Skip to content

[actions] Update GitHub Actions versions - 2026-03-30#23599

Merged
pelikhan merged 3 commits intomainfrom
copilot/update-github-actions-versions
Mar 30, 2026
Merged

[actions] Update GitHub Actions versions - 2026-03-30#23599
pelikhan merged 3 commits intomainfrom
copilot/update-github-actions-versions

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 30, 2026

Applies the patch generated by the Daily Workflow Updater (run #23767454093) that failed to push automatically.

Action version bumps

Action Old New
actions/setup-go v6.3.0 v6.4.0
astral-sh/setup-uv v7.6 v8.0.0
erlef/setup-beam v1.23 v1.24
github/codeql-action/upload-sarif v4.34.1 v4.35.1
github/gh-aw-actions/setup v0.63.1 v0.64.5
github/stale-repos v9.0.4 v9.0.6
ruby/setup-ruby v1.295.0 v1.299.0

Files changed

  • .github/aw/actions-lock.json — updated SHA pins and version keys
  • pkg/workflow/data/action_pins.json — synced from actions-lock
  • .github/workflows/*.md — updated uses: references in 7 workflow sources
  • .github/workflows/*.lock.yml — recompiled (43 files regenerated)

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh gh run download 23767454093 -n agent -D /tmp/agent-23767454093 (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw 6 (http block)
  • https://api.github.com/orgs/test-owner/actions/secrets
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name format:pkg-json --silent 64/bin/go tierignore /opt/hostedtoolc-c /usr/bin/git go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel x_amd64/vet /usr/bin/git g_.a GO111MODULE x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /opt/hostedtoolcache/node/24.14.0/x64/bin/node g_.a xF4OZ5Elk x_amd64/vet /opt/hostedtoolcache/node/24.14.0/x64/bin/node (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha -bool l /usr/bin/git -errorsas -ifaceassert -nilfunc git rev-�� --show-toplevel -tests /usr/bin/git -json GO111MODULE x_amd64/compile git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha 0789624/b092/_pkg_.a om/segmentio/asm@v1.1.3/keyset/keyset.go 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env 0789624/b224/_pkg_.a GO111MODULE fg GOINSECURE ntio/asm/ascii 0789624/b092/sym--show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha xterm-color x_amd64/vet /usr/bin/git tants.go tants_test.go 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/git .a 6x8ivAWFp 64/pkg/tool/linu--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git se 70854/b234/vet.crev-parse ache/go/1.25.0/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linu5 /usr/bin/git /tmp/go-build260git -trimpath x_amd64/link git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha uts.version x_amd64/compile /opt/hostedtoolcache/node/24.14.0/x64/bin/node -json GO111MODULE x_amd64/vet node /tmp�� /tmp/TestHashConsistency_WithImports141137263/001/main.md x_amd64/vet /usr/bin/git -json GO111MODULE x_amd64/vet git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha /repos/actions/github-script/git/ref/tags/v8 --jq /usr/bin/git -json GO111MODULE x_amd64/vet git rev-�� --show-toplevel x_amd64/vet /opt/hostedtoolcache/node/24.14.0/x64/bin/node -json GO111MODULE x_amd64/vet node (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git 5735-33194/test-git 70854/b098/vet.crev-parse fg git rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet /usr/bin/git ithub/workflows 70854/b255/vet.crev-parse 64/pkg/tool/linu--show-toplevel git (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v8
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json age.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json g/catalog.go x_amd64/compile GOINSECURE GOMOD bytealg/equal_wa/tmp/gh-aw-add-gitattributes-test540956139/.github/workflows x_amd64/compile (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha ts.result x_amd64/compile /usr/bin/git -json GO111MODULE x_amd64/vet git remo�� remove origin /usr/bin/git -json GO111MODULE x_amd64/vet git (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha /tmp/TestHashConsistency_GoAndJavaScript3318969186/001/test-inli-test.timeout=10m0s x_amd64/compile r,url,status,conclusion,workflowName,createdAt,startedAt,updated-test.short=true -json flow-12345 x_amd64/vet git remo�� add origin /usr/bin/git -json irent.go x_amd64/vet git (http block)
  • https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha 5735-33194/test-778133451 /tmp/go-build47470854/b104/vet.cfg 0/x64/bin/node k/gh-aw/gh-aw/pkgit k/gh-aw/gh-aw/pkrev-parse 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet t-ha�� ithub/workflows/agent-performance-analyzer.md /tmp/go-build47470854/b210/vet.cfg r,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,disp--show-toplevel /tmp/go-build202git flow-12345 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
  • https://api.github.com/repos/github/gh-aw
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility rted(d['entries'].keys()); [print(k) for k in keys] (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0 --jq .object.sha (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq .object.sha k/gh-aw/gh-aw/.github/workflows/auto-triage-issues.md x_amd64/compile /usr/bin/git -json GO111MODULE x_amd64/vet git chec�� .github/workflows/test.md x_amd64/vet /usr/bin/git json ]; then \ git GO111MODULE x_amd64/vet git (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq .object.sha Kzct/wF6ETXd4JluFhLwOKzct /tmp/go-build47470854/b128/vet.cfg /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet che/go-build/30/git **/*.cjs 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet 7085�� -bool 70854/b410/_testmain.go 0/x64/bin/node -errorsas -ifaceassert -nilfunc 0/x64/bin/node (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq .object.sha 5735-33194/test-778133451 /tmp/go-build47470854/b138/vet.cfg /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet che/go-build/02/git **/*.cjs 64/bin/go /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -uns�� -unreachable=false /tmp/go-build47470854/b259/vet.cfg 0/x64/bin/node /tmp/go-build202git -trimpath 64/bin/go ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 j5w6U7nd4 x_amd64/link GOINSECURE erutil GOMODCACHE x_amd64/link env iQbRkOXak fg x_amd64/link GOINSECURE /atomic GOMODCACHE x_amd64/link (http block)
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 FITiMnHAU x_amd64/link GOINSECURE go-sdk/internal/rev-parse GOMODCACHE x_amd64/link env 4DU8gr_lb fg 64/pkg/tool/linux_amd64/vet GOINSECURE 0789624/b007/ GOMODCACHE ef/N6GE9dzJuLpfUe9tz4e_/ThKvzodBtest@example.com (http block)
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 ENF5lkG_t 64/pkg/tool/linu-nilfunc GOINSECURE go-sdk/internal/init GOMODCACHE 64/pkg/tool/linu-tests tlog�� k_05LV2VA fg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 skzryABHE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env ortcfg fg 64/pkg/tool/linux_amd64/vet GOINSECURE (http block)
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 Sc8KyN6c6 64/pkg/tool/linu-buildmode=exe GOINSECURE r GOMODCACHE u1NbgiD/uvljh3C4Test User env vbtEGYjzd fg 64/pkg/tool/linux_amd64/vet GOINSECURE rand GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 ortcfg 64/pkg/tool/linux_amd64/vet GOINSECURE g 64/src/reflect/asm_wasm.s 64/pkg/tool/linux_amd64/vet env OC6DtmXU1 fg 64/pkg/tool/linux_amd64/vet GOINSECURE 0789624/b015/ GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 wOBo7uVmc 64/pkg/tool/linu-importcfg GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linutest@example.com env hQJObAONV fg 64/pkg/tool/linux_amd64/vet GOINSECURE 0789624/b012/ GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE x_amd64/compile ortc�� cdMLHnv3L fg 64/pkg/tool/linux_amd64/vet GOINSECURE %H %ct %D c5d65d47eedca05d--show-toplevel 64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq .object.sha --show-toplevel x_amd64/vet /usr/bin/git -json fg At,event,headBra--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/vet /usr/bin/git ortcfg GO111MODULE 64/pkg/tool/linux_amd64/vet git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha ortcfg fg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env ortcfg GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha ath ../../../.pr**/*.json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env re GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha -json o x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha -json x86.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE xcontext GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha -json go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha -json 1.4.1/internal/mcpgodebug/mcpgodebug.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha ath ../../../.pr**/*.json GO111MODULE er GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/githubnext/agentics/git/ref/tags/
    • Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha (http block)
  • https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha ty-test.md fg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet env ortcfg GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
  • https://api.github.com/repos/nonexistent/repo/actions/runs/12345
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet ortc�� 1873196414/.github/workflows fg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE n-dir/sh GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/owner/repo/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE ImgIJPdI35Ub env -json GO111MODULE x_amd64/asm GOINSECURE GOMOD GOMODCACHE x_amd64/asm (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go tierignore /opt/hostedtoolc-c /usr/bin/git go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
  • https://api.github.com/repos/owner/repo/contents/file.md
    • Triggering command: /tmp/go-build47470854/b404/cli.test /tmp/go-build47470854/b404/cli.test -test.testlogfile=/tmp/go-build47470854/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /tmp/go-build3751889449/b404/cli.test /tmp/go-build3751889449/b404/cli.test -test.testlogfile=/tmp/go-build3751889449/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true --show-toplevel NVNgnGPLEQds7/eMenv /usr/bin/git node /hom�� --write ../../../**/*.jsGOMOD 64/bin/go --ignore-path ../../../.pretti/home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/.bin/prettier ache/uv/0.11.2/x--check go (http block)
  • https://api.github.com/repos/test-owner/test-repo/actions/secrets
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name echo "��� JavaScGOINSECURE git 64/bin/go tierignore /opt/hostedtoolc-c /usr/bin/git golangci-lint fmt --diff git /sh (create_pull_reqsh /opt/hostedtoolc-c /usr/bin/git go (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI and others added 2 commits March 30, 2026 22:54
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/a56c6e67-eeaf-44e4-8c24-5eacad981b46

