Fix workflow timestamp check to fail on outdated lock files

[Copilot]

The check_workflow_timestamp_api.cjs script detects when a workflow .md source file is newer than its compiled .lock.yml file, but was only logging an error annotation without failing the step. This allowed workflows to execute with stale configurations.

Changes

• Replace core.error() with core.setFailed() in timestamp check
• Add test coverage for API-based timestamp validation (12 test cases)

Example

When a workflow source is modified after its lock file:

// Before: logged error but step succeeded
core.error(warningMessage);

// After: step fails, blocking workflow execution
core.setFailed(warningMessage);

The activation job now properly fails with:

Lock file 'daily-fact.lock.yml' is outdated! The workflow file 'daily-fact.md' 
has been modified more recently. Run 'gh aw compile' to regenerate the lock file.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login runs/20251231-194528-10342/test-2758341824/.githremote.origin.url --jq /bin/sh g_.a (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login e-github-app-token.git e-github-app-token.git /usr/bin/git l main -lang=go1.25 git -C k/gh-aw/gh-aw/.github/workflows config e/git-remote-https l -c=4 -nolocalimports e/git-remote-https (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login tags/v6 -test.v=true 96c3ed8687754408aeaae6746a775d98956/log.json -test.run=^Test (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Reference: https://github.com/githubnext/gh-aw/actions/runs/20617658329/job/59213445486

Custom agent used: debug-agentic-workflow
Debug and refine agentic workflows using gh-aw CLI tools - analyze logs, audit runs, and improve workflow performance

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.