Regenerates Gemini smoke workflow. |
.github/workflows/smoke-gvisor-build-test.lock.yml |
Regenerates gVisor build workflow. |
.github/workflows/smoke-gvisor-claude.lock.yml |
Regenerates gVisor Claude workflow. |
.github/workflows/smoke-gvisor-codex.lock.yml |
Regenerates gVisor Codex workflow. |
.github/workflows/smoke-gvisor.lock.yml |
Regenerates gVisor smoke workflow. |
.github/workflows/smoke-otel-tracing.lock.yml |
Regenerates OTel smoke workflow. |
.github/workflows/smoke-services.lock.yml |
Regenerates services smoke workflow. |
.github/workflows/smoke-sink-visibility-allowed.lock.yml |
Regenerates allowed-sink workflow. |
.github/workflows/smoke-sink-visibility-blocked.lock.yml |
Regenerates blocked-sink workflow. |
.github/workflows/test-coverage-improver.lock.yml |
Regenerates workflow. |
.github/workflows/test-coverage-reporter.lock.yml |
Regenerates workflow. |
.github/workflows/test-hard-cap-ai-credits.lock.yml |
Regenerates workflow. |
.github/workflows/update-release-notes.lock.yml |
Regenerates workflow. |
Review details
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 57/62 changed files
- Comments generated: 2
- Review effort level: Medium
| "github/gh-aw-actions/setup-cli@v0.83.0": { | ||
| "repo": "github/gh-aw-actions/setup-cli", | ||
| "version": "v0.82.15", | ||
| "sha": "511cb6dc1490b20c33a5494ee6d70e0d603ba5bc" | ||
| "version": "v0.83.0", | ||
| "sha": "34802437a0cba2fd1352d1f1bb02c18a78b56b31" | ||
| }, | ||
| "github/gh-aw-actions/setup@v0.82.15": { | ||
| "github/gh-aw-actions/setup@v0.83.0": { | ||
| "repo": "github/gh-aw-actions/setup", | ||
| "version": "v0.82.15", | ||
| "sha": "511cb6dc1490b20c33a5494ee6d70e0d603ba5bc" | ||
| "version": "v0.83.0", | ||
| "sha": "34802437a0cba2fd1352d1f1bb02c18a78b56b31" |
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
|
@copilot address review feedback |
|
✅ Copilot review passed with no inline comments. @lpcox Add the |
|
✅ Build Test Suite completed successfully! |
|
📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅ |
|
📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤 |
|
🚀 Security Guard has started processing this pull request |
|
✅ Contribution Check completed successfully! PR #6524 follows the contribution guidelines in CONTRIBUTING.md: the description is clear, the upgrade/recompile changes are documented, and the verification note shows the test suite passed. No review comment needed. |
|
✅ Smoke Gemini completed. All facets verified. 💎 Verifying safeoutputs with message |
|
📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤 |
|
🔑 Smoke Copilot PAT PAT auth validated. All systems operational. ✅ |
|
✅ Smoke Copilot BYOK AOAI (Entra) completed. Copilot AOAI BYOK (Entra) mode operational. 🔓 |
|
🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅ |
|
Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded. |
|
✅ Smoke Claude passed |
|
🔌 Smoke Services — All services reachable! ✅ |
|
✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟 |
|
✅ Smoke Copilot BYOK AOAI (api-key) completed. Copilot AOAI BYOK (api-key) mode operational. 🔓 |
|
✅ Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓 |
🔥 AWF Network Isolation Smoke Test
Overall: PASS Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "example.com"See Network Configuration for more information.
|
Smoke Test: Claude Engine Validation
Overall result: PASS
|
Smoke Test Results — Services Connectivity
Overall: FAIL —
|
Smoke Test Results
Overall status: FAIL Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "localhost"See Network Configuration for more information.
|
🔬 Smoke Test: Copilot PAT Auth — Results
Overall: PARTIAL — MCP auth works; pre-step template outputs were not expanded (likely a workflow configuration issue with Auth mode: PAT (COPILOT_GITHUB_TOKEN)
|
Smoke Test: Copilot BYOK ✅ PASS
Mode: Direct BYOK (COPILOT_PROVIDER_API_KEY) via api-proxy sidecar
|
Chroot Version Comparison Results
Overall: ❌ FAILED — Node.js version mismatch (host
|
Smoke Test: API Proxy OpenTelemetry Tracing
All scenarios pass or are expected-pending. OTEL tracing integration is fully wired.
|
🤖 Smoke Test Results
Overall: PASS Author: @lpcox
|
Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw)
|
|
Smoke test results:
Overall: FAIL
|
🏗️ Build Test Suite Results
Overall: 8/8 ecosystems passed — ✅ PASS
|
Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra Overall: PASS
|
🔥 Smoke Test: Docker Sbx Validation
Overall status: cc @lpcox
|
Summary
Upgrades the
gh-awextension from v0.82.15 to v0.83.0 (pre-release), recompiles all agentic workflows, and runs post-processing.Changes
gh aw upgrade --pre-releasestest-coverage-reporter-workflow.test.tsassertion for inlinedGH_AW_MCP_CLI_SERVERS_LISTvalue (no longer references step output)Verification
All 4018 tests pass (
npm test✅)