Upgrade gh-aw to v0.79.2 (pre-release) by lpcox · Pull Request #4598 · github/gh-aw-firewall

lpcox · 2026-06-09T15:53:34Z

Upgrades gh-aw from v0.78.3 to v0.79.2 (pre-release).

Changes

Resolve merge conflict in smoke-claude.md (leftover conflict markers)
Recompile all 40 workflows with gh-aw v0.79.2
Run scripts/ci/postprocess-smoke-workflows.ts post-compile
Update actions-lock.json to pin gh-aw-actions/setup@v0.79.2

Key fix included

Fix assertTrustedCheckoutRuntime for bot/app actors (Fix assertTrustedCheckoutRuntime for bot/app actors (Copilot, dependabot) gh-aw#38152) — resolves the Copilot is not a user checkout failure on Copilot-authored PRs (checkout_pr_branch.cjs fails for Copilot-authored PRs (actor is not a user) gh-aw#38134)

Other notable changes in v0.79.1–v0.79.2

Compacted system prompts (reduced token usage)
Surface max-ai-credits guardrail context for 429 failures
Standardized error codes on safe-output handlers
Standardize YAML unmarshalling on goccy/go-yaml

Validation

gh aw compile --validate passes (0 errors, 6 warnings — all pre-existing)
Post-processing applied successfully

lpcox · 2026-06-09T15:57:36Z

@copilot fix this failing ci check https://github.com/github/gh-aw-firewall/actions/runs/27218550086/job/80366819760?pr=4598

Copilot

Pull request overview

This PR upgrades the repository’s agentic workflow toolchain by moving gh-aw from v0.78.3 to v0.79.1 (pre-release) and regenerating the compiled workflow lock files accordingly.

Changes:

Bump gh-aw compiler/action pins and refresh multiple .lock.yml workflows with the new compiler output.
Resolve leftover merge-conflict markers in smoke-claude.md.
Update automation metadata/pins (e.g., actions-lock.json, dependabot ignore rules) to align with the new gh-aw release.

Show a summary per file

File	Description
.github/workflows/test-coverage-reporter.lock.yml	Recompiled workflow lock file with updated gh-aw metadata/actions/containers and additional output handling.
.github/workflows/test-coverage-improver.lock.yml	Recompiled workflow lock file with updated gh-aw metadata/actions/containers and additional output handling.
.github/workflows/smoke-gemini.lock.yml	Recompiled smoke workflow lock file with updated compiler metadata and runtime steps.
.github/workflows/smoke-copilot.lock.yml	Recompiled smoke workflow lock file with updated compiler metadata and runtime steps.
.github/workflows/smoke-claude.md	Removes merge-conflict markers in the source `.md` workflow.
.github/workflows/security-guard.lock.yml	Recompiled workflow lock file with updated gh-aw pins and runtime behavior changes.
.github/workflows/contribution-check.lock.yml	Recompiled workflow lock file with updated gh-aw pins and runtime behavior changes.
.github/workflows/agentics-maintenance.yml	Regenerated maintenance workflow and updated gh-aw setup-cli/action pins plus forecast/caching logic.
.github/dependabot.yml	Adjusts ignore rules to prevent Dependabot from bumping gh-aw managed actions.
.github/aw/actions-lock.json	Updates/extends pinned GitHub Action SHAs (including gh-aw actions) for compiled workflows.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 27/44 changed files
Comments generated: 13

+      - name: Install AWF binary
+        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.68


+      - name: Install AWF binary
+        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.68


+      - name: Install AWF binary
+        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.68


@@ -472,39 +482,11 @@ jobs:
            const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs');
            await main();
      - name: Install GitHub Copilot CLI
-        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.59
+        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.60


+      - name: Install AWF binary
+        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.68


      - name: Install AWF binary
-        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.65
+        run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.68


          GH_AW_PROMPT: /tmp/gh-aw/aw-prompts/prompt.txt
          GH_AW_SAFE_OUTPUTS: ${{ steps.set-runtime-paths.outputs.GH_AW_SAFE_OUTPUTS }}
-          GH_AW_VERSION: v0.78.3
+          GH_AW_VERSION: v0.79.1


Copilot · 2026-06-09T16:05:34Z

@copilot fix this failing ci check https://github.com/github/gh-aw-firewall/actions/runs/27218550086/job/80366819760?pr=4598

The failure was a transient Docker Hub network timeout (registry-1.docker.io unreachable) in the "Build local containers" step of test-chroot-edge-cases (attempt 1). The second attempt passed on its own.

To prevent recurrence, I added a retry_docker_build function (3 attempts with 10s/20s backoff) to all four "Build local containers" steps in test-chroot.yml, matching the same pattern already used in test-integration-suite.yml. See commit 35b7d5b.

- Resolve merge conflict in smoke-claude.md - Recompile all 40 workflows with gh-aw v0.79.2 - Run postprocess-smoke-workflows.ts - Update actions-lock.json to pin gh-aw-actions/setup@v0.79.2 Includes fix for checkout_pr_branch.cjs failing on bot/app actors (Copilot, dependabot). See github/gh-aw#38134, github/gh-aw#38152. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

- smoke-claude: remove --max-turns 2 assertion (no longer emitted as CLI flag) - security-guard, test-coverage-improver: update setup action SHA/version Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-06-09T18:31:07Z

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	96.50%	96.55%	📈 +0.05%
Statements	96.42%	96.46%	📈 +0.04%
Functions	98.73%	98.73%	➡️ +0.00%
Branches	90.70%	90.73%	📈 +0.03%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
`src/config-writer.ts`	89.3% → 90.9% (+1.65%)	89.3% → 90.9% (+1.65%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

github-actions · 2026-06-09T18:35:15Z

Copilot BYOK Smoke Test Results

Status: PASS ✅

✅ MCP Connectivity: Listed 2 merged PRs (verified github-list_pull_requests)
✅ GitHub.com Access: HTTP 200 via awf firewall
✅ File Write/Read: /tmp/gh-aw/agent/smoke-test-copilot-byok.txt readable
✅ BYOK Inference: Active (api-proxy → api.githubcopilot.com with real COPILOT_PROVIDER_API_KEY)

Mode: Direct BYOK (COPILOT_PROVIDER_API_KEY) via api-proxy sidecar

PR: #4598 by @lpcox | Assignees: @lpcox

🔑 BYOK report filed by Smoke Copilot BYOK

github-actions · 2026-06-09T18:35:41Z

🤖 Smoke Test Results — PASS

Test	Result
GitHub MCP (PR: #4577 — `[Test Coverage] host-iptables-rules isValidPortSpec unit tests`)	✅
GitHub.com connectivity (HTTP 200)	✅
File write/read (`smoke-test-copilot-27227244452.txt`)	✅

Overall: PASS · PR by @lpcox

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-06-09T18:36:15Z

[Test Coverage] host-iptables-rules isValidPortSpec unit tests ✅
fix(api-proxy): restore PAT-safe integration ID behavior and normalize dated CAPI model names ✅
Upgrade gh-aw to v0.79.2 (pre-release) ✅
Overall: PASS

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

github-actions · 2026-06-09T18:38:36Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #4598 · 169.2 AIC · ⊞ 33.8K · ◷

github-actions · 2026-06-09T18:39:29Z

Smoke Test Results — FAIL

Check	Result
Redis PING	❌ timeout (no PONG)
PostgreSQL pg_isready	❌ no response
PostgreSQL SELECT 1	❌ timeout

Overall: FAIL — host.docker.internal services unreachable from this runner.

🔌 Service connectivity validated by Smoke Services

github-actions · 2026-06-09T18:44:30Z

GitHub API: ✅ PASS
GitHub check: ✅ PASS
File verify: ✅ PASS

Total: PASS

💥 [THE END] — Illustrated by Smoke Claude

Copilot AI review requested due to automatic review settings June 9, 2026 15:53

Copilot started reviewing on behalf of lpcox June 9, 2026 15:53 View session

lpcox had a problem deploying to aoai-model June 9, 2026 15:56 — with GitHub Actions Failure

This comment has been minimized.

Sign in to view

github-actions Bot added the smoke-copilot-byok label Jun 9, 2026

This comment has been minimized.

Sign in to view

github-actions Bot added the smoke-copilot label Jun 9, 2026

lpcox temporarily deployed to aoai-model June 9, 2026 15:58 — with GitHub Actions Inactive

This comment has been minimized.

Sign in to view

github-actions Bot added the smoke-claude label Jun 9, 2026

lpcox temporarily deployed to aoai-model June 9, 2026 15:58 — with GitHub Actions Inactive

This comment has been minimized.

Sign in to view

github-actions Bot added the build-test label Jun 9, 2026

Copilot started work on behalf of lpcox June 9, 2026 16:02 View session

Copilot AI reviewed Jun 9, 2026

View reviewed changes

Copilot finished work on behalf of lpcox June 9, 2026 16:05

Copilot AI had a problem deploying to aoai-model June 9, 2026 16:08 Failure

Copilot AI temporarily deployed to aoai-model June 9, 2026 16:08 Inactive

Copilot AI temporarily deployed to aoai-model June 9, 2026 16:09 Inactive

lpcox force-pushed the upgrade-gh-aw-v0.79.1 branch from 35b7d5b to c95e64e Compare June 9, 2026 18:26

lpcox changed the title ~~Upgrade gh-aw to v0.79.1 (pre-release)~~ Upgrade gh-aw to v0.79.2 (pre-release) Jun 9, 2026

lpcox had a problem deploying to aoai-model June 9, 2026 18:28 — with GitHub Actions Error

Update CI workflow tests for gh-aw v0.79.2

1b74220

- smoke-claude: remove --max-turns 2 assertion (no longer emitted as CLI flag) - security-guard, test-coverage-improver: update setup action SHA/version Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

lpcox had a problem deploying to aoai-model June 9, 2026 18:32 — with GitHub Actions Failure

lpcox temporarily deployed to aoai-model June 9, 2026 18:35 — with GitHub Actions Inactive

github-actions Bot mentioned this pull request Jun 9, 2026

[aw] Contribution Check failed #4593

Closed

lpcox temporarily deployed to aoai-model June 9, 2026 18:36 — with GitHub Actions Inactive

github-actions Bot added the smoke-codex label Jun 9, 2026

lpcox merged commit b9218e9 into main Jun 9, 2026
68 of 73 checks passed

lpcox deleted the upgrade-gh-aw-v0.79.1 branch June 9, 2026 18:46

		- name: Install AWF binary
		run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.25.68

Conversation

lpcox commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Key fix included

Other notable changes in v0.79.1–v0.79.2

Validation

Uh oh!

lpcox commented Jun 9, 2026

Uh oh!

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

This comment has been minimized.

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI commented Jun 9, 2026

Uh oh!

github-actions Bot commented Jun 9, 2026

✅ Coverage Check Passed

Overall Coverage

Uh oh!

github-actions Bot commented Jun 9, 2026

Copilot BYOK Smoke Test Results

Uh oh!

github-actions Bot commented Jun 9, 2026

🤖 Smoke Test Results — PASS

Uh oh!

github-actions Bot commented Jun 9, 2026

Uh oh!

github-actions Bot commented Jun 9, 2026

🏗️ Build Test Suite Results

Uh oh!

github-actions Bot commented Jun 9, 2026

Smoke Test Results — FAIL

Uh oh!

github-actions Bot commented Jun 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

lpcox commented Jun 9, 2026 •

edited

Loading