updates

Author: dsyme

.github/aw/actions-lock.json

@@ -35,10 +35,10 @@
       "version": "v7.0.0",
       "sha": "bbbca2ddaa5d8feaa63e36b76fdaad77386f024f"
     },
-    "github/gh-aw-actions/setup@v0.68.3": {
+    "github/gh-aw-actions/setup@v0.71.0": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.68.3",
-      "sha": "ba90f2186d7ad780ec640f364005fa24e797b360"
+      "version": "v0.71.0",
+      "sha": "49157453228f9641824955e35cbeccbca74ee0fd"
     },
     "github/gh-aw/actions/setup@v0.66.1": {
       "repo": "github/gh-aw/actions/setup",

.github/workflows/daily-repo-goals.lock.yml

@@ -36,15 +36,12 @@ network:
     - defaults
     - github
     - rust
+    - lean
+    - latex
     - "arxiv.org"
     - "leanprover-community.github.io"
     - "leanlang.org"
-    - "lean-lang.org"
     - ocaml
-    - "releaseassets.githubusercontent.com"
-    - "raw.githubusercontent.com"  # required: elan installer bootstrap script
-    - "mirror.ctan.org"              # required: LaTeX packages for paper compilation
-    - "ctan.org"
 
 checkout:
   fetch: ["*"]      # fetch all remote branches
@@ -59,6 +56,7 @@ tools:
     max-patch-size: 102400  # 100KB max (default 10KB)
 
 safe-outputs:
+  max-patch-size: 10240 # in kb, so 10MB
   messages:
     footer: "> Generated by 📐 {workflow_name}, see [workflow run]({run_url}). [Learn more](https://github.com/githubnext/agentics/blob/main/docs/lean-squad.md)."
     run-started: "{workflow_name} is processing {event_type}, see [workflow run]({run_url})..."
@@ -827,7 +825,7 @@ This is a reflective task. The goal is not to prove more things, but to evaluate
 # --- OCaml + opam (required for Aeneas) ---
 if ! command -v opam &>/dev/null; then
   echo "=== Lean Squad: installing opam ==="
-  sudo apt-get update && sudo apt-get install -y opam
+  apt-get update && apt-get install -y opam
   opam init -y --disable-sandboxing
   eval $(opam env)
 fi
@@ -1325,7 +1323,7 @@ Install a LaTeX distribution if not already available:
 ```bash
 if ! command -v pdflatex &>/dev/null; then
   echo "=== Lean Squad: installing LaTeX ==="
-  sudo apt-get update && sudo apt-get install -y \
+  apt-get update && apt-get install -y \
     texlive-latex-base texlive-latex-recommended texlive-latex-extra \
     texlive-fonts-recommended texlive-bibtex-extra biber latexmk
 fi