chore: upgrade and recompile all workflows to gh-aw v0.72.1 by lpcox · Pull Request #3061 · github/gh-aw-firewall

lpcox · 2026-05-12T23:15:10Z

Summary

Upgrades all agentic workflows from gh-aw v0.71.5 to v0.72.1 and recompiles all 36 lock files with post-processing.

Action Updates

Action	From	To
`github/gh-aw/actions/setup`	v0.71.5	v0.72.1
`github/gh-aw-actions/setup-cli`	v0.71.5	v0.72.1
`github/gh-aw-actions/setup`	v0.71.5	v0.72.1
`actions/github-script`	v8	v9.0.0

Changes

37 files changed across all workflow lock files, agent file, and actions-lock.json
All lock files recompiled via gh aw upgrade
Post-processing applied via npx tsx scripts/ci/postprocess-smoke-workflows.ts

Updates: - github/gh-aw/actions/setup v0.71.5 → v0.72.1 - github/gh-aw-actions/setup-cli v0.71.5 → v0.72.1 - github/gh-aw-actions/setup v0.71.5 → v0.72.1 - actions/github-script v8 → v9.0.0 All 36 workflows recompiled and post-processed. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-05-12T23:18:39Z

🔥 Smoke Test: Copilot BYOK (Offline) Mode

Test	Result
GitHub MCP connectivity	✅ (list_pull_requests called; 401 expected for private repo in sandbox)
GitHub.com HTTP connectivity	✅ (pre-step validated)
File write/read	✅ `smoke-test-copilot-byok-25767852326.txt` verified
BYOK inference (agent → api-proxy → api.githubcopilot.com)	✅

Running in BYOK offline mode (COPILOT_OFFLINE=true) via api-proxy → api.githubcopilot.com.

Overall: PASS | PR #3061 by @lpcox

🔑 BYOK report filed by Smoke Copilot BYOK

github-actions · 2026-05-12T23:18:58Z

🔬 Smoke Test Results

Test	Result
GitHub MCP connectivity	❌ 401 Bad credentials
GitHub.com HTTP connectivity	❌ Template vars not expanded (`${{ steps.smoke-data.outputs.SMOKE_HTTP_CODE }}`)
File write/read	❌ Template vars not expanded

Overall: FAIL

The pre-agent step outputs were not injected into the workflow — ${{ steps.smoke-data.outputs.* }} variables appear unexpanded. The smoke-data pre-step likely did not run or failed before this agent step.

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-05-12T23:19:04Z

Smoke Test Results

❌ GitHub MCP: gh CLI auth failed (401)
✅ Playwright: GitHub page title verified
✅ File Writing: Test file created
✅ Bash Tool: File verified

Status: FAIL

💥 [THE END] — Illustrated by Smoke Claude

Copilot

Pull request overview

This PR upgrades the repository’s generated agentic-workflow lock files and related metadata from gh-aw v0.71.5 to v0.72.1, including updating pinned action SHAs and refreshing the compiled workflow artifacts produced by gh aw upgrade (+ post-processing).

Changes:

Bumps github/gh-aw/actions/setup, github/gh-aw-actions/setup(-cli), and workflow metadata to gh-aw v0.72.1 across lock files.
Updates workflow lock content to the new compiler output (e.g., new prompt artifact paths, inline sub-agent restore step, scattered cron updates).
Updates .github/aw/actions-lock.json and the agent doc links to reference v0.72.1.

Show a summary per file

File	Description
.github/workflows/smoke-opencode.lock.yml	Regenerated lock file for OpenCode smoke workflow; updates gh-aw version, container pins, cron scatter, and artifacts/restore steps.
.github/workflows/security-review.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/security-guard.lock.yml	Regenerated lock file; bumps gh-aw version and modifies setup (notably local awf build + CLI install behavior).
.github/workflows/refactoring-scanner.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/firewall-issue-dispatcher.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/export-audit.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/duplicate-code-detector.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/copilot-token-usage-analyzer.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/copilot-token-optimizer.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/claude-token-usage-analyzer.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/claude-token-optimizer.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/workflows/ci-doctor.lock.yml	Regenerated lock file; bumps gh-aw version and refreshes compiled steps/artifacts.
.github/aw/actions-lock.json	Updates pinned gh-aw setup action versions/SHAs to v0.72.1.
.github/agents/agentic-workflows.agent.md	Updates gh-aw documentation links to v0.72.1.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 37/37 changed files
Comments generated: 1

+          sudo chmod +x /usr/local/bin/awf
      - name: Install Claude Code CLI
-        run: npm install --ignore-scripts -g @anthropic-ai/claude-code@2.1.126
+        run: npm install -g @anthropic-ai/claude-code@2.1.126


github-actions · 2026-05-12T23:20:09Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	All passed	✅ PASS
Node.js	execa	✅	All passed	✅ PASS
Node.js	p-limit	✅	All passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #3061 · ● 2.7M · ◷

github-actions · 2026-05-12T23:20:10Z

Smoke Test

PRs: feat: optimization workflows skip already-tracked workflows instead of blocking; refactor: remove dead exports from preflight, network-setup, domain-acl, and logs barrel
✅ GitHub PR review
❌ safeinputs-gh unavailable
✅ Playwright, file/bash, discussion comment, build
❌ Tavily unavailable
Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

github-actions · 2026-05-12T23:20:59Z

Smoke Test Results

Check	Result
Redis PING	❌ Timeout/unreachable
PostgreSQL pg_isready	❌ No response
PostgreSQL SELECT 1	❌ Failed

Overall: FAIL — host.docker.internal was not reachable on ports 6379 or 5432 from this runner environment.

🔌 Service connectivity validated by Smoke Services

github-actions · 2026-05-12T23:21:20Z

Smoke Test Results

GitHub MCP Testing: ❌ (Server returned 401 Bad Credentials; fallback to git log)
Last 2 PRs:
- feat: optimization workflows skip already-tracked workflows instead of blocking
- refactor: remove dead exports from preflight, network-setup, domain-acl, and logs barrel
GitHub.com Connectivity: ❌ (Curl failed with exit code 35/56)
File Writing Testing: ✅
Bash Tool Testing: ✅

Overall status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "localhost"

See Network Configuration for more information.

💎 Faceted by Smoke Gemini

Copilot AI review requested due to automatic review settings May 12, 2026 23:15

lpcox requested a review from Mossaka as a code owner May 12, 2026 23:15

Copilot started reviewing on behalf of lpcox May 12, 2026 23:15 View session

Merge branch 'main' into chore/upgrade-workflows

198df46

github-actions Bot added the smoke-copilot-byok label May 12, 2026

Copilot AI reviewed May 12, 2026

View reviewed changes

Comment thread .github/workflows/security-guard.lock.yml

sudo chmod +x /usr/local/bin/awf

- name: Install Claude Code CLI

run: npm install --ignore-scripts -g @anthropic-ai/claude-code@2.1.126

run: npm install -g @anthropic-ai/claude-code@2.1.126

github-actions Bot added the build-test label May 12, 2026

lpcox merged commit b4e257d into main May 12, 2026
62 of 65 checks passed

lpcox deleted the chore/upgrade-workflows branch May 12, 2026 23:43

This was referenced May 12, 2026

chore: update actions in issue-monster and smoke-chroot workflows #3065

Merged

chore: recompile all 35 workflows with gh-aw v0.72.1 #3071

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: upgrade and recompile all workflows to gh-aw v0.72.1#3061

chore: upgrade and recompile all workflows to gh-aw v0.72.1#3061
lpcox merged 2 commits into
mainfrom
chore/upgrade-workflows

lpcox commented May 12, 2026

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

lpcox commented May 12, 2026

Summary

Action Updates

Changes

Uh oh!

github-actions Bot commented May 12, 2026

🔥 Smoke Test: Copilot BYOK (Offline) Mode

Uh oh!

github-actions Bot commented May 12, 2026

🔬 Smoke Test Results

Uh oh!

github-actions Bot commented May 12, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

github-actions Bot commented May 12, 2026

🏗️ Build Test Suite Results

Uh oh!

github-actions Bot commented May 12, 2026

Smoke Test

Uh oh!

github-actions Bot commented May 12, 2026

Smoke Test Results

Uh oh!

github-actions Bot commented May 12, 2026

Smoke Test Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants