Recompile workflow lockfiles to align generated Actions with current compiler output#27003
Merged
Recompile workflow lockfiles to align generated Actions with current compiler output#27003
Conversation
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/ffc7f6e3-016f-40bb-8b72-d56fa4637116 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Copilot created this pull request from a session on behalf of
pelikhan
April 18, 2026 10:26
View session
Contributor
|
|
Contributor
|
💫 TO BE CONTINUED... Smoke Claude failed! Our hero faces unexpected challenges... |
Contributor
|
📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing... |
Contributor
|
|
Contributor
|
🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation... |
Contributor
|
📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident... |
Contributor
There was a problem hiding this comment.
Pull request overview
Regenerates checked-in GitHub Actions workflow lockfiles (.lock.yml) to match current gh-aw compiler output and remove drift between sources and compiled artifacts.
Changes:
- Recompiled workflow lockfiles across the workflow catalog using
make recompile. - Updated generated MCP Gateway startup snippets to run the gateway container with an explicit
--user UID:GID(computed fromid -u/id -g).
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/workflow-skill-extractor.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/workflow-normalizer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/workflow-health-manager.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/workflow-generator.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/weekly-safe-outputs-spec-review.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/weekly-issue-summary.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/weekly-blog-post-writer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/video-analyzer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/update-astro.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/unbloat-docs.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/ubuntu-image-analyzer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/tidy.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/test-workflow.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/test-quality-sentinel.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/test-project-url-default.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/test-dispatcher.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/terminal-stylist.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/technical-doc-writer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/super-linter.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/sub-issue-closer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/stale-repo-identifier.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/spec-librarian.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/spec-extractor.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/spec-enforcer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/smoke-workflow-call.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/smoke-workflow-call-with-inputs.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/sergo.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/security-review.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/security-compliance.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/scout.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/schema-feature-coverage.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/safe-output-health.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/repo-tree-map.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/repo-audit-analyzer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/release.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/refiner.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/refactoring-cadence.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/q.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/pr-triage-agent.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/pr-nitpick-reviewer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/poem-bot.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/plan.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/pdf-summary.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/org-health-report.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/metrics-collector.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/mergefest.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/layout-spec-maintainer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/jsweep.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/issue-triage-agent.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/issue-monster.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/issue-arborist.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/hourly-ci-cleaner.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/grumpy-reviewer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/gpclean.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/functional-pragmatist.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/firewall.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/firewall-escape.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/example-permissions-warning.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/draft-pr-cleanup.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/discussion-task-miner.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/dictation-prompt.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/dev.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/dev-hawk.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/dependabot-go-checker.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/dependabot-burner.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/delight.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/dead-code-remover.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/craft.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/copilot-token-optimizer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/copilot-pr-prompt-analysis.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/copilot-pr-nlp-analysis.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/copilot-cli-deep-research.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/copilot-agent-analysis.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/contribution-check.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/constraint-solving-potd.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/codex-github-remote-mcp-test.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/code-simplifier.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/code-scanning-fixer.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/cli-consistency-checker.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/ci-doctor.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/ci-coach.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/changeset.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/breaking-change-checker.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/bot-detection.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/auto-triage-issues.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/artifacts-summary.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/architecture-guardian.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/archie.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/approach-validator.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/ai-moderator.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
| .github/workflows/ace-editor.lock.yml | Regenerated lockfile; MCP gateway docker command now includes --user UID:GID. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 194/194 changed files
- Comments generated: 0
Collaborator
|
@copilot fix mcp gateway start. Revert changes from bd78254 See https://github.com/github/gh-aw/actions/runs/24602699601/job/71943940512 |
Agent-Logs-Url: https://github.com/github/gh-aw/sessions/1edfb446-f64c-43a9-ac37-ea254a2770ea Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Contributor
Author
Fixed in 33faabe: reverted the MCP gateway start change from bd78254 (removed UID/GID Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
Collaborator
|
@copilot merge main and recompile |
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Contributor
|
🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨ |
Contributor
|
|
Contributor
|
📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing... |
Contributor
|
🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation... |
Contributor
|
|
Contributor
Author
Done in 6f515fc — merged Warning Firewall rules blocked me from connecting to one or more addresses (expand for details)I tried to connect to the following addresses, but was blocked by firewall rules:
If you need me to access, download, or install something from one of these locations, you can either:
|
Contributor
Agent Container Tool Check
Result: 12/12 tools available ✅ Overall status: PASS
|
Collaborator
|
@lpcox fyi |
Contributor
|
🤖 Smoke test results for PR #27003 by
Overall: ✅ PASS — Run §24603337419
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
This PR correctly removes the runner UID/GID computation and --user flag from the MCP gateway docker command, simplifying the setup while retaining the docker socket group mapping. The test updates accurately reflect the new behavior. One question worth documenting: what user context does the gateway container now run as, and are /tmp log files written by it still readable by downstream steps?
📰 BREAKING: Report filed by Smoke Copilot · ● 2.1M
| @@ -508,31 +508,16 @@ tools: | |||
| require.NoError(t, err, "Failed to read output file") | |||
Contributor
There was a problem hiding this comment.
Good cleanup — removing the --user assertions keeps the test focused on what actually matters now (socket GID). The remaining assertions clearly document the expected docker command shape.
| @@ -696,9 +696,6 @@ func (c *Compiler) generateMCPSetup(yaml *strings.Builder, tools map[string]any, | |||
|
|
|||
Contributor
There was a problem hiding this comment.
The removal of --user \$\{MCP_GATEWAY_UID}:\$\{MCP_GATEWAY_GID} simplifies the docker command. Since the gateway now runs as the default container user, confirm that any files it writes to /tmp are still accessible by downstream steps (e.g., log redaction). A comment here noting the intended user context would help future readers.
Contributor
|
📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤 |
Contributor
|
Smoke Test 24603337399 — Results Core: ✅✅✅✅✅✅✅✅✅❌✅✅ (#10 Agentic Workflows MCP: error) Overall:
|
Contributor
There was a problem hiding this comment.
💥 Automated smoke test review - all systems nominal! This recompile PR correctly reflects the MCP gateway user isolation changes (removing --user UID:GID from docker run commands) and the noop-reminder import refactoring.
💥 [THE END] — Illustrated by Smoke Claude · ● 284.5K
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This updates generated workflow lockfiles to match the current
gh-awcompilation output. The repo had drift between checked-in.lock.ymlartifacts and whatmake recompilenow emits.Scope
.github/workflows/*.lock.ymlartifacts from current workflow sources.Resulting artifact changes
Recompilation command
✨ PR Review Safe Output Test - Run 24603337399