Skip to content

chore: upgrade gh-aw extension to v0.83.0 (pre-release)#6524

Merged
lpcox merged 3 commits into
mainfrom
upgrade-gh-aw-prerelease
Jul 23, 2026
Merged

chore: upgrade gh-aw extension to v0.83.0 (pre-release)#6524
lpcox merged 3 commits into
mainfrom
upgrade-gh-aw-prerelease

Conversation

@lpcox

@lpcox lpcox commented Jul 23, 2026

Copy link
Copy Markdown
Collaborator

Summary

Upgrades the gh-aw extension from v0.82.15 to v0.83.0 (pre-release), recompiles all agentic workflows, and runs post-processing.

Changes

  • Upgraded gh-aw from v0.82.15 → v0.83.0 via gh aw upgrade --pre-releases
  • Recompiled all workflows — 62 files updated with new action pins and workflow structure
  • Post-processed smoke workflows — replaced install steps with local build+install
  • Fixed test — updated test-coverage-reporter-workflow.test.ts assertion for inlined GH_AW_MCP_CLI_SERVERS_LIST value (no longer references step output)

Verification

All 4018 tests pass (npm test ✅)

Upgrade the gh-aw extension from v0.82.15 to v0.83.0 pre-release,
recompile all workflows, and fix test assertion for inlined
MCP CLI servers list in test-coverage-reporter workflow.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings July 23, 2026 12:04
@github-actions

Copy link
Copy Markdown
Contributor

✅ Coverage Check Passed

Overall Coverage

Metric Base PR Delta
Lines 98.96% 98.99% 📈 +0.03%
Statements 98.88% 98.91% 📈 +0.03%
Functions 99.41% 99.41% ➡️ +0.00%
Branches 95.30% 95.30% ➡️ +0.00%
📁 Per-file Coverage Changes (1 files)
File Lines (Before → After) Statements (Before → After)
src/log-directory-setup.ts 96.2% → 100.0% (+3.78%) 96.3% → 100.0% (+3.71%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Upgrades gh-aw to v0.83.0 and regenerates the repository’s agentic workflows.

Changes:

  • Updates gh-aw action pins and engine versions.
  • Regenerates and post-processes 59 workflow locks.
  • Updates workflow routing documentation and coverage assertions.
Show a summary per file
File Description
.github/aw/actions-lock.json Updates gh-aw action pins.
.github/skills/agentic-workflows/SKILL.md Adds the container-substitution guide.
scripts/ci/test-coverage-reporter-workflow.test.ts Updates MCP-list assertion.
.github/workflows/build-test-network-isolation.lock.yml Regenerates workflow.
.github/workflows/build-test.lock.yml Regenerates workflow.
.github/workflows/ci-cd-gaps-assessment.lock.yml Regenerates workflow.
.github/workflows/ci-doctor.lock.yml Regenerates workflow.
.github/workflows/claude-token-optimizer.lock.yml Regenerates workflow.
.github/workflows/claude-token-usage-analyzer.lock.yml Regenerates workflow.
.github/workflows/cli-flag-consistency-checker.lock.yml Regenerates workflow.
.github/workflows/config-consistency-auditor.lock.yml Regenerates workflow.
.github/workflows/contribution-check.lock.yml Regenerates workflow.
.github/workflows/copilot-token-optimizer.lock.yml Regenerates workflow.
.github/workflows/copilot-token-usage-analyzer.lock.yml Regenerates workflow.
.github/workflows/dependency-security-monitor.lock.yml Regenerates workflow.
.github/workflows/doc-maintainer.lock.yml Regenerates workflow.
.github/workflows/duplicate-code-detector.lock.yml Regenerates workflow.
.github/workflows/export-audit.lock.yml Regenerates workflow.
.github/workflows/firewall-issue-dispatcher.lock.yml Regenerates workflow.
.github/workflows/issue-duplication-detector.lock.yml Regenerates workflow.
.github/workflows/issue-monster.lock.yml Regenerates workflow.
.github/workflows/model-api-mapping-updater.lock.yml Regenerates workflow.
.github/workflows/network-isolation-test.lock.yml Regenerates workflow.
.github/workflows/pelis-agent-factory-advisor.lock.yml Regenerates workflow.
.github/workflows/plan.lock.yml Regenerates workflow.
.github/workflows/red-team-benchmark.lock.yml Regenerates workflow.
.github/workflows/refactoring-scanner.lock.yml Regenerates workflow.
.github/workflows/sbx-gvisor-doc-updater.lock.yml Regenerates workflow.
.github/workflows/schema-sync.lock.yml Regenerates workflow.
.github/workflows/secret-digger-claude.lock.yml Regenerates workflow.
.github/workflows/secret-digger-codex.lock.yml Regenerates workflow.
.github/workflows/secret-digger-copilot.lock.yml Regenerates workflow.
.github/workflows/security-guard.lock.yml Regenerates workflow.
.github/workflows/security-review.lock.yml Regenerates workflow.
.github/workflows/self-hosted-runner-doctor-updater.lock.yml Regenerates workflow.
.github/workflows/self-hosted-runner-doctor.lock.yml Regenerates workflow.
.github/workflows/smoke-chroot.lock.yml Regenerates smoke workflow.
.github/workflows/smoke-claude.lock.yml Regenerates Claude smoke workflow.
.github/workflows/smoke-codex.lock.yml Regenerates Codex smoke workflow.
.github/workflows/smoke-copilot-byok-aoai-apikey.lock.yml Regenerates BYOK smoke workflow.
.github/workflows/smoke-copilot-byok-aoai-entra.lock.yml Regenerates BYOK smoke workflow.
.github/workflows/smoke-copilot-byok.lock.yml Regenerates BYOK smoke workflow.
.github/workflows/smoke-copilot-network-isolation.lock.yml Regenerates isolation smoke workflow.
.github/workflows/smoke-copilot-pat.lock.yml Regenerates PAT smoke workflow.
.github/workflows/smoke-copilot.lock.yml Regenerates Copilot smoke workflow.
.github/workflows/smoke-docker-sbx-build-test.lock.yml Regenerates sbx build workflow.
.github/workflows/smoke-docker-sbx-claude.lock.yml Regenerates sbx Claude workflow.
.github/workflows/smoke-docker-sbx-codex.lock.yml Regenerates sbx Codex workflow.
.github/workflows/smoke-docker-sbx.lock.yml Regenerates sbx smoke workflow.
.github/workflows/smoke-gemini.lock.yml Regenerates Gemini smoke workflow.
.github/workflows/smoke-gvisor-build-test.lock.yml Regenerates gVisor build workflow.
.github/workflows/smoke-gvisor-claude.lock.yml Regenerates gVisor Claude workflow.
.github/workflows/smoke-gvisor-codex.lock.yml Regenerates gVisor Codex workflow.
.github/workflows/smoke-gvisor.lock.yml Regenerates gVisor smoke workflow.
.github/workflows/smoke-otel-tracing.lock.yml Regenerates OTel smoke workflow.
.github/workflows/smoke-services.lock.yml Regenerates services smoke workflow.
.github/workflows/smoke-sink-visibility-allowed.lock.yml Regenerates allowed-sink workflow.
.github/workflows/smoke-sink-visibility-blocked.lock.yml Regenerates blocked-sink workflow.
.github/workflows/test-coverage-improver.lock.yml Regenerates workflow.
.github/workflows/test-coverage-reporter.lock.yml Regenerates workflow.
.github/workflows/test-hard-cap-ai-credits.lock.yml Regenerates workflow.
.github/workflows/update-release-notes.lock.yml Regenerates workflow.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 57/62 changed files
  • Comments generated: 2
  • Review effort level: Medium

Comment thread scripts/ci/test-coverage-reporter-workflow.test.ts Outdated
Comment on lines +68 to +76
"github/gh-aw-actions/setup-cli@v0.83.0": {
"repo": "github/gh-aw-actions/setup-cli",
"version": "v0.82.15",
"sha": "511cb6dc1490b20c33a5494ee6d70e0d603ba5bc"
"version": "v0.83.0",
"sha": "34802437a0cba2fd1352d1f1bb02c18a78b56b31"
},
"github/gh-aw-actions/setup@v0.82.15": {
"github/gh-aw-actions/setup@v0.83.0": {
"repo": "github/gh-aw-actions/setup",
"version": "v0.82.15",
"sha": "511cb6dc1490b20c33a5494ee6d70e0d603ba5bc"
"version": "v0.83.0",
"sha": "34802437a0cba2fd1352d1f1bb02c18a78b56b31"
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
@lpcox

lpcox commented Jul 23, 2026

Copy link
Copy Markdown
Collaborator Author

@copilot address review feedback

@github-actions

Copy link
Copy Markdown
Contributor

✅ Copilot review passed with no inline comments.

@lpcox Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

Copilot AI commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

@copilot address review feedback

Regenerated .github/workflows/agentics-maintenance.yml with v0.83.1 via gh aw init in 72f1d55. The file now pins github/gh-aw-actions/setup and setup-cli to v0.83.1 and bumps the installed extension version to match.

