dotnet
diff --git a/‎.github/agents/agentic-workflows.agent.md‎
Lines changed: 35 additions & 24 deletions b/‎.github/agents/agentic-workflows.agent.md‎
Lines changed: 35 additions & 24 deletions
diff --git a/‎.github/aw/actions-lock.json‎
Lines changed: 11 additions & 6 deletions b/‎.github/aw/actions-lock.json‎
Lines changed: 11 additions & 6 deletions
diff --git a/‎.github/instructions/ComponentTests.instructions.md‎
Lines changed: 132 additions & 0 deletions b/‎.github/instructions/ComponentTests.instructions.md‎
Lines changed: 132 additions & 0 deletions
diff --git a/‎.github/skills/fsharp-diagnostics/SKILL.md‎
Lines changed: 1 addition & 1 deletion b/‎.github/skills/fsharp-diagnostics/SKILL.md‎
Lines changed: 1 addition & 1 deletion
@@ -1,6 +1,6 @@
 ---
 description: GitHub Agentic Workflows (gh-aw) - Create, debug, and upgrade AI-powered workflows with intelligent prompt routing
-infer: false
+disable-model-invocation: true
 ---
 
 # GitHub Agentic Workflows Agent
@@ -15,7 +15,10 @@ This is a **dispatcher agent** that routes your request to the appropriate speci
 - **Updating existing workflows**: Routes to `update` prompt
 - **Debugging workflows**: Routes to `debug` prompt  
 - **Upgrading workflows**: Routes to `upgrade-agentic-workflows` prompt
+- **Creating report-generating workflows**: Routes to `report` prompt — consult this whenever the workflow posts status updates, audits, analyses, or any structured output as issues, discussions, or comments
 - **Creating shared components**: Routes to `create-shared-agentic-workflow` prompt
+- **Fixing Dependabot PRs**: Routes to `dependabot` prompt — use this when Dependabot opens PRs that modify generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`). Never merge those PRs directly; instead update the source `.md` files and rerun `gh aw compile --dependabot` to bundle all fixes
+- **Analyzing test coverage**: Routes to `test-coverage` prompt — consult this whenever the workflow reads, analyzes, or reports on test coverage data from PRs or CI runs
 
 Workflows may optionally include:
 
@@ -27,7 +30,7 @@ Workflows may optionally include:
 - Workflow files: `.github/workflows/*.md` and `.github/workflows/**/*.md`
 - Workflow lock files: `.github/workflows/*.lock.yml`
 - Shared components: `.github/workflows/shared/*.md`
-- Configuration: https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/github-agentic-workflows.md
+- Configuration: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/github-agentic-workflows.md
 
 ## Problems This Solves
 
@@ -49,7 +52,7 @@ When you interact with this agent, it will:
 ### Create New Workflow
 **Load when**: User wants to create a new workflow from scratch, add automation, or design a workflow that doesn't exist yet
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/create-agentic-workflow.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/create-agentic-workflow.md
 
 **Use cases**:
 - "Create a workflow that triages issues"
@@ -59,7 +62,7 @@ When you interact with this agent, it will:
 ### Update Existing Workflow  
 **Load when**: User wants to modify, improve, or refactor an existing workflow
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/update-agentic-workflow.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/update-agentic-workflow.md
 
 **Use cases**:
 - "Add web-fetch tool to the issue-classifier workflow"
@@ -69,7 +72,7 @@ When you interact with this agent, it will:
 ### Debug Workflow  
 **Load when**: User needs to investigate, audit, debug, or understand a workflow, troubleshoot issues, analyze logs, or fix errors
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/debug-agentic-workflow.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/debug-agentic-workflow.md
 
 **Use cases**:
 - "Why is this workflow failing?"
@@ -79,46 +82,52 @@ When you interact with this agent, it will:
 ### Upgrade Agentic Workflows
 **Load when**: User wants to upgrade workflows to a new gh-aw version or fix deprecations
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/upgrade-agentic-workflows.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/upgrade-agentic-workflows.md
 
 **Use cases**:
 - "Upgrade all workflows to the latest version"
 - "Fix deprecated fields in workflows"
 - "Apply breaking changes from the new release"
 
+### Create a Report-Generating Workflow
+**Load when**: The workflow being created or updated produces reports — recurring status updates, audit summaries, analyses, or any structured output posted as a GitHub issue, discussion, or comment
+
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/report.md
+
+**Use cases**:
+- "Create a weekly CI health report"
+- "Post a daily security audit to Discussions"
+- "Add a status update comment to open PRs"
+
 ### Create Shared Agentic Workflow
 **Load when**: User wants to create a reusable workflow component or wrap an MCP server
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/create-shared-agentic-workflow.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/create-shared-agentic-workflow.md
 
 **Use cases**:
 - "Create a shared component for Notion integration"
 - "Wrap the Slack MCP server as a reusable component"
 - "Design a shared workflow for database queries"
 
-### Orchestration and Delegation
-
-**Load when**: Creating or updating workflows that coordinate multiple agents or dispatch work to other workflows
+### Fix Dependabot PRs
+**Load when**: User needs to close or fix open Dependabot PRs that update dependencies in generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`)
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/orchestration.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/dependabot.md
 
 **Use cases**:
-- Assigning work to AI coding agents
-- Dispatching specialized worker workflows
-- Using correlation IDs for tracking
-- Orchestration design patterns
-
-### GitHub Projects Integration
+- "Fix the open Dependabot PRs for npm dependencies"
+- "Bundle and close the Dependabot PRs for workflow dependencies"
+- "Update @playwright/test to fix the Dependabot PR"
 
-**Load when**: Creating or updating workflows that manage GitHub Projects v2
+### Analyze Test Coverage
+**Load when**: The workflow reads, analyzes, or reports test coverage — whether triggered by a PR, a schedule, or a slash command. Always consult this prompt before designing the coverage data strategy.
 
-**Prompt file**: https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/projects.md
+**Prompt file**: https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/test-coverage.md
 
 **Use cases**:
-- Tracking items and fields with update-project
-- Posting periodic run summaries
-- Creating new projects
-- Projects v2 authentication and configuration
+- "Create a workflow that comments coverage on PRs"
+- "Analyze coverage trends over time"
+- "Add a coverage gate that blocks PRs below a threshold"
 
 ## Instructions
 
@@ -160,8 +169,10 @@ gh aw compile --validate
 
 ## Important Notes
 
-- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.45.0/.github/aw/github-agentic-workflows.md for complete documentation
+- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/github-agentic-workflows.md for complete documentation
 - Use the MCP tool `agentic-workflows` when running in GitHub Copilot Cloud
 - Workflows must be compiled to `.lock.yml` files before running in GitHub Actions
 - **Bash tools are enabled by default** - Don't restrict bash commands unnecessarily since workflows are sandboxed by the AWF
 - Follow security best practices: minimal permissions, explicit network access, no template injection
+- **Network configuration**: Use ecosystem identifiers (`node`, `python`, `go`, etc.) or explicit FQDNs in `network.allowed`. Bare shorthands like `npm` or `pypi` are **not** valid. See https://github.com/github/gh-aw/blob/v0.67.1/.github/aw/network.md for the full list of valid ecosystem identifiers and domain patterns.
+- **Single-file output**: When creating a workflow, produce exactly **one** workflow `.md` file. Do not create separate documentation files (architecture docs, runbooks, usage guides, etc.). If documentation is needed, add a brief `## Usage` section inside the workflow file itself.
@@ -5,15 +5,20 @@
       "version": "v8",
       "sha": "ed597411d8f924073f98dfc5c65a23a2325f34cd"
     },
-    "github/gh-aw-actions/setup@v0.62.0": {
+    "github/gh-aw-actions/setup@v0.67.1": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.62.0",
-      "sha": "b2c35f34e1013dd9ed2a84c559e2b2fec9ad38e6"
+      "version": "v0.67.1",
+      "sha": "80471a493be8c528dd27daf73cd644242a7965e0"
     },
-    "github/gh-aw/actions/setup@v0.62.0": {
+    "github/gh-aw-actions/setup@v0.67.2": {
+      "repo": "github/gh-aw-actions/setup",
+      "version": "v0.67.2",
+      "sha": "03e31e064a68e8d5ad890c92f303cfb5a3536006"
+    },
+    "github/gh-aw/actions/setup@v0.67.2": {
       "repo": "github/gh-aw/actions/setup",
-      "version": "v0.62.0",
-      "sha": "f1633bcc50ad7480f44d25961863c36fadd787ec"
+      "version": "v0.67.2",
+      "sha": "5fb582bad4dfee2841251e97f9d22caa7eb3c82d"
     }
   }
 }
@@ -0,0 +1,132 @@
+---
+applyTo:
+  - "tests/FSharp.Compiler.ComponentTests/**/*.fs"
+---
+
+# ComponentTests DSL
+
+Tests use a pipeline: **Create → Configure → Action → Assert**. The action verb is mandatory — never pipe a `CompilationUnit` directly into an assertion.
+
+## Actions (pick the cheapest that covers what you're testing)
+
+```fsharp
+// Type errors only, no codegen — fastest
+FSharp "..."
+|> typecheck
+|> shouldSucceed
+
+// Full compile, produces assembly
+FSharp "..."
+|> compile
+|> shouldSucceed
+
+// IL shape verification (needs compile)
+FSharp "..."
+|> compile
+|> verifyILContains [".method"]
+
+// Compile + execute (needs EntryPoint and asExe)
+FSharp "..."
+|> compileExeAndRun
+|> shouldSucceed
+
+// FSI in-process
+Fsx "..."
+|> eval
+|> withEvalValueEquals 2
+
+// FSI subprocess
+Fsx "..."
+|> runFsi
+|> withStdOutContains "hello"
+```
+
+Use `typecheck` for anything that doesn't need IL or runtime. Use `compile` only when you need the assembly (IL checks, interop). Use `compileExeAndRun` only when testing runtime behavior.
+
+## Diagnostics
+
+```fsharp
+// Exact diagnostic with location and message
+FSharp "..."
+|> typecheck
+|> shouldFail
+|> withDiagnostics [
+    (Error 73, Line 3, Col 5, Line 3, Col 10, "internal error: ...")
+    (Warning 20, Line 5, Col 1, Line 5, Col 8, "The result of this expression...")
+]
+
+// Just error code (when message/location don't matter)
+FSharp "..."
+|> typecheck
+|> shouldFail
+|> withErrorCode 73
+```
+
+## C# interop
+
+```fsharp
+let csLib =
+    CSharp """public interface I { void M(out int v); }"""
+    |> withName "CsLib"
+
+FSharp """
+open CsLib
+type T() = interface I with member _.M(v) = v <- 42
+"""
+|> withReferences [csLib]
+|> compile
+|> shouldSucceed
+```
+
+## Regression test template
+
+```fsharp
+// https://github.com/dotnet/fsharp/issues/NNNNN
+[<Fact>]
+let ``Issue NNNNN - brief description`` () =
+    FSharp """
+// minimal repro from issue
+    """
+    |> asLibrary
+    |> typecheck
+    |> shouldSucceed
+```
+
+## Local helpers
+
+If configuration becomes long and boilerplate, extract a local helper or use an existing one in the same module:
+
+```fsharp
+// Local helper for repeated configuration
+let typecheckWithPreview source =
+    source
+    |> asLibrary
+    |> withLangVersionPreview
+    |> withOptions ["--test:ErrorRanges"]
+    |> typecheck
+
+// Usage
+FSharp "..."
+|> typecheckWithPreview
+|> shouldSucceed
+```
+
+## Common mistakes
+
+- Missing action: `FSharp "..." |> shouldSucceed` — won't compile, `shouldSucceed` expects `CompilationResult`
+- Missing `asExe` for runtime tests: `FSharp "..." |> compile |> run` fails on library output
+- Using `compile` when `typecheck` suffices — wastes CI time
+
+## Platform attributes
+
+Use `[<Fact>]` unless the test requires a specific runtime:
+- `[<FactForNETCOREAPP>]` — .NET Core only
+- `[<FactForDESKTOP>]` — .NET Framework only
+- `[<FactForWINDOWS>]` — Windows only
+
+## Workflow
+
+1. Write test with explicit pipeline
+2. Build: `dotnet build tests/FSharp.Compiler.ComponentTests/FSharp.Compiler.ComponentTests.fsproj -c Release`
+3. Run: `dotnet test --project tests/FSharp.Compiler.ComponentTests/FSharp.Compiler.ComponentTests.fsproj -c Release --no-build -- --filter-method "*TestName*"`
+4. Format: `dotnet fantomas <file.fs>`
@@ -1,6 +1,6 @@
 ---
 name: fsharp-diagnostics
-description: "After modifying any F# file, use this to get quick parse errors and typecheck warnings+errors. Also finds symbol references and inferred type hints."
+description: "Always invoke after editing .fs files. Provides fast parse/typecheck feedback without a full dotnet build. Prefer this over dotnet build for iterative changes. Also finds symbol references and inferred type hints."
 ---
 
 # F# Diagnostics