Skip to content

Commit ca54650

Browse files
lpcoxlpcox
authored
chore: recompile workflows for gh-aw v0.64.2 and fix safeoutput smoke tests (#2688)
## Changes - Upgrade agent config from v0.63.0 to v0.64.2 - Fix `integrity-filtering-audit.md`: `expires: 7` → `expires: 7d` - Fix `smoke-safeoutputs-discussions.md`: remove unsupported field-level controls (`title`/`body`/`labels` booleans) from `update-discussion` - Fix `smoke-safeoutputs-issues.md`: remove unsupported `title` boolean from `update-issue`, use null `body` field - Add compiled lock files for all 5 safeoutput smoke test workflows - Recompile all 31 workflows with v0.64.2 compiler Closes #2684 (adds the smoke test lock files)
2 parents 5aeb206 + 097a19b commit ca54650

37 files changed

Lines changed: 11844 additions & 4436 deletions

‎.github/agents/agentic-workflows.agent.md‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ Workflows may optionally include:
3030
- Workflow files: `.github/workflows/*.md` and `.github/workflows/**/*.md`
3131
- Workflow lock files: `.github/workflows/*.lock.yml`
3232
- Shared components: `.github/workflows/shared/*.md`
33-
- Configuration: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/github-agentic-workflows.md
33+
- Configuration: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/github-agentic-workflows.md
3434

3535
## Problems This Solves
3636

@@ -52,7 +52,7 @@ When you interact with this agent, it will:
5252
### Create New Workflow
5353
**Load when**: User wants to create a new workflow from scratch, add automation, or design a workflow that doesn't exist yet
5454

55-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/create-agentic-workflow.md
55+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/create-agentic-workflow.md
5656

5757
**Use cases**:
5858
- "Create a workflow that triages issues"
@@ -62,7 +62,7 @@ When you interact with this agent, it will:
6262
### Update Existing Workflow
6363
**Load when**: User wants to modify, improve, or refactor an existing workflow
6464

65-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/update-agentic-workflow.md
65+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/update-agentic-workflow.md
6666

6767
**Use cases**:
6868
- "Add web-fetch tool to the issue-classifier workflow"
@@ -72,7 +72,7 @@ When you interact with this agent, it will:
7272
### Debug Workflow
7373
**Load when**: User needs to investigate, audit, debug, or understand a workflow, troubleshoot issues, analyze logs, or fix errors
7474

75-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/debug-agentic-workflow.md
75+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/debug-agentic-workflow.md
7676

7777
**Use cases**:
7878
- "Why is this workflow failing?"
@@ -82,7 +82,7 @@ When you interact with this agent, it will:
8282
### Upgrade Agentic Workflows
8383
**Load when**: User wants to upgrade workflows to a new gh-aw version or fix deprecations
8484

85-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/upgrade-agentic-workflows.md
85+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/upgrade-agentic-workflows.md
8686

8787
**Use cases**:
8888
- "Upgrade all workflows to the latest version"
@@ -92,7 +92,7 @@ When you interact with this agent, it will:
9292
### Create a Report-Generating Workflow
9393
**Load when**: The workflow being created or updated produces reports — recurring status updates, audit summaries, analyses, or any structured output posted as a GitHub issue, discussion, or comment
9494

95-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/report.md
95+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/report.md
9696

9797
**Use cases**:
9898
- "Create a weekly CI health report"
@@ -102,7 +102,7 @@ When you interact with this agent, it will:
102102
### Create Shared Agentic Workflow
103103
**Load when**: User wants to create a reusable workflow component or wrap an MCP server
104104

105-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/create-shared-agentic-workflow.md
105+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/create-shared-agentic-workflow.md
106106

107107
**Use cases**:
108108
- "Create a shared component for Notion integration"
@@ -112,7 +112,7 @@ When you interact with this agent, it will:
112112
### Fix Dependabot PRs
113113
**Load when**: User needs to close or fix open Dependabot PRs that update dependencies in generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`)
114114

115-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/dependabot.md
115+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/dependabot.md
116116

117117
**Use cases**:
118118
- "Fix the open Dependabot PRs for npm dependencies"
@@ -122,7 +122,7 @@ When you interact with this agent, it will:
122122
### Analyze Test Coverage
123123
**Load when**: The workflow reads, analyzes, or reports test coverage — whether triggered by a PR, a schedule, or a slash command. Always consult this prompt before designing the coverage data strategy.
124124

125-
**Prompt file**: https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/test-coverage.md
125+
**Prompt file**: https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/test-coverage.md
126126

127127
**Use cases**:
128128
- "Create a workflow that comments coverage on PRs"
@@ -169,10 +169,10 @@ gh aw compile --validate
169169

170170
## Important Notes
171171

172-
- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/github-agentic-workflows.md for complete documentation
172+
- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/github-agentic-workflows.md for complete documentation
173173
- Use the MCP tool `agentic-workflows` when running in GitHub Copilot Cloud
174174
- Workflows must be compiled to `.lock.yml` files before running in GitHub Actions
175175
- **Bash tools are enabled by default** - Don't restrict bash commands unnecessarily since workflows are sandboxed by the AWF
176176
- Follow security best practices: minimal permissions, explicit network access, no template injection
177-
- **Network configuration**: Use ecosystem identifiers (`node`, `python`, `go`, etc.) or explicit FQDNs in `network.allowed`. Bare shorthands like `npm` or `pypi` are **not** valid. See https://github.com/github/gh-aw/blob/v0.63.0/.github/aw/network.md for the full list of valid ecosystem identifiers and domain patterns.
177+
- **Network configuration**: Use ecosystem identifiers (`node`, `python`, `go`, etc.) or explicit FQDNs in `network.allowed`. Bare shorthands like `npm` or `pypi` are **not** valid. See https://github.com/github/gh-aw/blob/v0.64.2/.github/aw/network.md for the full list of valid ecosystem identifiers and domain patterns.
178178
- **Single-file output**: When creating a workflow, produce exactly **one** workflow `.md` file. Do not create separate documentation files (architecture docs, runbooks, usage guides, etc.). If documentation is needed, add a brief `## Usage` section inside the workflow file itself.

‎.github/aw/actions-lock.json‎

Lines changed: 22 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -100,10 +100,10 @@
100100
"version": "v0.20.10",
101101
"sha": "fbfd9c6c189226748411491745178e0c2017392d"
102102
},
103-
"anchore/sbom-action@v0.23.1": {
103+
"anchore/sbom-action@v0.24.0": {
104104
"repo": "anchore/sbom-action",
105-
"version": "v0.23.1",
106-
"sha": "57aae528053a48a3f6235f2d9461b05fbcb7366d"
105+
"version": "v0.24.0",
106+
"sha": "e22c389904149dbc22b58101806040fa8d37a610"
107107
},
108108
"astral-sh/setup-uv@v7.6.0": {
109109
"repo": "astral-sh/setup-uv",
@@ -170,35 +170,30 @@
170170
"version": "v1.23.0",
171171
"sha": "ee09b1e59bb240681c382eb1f0abc6a04af72764"
172172
},
173-
"github/codeql-action/upload-sarif@v4.33.0": {
173+
"github/codeql-action/upload-sarif@v4.35.1": {
174174
"repo": "github/codeql-action/upload-sarif",
175-
"version": "v4.33.0",
176-
"sha": "f0213c31c702f929cf06ddb900ac315d246a8997"
175+
"version": "v4.35.1",
176+
"sha": "0e9f55954318745b37b7933c693bc093f7336125"
177177
},
178-
"github/gh-aw-actions/setup@v0.61.2": {
179-
"repo": "github/gh-aw-actions/setup",
180-
"version": "v0.61.2",
181-
"sha": "71cfb3cbe2002225f9d5afa180669fff36b86ea2"
182-
},
183-
"github/gh-aw-actions/setup@v0.62.0": {
184-
"repo": "github/gh-aw-actions/setup",
185-
"version": "v0.62.0",
186-
"sha": "b2c35f34e1013dd9ed2a84c559e2b2fec9ad38e6"
178+
"github/gh-aw-actions/setup-cli@v0.64.2": {
179+
"repo": "github/gh-aw-actions/setup-cli",
180+
"version": "v0.64.2",
181+
"sha": "f22886a9607f5c27e79742a8bfc5faa34737138b"
187182
},
188-
"github/gh-aw-actions/setup@v0.63.0": {
183+
"github/gh-aw-actions/setup@v0.64.2": {
189184
"repo": "github/gh-aw-actions/setup",
190-
"version": "v0.63.0",
191-
"sha": "9128d2542bbf1bdfec94dabeaf3e1d3c0d402577"
185+
"version": "v0.64.2",
186+
"sha": "f22886a9607f5c27e79742a8bfc5faa34737138b"
192187
},
193-
"github/gh-aw/actions/setup@v0.62.0": {
188+
"github/gh-aw/actions/setup@v0.64.2": {
194189
"repo": "github/gh-aw/actions/setup",
195-
"version": "v0.62.0",
196-
"sha": "f1633bcc50ad7480f44d25961863c36fadd787ec"
190+
"version": "v0.64.2",
191+
"sha": "72346ee09bdaa904d167f1be907e590fd9128fa3"
197192
},
198-
"github/stale-repos@v9.0.3": {
193+
"github/stale-repos@v9.0.5": {
199194
"repo": "github/stale-repos",
200-
"version": "v9.0.3",
201-
"sha": "d0f1b1dd26c263d8e4dde6fbc7f2faa3b4bd623b"
195+
"version": "v9.0.5",
196+
"sha": "2ac16fe3d101119ed6e7f3deedddd7604e1029d8"
202197
},
203198
"haskell-actions/setup@v2.10.3": {
204199
"repo": "haskell-actions/setup",
@@ -210,10 +205,10 @@
210205
"version": "v2.2.0",
211206
"sha": "0c5077e51419868618aeaa5fe8019c62421857d6"
212207
},
213-
"ruby/setup-ruby@v1.295.0": {
208+
"ruby/setup-ruby@v1.299.0": {
214209
"repo": "ruby/setup-ruby",
215-
"version": "v1.295.0",
216-
"sha": "319994f95fa847cf3fb3cd3dbe89f6dcde9f178f"
210+
"version": "v1.299.0",
211+
"sha": "3ff19f5e2baf30647122352b96108b1fbe250c64"
217212
},
218213
"super-linter/super-linter@v8.5.0": {
219214
"repo": "super-linter/super-linter",

‎.github/workflows/agentics-maintenance.yml‎

Lines changed: 57 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212
# \ /\ / (_) | | | | ( | | | | (_) \ V V /\__ \
1313
# \/ \/ \___/|_| |_|\_\|_| |_|\___/ \_/\_/ |___/
1414
#
15-
# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.63.0). DO NOT EDIT.
15+
# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.64.2). DO NOT EDIT.
1616
#
1717
# To regenerate this workflow, run:
1818
# gh aw compile
@@ -48,6 +48,12 @@ on:
4848
- 'enable'
4949
- 'update'
5050
- 'upgrade'
51+
- 'safe_outputs'
52+
run_url:
53+
description: 'Run URL or run ID to replay safe outputs from (e.g. https://github.com/owner/repo/actions/runs/12345 or 12345). Required when operation is safe_outputs.'
54+
required: false
55+
type: string
56+
default: ''
5157

5258
permissions: {}
5359

@@ -61,7 +67,7 @@ jobs:
6167
pull-requests: write
6268
steps:
6369
- name: Setup Scripts
64-
uses: github/gh-aw-actions/setup@9128d2542bbf1bdfec94dabeaf3e1d3c0d402577 # v0.63.0
70+
uses: github/gh-aw-actions/setup@f22886a9607f5c27e79742a8bfc5faa34737138b # v0.64.2
6571
with:
6672
destination: ${{ runner.temp }}/gh-aw/actions
6773

@@ -93,7 +99,7 @@ jobs:
9399
await main();
94100
95101
run_operation:
96-
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.operation != '' && !github.event.repository.fork }}
102+
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.operation != '' && github.event.inputs.operation != 'safe_outputs' && !github.event.repository.fork }}
97103
runs-on: ubuntu-slim
98104
permissions:
99105
actions: write
@@ -106,7 +112,7 @@ jobs:
106112
persist-credentials: false
107113

108114
- name: Setup Scripts
109-
uses: github/gh-aw-actions/setup@9128d2542bbf1bdfec94dabeaf3e1d3c0d402577 # v0.63.0
115+
uses: github/gh-aw-actions/setup@f22886a9607f5c27e79742a8bfc5faa34737138b # v0.64.2
110116
with:
111117
destination: ${{ runner.temp }}/gh-aw/actions
112118

@@ -121,9 +127,9 @@ jobs:
121127
await main();
122128
123129
- name: Install gh-aw
124-
uses: github/gh-aw-actions/setup-cli@v0.63.0
130+
uses: github/gh-aw-actions/setup-cli@f22886a9607f5c27e79742a8bfc5faa34737138b # v0.64.2
125131
with:
126-
version: v0.63.0
132+
version: v0.64.2
127133

128134
- name: Run operation
129135
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
@@ -138,3 +144,48 @@ jobs:
138144
setupGlobals(core, github, context, exec, io);
139145
const { main } = require('${{ runner.temp }}/gh-aw/actions/run_operation_update_upgrade.cjs');
140146
await main();
147+
148+
apply_safe_outputs:
149+
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.operation == 'safe_outputs' && !github.event.repository.fork }}
150+
runs-on: ubuntu-slim
151+
permissions:
152+
actions: read
153+
contents: write
154+
discussions: write
155+
issues: write
156+
pull-requests: write
157+
steps:
158+
- name: Checkout actions folder
159+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
160+
with:
161+
sparse-checkout: |
162+
actions
163+
persist-credentials: false
164+
165+
- name: Setup Scripts
166+
uses: github/gh-aw-actions/setup@f22886a9607f5c27e79742a8bfc5faa34737138b # v0.64.2
167+
with:
168+
destination: ${{ runner.temp }}/gh-aw/actions
169+
170+
- name: Check admin/maintainer permissions
171+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
172+
with:
173+
github-token: ${{ secrets.GITHUB_TOKEN }}
174+
script: |
175+
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
176+
setupGlobals(core, github, context, exec, io);
177+
const { main } = require('${{ runner.temp }}/gh-aw/actions/check_team_member.cjs');
178+
await main();
179+
180+
- name: Apply Safe Outputs
181+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
182+
env:
183+
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
184+
GH_AW_RUN_URL: ${{ github.event.inputs.run_url }}
185+
with:
186+
github-token: ${{ secrets.GITHUB_TOKEN }}
187+
script: |
188+
const { setupGlobals } = require('${{ runner.temp }}/gh-aw/actions/setup_globals.cjs');
189+
setupGlobals(core, github, context, exec, io);
190+
const { main } = require('${{ runner.temp }}/gh-aw/actions/apply_safe_outputs_replay.cjs');
191+
await main();

0 commit comments

Comments
 (0)