Fix safe_outputs: skip PR review comments outside PR context, register custom safe job types by Copilot · Pull Request #20548 · github/gh-aw

Copilot · 2026-03-11T16:52:16Z

Two distinct failures caused the safe_outputs job to error in strict mode when running on schedule (non-PR context).

Root Causes

1. create_pull_request_review_comment / reply_to_pull_request_review_comment counted as failures outside PR context

Both handlers returned {success: false, error: "..."} without skipped: true when not in a PR context. The handler manager counts !success && !skipped as a hard failure. Added skipped: true so these are treated as graceful no-ops, consistent with other handlers.

2. send_slack_message: No handler loaded

Custom safe-output jobs (defined under safe-outputs.jobs:) were not being registered in the GH_AW_SAFE_OUTPUT_JOBS env var. The compiler's buildSafeOutputJobsEnvVars only included built-in jobs with known URL outputs; unknown job names fell through to continue. The handler manager uses GH_AW_SAFE_OUTPUT_JOBS to know which message types are handled by dedicated job steps — without it, custom types are flagged as "No handler loaded."

Changes

create_pr_review_comment.cjs / reply_to_pr_review_comment.cjs: Add skipped: true to non-PR-context early returns.
notify_comment.go — buildSafeOutputJobsEnvVars: Introduce systemSafeOutputJobNames (safe_outputs, upload_assets) and include all other job names as custom types with an empty URL key:

// Before: default case silently dropped custom job names
default:
continue// send_slack_message never reached GH_AW_SAFE_OUTPUT_JOBS// After: custom jobs included so handler manager skips them gracefully
default:
ifsystemSafeOutputJobNames[jobName] {
continue
}
jobOutputMapping[jobName] =""// e.g. {"send_slack_message": ""}continue

Compiled workflows now emit GH_AW_SAFE_OUTPUT_JOBS: "{\"send_slack_message\":\"\"}" for any workflow defining custom safe-output jobs.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw GO111MODULE datedAt,event,hestatus git rev-�� --show-toplevel 0XVD7GS/mRL0tEU7JbrieQ94-F8q /usr/bin/gh -json GO111MODULE 64/bin/go gh (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw go /usr/bin/git node /opt�� prettier --write 64/bin/go !../../../pkg/wonode --ignore-path ../../../.pretti--check go (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw go /usr/bin/git node /opt�� prettier --write 64/bin/go !../../../pkg/wo/bin/sh --ignore-path ../../../.prettiGOPATH=$(go env GOPATH); \ if command -v golangci-lint >/dev/null 2>&1 || [ -x "$GOPATH/bin/golangci-lint" ]; then \ PATH="$GOPATH/bin:$PATH" golangci-lint run; \ else \ echo "golangci-lint is not installed. Run 'make deps-dev' to install dependencies." (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --get remote.origin.url /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel node /usr/bin/git prettier --check 64/bin/go git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha C0s6/mdFWarlUYM2MrA09C0s6 l /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE 92428/b401/importcfg env k/gh-aw/gh-aw/pkg/logger/doc.go l e/git GOINSECURE GOMOD GOMODCACHE e/git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env plorer.md GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel sh /usr/bin/git "prettier" --chegit sh 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE x_amd64/compile git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha --show-toplevel go /usr/bin/git md GO111MODULE 64/pkg/tool/linu--show-toplevel git rev-�� --show-toplevel 64/pkg/tool/linux_amd64/compile /usr/bin/git .a GO111MODULE ache/go/1.25.0/x--show-toplevel git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha /tmp/gh-aw-test-runs/20260311-170758-28231/test-2204179148 rev-parse /usr/bin/git ck 'scripts/**/*git GO111MODULE 64/bin/go git conf�� --get remote.origin.url /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha /tmp/go-build90092428/b409/_pkg_.a -trimpath /opt/hostedtoolcache/node/24.14.0/x64/bin/node -p main -lang=go1.25 node /tmp�� /tmp/TestHashConsistency_GoAndJavaScript1264448211/001/test-complex-frontmatter-with-tools.md -dwarf=false /usr/bin/git go1.25.0 -c=4 -nolocalimports git (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha --show-toplevel go /usr/bin/git -json GO111MODULE 64/bin/go git rev-�� --show-toplevel go /usr/bin/git -json GO111MODULE 64/pkg/tool/linu--show-toplevel git (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha GOSUMDB GOWORK 64/bin/go GOINSECURE GOMOD GOMODCACHE go m/_n�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha go1.25.0 -c=4 -nolocalimports -importcfg /tmp/go-build90092428/b389/importcfg -pack /tmp/go-build90092428/b389/_testmain.go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha --show-toplevel go /usr/bin/git ck 'scripts/**/*git GO111MODULE 64/bin/go git conf�� user.name Test User /usr/lib/git-core/git -json GO111MODULE 64/bin/go /usr/lib/git-core/git (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha --show-toplevel -dwarf=false /usr/bin/git go1.25.0 -c=4 -nolocalimports git conf�� --get remote.origin.url /usr/bin/git -json GO111MODULE 64/bin/go git (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha SameOutput2880731548/001/stability-test.md GO111MODULE /opt/hostedtoolcache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/node/24.14.0/x64/bin/node GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v7
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha -json GO111MODULE Name,path,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha .go .go 64/pkg/tool/linux_amd64/compile GOINSECURE GOMOD GOMODCACHE 64/pkg/tool/linux_amd64/compile env g_.a GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v7 --jq .object.sha -json GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE ache/go/1.25.0/x64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha "prettier" --wriGOSUMDB git 64/bin/go rror 64/pkg/tool/linu-### /usr/bin/git go /pre�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 GO111MODULE x_amd64/vet GOINSECURE GOMOD GOMODCACHE x_amd64/vet env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 GO111MODULE x_amd64/link GOINSECURE GOMOD GOMODCACHE x_amd64/link env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE wJ/GFtmVa307QDDNremote.origin.url (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 GO111MODULE x_amd64/compile GOINSECURE GOMOD GOMODCACHE x_amd64/compile env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path ck '**/*.cjs' '*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env e=false GO111MODULE 64/bin/go GOINSECURE %H %ct %D 1bd2f0910a26e63d--tags go (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/a70c5eada06553e3510ac27f2c3bda9d3705bccb --jq .object.sha "prettier" --wriGOSUMDB git 64/bin/go --show-toplevel ache/go/1.25.0/x.github/aw/actions-lock.json /usr/bin/git go /pre�� -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha -json GO111MODULE 64/bin/go GOINSECURE VT/3hr--uLbD2Maurev-parse GOMODCACHE s9ZXZGY/X4XoDkfiiEtxJ64HjgrP env 3362762130/.github/workflows GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.2.3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.2.3 --jq .object.sha 2279741/b399/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/math-### GOMODCACHE go env 4wXJ/4MWVMo_oiDJ- GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 2279741/b399/imprev-parse (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v2.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha 2279741/b398/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env JdBI/-CHqAKKnBMF-p GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 2279741/b398/impconfig (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha 2279741/b405/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env jADl/gUbYNtJdeWx-errorsas GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 2279741/b405/impconfig (http block)
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v2.0.0 --jq .object.sha 2279741/b413/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env zon1/l1aQvY6otHHGOSUMDB GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 2279741/b413/importcfg (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v3.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v3.0.0 --jq .object.sha 2279741/b400/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env Ms4I/Zgq-XWsbuVG-errorsas GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE 2279741/b400/imp-tests (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha h ../../../.prettierignore GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
- Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha tmatter-with-arrays.md GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion GOINSECURE GOMOD GOMODCACHE go env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env 2279741/b358/_pkGOINSECURE GO111MODULE 64/bin/go GOINSECURE b/gh-aw/pkg/math-c GOMODCACHE go (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo 64/bin/go GOINSECURE GOMOD GOMODCACHE ache/go/1.25.0/xGO111MODULE env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/owner/repo/contents/file.md
- Triggering command: /tmp/go-build90092428/b383/cli.test /tmp/go-build90092428/b383/cli.test -test.testlogfile=/tmp/go-build90092428/b383/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true GOINSECURE GOMOD GOMODCACHE go env ck 'scripts/**/*GOINSECURE GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE erignore env -json GO111MODULE 64/bin/go GOINSECURE GOMOD GOMODCACHE go (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Fix the failing GitHub Actions workflow safe_outputs
Analyze the workflow logs, identify the root cause of the failure, and implement a fix.
Job ID: 66662583447
Job URL: https://github.com/github/gh-aw/actions/runs/22963819548/job/66662583447

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

…, register custom safe job types Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Copilot

Pull request overview

Fixes safe_outputs strict-mode failures when workflows run outside PR context (e.g., scheduled runs) by ensuring PR-only handlers are treated as graceful no-ops and by registering custom safe-output job types so the handler manager can skip them without error.

Changes:

Mark create_pr_review_comment / reply_to_pr_review_comment as skipped: true when not in PR context.
Update buildSafeOutputJobsEnvVars to include custom safe-output jobs in GH_AW_SAFE_OUTPUT_JOBS while excluding system jobs.
Refresh action pin/lock data and workflow lockfiles for actions/download-artifact@v8, and emit GH_AW_SAFE_OUTPUT_JOBS in relevant compiled workflows.

Reviewed changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
`actions/setup/js/create_pr_review_comment.cjs`	Returns `skipped: true` for non-PR-context early exit.
`actions/setup/js/create_pr_review_comment.test.cjs`	Asserts `skipped: true` for non-PR-context behavior.
`actions/setup/js/reply_to_pr_review_comment.cjs`	Returns `skipped: true` when triggered outside PR context.
`actions/setup/js/reply_to_pr_review_comment.test.cjs`	Asserts `skipped: true` for non-PR-context behavior.
`pkg/workflow/notify_comment.go`	Includes custom safe-output job names in `GH_AW_SAFE_OUTPUT_JOBS`, excludes system jobs.
`pkg/workflow/notify_comment_test.go`	Expands tests to cover custom-only, system-only, and mixed job lists.
`pkg/workflow/data/action_pins.json`	Adds pin for `actions/download-artifact@v8`.
`.github/aw/actions-lock.json`	Adds lock entry for `actions/download-artifact@v8`.
`.github/workflows/super-linter.lock.yml`	Updates pinned SHA for `actions/download-artifact` v8 usage.
`.github/workflows/smoke-copilot.lock.yml`	Emits `GH_AW_SAFE_OUTPUT_JOBS` for custom safe-output job types.
`.github/workflows/smoke-copilot-arm.lock.yml`	Emits `GH_AW_SAFE_OUTPUT_JOBS` for custom safe-output job types.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

pelikhan · 2026-03-11T17:45:54Z

fix tests CI / test (pull_request)Failing after 1m

pelikhan · 2026-03-11T18:02:03Z

@copilot fix tests CI / test (pull_request)Failing after 1m

…uts-workflow

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-03-11T18:07:54Z

@copilot fix tests CI / test (pull_request)Failing after 1m

Fixed in 20ed6c0. The test TestGetActionPinsSorting was checking for a hardcoded count of 38 pins, but the recompile step added a new actions/download-artifact@v8 pin to actions-lock.json, bringing the total to 39. Updated the expected count to 39.

…ts warnings (#111) ## What & Why Regenerates the gh-aw compiled workflow lock files with **gh-aw v0.74.8** (was v0.55.0). Fixes the spurious `safe_outputs` warnings seen in workflow run [26400178389](https://github.com/chrisjainsley/Augustus/actions/runs/26400178389): ``` ⚠️ No handler loaded for message type 'create_draft_release' (message 1/2). Failed: 1 Skipped (no handler): 1 1 message(s) failed to process ``` ### Root cause In gh-aw **v0.55.0**, `buildSafeOutputJobsEnvVars()` only emitted built-in safe-output types into the handler-manager env var. Custom safe-output jobs declared under `safe-outputs.jobs.<name>` (here, `create_draft_release`) were dropped, so the handler manager logged "no handler loaded" and counted the message as failed — even though the custom GitHub Actions job for it ran successfully via the `needs:` graph. Fix landed in **v0.58.0** ([github/gh-aw#20548](github/gh-aw#20548)): custom job names are now emitted into the new `GH_AW_SAFE_OUTPUT_JOBS` env var so the manager silently skips them. The regenerated `create-release.lock.yml` includes: ``` GH_AW_SAFE_OUTPUT_JOBS: "{\"create_draft_release\":\"\"}" ``` The agentic-workflow `.md` source files were not changed — the YAML `safe-outputs.jobs.create_draft_release` shape was already correct. ## Services & Areas Changed - `.github/workflows/create-release.lock.yml` — regenerated (compiler v0.55.0 → v0.74.8) - `.github/workflows/nuget-update.lock.yml` — regenerated (same upgrade) - `.github/aw/actions-lock.json` — pins for new gh-aw setup action SHAs ## Testing - `gh aw compile` regenerates both lock files without errors (1 unrelated warning about a fixed weekly schedule on the nuget-update workflow). - Verified `GH_AW_SAFE_OUTPUT_JOBS` now registers `create_draft_release` in the regenerated lock file. - Functional verification will happen on the next `workflow_dispatch` of *Create Release* — the underlying `create_draft_release` job already worked in v0.55.0; only the warning/`Failed: 1` noise should disappear. ## Breaking Changes None. Source `.md` workflows are byte-identical; only the generated lock files and pinned action SHAs changed. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Initial plan
04970b1

CopilotAI assigned Copilot and lpcox Mar 11, 2026

Copilotstarted work on behalf of lpcox March 11, 2026 16:52 View session

CopilotAIand others added 2 commits March 11, 2026 17:03

Initial plan
b5e1902
Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Fix safe_outputs failures: skip PR review comments outside PR context…
1729ba9
…, register custom safe job types Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

CopilotAI changed the title ~~[WIP] Fix failing GitHub Actions workflow safe_outputs~~Fix safe_outputs: skip PR review comments outside PR context, register custom safe job typesMar 11, 2026

Copilotfinished work on behalf of lpcox March 11, 2026 17:16

github-actionsBot mentioned this pull request Mar 11, 2026
Smoke Test: Claude - 22965354532 #20557
Closed

pelikhan approved these changes Mar 11, 2026
View reviewed changes

pelikhan marked this pull request as ready for review March 11, 2026 17:31

CopilotAI review requested due to automatic review settings March 11, 2026 17:31

Copilotstarted reviewing on behalf of pelikhan March 11, 2026 17:33 View session

CopilotAI reviewed Mar 11, 2026
View reviewed changes

Copilotstarted work on behalf of pelikhan March 11, 2026 18:02 View session

pelikhanand others added 2 commits March 11, 2026 18:03

Merge remote-tracking branch 'origin/main' into copilot/fix-safe-outp…
2bd24cd
…uts-workflow

Fix TestGetActionPinsSorting: update expected pin count from 38 to 39
20ed6c0
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan merged commit 1333eef into mainMar 11, 2026

pelikhan deleted the copilot/fix-safe-outputs-workflow branch March 11, 2026 18:08

Copilot stopped work on behalf of pelikhan due to an error March 11, 2026 18:08
The session was cancelled by the user.

chrisjainsley mentioned this pull request May 25, 2026
chore(ci): regenerate gh-aw lock files with v0.74.8 to fix safe_outputs warnings chrisjainsley/Augustus#111
Merged

Navigation Menu

Uh oh!

Fix safe_outputs: skip PR review comments outside PR context, register custom safe job types - #20548

Fix safe_outputs: skip PR review comments outside PR context, register custom safe job types#20548
pelikhan merged 5 commits into
mainfrom
copilot/fix-safe-outputs-workflow

CopilotAI commented Mar 11, 2026•
edited
Loading

Uh oh!

CopilotAI left a comment

Uh oh!

pelikhan commented Mar 11, 2026

Uh oh!

pelikhan commented Mar 11, 2026

Uh oh!

CopilotAI commented Mar 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Uh oh!

Conversation

CopilotAI commented Mar 11, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Root Causes

Changes

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

pelikhan commented Mar 11, 2026

Uh oh!

pelikhan commented Mar 11, 2026

Uh oh!

CopilotAI commented Mar 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

CopilotAI commented Mar 11, 2026•
edited
Loading