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Build Test Suite completed successfully!

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

📡 Smoke OTel Tracing completed. All tracing scenarios validated. ✅

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

@github-actions

Copy link
Copy Markdown
Contributor

🚀 Security Guard has started processing this pull request

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Contribution Check completed successfully!

PR #6524 follows the contribution guidelines in CONTRIBUTING.md: the description is clear, the upgrade/recompile changes are documented, and the verification note shows the test suite passed. No review comment needed.

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Smoke Gemini completed. All facets verified. 💎

Verifying safeoutputs with message

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

📰 VERDICT: Smoke Docker Sbx has concluded. All systems operational. This is a developing story. 🎤

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

🔑 Smoke Copilot PAT PAT auth validated. All systems operational. ✅

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Smoke Copilot BYOK AOAI (Entra) completed. Copilot AOAI BYOK (Entra) mode operational. 🔓

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

🛡️ Smoke Copilot Network Isolation confirmed the egress allowlist is enforced. ✅

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Chroot tests passed! Smoke Chroot - All security and functionality tests succeeded.

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Smoke Claude passed

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

🔌 Smoke Services — All services reachable! ✅

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Smoke Copilot BYOK AOAI (api-key) completed. Copilot AOAI BYOK (api-key) mode operational. 🔓

@github-actions

github-actions Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

Smoke Copilot BYOK completed. Copilot BYOK mode operational. 🔓

@github-actions

Copy link
Copy Markdown
Contributor

🔥 AWF Network Isolation Smoke Test

@lpcox

EGRESS_RESULT allow=pass deny=pass

Check Result
api.github.com reachable (HTTP 200) pass
example.com blocked (403 proxy denial) pass

Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • example.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "example.com"

See Network Configuration for more information.

🛡️ Egress verdict from Smoke Copilot Network Isolation
Add label ready-for-aw to run again

@github-actions github-actions Bot added the smoke-copilot-network-isolation Copilot network-isolation egress smoke test label Jul 23, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Smoke Test: Claude Engine Validation

Check Result
API status ✅ PASS
gh check ✅ PASS
File status ✅ PASS

Overall result: PASS

Generated by Smoke Claude for #6524 · haiku45 53.9 AIC · ⊞ 3.3K ·
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

Smoke Test Results — Services Connectivity

Check Result
Redis PING host.docker.internal DNS resolution failed
PostgreSQL pg_isready ❌ No response
PostgreSQL SELECT 1 ❌ DNS resolution failed

Overall: FAILhost.docker.internal is not resolvable in this environment. The AWF sandbox cannot reach the GitHub Actions service containers.

🔌 Service connectivity validated by Smoke Services
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

Smoke Test Results

Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

  • localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

🔬 Smoke Test: Copilot PAT Auth — Results

Test Status
GitHub MCP connectivity ✅ PASS
GitHub.com HTTP ⚠️ N/A (template vars unexpanded)
File write/read ⚠️ N/A (template vars unexpanded)

Overall: PARTIAL — MCP auth works; pre-step template outputs were not expanded (likely a workflow configuration issue with steps.smoke-data.outputs).

Auth mode: PAT (COPILOT_GITHUB_TOKEN)

🔑 PAT report filed by Smoke Copilot PAT
Add label ready-for-aw to run again

@github-actions github-actions Bot mentioned this pull request Jul 23, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Smoke Test: Copilot BYOK ✅ PASS

Test Result
BYOK Configuration ✅ COPILOT_API_KEY + COPILOT_TOKEN present
Inference Path ✅ Successfully processing via api-proxy → api.githubcopilot.com
MCP Connectivity ✅ GitHub MCP responding

Mode: Direct BYOK (COPILOT_PROVIDER_API_KEY) via api-proxy sidecar
Author: @lpcox

🔑 BYOK report filed by Smoke Copilot BYOK
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

Chroot Version Comparison Results

Runtime Host Version Chroot Version Match?
Python Python 3.12.13 Python 3.12.13 ✅ YES
Node.js v24.18.0 v22.23.1 ❌ NO
Go go1.22.12 go1.22.12 ✅ YES

Overall: ❌ FAILED — Node.js version mismatch (host v24.18.0 vs chroot v22.23.1).

Tested by Smoke Chroot
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

Smoke Test: API Proxy OpenTelemetry Tracing

Scenario Result Notes
1. Module Loading ✅ Pass otel.js loads successfully; exports: startRequestSpan, setTokenAttributes, setBudgetAttributes, endSpan, endSpanError, shutdown, isEnabled
2. Test Suite ✅ Pass 59 tests passed, 0 failed across otel.test.js + otel-fanout.test.js
3. Env Var Forwarding ✅ Pass api-proxy-env-config.ts forwards OTEL_EXPORTER_OTLP_ENDPOINT, OTEL_EXPORTER_OTLP_HEADERS, GITHUB_AW_OTEL_TRACE_ID, GITHUB_AW_OTEL_PARENT_SPAN_ID; defaults OTEL_SERVICE_NAME to awf-api-proxy
4. Token Tracker Integration ✅ Pass onUsage callback exists in token-tracker-http.js (line 328, invoked at line 386) as the OTEL hook point
5. OTEL Diagnostics ⏭️ N/A No live container run in this environment; spans cannot be observed without Docker

All scenarios pass or are expected-pending. OTEL tracing integration is fully wired.

📡 OTel tracing validated by Smoke OTel Tracing
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

🤖 Smoke Test Results

Test Status
GitHub MCP Connectivity
GitHub.com HTTP Connectivity
File Write/Read

Overall: PASS

Author: @lpcox

📰 BREAKING: Report filed by Smoke Copilot
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

@lpcox

  • GitHub MCP data validated ✅
  • GitHub.com connectivity ✅
  • File I/O ✅
  • BYOK inference ✅

Running in direct BYOK mode (COPILOT_PROVIDER_API_KEY + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw)
Overall PASS

🔑 BYOK (AOAI api-key) report filed by Smoke Copilot BYOK AOAI (api-key)
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

Smoke test results:

  • Merged PRs: ✅ fix(api-proxy): track token usage for aborted streaming responses; ✅ Retry gVisor agent startup crashes once before failing
  • safeinputs-gh PR query: ❌ unavailable here
  • Playwright title check: ✅ GitHub page title verified
  • File write/read: ✅ /tmp/gh-aw/agent/smoke-test-codex-30014298264.txt
  • Discussion check: ✅ skipped, no valid discussion found
  • Build: ✅ npm ci && npm run build

Overall: FAIL

🔮 The oracle has spoken through Smoke Codex
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

🏗️ Build Test Suite Results

Ecosystem Project Build/Install Tests Status
Bun elysia 1/1 passed ✅ PASS
Bun hono 1/1 passed ✅ PASS
C++ fmt N/A ✅ PASS
C++ json N/A ✅ PASS
Deno oak N/A 1/1 passed ✅ PASS
Deno std N/A 1/1 passed ✅ PASS
.NET hello-world N/A ✅ PASS
.NET json-parse N/A ✅ PASS
Go color 1/1 passed ✅ PASS
Go env 1/1 passed ✅ PASS
Go uuid 1/1 passed ✅ PASS
Java gson 1/1 passed ✅ PASS
Java caffeine 1/1 passed ✅ PASS
Node.js clsx All passed ✅ PASS
Node.js execa All passed ✅ PASS
Node.js p-limit All passed ✅ PASS
Rust fd 1/1 passed ✅ PASS
Rust zoxide 1/1 passed ✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for #6524 · sonnet46 57.1 AIC · ⊞ 8.3K ·
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

@lpcox

  • GitHub MCP tool: ✅
  • GitHub.com connectivity: ✅
  • File write/read test: ✅
  • BYOK Inference test: ✅

Running in direct BYOK mode (AWF_AUTH_TYPE=github-oidc + AWF_AUTH_AZURE_* + COPILOT_PROVIDER_BASE_URL) via api-proxy → Azure OpenAI (Foundry, o4-mini-aw) authenticated via Microsoft Entra

Overall: PASS

🪪 BYOK (AOAI Entra) report filed by Smoke Copilot BYOK AOAI (Entra)
Add label ready-for-aw to run again

@github-actions

Copy link
Copy Markdown
Contributor

🔥 Smoke Test: Docker Sbx Validation

Test Result
GitHub MCP connectivity ⚠️ PR data filtered by secrecy policy
GitHub.com HTTP ⚠️ Pre-step data unavailable (template not expanded)
File write/read ⚠️ Pre-step data unavailable (template not expanded)

Overall status: ⚠️ INDETERMINATE — pre-computed test data was not injected (template variables unexpanded). MCP server responded but PR data is filtered by secrecy policy.

cc @lpcox

📰 BREAKING: Report filed by Smoke Docker Sbx
Add label ready-for-aw to run again

@lpcox
lpcox merged commit dcdb3b4 into main Jul 23, 2026
141 checks passed
@lpcox
lpcox deleted the upgrade-gh-aw-prerelease branch July 23, 2026 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants