chore: recompile agentic workflow lock files with gh-aw v0.50.6 by danielmeppiel · Pull Request #119 · microsoft/apm

danielmeppiel · 2026-02-27T11:25:03Z

Summary

Recompiles all agentic workflow lock files using gh aw v0.50.6 (previously compiled with v0.42.2).

Problem

The lock files generated by v0.42.2 had a runtime-import path resolution bug:

Compiler emitted: {{#runtime-import workflows/daily-test-improver.md}}
Runtime resolver saw a path without .github/ prefix, so it prepended workflows/ again
Result: looked for .github/workflows/workflows/daily-test-improver.md → file not found

Failing run: https://github.com/microsoft/apm/actions/runs/22483217187

Fix

v0.50.6 compiler now emits: {{#runtime-import .github/workflows/daily-test-improver.md}}

The runtime correctly strips the .github/ prefix and resolves to .github/workflows/daily-test-improver.md.

Changes

Recompiled 3 workflow lock files (daily-test-improver, daily-doc-updater, cli-consistency-checker)
Added .github/aw/actions-lock.json (new action pin lock file introduced in newer gh-aw versions)

Upgrades from gh-aw v0.42.2 to v0.50.6 to fix runtime-import path resolution bug. The old compiler emitted paths like 'workflows/daily-test-improver.md' which the runtime prefixed with 'workflows/' again, causing 'file not found' errors. The new compiler emits '.github/workflows/daily-test-improver.md' which the runtime correctly strips the '.github/' prefix from. Fixes: https://github.com/microsoft/apm/actions/runs/22483217187

SebastienDegodez · 2026-03-03T10:37:19Z

Is it impossible to inherit a workflow from a source ?

https://docs.github.com/en/actions/how-tos/reuse-automations/reuse-workflows#calling-a-reusable-workflow

danielmeppiel · 2026-03-03T10:48:19Z

Is it impossible to inherit a workflow from a source ?

https://docs.github.com/en/actions/how-tos/reuse-automations/reuse-workflows#calling-a-reusable-workflow

Yes but with GitHub Agentic Workflows we rather edit the .md file and then the workflow yaml gets generated (.lock.yml). So the reuse has to be defined in the markdown file. Do you have a reuse scenario in mind?

Copilot

Pull request overview

Recompiles the repository’s agentic workflow lock files with gh aw v0.50.6 to fix runtime-import path resolution (emitting .github/... paths) and bring generated workflow scaffolding up to date.

Changes:

Recompiled 3 agentic workflow lock files with updated gh-aw metadata, prompt generation steps, and runtime-import paths.
Updated the agentic maintenance workflow output produced by the compiler.
Added .github/aw/actions-lock.json to pin key action SHAs used by gh-aw.

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
.github/workflows/daily-test-improver.lock.yml	Recompiled lock workflow; updates runtime-import path emission and generated steps/permissions/output wiring.
.github/workflows/daily-doc-updater.lock.yml	Recompiled lock workflow; updates runtime-import path emission and generated steps/permissions.
.github/workflows/cli-consistency-checker.lock.yml	Recompiled lock workflow; updates runtime-import path emission and generated steps/permissions.
.github/workflows/agentics-maintenance.yml	Regenerated maintenance workflow and adds a fork guard to skip on forks.
.github/aw/actions-lock.json	New gh-aw action pin lock file capturing SHAs for key actions.

Copilot · 2026-03-03T10:51:36Z

.github/workflows/daily-test-improver.lock.yml

      - push_repo_memory
      - safe_outputs
    if: (always()) && (needs.agent.result != 'skipped')
    runs-on: ubuntu-slim
    permissions:
-      contents: read
+      contents: write


The conclusion job grants contents: write, but this job only downloads artifacts and runs GitHub API scripts (noop/missing_tool/handle_*); it doesn't check out the repo or push commits. Consider reducing this back to contents: read to follow the repo’s least-privilege convention (e.g., .github/workflows/build-release.yml:25-28).

Suggested change

contents: write

contents: read

Copilot · 2026-03-03T10:51:36Z

.github/workflows/daily-doc-updater.lock.yml

    permissions:
-      contents: read
-      discussions: write
+      contents: write


The conclusion job now has contents: write, but the steps shown don’t perform any repo writes (no checkout / git push). To adhere to least-privilege permissions used elsewhere in this repo (see .github/workflows/build-release.yml:25-28), consider switching this back to contents: read.

Suggested change

contents: write

contents: read

Copilot · 2026-03-03T10:51:36Z

.github/workflows/daily-test-improver.lock.yml

    if: >
      ((github.event_name == 'issues' || github.event_name == 'issue_comment' || github.event_name == 'pull_request' ||
      github.event_name == 'pull_request_review_comment' || github.event_name == 'discussion' || github.event_name == 'discussion_comment') &&
-      ((github.event_name == 'issues') && (contains(github.event.issue.body, '/test-assist')) || (github.event_name == 'issue_comment') &&
-      ((contains(github.event.comment.body, '/test-assist')) && (github.event.issue.pull_request == null)) ||
-      (github.event_name == 'issue_comment') && ((contains(github.event.comment.body, '/test-assist')) && (github.event.issue.pull_request != null)) ||
-      (github.event_name == 'pull_request_review_comment') && (contains(github.event.comment.body, '/test-assist')) ||
-      (github.event_name == 'pull_request') && (contains(github.event.pull_request.body, '/test-assist')) ||
-      (github.event_name == 'discussion') && (contains(github.event.discussion.body, '/test-assist')) ||
-      (github.event_name == 'discussion_comment') &&
-      (contains(github.event.comment.body, '/test-assist')))) || (!(github.event_name == 'issues' || github.event_name == 'issue_comment' ||
+      ((github.event_name == 'issues') && ((startsWith(github.event.issue.body, '/test-assist ')) || (github.event.issue.body == '/test-assist')) ||
+      (github.event_name == 'issue_comment') && (((startsWith(github.event.comment.body, '/test-assist ')) ||


This changes the slash-command detection from contains(..., '/test-assist') to requiring the body/comment to start with /test-assist (or equal it). That’s a behavioral change (e.g., /test-assist elsewhere in the text will no longer trigger) and isn’t called out in the PR description. If backward compatibility is desired, consider matching /test-assist at the start of any line or reverting to contains.

Copilot · 2026-03-03T10:51:36Z

.github/workflows/daily-test-improver.lock.yml

+      body: ${{ steps.sanitized.outputs.body }}
+      comment_id: ""
+      comment_repo: ""
+      secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}
      slash_command: ${{ needs.pre_activation.outputs.matched_command }}
+      text: ${{ steps.sanitized.outputs.text }}
+      title: ${{ steps.sanitized.outputs.title }}


activation.outputs now exposes body, text, and title, but they don't appear to be consumed anywhere else in this workflow (only secret_verification_result/slash_command are referenced). If they’re not needed, consider removing these outputs to reduce noise and avoid implying they’re part of the workflow contract.

Suggested change

body: ${{ steps.sanitized.outputs.body }}

comment_id: ""

comment_repo: ""

secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}

slash_command: ${{ needs.pre_activation.outputs.matched_command }}

text: ${{ steps.sanitized.outputs.text }}

title: ${{ steps.sanitized.outputs.title }}

comment_id: ""

comment_repo: ""

secret_verification_result: ${{ steps.validate-secret.outputs.verification_result }}

slash_command: ${{ needs.pre_activation.outputs.matched_command }}

- Bump version to 0.7.4 - Rewrite Unreleased changelog as v0.7.4 with clean style (no bold labels), consolidated CI/governance entries, Added → Fixed → Changed ordering - Add missing PRs: #97 (hooks), #118 (governance), #119 (gh-aw upgrade), #130 (multi-host) - README: fix APM Packages section — accurate installable types, doc links, fix anthropics/courses → anthropics/skills, remove Add yours row, note hooks in apm.yml example comment

Copilot AI review requested due to automatic review settings February 27, 2026 11:25

Copilot started reviewing on behalf of danielmeppiel February 27, 2026 11:25 View session

danielmeppiel requested review from SebastienDegodez and removed request for Copilot February 27, 2026 11:26

SebastienDegodez approved these changes Mar 3, 2026

View reviewed changes

Merge branch 'main' into chore/upgrade-gh-aw-v0.50.6

999f1ab

Copilot AI review requested due to automatic review settings March 3, 2026 10:46

Copilot started reviewing on behalf of danielmeppiel March 3, 2026 10:47 View session

Copilot AI reviewed Mar 3, 2026

View reviewed changes

danielmeppiel merged commit cb5d014 into main Mar 3, 2026
10 checks passed

danielmeppiel deleted the chore/upgrade-gh-aw-v0.50.6 branch March 3, 2026 10:52

danielmeppiel mentioned this pull request Mar 3, 2026

release: v0.7.4 #139

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: recompile agentic workflow lock files with gh-aw v0.50.6#119

chore: recompile agentic workflow lock files with gh-aw v0.50.6#119
danielmeppiel merged 2 commits intomainfrom
chore/upgrade-gh-aw-v0.50.6

danielmeppiel commented Feb 27, 2026

Uh oh!

SebastienDegodez commented Mar 3, 2026

Uh oh!

danielmeppiel commented Mar 3, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Mar 3, 2026

Uh oh!

Copilot AI Mar 3, 2026

Uh oh!

Copilot AI Mar 3, 2026

Uh oh!

Copilot AI Mar 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

danielmeppiel commented Feb 27, 2026

Summary

Problem

Fix

Changes

Uh oh!

SebastienDegodez commented Mar 3, 2026

Uh oh!

danielmeppiel commented Mar 3, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 3, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants