Skip to content

bump Gemini CLI default to 0.39.1 to fix API_KEY_INVALID smoke failures#28385

Merged
pelikhan merged 2 commits intomainfrom
copilot/rotate-gemini-api-key
Apr 25, 2026
Merged

bump Gemini CLI default to 0.39.1 to fix API_KEY_INVALID smoke failures#28385
pelikhan merged 2 commits intomainfrom
copilot/rotate-gemini-api-key

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Apr 25, 2026

Smoke Gemini has been failing 100% of runs with 400 API_KEY_INVALID from generativelanguage.googleapis.com. The pinned CLI version (0.37.2) is stale; 0.39.x adds explicit support for API keys containing dots, which may be causing the rejection with the current key format.

Changes

  • pkg/constants/version_constants.goDefaultGeminiVersion: 0.37.20.39.1
  • .github/workflows/smoke-gemini.lock.yml — recompiled; now installs @google/gemini-cli@0.39.1
  • .changeset/patch-bump-gemini-cli-0-39-1.md — changeset entry

Note: The GEMINI_API_KEY repository secret is independently expired and must be rotated in Google AI Studio — this version bump is a necessary but not sufficient fix.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

  • https://api.github.com/graphql
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw pQvnru202g74 (http block)
    • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -embedcfg /tmp/go-build85815428/b286/embedcfg -pack (http block)
  • https://api.github.com/orgs/test-owner/actions/secrets
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /orgs/test-owner/actions/secrets --jq .secrets[].name ithub/workflows rev-parse x_amd64/compile --binary mp ache/node/24.14.--write x_amd64/compile -C k/gh-aw/gh-aw rev-parse x_amd64/compile . N8Ja/.diffsize.tapi bin/git x_amd64/compile (http block)
  • https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv printf '%s' "$1"; printf '%s' "$2" 1>&2 sh /usr/bin/git diagnostic noisegit d2UJ/DbmGN00V4XBrev-parse 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/link /usr/bin/git 50/001/test-compnode oXnN/-5aZqfwMX4H/opt/hostedtoolcache/node/24.14.1/x64/bin/npm ortcfg.link git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq [.object.sha, .object.type] | @tsv --show-toplevel git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v3
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv /tmp/go-build3111326241/b450/_pkg_.a -trimpath /usr/bin/git -p main -lang=go1.25 git conf�� user.email test@example.com /usr/bin/git go1.25.8 -c=4 -nolocalimports git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq [.object.sha, .object.type] | @tsv --show-toplevel l /usr/bin/gh w/js/**/*.json' git rev-parse x_amd64/asm gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq /usr/bin/git ithub/workflows @sentry/mcp-servrev-parse /usr/bin/gh git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v5
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv 01/test1.md 1326241/b216/vet.cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p github.com/githudiff -lang=go1.25 ache/go/1.25.8/x--name-only (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/x64/pkg/tool/linu-dwarf=false /usr/bin/git se 1326241/b187/vet\n ache/go/1.25.8/x: git rev-�� --show-toplevel ache/go/1.25.8/x^remote\..*\.gh-resolved$ /usr/bin/git Onlymin-integritgit -trimpath /opt/hostedtoolc--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq [.object.sha, .object.type] | @tsv --show-toplevel /bin/sh /usr/bin/git git-receive-packgit l 1/x64/bin/node git rev-�� --show-toplevel 1/x64/bin/node /usr/bin/git --show-toplevel x_amd64/compile /usr/bin/git git (http block)
  • https://api.github.com/repos/actions/checkout/git/ref/tags/v6
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv : ${{ github.repository }} rev-parse /usr/bin/git yphen1380962617/git yphen1380962617/rev-parse x_amd64/compile git -C /tmp/gh-aw-test-runs/20260425-015633-36322/test-1199007140/custom/workflows config ache/node/24.14.1/x64/bin/node remote.origin.urgit GO111MODULE x_amd64/vet ache/node/24.14.1/x64/bin/node (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv for-each-ref --format=%(objectname) /usr/bin/git &1 rev-parse ck.yml git -C /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_only_defaults_repo1974589260/001 rev-parse /usr/bin/git ithub/workflows git x_amd64/compile git (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v8
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/bin/git 5633-36322/test-git 7tbAQfilcefdiXaacommit /opt/hostedtoolc-m git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linuremote.origin.url /usr/bin/git rt.go rt_test.go es.test git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv xterm-color erignore /usr/bin/git 0009-51969/test-git git ache/go/1.25.8/x-m git rev-�� --show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet /usr/bin/git 0009-51969/test-git /opt/hostedtoolcrev-parse 1/x64/bin/node git (http block)
  • https://api.github.com/repos/actions/github-script/git/ref/tags/v9
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json o x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json oken.go x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
  • https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/compile /usr/bin/git 8222335/b062/_pkgit om/goccy/go-yamlrev-parse 64/pkg/tool/linu--show-toplevel /usr/bin/git conf�� --get-regexp ^remote\..*\.gh-resolved$ /usr/bin/infocmp 3042129244/.githgit .cfg 64/pkg/tool/linu--show-toplevel infocmp (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/vet /usr/bin/git g_.a config /usr/bin/git git conf�� user.name Test User /usr/bin/git mLsRemoteWithReagit mLsRemoteWithRearev-parse n-dir/sh git (http block)
  • https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw/.github/workflows/agentic-observability-kit.md x_amd64/compile /usr/bin/git -json GO111MODULE x_amd64/compile git -C ansitiveImports3799342142/001 show /tmp/go-build3111326241/b452/testutil.test -json GO111MODULE x_amd64/vet /tmp/go-build3111326241/b452/testutil.test (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --show-toplevel x_amd64/compile /usr/bin/git y-test.md .cfg 64/pkg/tool/linu--show-toplevel /usr/bin/git remo�� -v 64/pkg/tool/linux_amd64/vet /usr/bin/git 3042129244/.githgit .cfg 64/pkg/tool/linu--show-toplevel git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv --bare l /usr/bin/git k/gh-aw/gh-aw/.ggit ghcr.io/github/srev-parse lifier.lock.yml git -C /tmp/TestGuardPolicyMinIntegrityOnlymin-integrity_with_explicit_repo352978238/001 remote /opt/hostedtoolcache/node/24.14.1/x64/bin/node re --log-level=egit git /node node (http block)
  • https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/gh-aw-test-runs/20260425-015633-36322/test-3042129244/.github/workflows rev-parse /usr/bin/git -c=4 -nolocalimports -importcfg git rev-�� runs/20260425-015633-36322/test-2621669057 /home/REDACTED/work/gh-aw/gh-aw/pkg/semverutil/semverutil_test.go /usr/bin/infocmp 01 GO111MODULE x_amd64/vet infocmp (http block)
    • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv /tmp/gh-aw-test-runs/20260425-020009-51969/test-add-source-path-1937664704/.github/workflows remote /usr/bin/infocmp /repos/astral-shgit herFiles,CFiles,rev-parse bservability-kit--show-toplevel infocmp -1 xterm-color git /opt/hostedtoolcache/node/24.14.1/x64/bin/node h ../../../.pretgit config x_amd64/cgo node (http block)
  • https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv (http block)
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv user.email ings.cjs odules/npm/node_modules/@npmcli/run-script/lib/node-gyp-bin/git cjs st/suppress-warn-o 64/bin/node forks.js rev-�� HEAD st/suppress-warnmain _modules/.bin/gi-lang=go1.25 HEAD -aw/aw-test-owne--experimental-import-meta-resolve k/gh-aw/gh-aw/ac--require st/dist/workers//home/REDACTED/work/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs (http block)
    • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv . tions/setup/js/node_modules/vite--stdout $name) { hasDiscussionsEnabled } } d git tions/setup/node-m git init�� -q (http block)
  • https://api.github.com/repos/github/gh-aw
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch user.email tions/setup/js/node_modules/viteowner=github 64/pkg/tool/linux_amd64/link odules/npm/node_git git bin/git 64/pkg/tool/linuconfig bran�� -M t-patch-utils-GwjtNo/.diffsize.tmp repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } --is-ancestor k/gh-aw/gh-aw/ac-C es/.bin/git git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch ithub/workflows k/gh-aw/gh-aw/actions/setup/js/node_modules/vitest/suppress-warnings.cjs /opt/hostedtoolcache/node/24.14.1/x64/bin/node r/work/gh-aw/gh-git /home/REDACTED/wor-C run-script/lib/n/home/REDACTED/work/gh-aw/gh-aw k/gh-aw/gh-aw/acshow 7548�� ithub/workflows test-4pro3p/error.go /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link node --conditions ed } } /opt/hostedtoolcconfig (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.1.2
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv --show-toplevel 64/pkg/tool/linuorigin /usr/bin/git UTzhoCsYS .cfg 64/pkg/tool/linu--show-toplevel /usr/bin/git remo�� -v 64/pkg/tool/linu--auto /usr/bin/gh 8222335/b043/_pkgit .cfg 64/pkg/tool/linu--show-toplevel gh (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.1.2 --jq [.object.sha, .object.type] | @tsv --show-toplevel nVtBL73/s882uGZS_HuTA9w4NH-b /usr/bin/git k/gh-aw/gh-aw --jq 95787ea5e6a7170b--show-toplevel git rev-�� --show-toplevel git /usr/bin/git k/gh-aw/gh-aw/.ggit show ache/go/1.25.8/x--show-toplevel git (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv /tmp/gh-aw-test-runs/20260425-015633-36322/test-3123139043/.github/workflows rev-parse .test -json GO111MODULE x_amd64/compile .test lope�� /repos/actions/gOUTPUT l /usr/bin/infocmp168.63.129.16 -json GO111MODULE x_amd64/vet infocmp (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv /tmp/gh-aw-add-gitattributes-test4171581828 show /usr/bin/git ithub/workflows rev-parse /usr/bin/git git -C /tmp/gh-aw-test-remote.origin.url config /usr/bin/git remote.origin.urgit rev-parse x_amd64/compile git (http block)
  • https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ithub-script/git/ref/tags/v9 x_amd64/compile bject.type] | @tsv -json GO111MODULE x_amd64/compile git -C 2" 1>&2 remote rue,"errors":[],"warnings":[]}] eturned GO111MODULE x_amd64/vet /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linux_amd64/link (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv -aw/git/ref/tags/v2.0.0 infocmp bject.type] | @tsv ithub/workflows git yml git -C /tmp/gh-aw-test-runs/20260425-020009-51969/test-4282291572/.github/workflows config Name,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle remote.origin.urgit git -healer.lock.yml--show-toplevel infocmp (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE b/gh-aw/pkg/strirev-parse ache/go/1.25.8/x--show-toplevel 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE 64/pkg/tool/linu-nolocalimports GOINSECURE g/x/crypto/cryptrev-parse 8222335/b006/sym--show-toplevel 64/pkg/tool/linu/tmp/go-build3111326241/b466/_testmain.go (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/1/artifacts --jq .artifacts[].name {{context.GOARCH}} {{context.Compiler}} ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet unsafe -m /opt/hostedtoolc--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet list�� 0009-51969/test-3959492528/.github/workflows -f /opt/hostedtoolcache/node/24.14.1/x64/lib/node_modules/npm/node_modules/@npmcli/run-script/lib/nxterm-color ./../.prettieriggit unsafe p-tools-report.l--show-toplevel sh (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD 8222335/b047/sym--show-toplevel 64/pkg/tool/linux_amd64/vet env 743722187 SK0W/BJGJRDpSI4wKt0zQSK0W ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xTest User (http block)
    • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE /go-yaml/interna/tmp/js-hash-test-1468909949/test-hash.js GOMODCACHE 64/pkg/tool/linux_amd64/vet env 3713630199 GO111MODULE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-trimpath (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12345/artifacts --jq .artifacts[].name --package-lock-only e_modules/.bin/node commit.gpgsign false formance-summary--show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linurev-parse k/gh�� ed } } on rkflow/js/**/*.json /../../.prettiergit erignore repository(owne--show-toplevel sh (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE 8222335/b007/abiinit ache/go/1.25.8/x64/src/internal//tmp/go-build3111326241/b446/_pkg_.a 64/pkg/tool/linux_amd64/vet env 743722187 aqNl/Sak5XWYSYfQ9xL6IaqNl ache/go/1.25.8/x64/pkg/tool/linu-lang=go1.25 GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xtest@example.com (http block)
    • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE /go-yaml/printerrev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet env 3713630199 .cfg ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/12346/artifacts --jq .artifacts[].name --package-lock-only es/.bin/node feature-branch false repository(owne--show-toplevel /opt/hostedtoolcache/go/1.25.8/x64/pkg/tool/linurev-parse k/gh�� ode_modules/.bin/home/REDACTED/work/gh-aw/gh-aw/.github/workflows on ache/node/24.14.1/x64/bin/node /../../.prettiergit erignore n-dir/node sh (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE b/gh-aw/pkg/typerev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 TE68/Ns65yq8CR2ZxCmVfTE68 64/pkg/tool/linux_amd64/vet GOINSECURE (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/2/artifacts --jq .artifacts[].name -json=Name,ImportPath,Error,Dir,GoFiles,IgnoredGoFiles,IgnoredOt../../../.prettierignore ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -test=false -export=true ode-gyp-bin/sh ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet list�� 0009-51969/test-3959492528 -json=Name,ImportPath,Error,Dir,GoFiles,IgnoredGoFiles,IgnoredOtherFiles,CFiles,CgoFiles,CXXFilerev-parse res.lock.yml ./../.prettieriggit -export=true -deps=true sh (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE b/gh-aw/pkg/loggrev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE 64/pkg/tool/linux_amd64/compile GOINSECURE fips140/edwards2config ache/go/1.25.8/xuser.email 64/pkg/tool/linutest@example.com (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/3/artifacts --jq .artifacts[].name k/gh-aw/gh-aw/acshow ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -q l tax-error-qualit--show-toplevel ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -V=f�� /ref/tags/v9 go sv ./../.prettieriggit git kflows/cli-consi--show-toplevel sh (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE /go-yaml GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE 64/pkg/tool/linux_amd64/vet GOINSECURE 8222335/b011/sysrev-parse ache/go/1.25.8/x--show-toplevel 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts --jq .artifacts[].name k/gh-aw/gh-aw/acrev-parse 1/x64/bin/node -q -m l ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -has�� ithub/workflows/approach-validator.md go e/git-upload-pack ./../.prettieriggit git er: String!, $na--show-toplevel sh (http block)
  • https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name .cfg 64/pkg/tool/linux_amd64/vet GOINSECURE b/gh-aw/pkg/consrev-parse GOMODCACHE 64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 l_test.go 64/pkg/tool/linux_amd64/compile GOINSECURE fips140/ed25519 GOMODCACHE 64/pkg/tool/linux_amd64/compile (http block)
    • Triggering command: /usr/bin/gh gh api --paginate repos/{owner}/{repo}/actions/runs/5/artifacts --jq .artifacts[].name k/gh-aw/gh-aw/acconfig ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -q -m (http block)
  • https://api.github.com/repos/github/gh-aw/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path -c=4 -nolocalimports -importcfg /tmp/go-build3111326241/b434/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/repoutil/repoutil.go /home/REDACTED/work/gh-aw/gh-aw/pkg/repoutil/repoutil_test.go env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 GOMOD GOMODCACHE x_amd64/vet env g_.a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 GOMOD GOMODCACHE 64/pkg/tool/linuremote.myorg.url env 8222335/b237/_pkg_.a 4ACQ/f02Eva1ttQPQuPWq4ACQ ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE t/message GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url (http block)
  • https://api.github.com/repos/github/gh-aw/contents/.github/workflows/shared/reporting.md
    • Triggering command: /tmp/go-build3111326241/b404/cli.test /tmp/go-build3111326241/b404/cli.test -test.testlogfile=/tmp/go-build3111326241/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile (http block)
    • Triggering command: /tmp/go-build1803355670/b404/cli.test /tmp/go-build1803355670/b404/cli.test -test.testlogfile=/tmp/go-build1803355670/b404/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true clude=G101,G115,sh st/suppress-warn-c $name) { has"prettier" --write '**/*.cjs' '**/*.ts' '**/*.json' --ignore-path ../../../.pret.prettierignore git -C ithub/workflows rev-parse ck.yml l t-patch-utils-fC-c n-dir/git git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.47.4
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel ache/go/1.25.8/xrepos/{owner}/{repo}/actions/runs/2/artifacts /usr/bin/git 5633-36322/test-git 1326241/b222/vetrev-parse ache/go/1.25.8/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.8/xowner/test-repo /usr/bin/git api-consumption-ls /tmp/go-build311-lh /opt/hostedtoolc/tmp/gh-aw/aw-feature-branch.patch git (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.47.4 --jq [.object.sha, .object.type] | @tsv --show-toplevel git /usr/bin/gh efaultBranchFromgit efaultBranchFromrev-parse .cfg gh api --paginate repos/{owner}/{repo}/actions/runs/4/artifacts /usr/bin/git .artifacts[].namls k/gh-aw/gh-aw/ac-lh 1/x64/bin/node git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv 5633-36322/test-source-field-variant-341569156/.github/workflows 1326241/b231/vet.cfg .cfg GOSUMDB GOWORK 64/bin/go ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -o efaultBranchFromLsRemoteWithRealGitcustom_branch1918626185/001' efaultBranchFromLsRemoteWithRealGitcustom_branch1918626185/001' ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p math/rand/v2 -lang=go1.25 ache/go/1.25.8/x64/pkg/tool/linuremote.origin.url (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq [.object.sha, .object.type] | @tsv Gitbranch_with_hyphen2050697311/001' Gitbranch_with_hyphen2050697311/001' 64/bin/go -f owner=github -f git -C ../pkg/workflow/js/**/*.json' --ignore-path ../../../.prettierignore GoFiles,IgnoredGoFiles,IgnoredOtherFiles,CFiles,command-line-arguments kflows/gpclean.lock.yml remote.origin.urgit node r: $owner, name: $name) { hasfor-each-ref git (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq [.object.sha, .object.type] | @tsv ithub/workflows @sentry/mcp-server@0.32.0 /usr/bin/gh l (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet _bra�� g_.a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env g_.a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq [.object.sha, .object.type] | @tsv -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env g_.a GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
  • https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv (http block)
    • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq [.object.sha, .object.type] | @tsv ithub/workflows oFiles,IgnoredOtherFiles,CFiles,CgoFiles,CXXFiles,MFiles,HFiles,FFiles,SFiles,SwigFiles,SwigCXXFrev-parse /usr/bin/gh l (http block)
  • https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv 5633-36322/test-source-field-variant-341569156/.github/workflows 1326241/b260/vet.cfg .cfg GOSUMDB GOWORK 64/bin/go ache/go/1.25.8/x--jq -o 8222335/b218/importcfg -trimpath ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet -p crypto/internal/run -lang=go1.25 ache/go/1.25.8/x12345 (http block)
    • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq [.object.sha, .object.type] | @tsv k/gh-aw/gh-aw show 64/bin/go -q ode_modules/vite-C 1/x64/bin/node git ode_�� k/gh-aw/gh-aw/.github/workflows GoFiles,IgnoredGoFiles,IgnoredOtherFiles,CFiles,CgoFiles,CXXFiles,MFiles,HFiles,FFiles,SFiles,Swbranch /usr/bin/git l tions/setup/js/nconfig $name) { has--get git (http block)
  • https://api.github.com/repos/nonexistent/repo/actions/runs/12345
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE hpke GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion k/gh-aw/gh-aw/.ginfocmp git .yml e/git /hom�� --write **/*.cjs epo.git **/*.json --ignore-path ../../../.pretti--show-toplevel sh (http block)
  • https://api.github.com/repos/owner/repo/actions/workflows
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh workflow list --repo owner/repo --json name,path,state ache/go/1.25.8/x64/pkg/tool/linux_amd64/vet GOINSECURE GOMOD GOMODCACHE ache/go/1.25.8/xorigin -o 5633-36322/test-add-source-path-468548527/.github/workflows -trimpath .cfg -p math -lang=go1.25 ache/go/1.25.8/xrepos/{owner}/{repo}/actions/runs/12345/artifacts (http block)
    • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 846a91805cc0fb5c-d --binary (http block)
  • https://api.github.com/repos/test-owner/test-repo/actions/secrets
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name /home/REDACTED/work/gh-aw/gh-aw/.github/workflows config oken-optimizer.lock.yml remote.origin.ursh mp k/node_modules/."prettier" --write '../../../**/*.json' '!../../../pkg/workflow/js/**/*.json' ---errorsas git -C ithub/workflows config x_amd64/compile remote.origin.urnode N8Ja/.diffsize.t/tmp/js-hash-test-64862091/test-hash.js $name) { has/tmp/TestHashConsistency_GoAndJavaScript277821706/001/test-frontmatter-with-nested-objects.md x_amd64/compile (http block)
  • https://api.github.com/repos/test/repo
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch 1923260899/.github/workflows 1326241/b038/vet.cfg .cfg GOINSECURE til GOMODCACHE ache/go/1.25.8/x64/pkg/tool/linu-test.v=true (http block)
    • Triggering command: /usr/bin/gh gh api /repos/test/repo --jq .default_branch runs/20260425-020009-51969/test-3693613521 config /usr/bin/git s/test.md show kflow-updater.lo--show-toplevel git init�� tions/node_modul/tmp/gh-aw-test-runs/20260425-020009-51969/test-source-field-variant-3643310985/git docker /usr/bin/git ithub/workflows ghcr.io/github/srev-parse /usr/bin/git git (http block)
  • invalid.example.invalid
    • Triggering command: /usr/lib/git-core/git-remote-https /usr/lib/git-core/git-remote-https origin https://invalid.example.invalid/nonexistent-repo.git e/git conf�� --local --get ode_modules/.bin/git =receive Test User k/gh-aw/node_modfor-each-ref (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

Copilot AI changed the title [WIP] Fix Gemini API_KEY_INVALID issue by rotating API key bump Gemini CLI default to 0.39.1 to fix API_KEY_INVALID smoke failures Apr 25, 2026
@pelikhan pelikhan marked this pull request as ready for review April 25, 2026 02:06
Copilot AI review requested due to automatic review settings April 25, 2026 02:06
Copilot AI requested a review from gh-aw-bot April 25, 2026 02:06
@pelikhan pelikhan merged commit 8848e0f into main Apr 25, 2026
31 checks passed
@pelikhan pelikhan deleted the copilot/rotate-gemini-api-key branch April 25, 2026 02:07
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the pinned Google Gemini CLI version used by gh-aw and the Smoke Gemini workflow to address API key parsing issues seen with older Gemini CLI releases.

Changes:

  • Bump DefaultGeminiVersion from 0.37.2 to 0.39.1
  • Recompile smoke-gemini.lock.yml to install @google/gemini-cli@0.39.1
  • Add a changeset documenting the Gemini CLI version bump
Show a summary per file
File Description
pkg/constants/version_constants.go Updates the default Gemini CLI version used by workflow generation/engine install logic.
.github/workflows/smoke-gemini.lock.yml Updates the pinned Gemini CLI install step to 0.39.1 in the locked workflow.
.changeset/patch-bump-gemini-cli-0-39-1.md Adds release note entry for the Gemini CLI bump.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 3/3 changed files
  • Comments generated: 1

"gh-aw": patch
---

Bump default Gemini CLI version to 0.39.1 to restore Smoke Gemini health (API_KEY_INVALID failures with 0.37.2). 0.39.x includes improved API key handling (supports keys with dots) and other authentication fixes.
@github-actions github-actions Bot mentioned this pull request Apr 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[aw-failures] smoke-gemini: API_KEY_INVALID — Gemini API key needs rotation

4 participants