Skip to content

ci: bump github/gh-aw from 0.49.4 to 0.51.4#44

Merged
zircote merged 1 commit intomainfrom
dependabot/github_actions/github/gh-aw-0.51.4
Mar 2, 2026
Merged

ci: bump github/gh-aw from 0.49.4 to 0.51.4#44
zircote merged 1 commit intomainfrom
dependabot/github_actions/github/gh-aw-0.51.4

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 2, 2026

Bumps github/gh-aw from 0.49.4 to 0.51.4.

Release notes

Sourced from github/gh-aw's releases.

v0.51.4

🌟 Release Highlights

This release focuses on security hardening, codebase health, and early multi-repository PR support — driven largely by automated agentic workflows improving themselves.

🔒 Security Fix

  • Serena local mode removed due to supply chain riskstart_serena_server.sh fetched and executed unversioned code from the tip of an external repository at runtime. The unpinned execution path has been removed; only Docker container mode is supported for Serena going forward. (#19072)

✨ What's New

  • Multi-repository PR support (preview) — Initial groundwork for cross-repo PR operations, including improved slug validation and updated allowed-repos error handling. (#18599)
  • Daily dead code removal workflow — A new agentic workflow runs deadcode analysis daily, selects batches of unreachable Go functions, and opens PRs to remove them — keeping the codebase lean automatically. (#19111)
  • GitHub MCP toolsets updated to v2.1 — The GitHub MCP toolsets mapping is now in sync with the latest upstream source, ensuring workflows have access to the most current GitHub tools. (#19058)

🐛 Bug Fixes & Improvements

  • Removed duplicate JS dead codesafe_output_unified_handler_manager.cjs duplicated HANDLER_MAP from safe_output_handler_manager.cjs and was never used in production. Removing it eliminates potential confusion and reduces maintenance surface. (#19068)
  • Consolidated reporting guidelines — Inline reporting guidelines duplicated across 33+ workflows have been replaced with references to the shared reporting.md, making future updates a single-file change. (#19079)

📚 Documentation

  • Self-healing documentation workflow corrected outdated MCP registry URL (v0v0.1) and other stale references. (#19101)

🌍 Community Contributions

A huge thank you to the community members who reported issues that were resolved in this release:


For complete details, see CHANGELOG.

Generated by Release


What's Changed

... (truncated)

Commits
  • e422993 refactor: update dead code remover workflow configuration and improve action ...
  • deb2230 [log] Add debug logging to parser, workflow, and cli packages (#19110)
  • e16430e [code-simplifier] refactor: fix orphaned comments in schema_validation.go (#1...
  • 67e762b Add daily dead code removal workflow (#19111)
  • 5262f59 [docs] Self-healing documentation fixes from issue analysis - 2026-03-01 (#19...
  • 0d40e9c Beginnings of multi repo PR support (#18599)
  • 683572c Remove dead code: safe_output_unified_handler_manager.cjs (#19068)
  • eee01ed [mcp-tools] Update GitHub MCP toolsets mapping with latest tools from source ...
  • afc697e Remove start_serena_server.sh and Serena local mode (supply chain risk) (#1...
  • 8ead508 Remove inline reporting guidelines from 33 workflows duplicating shared/repor...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github/gh-aw](https://github.com/github/gh-aw) from 0.49.4 to 0.51.4.
- [Release notes](https://github.com/github/gh-aw/releases)
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw@bf34f99...e422993)

---
updated-dependencies:
- dependency-name: github/gh-aw
  dependency-version: 0.51.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 2, 2026

Labels

The following labels could not be found: area/ci. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the type/chore Maintenance and housekeeping label Mar 2, 2026
Copy link
Owner

@zircote zircote left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - CI passing, standard CI dependency bump

@zircote zircote merged commit 68f7b4d into main Mar 2, 2026
17 checks passed
@zircote zircote deleted the dependabot/github_actions/github/gh-aw-0.51.4 branch March 2, 2026 04:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type/chore Maintenance and housekeeping

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant