Uh oh!
There was an error while loading. Please reload this page.
Refresh agentic workflows to gh-aw v0.83.5 - #131996
Merged
vitek-karas merged 3 commits intoAug 10, 2026
Merged
Conversation
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a51b11ef-6d6e-4c79-b324-5fc9c08a8e18
|
Azure Pipelines: Successfully started running 1 pipeline(s). 15 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run. |
|
Azure Pipelines: Successfully started running 1 pipeline(s). 15 pipeline(s) were filtered out due to trigger conditions. There may be pipelines that require an authorized user to comment /azp run to run. |
Contributor
There was a problem hiding this comment.
Pull request overview
This PR refreshes the repository’s agentic GitHub Actions workflows to gh-aw v0.83.5, updating pinned action SHAs/container images and incorporating newer safe-outputs / MCP-gateway wiring. The changes primarily touch generated “*.lock.yml” workflows plus the generated agentic maintenance workflow and the shared gh-aw action pin map.
Changes:
- Bump gh-aw compiler references across the lock workflows to v0.83.5 (and update associated action SHAs, firewall/MCP images, Copilot CLI version, etc.).
- Update workflow runtime behavior around MCP gateway startup / docker socket group resolution, safe outputs processing, and additional error/guard outputs.
- Regenerate the agentic maintenance workflow and update the gh-aw actions pin map.
Reviewed changes
Copilot reviewed 8 out of 8 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/holistic-review.lock.yml | Updates pinned gh-aw/actions/containers and refactors MCP gateway + safe outputs plumbing for the holistic review workflow. |
| .github/workflows/closed-issue-reference-check.lock.yml | Same refresh for the closed-issue reference check workflow, including updated MCP server container/features and safe outputs processing. |
| .github/workflows/ci-failure-scan.lock.yml | Same refresh for the CI failure scan workflow, including updated pins and MCP gateway configuration. |
| .github/workflows/agentics-maintenance.yml | Regenerated maintenance workflow for v0.83.5; splits “close expired” operations into discussions/issues/PR jobs and updates action pins. |
| .github/aw/actions-lock.json | Updates the pinned github/gh-aw-actions/* entries to v0.83.5 SHAs. |
Uh oh!
There was an error while loading. Please reload this page.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a51b11ef-6d6e-4c79-b324-5fc9c08a8e18
PureWeen
reviewed
Aug 7, 2026
PureWeen
left a comment
Member
There was a problem hiding this comment.
Can we bump this to v0.85.4 instead? It was the latest stable release before this PR opened, while v0.83.5 is marked prerelease upstream.
It looks like v0.83.5 was selected because it introduced the safe-output metadata channel this PR needs, but I could not find a compatibility reason to stop there. Regenerating with v0.85.4 would also pick up the security hardening and fixes since then.
Note
This review comment was generated with GitHub Copilot.
jkoritzinsky
approved these changes
Aug 8, 2026
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a51b11ef-6d6e-4c79-b324-5fc9c08a8e18
Contributor
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 10 out of 10 changed files in this pull request and generated 2 comments.
Suppressed comments (2)
.github/workflows/holistic-review.md:82
- The PR title/description says the workflows are being refreshed to gh-aw v0.83.5, but this workflow source now states the recognized agent config paths are for gh-aw v0.85.4. The lock workflows in this PR also advertise they were generated with v0.85.4, so the PR metadata and the pinned compiler version appear out of sync.
Please reconcile by either updating the PR title/description to v0.85.4, or by pinning/regenerating the workflows with v0.83.5 so the version claims match across metadata, source .md, and .lock.yml files.
# These are the agent configuration paths recognized by gh-aw v0.85.4.
# Re-audit this list whenever the pinned gh-aw compiler version changes.
trusted_agent_folders=(
.gitattributes:86
- Removing
merge=oursfrom the lock-workflow attribute will make Git merges try to merge the generated.github/workflows/*.lock.ymlfiles normally, which can create frequent conflicts/churn for auto-generated content. If these files are intended to remain generator-owned, keep the merge strategy override to avoid noisy merges.
.github/workflows/*.lock.yml linguist-generated=true
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
This was referenced Aug 9, 2026
vitek-karas
commented
Aug 10, 2026
MemberAuthor
@PureWeen thanks for the feedback - I updated the PR to use the newest released version. Can you please take another look and possibly approve (need an approval for merge). |
kotlarmilos
approved these changes
Aug 10, 2026
Uh oh!
There was an error while loading. Please reload this page.
jtschuster pushed a commit
to jtschuster/runtime
that referenced
this pull request
Aug 11, 2026
## Summary - Upgrade all six agentic workflows from gh-aw v0.82.6 to the latest stable release, v0.85.4. - Regenerate the six workflow lock files and shared action pins with `--schedule-seed dotnet/runtime`. - Enable future workflows to use safe-output `data` payloads to store workflow-related metadata on issues and pull requests in a standard format. - Align the holistic-review trusted configuration paths with the engines supported by v0.85.4, removing the retired Crush, Antigravity, and OpenCode paths. - Accept v0.85.4's generated-surface updates: remove the unused agentics maintenance workflow because no workflow configures expiration, and remove the ineffective `merge=ours` lock-file attribute. ## Validation - All six workflows compile successfully with gh-aw v0.85.4. - `gh aw compile --schedule-seed dotnet/runtime --no-emit --validate --zizmor --poutine` - A second full compilation produced an identical diff. > [!NOTE] > This PR description was generated by GitHub Copilot. --------- Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a51b11ef-6d6e-4c79-b324-5fc9c08a8e18
vitek-karas added a commit
that referenced
this pull request
Aug 12, 2026
## Summary Several agentic workflows used HTML comments as machine-readable markers. That does not work: gh-aw removes agent-provided HTML comments when it sanitizes safe-output text. The comments were therefore not present in the posted issue or PR content, so later workflow runs could not reliably recognize earlier work. On #128405, this allowed `ci-failure-fix` to post two different handoff comments. This change replaces those comments with markers that survive publishing: - `safe-outputs.data` where the output type supports structured data. - Stable visible Markdown fields where structured data is not supported or would break the required content format. Existing visible markers are still recognized so older workflow output continues to work. ## Changes by workflow - **`ci-failure-fix`**: Adds structured identifiers to fix PRs, help-wanted PRs, and handoff comments. Deduplication now checks every comment instead of assuming comments are at a fixed position, and it still recognizes older visible markers. - **`closed-issue-reference-check`**: Adds structured identifiers to advisory comments. The pre-check skips issues that contain either the new structured marker or the older workflow-specific marker and advisory heading. - **`ci-failure-scan`**: Moves KBE authoring guidance and the verified-match count into collapsed, clearly labeled sections. KBE bodies still contain exactly one JSON block, as required by Build Analysis. - **`ci-failure-scan-feedback`**: Reads the new `ci-failure-fix` identifiers while keeping compatibility with older markers. Its tracker identity and window are stored in a collapsed visible section, and tracker updates explicitly replace the body instead of appending to it. The shared workflow guidance now documents that HTML comments are removed and explains when to use structured data or visible fields. The affected generated workflows were refreshed with gh-aw v0.83.5. ## Related change #131996 is the repository-wide mechanical refresh to gh-aw v0.83.5. This PR contains the workflow behavior and authoring changes, and regenerates the affected workflows with the same compiler version. ## Validation - Compiled and validated the affected workflows with gh-aw v0.83.5. - Ran poutine and zizmor on the changed workflows. - Checked the KBE templates keep exactly one JSON block and contain the required collapsed guidance and metadata. > [!NOTE] > This PR description was generated with GitHub Copilot. --------- Copilot-Session: 2038caaa-4cae-49b0-84e0-a077f5c91aa0
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
--schedule-seed dotnet/runtime.datapayloads to store workflow-related metadata on issues and pull requests in a standard format.merge=ourslock-file attribute.Validation
gh aw compile --schedule-seed dotnet/runtime --no-emit --validate --zizmor --poutineNote
This PR description was generated by GitHub Copilot.