Skip to content

Commit 13b3731

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the actions group across 1 directory with 4 updates (#11084)
Bumps the actions group with 4 updates in the / directory: [github/gh-aw-actions](https://github.com/github/gh-aw-actions), [actions/checkout](https://github.com/actions/checkout), [actions/cache](https://github.com/actions/cache) and [github/gh-aw](https://github.com/github/gh-aw). Updates `github/gh-aw-actions` from 0.79.8 to 0.81.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/gh-aw-actions/releases">github/gh-aw-actions's releases</a>.</em></p> <blockquote> <h2>v0.81.2</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.81.2</code>.</p> <h2>v0.81.1</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.81.1</code>.</p> <h2>v0.81.0</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.81.0</code>.</p> <h2>v0.80.9</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.9</code>.</p> <h2>v0.80.8</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.8</code>.</p> <h2>v0.80.7</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.7</code>.</p> <h2>v0.80.6</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.6</code>.</p> <h2>v0.80.4</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.4</code>.</p> <h2>v0.80.3</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.3</code>.</p> <h2>v0.80.2</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.2</code>.</p> <h2>v0.80.1</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.1</code>.</p> <h2>v0.80.0</h2> <p>Sync of actions from <a href="https://github.com/github/gh-aw">gh-aw</a> at <code>v0.80.0</code>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/gh-aw-actions/commit/b5cde6c5013569c8b0229dd2d7ffd63eaf2c9ad2"><code>b5cde6c</code></a> chore: sync actions from gh-aw@v0.81.2 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/169">#169</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/4f64d3872d104d9597f706236f0b3de3b4e18252"><code>4f64d38</code></a> chore: sync actions from gh-aw@v0.81.1 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/168">#168</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/3c7f3b6f423dd721e2f115b7c8fda65287e1f137"><code>3c7f3b6</code></a> chore: sync actions from gh-aw@v0.81.0 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/167">#167</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/8c7d04ebf1ece56cd381446125da3e0f6896294a"><code>8c7d04e</code></a> chore: sync actions from gh-aw@v0.80.9 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/166">#166</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/bee9622162d2319e68ef2594442f58c815f28d7f"><code>bee9622</code></a> chore: sync actions from gh-aw@v0.80.8 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/165">#165</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/7f7cdc791545b49fbe0acb08b9a8bcb9a818caad"><code>7f7cdc7</code></a> chore: sync actions from gh-aw@v0.80.7 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/164">#164</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/c20f9e750acfb2da7ce8698626ebeb65efb33300"><code>c20f9e7</code></a> chore: sync actions from gh-aw@v0.80.6 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/163">#163</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/00c24a5774577e7282046aa2225105571a8f4195"><code>00c24a5</code></a> chore: sync actions from gh-aw@v0.80.4 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/161">#161</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/53aef6c38432e6192f6e8bfc967dc174b1be1c93"><code>53aef6c</code></a> chore: sync actions from gh-aw@v0.80.3 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/160">#160</a>)</li> <li><a href="https://github.com/github/gh-aw-actions/commit/2702b4242b4cf95f4ee11b588355e49f38c220d0"><code>2702b42</code></a> chore: sync actions from gh-aw@v0.80.2 (<a href="https://redirect.github.com/github/gh-aw-actions/issues/157">#157</a>)</li> <li>Additional commits viewable in <a href="https://github.com/github/gh-aw-actions/compare/v0.79.8...v0.81.2">compare view</a></li> </ul> </details> <br /> Updates `actions/checkout` from 6 to 7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <ul> <li>block checking out fork pr for pull_request_target and workflow_run by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> <li>Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2458">actions/checkout#2458</a></li> <li>Bump flatted from 3.3.1 to 3.4.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2460">actions/checkout#2460</a></li> <li>Bump js-yaml from 4.1.0 to 4.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2461">actions/checkout#2461</a></li> <li>Bump <code>@​actions/core</code> and <code>@​actions/tool-cache</code> and Remove uuid by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2459">actions/checkout#2459</a></li> <li>upgrade module to esm and update dependencies by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2463">actions/checkout#2463</a></li> <li>Bump the minor-npm-dependencies group across 1 directory with 3 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/checkout/pull/2462">actions/checkout#2462</a></li> <li>getting ready for checkout v7 release by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2464">actions/checkout#2464</a></li> <li>update error wording by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2467">actions/checkout#2467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2454">actions/checkout#2454</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.3...v7.0.0">https://github.com/actions/checkout/compare/v6.0.3...v7.0.0</a></p> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357">actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446">actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth"><code>@​yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3">https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355">actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2">https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314">actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328">actions/checkout#2328</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.1">https://github.com/actions/checkout/compare/v6...v6.0.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"><code>9c091bb</code></a> update error wording (<a href="https://redirect.github.com/actions/checkout/issues/2467">#2467</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1044a6dea927916f2c38ba5aeffbc0a847b1221a"><code>1044a6d</code></a> getting ready for checkout v7 release (<a href="https://redirect.github.com/actions/checkout/issues/2464">#2464</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f0282184c7ce73ab54c7e4ab5a617122602e575f"><code>f028218</code></a> Bump the minor-npm-dependencies group across 1 directory with 3 updates (<a href="https://redirect.github.com/actions/checkout/issues/2462">#2462</a>)</li> <li><a href="https://github.com/actions/checkout/commit/d914b262ffc244530a203ab40decab34c3abf34d"><code>d914b26</code></a> upgrade module to esm and update dependencies (<a href="https://redirect.github.com/actions/checkout/issues/2463">#2463</a>)</li> <li><a href="https://github.com/actions/checkout/commit/537c7ef99cef6e5ddb5e7ff5d16d14510503801d"><code>537c7ef</code></a> Bump <code>@​actions/core</code> and <code>@​actions/tool-cache</code> and Remove uuid (<a href="https://redirect.github.com/actions/checkout/issues/2459">#2459</a>)</li> <li><a href="https://github.com/actions/checkout/commit/130a169078a413d3a5246a393625e8e742f387f6"><code>130a169</code></a> Bump js-yaml from 4.1.0 to 4.2.0 (<a href="https://redirect.github.com/actions/checkout/issues/2461">#2461</a>)</li> <li><a href="https://github.com/actions/checkout/commit/7d09575332117a40b46e5e020664df234cd416f3"><code>7d09575</code></a> Bump flatted from 3.3.1 to 3.4.2 (<a href="https://redirect.github.com/actions/checkout/issues/2460">#2460</a>)</li> <li><a href="https://github.com/actions/checkout/commit/0f9f3aa320cb53abeb534aeb54048075d9697a0e"><code>0f9f3aa</code></a> Bump actions/publish-immutable-action (<a href="https://redirect.github.com/actions/checkout/issues/2458">#2458</a>)</li> <li><a href="https://github.com/actions/checkout/commit/f9e715a95fcd1f9253f77dd28f11e88d2d6460c7"><code>f9e715a</code></a> block checking out fork pr for pull_request_target and workflow_run (<a href="https://redirect.github.com/actions/checkout/issues/2454">#2454</a>)</li> <li>See full diff in <a href="https://github.com/actions/checkout/compare/v6...v7">compare view</a></li> </ul> </details> <br /> Updates `actions/cache` from 5.0.5 to 6.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/releases">actions/cache's releases</a>.</em></p> <blockquote> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update packages, migrate to ESM by <a href="https://github.com/Samirat"><code>@​Samirat</code></a> in <a href="https://redirect.github.com/actions/cache/pull/1760">actions/cache#1760</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/cache/compare/v5...v6.0.0">https://github.com/actions/cache/compare/v5...v6.0.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache's changelog</a>.</em></p> <blockquote> <h1>Releases</h1> <h2>How to prepare a release</h2> <blockquote> <p>[!NOTE] Relevant for maintainers with write access only.</p> </blockquote> <ol> <li>Switch to a new branch from <code>main</code>.</li> <li>Run <code>npm test</code> to ensure all tests are passing.</li> <li>Update the version in <a href="https://github.com/actions/cache/blob/main/package.json"><code>https://github.com/actions/cache/blob/main/package.json</code></a>.</li> <li>Run <code>npm run build</code> to update the compiled files.</li> <li>Update this <a href="https://github.com/actions/cache/blob/main/RELEASES.md"><code>https://github.com/actions/cache/blob/main/RELEASES.md</code></a> with the new version and changes in the <code>## Changelog</code> section.</li> <li>Run <code>licensed cache</code> to update the license report.</li> <li>Run <code>licensed status</code> and resolve any warnings by updating the <a href="https://github.com/actions/cache/blob/main/.licensed.yml"><code>https://github.com/actions/cache/blob/main/.licensed.yml</code></a> file with the exceptions.</li> <li>Commit your changes and push your branch upstream.</li> <li>Open a pull request against <code>main</code> and get it reviewed and merged.</li> <li>Draft a new release <a href="https://github.com/actions/cache/releases">https://github.com/actions/cache/releases</a> use the same version number used in <code>package.json</code> <ol> <li>Create a new tag with the version number.</li> <li>Auto generate release notes and update them to match the changes you made in <code>RELEASES.md</code>.</li> <li>Toggle the set as the latest release option.</li> <li>Publish the release.</li> </ol> </li> <li>Navigate to <a href="https://github.com/actions/cache/actions/workflows/release-new-action-version.yml">https://github.com/actions/cache/actions/workflows/release-new-action-version.yml</a> <ol> <li>There should be a workflow run queued with the same version number.</li> <li>Approve the run to publish the new version and update the major tags for this action.</li> </ol> </li> </ol> <h2>Changelog</h2> <h3>6.1.0</h3> <ul> <li>Bump <code>@actions/cache</code> to v6.1.0 to pick up <a href="https://redirect.github.com/actions/toolkit/pull/2435">actions/toolkit#2435 Handle cache write error due to read-only token</a></li> <li>Switch redundant &quot;Cache save failed&quot; warning to debug log in save-only</li> </ul> <h3>6.0.0</h3> <ul> <li>Updated <code>@actions/cache</code> to ^6.0.1, <code>@actions/core</code> to ^3.0.1, <code>@actions/exec</code> to ^3.0.0, <code>@actions/io</code> to ^3.0.2</li> <li>Migrated to ESM module system</li> <li>Upgraded Jest to v30 and test infrastructure to be ESM compatible</li> </ul> <h3>5.0.4</h3> <ul> <li>Bump <code>minimatch</code> to v3.1.5 (fixes ReDoS via globstar patterns)</li> <li>Bump <code>undici</code> to v6.24.1 (WebSocket decompression bomb protection, header validation fixes)</li> <li>Bump <code>fast-xml-parser</code> to v5.5.6</li> </ul> <h3>5.0.3</h3> <ul> <li>Bump <code>@actions/cache</code> to v5.0.5 (Resolves: <a href="https://github.com/actions/cache/security/dependabot/33">https://github.com/actions/cache/security/dependabot/33</a>)</li> <li>Bump <code>@actions/core</code> to v2.0.3</li> </ul> <h3>5.0.2</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/cache/commit/2c8a9bd7457de244a408f35966fab2fb45fda9c8"><code>2c8a9bd</code></a> Merge pull request <a href="https://redirect.github.com/actions/cache/issues/1760">#1760</a> from actions/samirat/esm_migration_and_package_update</li> <li><a href="https://github.com/actions/cache/commit/e9b91fdc3fea7d79165fceb79042ef45c2d51023"><code>e9b91fd</code></a> Prettier fixes</li> <li><a href="https://github.com/actions/cache/commit/e4884b8ff7f92ef6b52c79eda480bbc86e685adb"><code>e4884b8</code></a> Rebuild dist</li> <li><a href="https://github.com/actions/cache/commit/10baf0191a3c426ea0fa4a3253a5c04233b6e18f"><code>10baf01</code></a> Fixed licenses</li> <li><a href="https://github.com/actions/cache/commit/e39b386c9004d72a15d864ade8c0b3a702d47a37"><code>e39b386</code></a> Fix test mock return order</li> <li><a href="https://github.com/actions/cache/commit/b6928203372a8571ff984c0c883ef3a1adfb0c06"><code>b692820</code></a> PR feedback</li> <li><a href="https://github.com/actions/cache/commit/60749128a44d25d3c520a489e576380cf00ff3f1"><code>6074912</code></a> Rebuild dist bundles as ESM to match type:module</li> <li><a href="https://github.com/actions/cache/commit/5a912e8b4af820fa082a0e75cfd2c782f8fbfe0e"><code>5a912e8</code></a> Fix lint and jest issues</li> <li><a href="https://github.com/actions/cache/commit/b9bf592b98b6a5d0cad9929c76247de1cac78abe"><code>b9bf592</code></a> Update documentation for v6 release</li> <li><a href="https://github.com/actions/cache/commit/80f777761d0990932f64ed2740522d7226a49062"><code>80f7777</code></a> Update packages, migrate to ESM</li> <li>See full diff in <a href="https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...2c8a9bd7457de244a408f35966fab2fb45fda9c8">compare view</a></li> </ul> </details> <br /> Updates `github/gh-aw` from 0.71.5 to 0.80.9 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/gh-aw/releases">github/gh-aw's releases</a>.</em></p> <blockquote> <h2>v0.80.9</h2> <h2>🌟 Release Highlights</h2> <p>This release focuses on reliability and correctness — squashing noisy error conditions in the MCP server and agentic workflows, hardening security, and keeping the observability pipeline complete.</p> <h3>🐛 Bug Fixes &amp; Improvements</h3> <ul> <li> <p><strong>MCP stdio error handling</strong> — <code>handleMessage</code> now correctly serialises plain-object throws (not just <code>Error</code> instances), eliminating the cryptic <code>-32603 [object Object]</code> failures that blocked <code>submit_pull_request_review</code> on the stdio transport path. (<a href="https://redirect.github.com/github/gh-aw/pull/40715">#40715</a>)</p> </li> <li> <p><strong>Issue Monster noise reduction</strong> — Agent-availability errors (<code>&quot;copilot coding agent is not available for this repository&quot;</code>) are now treated as transient and silently skipped, so the issue tracker is no longer spammed with failure issues on every 30-minute poll cycle. (<a href="https://redirect.github.com/github/gh-aw/pull/40716">#40716</a>)</p> </li> <li> <p><strong>Observability report completeness</strong> — The daily observability report now explicitly requests <code>agent</code> and <code>detection</code> artifact sets alongside <code>usage</code> metrics, preventing incomplete/noop outcomes caused by missing telemetry inputs. (<a href="https://redirect.github.com/github/gh-aw/pull/40705">#40705</a>)</p> </li> <li> <p><strong>Task session data fetch</strong> — Fixed a failing <code>agent</code> GitHub Actions job caused by a stale data-fetch pattern in task session handling. (<a href="https://redirect.github.com/github/gh-aw/pull/40728">#40728</a>)</p> </li> </ul> <h3>🔒 Security</h3> <ul> <li><strong>Atomic temp-file writes</strong> — Replaced direct <code>fs.writeFileSync</code> calls in the safe-output evaluations script with an atomic write helper, closing a CWE-377 insecure-temporary-file vulnerability flagged by CodeQL. (<a href="https://redirect.github.com/github/gh-aw/pull/40721">#40721</a>)</li> </ul> <h3>🔧 Internal</h3> <ul> <li> <p><strong>Safe Outputs conformance checker</strong> — Added MCE-006 check verifying that <code>mcp_server_core.cjs</code> enforces valid JSON-RPC 2.0 error codes (spec §8.2); split spec/script version comments for clarity. (<a href="https://redirect.github.com/github/gh-aw/pull/40737">#40737</a>)</p> </li> <li> <p><strong>Maintenance workflow header</strong> — <code>agentics-maintenance.yml</code> now carries an explicit, purpose-specific header describing the maintenance schedule and how to disable it, replacing the generic compiled-workflow boilerplate. (<a href="https://redirect.github.com/github/gh-aw/pull/40706">#40706</a>)</p> </li> </ul> <blockquote> <p>Generated by <a href="https://github.com/github/gh-aw/actions/runs/27934726678">🚀 Release</a> · 31.3 AIC · ⊞ 8.2K</p> </blockquote> <!-- raw HTML omitted --> <hr /> <h2>What's Changed</h2> <ul> <li>fix(daily-observability-report): request agent+detection artifacts in logs fetches by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/40705">github/gh-aw#40705</a></li> <li>Make <code>agentics-maintenance.yml</code> header maintenance-specific by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/40706">github/gh-aw#40706</a></li> <li>fix: handleMessage avoids [object Object] errors and enforces valid JSON-RPC error codes for thrown plain objects by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/40715">github/gh-aw#40715</a></li> <li>Update task session data fetch by <a href="https://github.com/mnkiefer"><code>@​mnkiefer</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/40728">github/gh-aw#40728</a></li> <li>fix(issue-monster): gracefully skip agent availability errors with ignore-if-error by <a href="https://github.com/pelikhan"><code>@​pelikhan</code></a> with <a href="https://github.com/Copilot"><code>@​Copilot</code></a> in <a href="https://redirect.github.com/github/gh-aw/pull/40716">github/gh-aw#40716</a></li> <li>[spec-review] Update Safe Outputs conformance checker for recent spec changes by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/40737">github/gh-aw#40737</a></li> <li>[blog] Weekly blog post – 2026-06-22 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/40724">github/gh-aw#40724</a></li> <li>[code-scanning-fix] Fix js/insecure-temporary-file: use atomic write to prevent symlink attacks by <a href="https://github.com/github-actions"><code>@​github-actions</code></a>[bot] in <a href="https://redirect.github.com/github/gh-aw/pull/40721">github/gh-aw#40721</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/github/gh-aw/compare/v0.80.8...v0.80.9">https://github.com/github/gh-aw/compare/v0.80.8...v0.80.9</a></p> <h2>v0.80.8</h2> <h2>🌟 Release Highlights</h2> <p>This release brings a meaningful performance win, improved slash-command UX, a new Go linter, and a wave of reliability and documentation improvements.</p> <h3>⚡ Performance</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/gh-aw/commit/a3624368c4e7d877586ff2784b61de73405e2cdd"><code>a362436</code></a> [code-scanning-fix] Fix js/insecure-temporary-file: use atomic write to preve...</li> <li><a href="https://github.com/github/gh-aw/commit/8d48d899c0433d0393e54ce4d5265859f0ae0ded"><code>8d48d89</code></a> docs: add weekly blog post for 2026-06-22 (<a href="https://redirect.github.com/github/gh-aw/issues/40724">#40724</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/75f540e913405e959ac29b4ddb36dceb6e316573"><code>75f540e</code></a> feat: add MCE-006 conformance check for JSON-RPC error code validity (<a href="https://redirect.github.com/github/gh-aw/issues/40737">#40737</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/592d420858380f8b8c85f596e2209a6f0c77807b"><code>592d420</code></a> fix(issue-monster): gracefully skip agent availability errors with ignore-if-...</li> <li><a href="https://github.com/github/gh-aw/commit/a15c5b4ecff41320954a4e12552c47f5290bbfcd"><code>a15c5b4</code></a> Update task session data fetch (<a href="https://redirect.github.com/github/gh-aw/issues/40728">#40728</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/48f9e0c507b758637246ec70e83407518f8e23e3"><code>48f9e0c</code></a> fix: handleMessage avoids [object Object] errors and enforces valid JSON-RPC ...</li> <li><a href="https://github.com/github/gh-aw/commit/b720e39cd9ee9964f5cb71da859e1a0e4061db77"><code>b720e39</code></a> Update agentic maintenance workflow header content (<a href="https://redirect.github.com/github/gh-aw/issues/40706">#40706</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/1af3c5f8322b895ce0c0a6f3dd7a44380af587cb"><code>1af3c5f</code></a> fix(daily-observability-report): request agent+detection artifacts in logs fe...</li> <li><a href="https://github.com/github/gh-aw/commit/a4018535fc14d86a805df01f7381f936a356f0f2"><code>a401853</code></a> Reduce ambient prompt surface in high-traffic workflows (<a href="https://redirect.github.com/github/gh-aw/issues/40695">#40695</a>)</li> <li><a href="https://github.com/github/gh-aw/commit/4bb61803fd180c915253a8c15f94b75f66c36c4b"><code>4bb6180</code></a> Allow Daily Safe Output Integrator to inspect compiler safe-output tests (<a href="https://redirect.github.com/github/gh-aw/issues/40">#40</a>...</li> <li>Additional commits viewable in <a href="https://github.com/github/gh-aw/compare/v0.71.5...v0.80.9">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent d5dd526 commit 13b3731

15 files changed

Lines changed: 52 additions & 52 deletions

‎.github/workflows/agentics-maintenance.yml‎

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -92,7 +92,7 @@ jobs:
9292
pull-requests: write
9393
steps:
9494
- name: Setup Scripts
95-
uses: github/gh-aw-actions/setup@v0.79.8
95+
uses: github/gh-aw-actions/setup@v0.81.2
9696
with:
9797
destination: ${{ runner.temp }}/gh-aw/actions
9898

@@ -130,7 +130,7 @@ jobs:
130130
actions: write
131131
steps:
132132
- name: Setup Scripts
133-
uses: github/gh-aw-actions/setup@v0.79.8
133+
uses: github/gh-aw-actions/setup@v0.81.2
134134
with:
135135
destination: ${{ runner.temp }}/gh-aw/actions
136136

@@ -154,12 +154,12 @@ jobs:
154154
operation: ${{ steps.record.outputs.operation }}
155155
steps:
156156
- name: Checkout repository
157-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
157+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
158158
with:
159159
persist-credentials: false
160160

161161
- name: Setup Scripts
162-
uses: github/gh-aw-actions/setup@v0.79.8
162+
uses: github/gh-aw-actions/setup@v0.81.2
163163
with:
164164
destination: ${{ runner.temp }}/gh-aw/actions
165165

@@ -174,7 +174,7 @@ jobs:
174174
await main();
175175
176176
- name: Install gh-aw
177-
uses: github/gh-aw-actions/setup-cli@v0.79.8
177+
uses: github/gh-aw-actions/setup-cli@v0.81.2
178178
with:
179179
version: v0.79.8
180180

@@ -204,7 +204,7 @@ jobs:
204204
pull-requests: write
205205
steps:
206206
- name: Setup Scripts
207-
uses: github/gh-aw-actions/setup@v0.79.8
207+
uses: github/gh-aw-actions/setup@v0.81.2
208208
with:
209209
destination: ${{ runner.temp }}/gh-aw/actions
210210

@@ -243,14 +243,14 @@ jobs:
243243
run_url: ${{ steps.record.outputs.run_url }}
244244
steps:
245245
- name: Checkout actions folder
246-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
246+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
247247
with:
248248
sparse-checkout: |
249249
actions
250250
persist-credentials: false
251251

252252
- name: Setup Scripts
253-
uses: github/gh-aw-actions/setup@v0.79.8
253+
uses: github/gh-aw-actions/setup@v0.81.2
254254
with:
255255
destination: ${{ runner.temp }}/gh-aw/actions
256256

@@ -289,12 +289,12 @@ jobs:
289289
issues: write
290290
steps:
291291
- name: Checkout repository
292-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
292+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
293293
with:
294294
persist-credentials: false
295295

296296
- name: Setup Scripts
297-
uses: github/gh-aw-actions/setup@v0.79.8
297+
uses: github/gh-aw-actions/setup@v0.81.2
298298
with:
299299
destination: ${{ runner.temp }}/gh-aw/actions
300300

@@ -309,7 +309,7 @@ jobs:
309309
await main();
310310
311311
- name: Install gh-aw
312-
uses: github/gh-aw-actions/setup-cli@v0.79.8
312+
uses: github/gh-aw-actions/setup-cli@v0.81.2
313313
with:
314314
version: v0.79.8
315315

@@ -335,12 +335,12 @@ jobs:
335335
issues: write
336336
steps:
337337
- name: Checkout repository
338-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
338+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
339339
with:
340340
persist-credentials: false
341341

342342
- name: Setup Scripts
343-
uses: github/gh-aw-actions/setup@v0.79.8
343+
uses: github/gh-aw-actions/setup@v0.81.2
344344
with:
345345
destination: ${{ runner.temp }}/gh-aw/actions
346346

@@ -355,13 +355,13 @@ jobs:
355355
await main();
356356
357357
- name: Install gh-aw
358-
uses: github/gh-aw-actions/setup-cli@v0.79.8
358+
uses: github/gh-aw-actions/setup-cli@v0.81.2
359359
with:
360360
version: v0.79.8
361361

362362
- name: Restore activity report logs cache
363363
id: activity_report_logs_cache
364-
uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
364+
uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
365365
with:
366366
path: ./.cache/gh-aw/activity-report-logs
367367
key: ${{ runner.os }}-activity-report-logs-${{ github.repository }}-${{ github.ref_name }}-${{ github.run_id }}
@@ -385,7 +385,7 @@ jobs:
385385
386386
- name: Save activity report logs cache
387387
if: ${{ always() }}
388-
uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
388+
uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
389389
with:
390390
path: ./.cache/gh-aw/activity-report-logs
391391
key: ${{ steps.activity_report_logs_cache.outputs.cache-primary-key }}
@@ -440,12 +440,12 @@ jobs:
440440
issues: write
441441
steps:
442442
- name: Checkout repository
443-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
443+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
444444
with:
445445
persist-credentials: false
446446

447447
- name: Setup Scripts
448-
uses: github/gh-aw-actions/setup@v0.79.8
448+
uses: github/gh-aw-actions/setup@v0.81.2
449449
with:
450450
destination: ${{ runner.temp }}/gh-aw/actions
451451

@@ -460,13 +460,13 @@ jobs:
460460
await main();
461461
462462
- name: Install gh-aw
463-
uses: github/gh-aw-actions/setup-cli@v0.79.8
463+
uses: github/gh-aw-actions/setup-cli@v0.81.2
464464
with:
465465
version: v0.79.8
466466

467467
- name: Restore forecast report logs cache
468468
id: forecast_report_logs_cache
469-
uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
469+
uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
470470
with:
471471
path: ./.github/aw/logs
472472
key: ${{ runner.os }}-forecast-report-logs-${{ github.repository }}-${{ github.ref_name }}-${{ github.run_id }}
@@ -512,7 +512,7 @@ jobs:
512512
513513
- name: Save forecast report logs cache
514514
if: ${{ always() }}
515-
uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
515+
uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
516516
with:
517517
path: ./.github/aw/logs
518518
key: ${{ runner.os }}-forecast-report-logs-${{ github.repository }}-${{ github.ref_name }}-${{ github.run_id }}
@@ -537,7 +537,7 @@ jobs:
537537
issues: write
538538
steps:
539539
- name: Setup Scripts
540-
uses: github/gh-aw-actions/setup@v0.79.8
540+
uses: github/gh-aw-actions/setup@v0.81.2
541541
with:
542542
destination: ${{ runner.temp }}/gh-aw/actions
543543

@@ -569,12 +569,12 @@ jobs:
569569
issues: write
570570
steps:
571571
- name: Checkout repository
572-
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
572+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
573573
with:
574574
persist-credentials: false
575575

576576
- name: Setup Scripts
577-
uses: github/gh-aw-actions/setup@v0.79.8
577+
uses: github/gh-aw-actions/setup@v0.81.2
578578
with:
579579
destination: ${{ runner.temp }}/gh-aw/actions
580580

@@ -589,7 +589,7 @@ jobs:
589589
await main();
590590
591591
- name: Install gh-aw
592-
uses: github/gh-aw-actions/setup-cli@v0.79.8
592+
uses: github/gh-aw-actions/setup-cli@v0.81.2
593593
with:
594594
version: v0.79.8
595595

‎.github/workflows/check-agentic-workflows.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
check-lock-files:
1515
runs-on: ubuntu-latest
1616
steps:
17-
- uses: actions/checkout@v6
17+
- uses: actions/checkout@v7
1818

1919
- name: Install gh-aw
2020
run: curl -sL https://raw.githubusercontent.com/github/gh-aw/main/install-gh-aw.sh | bash -s -- v0.79.8

‎.github/workflows/ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
outputs:
2525
core: ${{ steps.filter.outputs.core }}
2626
steps:
27-
- uses: actions/checkout@v6
27+
- uses: actions/checkout@v7
2828
# cspell:ignore dorny
2929
- uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4
3030
id: filter

‎.github/workflows/codeql.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737

3838
steps:
3939
- name: Checkout repository
40-
uses: actions/checkout@v6
40+
uses: actions/checkout@v7
4141

4242
# Initializes the CodeQL tools for scanning.
4343
- name: Initialize CodeQL

‎.github/workflows/commenter.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
!startsWith(github.head_ref, 'publish/')
1919
runs-on: ubuntu-latest
2020
steps:
21-
- uses: actions/checkout@v6
21+
- uses: actions/checkout@v7
2222
- name: Prepare artifact directory
2323
run: mkdir -p "${{ runner.temp }}/comment-artifact"
2424
- uses: actions/download-artifact@v8

‎.github/workflows/consistency.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
!startsWith(github.head_ref, 'backmerge/') &&
2727
!startsWith(github.head_ref, 'revert-')
2828
steps:
29-
- uses: actions/checkout@v6
29+
- uses: actions/checkout@v7
3030
with:
3131
fetch-depth: 0 ## Needed for Changesets to find `main` branch
3232

@@ -57,7 +57,7 @@ jobs:
5757
name: Spell check
5858
runs-on: ubuntu-latest
5959
steps:
60-
- uses: actions/checkout@v6
60+
- uses: actions/checkout@v7
6161
with:
6262
submodules: recursive
6363
- uses: ./.github/actions/setup
@@ -73,7 +73,7 @@ jobs:
7373
name: Format
7474
runs-on: ubuntu-latest
7575
steps:
76-
- uses: actions/checkout@v6
76+
- uses: actions/checkout@v7
7777
with:
7878
submodules: recursive
7979
- uses: ./.github/actions/setup
@@ -92,7 +92,7 @@ jobs:
9292
name: Lint
9393
runs-on: ubuntu-latest
9494
steps:
95-
- uses: actions/checkout@v6
95+
- uses: actions/checkout@v7
9696
with:
9797
submodules: recursive
9898

@@ -122,7 +122,7 @@ jobs:
122122
name: Versions consistency
123123
runs-on: ubuntu-latest
124124
steps:
125-
- uses: actions/checkout@v6
125+
- uses: actions/checkout@v7
126126
with:
127127
submodules: recursive
128128

‎.github/workflows/copilot-setup-steps.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,8 +19,8 @@ jobs:
1919

2020
steps:
2121
- name: Checkout repository
22-
uses: actions/checkout@v6
22+
uses: actions/checkout@v7
2323
- name: Install gh-aw extension
24-
uses: github/gh-aw/actions/setup-cli@v0.71.5
24+
uses: github/gh-aw/actions/setup-cli@v0.80.9
2525
with:
2626
version: v0.50.1

‎.github/workflows/core-ci.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
if: runner.os == 'Windows'
2727
run: git config --global core.longpaths true
2828

29-
- uses: actions/checkout@v6
29+
- uses: actions/checkout@v7
3030

3131
- uses: ./.github/actions/setup
3232
with:
@@ -65,7 +65,7 @@ jobs:
6565
runs-on: ubuntu-latest
6666

6767
steps:
68-
- uses: actions/checkout@v6
68+
- uses: actions/checkout@v7
6969

7070
- uses: ./.github/actions/setup
7171

@@ -91,7 +91,7 @@ jobs:
9191
DISPLAY: ":99"
9292

9393
steps:
94-
- uses: actions/checkout@v6
94+
- uses: actions/checkout@v7
9595

9696
- uses: ./.github/actions/setup
9797

@@ -146,7 +146,7 @@ jobs:
146146
runs-on: ubuntu-latest
147147

148148
steps:
149-
- uses: actions/checkout@v6
149+
- uses: actions/checkout@v7
150150

151151
- name: Build Docker image
152152
run: docker build -f ./docker/Dockerfile .

‎.github/workflows/external-integration.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
node-version: lts/*
3939

4040
- name: Checkout Azure/typespec-azure repo
41-
uses: actions/checkout@v6
41+
uses: actions/checkout@v7
4242
with:
4343
repository: Azure/typespec-azure
4444
submodules: true
@@ -77,7 +77,7 @@ jobs:
7777

7878
steps:
7979
- name: Checkout repository
80-
uses: actions/checkout@v6
80+
uses: actions/checkout@v7
8181
with:
8282
submodules: true
8383
fetch-depth: 0

‎.github/workflows/merge-release-in-main.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
runs-on: ubuntu-latest
2222
steps:
2323
- name: Checkout
24-
uses: actions/checkout@v6
24+
uses: actions/checkout@v7
2525

2626
- name: Generate branch name
2727
id: branchname

0 commit comments

Comments
 (0)