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
…version updates

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/a56c6e67-eeaf-44e4-8c24-5eacad981b46

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot AI changed the title [WIP] Update GitHub Actions versions in workflows [actions] Update GitHub Actions versions - 2026-03-30 Mar 30, 2026
Copilot AI requested a review from pelikhan March 30, 2026 23:05
@pelikhan pelikhan marked this pull request as ready for review March 30, 2026 23:20
Copilot AI review requested due to automatic review settings March 30, 2026 23:20
@pelikhan pelikhan merged commit d96e967 into main Mar 30, 2026
50 checks passed
@pelikhan pelikhan deleted the copilot/update-github-actions-versions branch March 30, 2026 23:21
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates pinned GitHub Actions versions across workflow sources and regenerated lockfiles to keep the repo’s CI/workflow automation up to date.

Changes:

  • Bumped versions (and SHA pins) for several reusable actions (notably actions/setup-go, astral-sh/setup-uv, github/stale-repos, and github/codeql-action/upload-sarif).
  • Synced the action pin registries (actions-lock.json and action_pins.json) to the new versions/SHAs.
  • Recompiled workflow lockfiles to reflect the updated pins.

Reviewed changes

Copilot reviewed 52 out of 52 changed files in this pull request and generated no comments.

Show a summary per file
File Description
.github/aw/actions-lock.json Updates action version→SHA pins used for workflow compilation/locking.
pkg/workflow/data/action_pins.json Syncs the internal action pin map to the updated lock registry.
.github/workflows/agent-performance-analyzer.lock.yml Regenerated lockfile to consume updated action SHAs (notably setup-go).
.github/workflows/agent-persona-explorer.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/agentic-observability-kit.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/agentics-maintenance.yml Updates uses: pin for actions/setup-go to the new SHA.
.github/workflows/audit-workflows.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/ci-coach.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/cloclo.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/daily-cli-tools-tester.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/daily-copilot-token-report.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/daily-firewall-report.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/daily-integrity-analysis.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/daily-malicious-code-scan.lock.yml Updates Code Scanning SARIF upload action pin to the new SHA.
.github/workflows/daily-observability-report.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/daily-rendering-scripts-verifier.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/daily-safe-output-optimizer.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/daily-semgrep-scan.lock.yml Updates Code Scanning SARIF upload action pin to the new SHA.
.github/workflows/daily-syntax-error-quality.md Updates source workflow to use actions/setup-go@v6.4.0.
.github/workflows/daily-syntax-error-quality.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/dead-code-remover.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/deep-report.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/dev-hawk.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/example-workflow-analyzer.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/go-logger.md Updates source workflow to use actions/setup-go@v6.4.0.
.github/workflows/go-logger.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/hourly-ci-cleaner.md Updates source workflow to use actions/setup-go@v6.4.0.
.github/workflows/hourly-ci-cleaner.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/mcp-inspector.lock.yml Regenerated lockfile and updates setup-uv to the new SHA (v8.0.0).
.github/workflows/metrics-collector.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/portfolio-analyst.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/prompt-clustering-analysis.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/python-data-charts.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/q.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/release.md Updates actions/setup-go SHA pin used by the release workflow source.
.github/workflows/release.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/safe-output-health.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/security-review.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/shared/ci-data-analysis.md Updates shared module to use actions/setup-go@v6.4.0.
.github/workflows/shared/mcp-debug.md Updates shared module to use actions/setup-go@v6.4.0.
.github/workflows/smoke-claude.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/smoke-codex.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/smoke-copilot-arm.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/smoke-copilot.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/smoke-test-tools.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/stale-repo-identifier.md Updates source workflow to use github/stale-repos@v9.0.6.
.github/workflows/stale-repo-identifier.lock.yml Regenerated lockfile to consume updated action SHAs (including stale-repos).
.github/workflows/static-analysis-report.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/tidy.md Updates source workflow to use actions/setup-go@v6.4.0.
.github/workflows/tidy.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/weekly-blog-post-writer.lock.yml Regenerated lockfile to consume updated action SHAs.
.github/workflows/workflow-normalizer.lock.yml Regenerated lockfile to consume updated action SHAs.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[actions] Update GitHub Actions versions - 2026-03-30

3 participants