Skip to content

Commit d14fa7d

Browse files
dependabot[bot]danielmeppielCopilot
authored
chore(deps): bump the github-actions group across 1 directory with 9 updates (#3065)
* chore(deps): bump the github-actions group across 1 directory with 9 updates Bumps the github-actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions) | `0.87.8` | `0.89.15` | | [github/gh-aw-actions/setup-cli](https://github.com/github/gh-aw-actions) | `0.87.8` | `0.89.15` | | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `10.0.1` | `10.1.0` | | [azure/login](https://github.com/azure/login) | `3.0.2` | `3.1.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.9` | `4.38.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.9` | `4.38.0` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.321.0` | `1.323.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` | Updates `github/gh-aw-actions/setup` from 0.87.8 to 0.89.15 - [Release notes](https://github.com/github/gh-aw-actions/releases) - [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md) - [Commits](github/gh-aw-actions@1aa033c...045beb2) Updates `github/gh-aw-actions/setup-cli` from 0.87.8 to 0.89.15 - [Release notes](https://github.com/github/gh-aw-actions/releases) - [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md) - [Commits](github/gh-aw-actions@1aa033c...045beb2) Updates `astral-sh/setup-uv` from 10.0.1 to 10.1.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@20cfd1b...bec219d) Updates `azure/login` from 3.0.2 to 3.1.0 - [Release notes](https://github.com/azure/login/releases) - [Commits](Azure/login@7ddb5af...a641126) Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@3d0d988...efb3536) Updates `github/codeql-action/init` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@cdf488f...b96794f) Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@cdf488f...b96794f) Updates `ruby/setup-ruby` from 1.321.0 to 1.323.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](ruby/setup-ruby@95ef2b0...984c0c8) Updates `actions/deploy-pages` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@cd2ce8f...368f825) --- updated-dependencies: - dependency-name: github/gh-aw-actions/setup dependency-version: 0.89.15 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/gh-aw-actions/setup-cli dependency-version: 0.89.15 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: astral-sh/setup-uv dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: azure/login dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ruby/setup-ruby dependency-version: 1.323.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/deploy-pages dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> * fix(ci): synchronize gh-aw v0.89.15 compiler contracts Regenerate agentic workflows and maintenance with the verified compiler. Preserve the Ruby update through source setup steps, pin review checkout to trusted base, and keep activation read-only without disabling version checks. Add regression guards and synchronize managed guidance. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: danielmeppiel <danielmeppiel@users.noreply.github.com> Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
1 parent 723f6b9 commit d14fa7d

31 files changed

Lines changed: 1309 additions & 928 deletions

‎.apm/agents/agentic-workflows.agent.md‎

Lines changed: 16 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -142,7 +142,7 @@ When a user interacts with you:
142142

143143
```bash
144144
# Install the repository's exact compiler version
145-
gh extension install github/gh-aw --pin v0.87.8 --force
145+
gh extension install github/gh-aw --pin v0.89.15 --force
146146

147147
# Initialize repository for agentic workflows
148148
gh aw init
@@ -162,15 +162,23 @@ gh aw fix --write
162162
gh aw compile --validate
163163
```
164164

165-
The repository compiler pin is gh-aw `v0.87.8` at tag commit
166-
`e973b8cc974ce0b3628a8f9759b40733b4bf146b`. Regenerate committed
165+
The repository compiler pin is gh-aw `v0.89.15` at tag commit
166+
`0fac96fb53dc7d2d82cdcc46049383f4a5734f16`. Regenerate committed
167167
`.lock.yml` files with that exact version. Use `--approve` only after
168168
reviewing action, container, permission, and secret changes.
169169

170-
`.github/workflows/agentics-maintenance.yml` is compiler-generated but
171-
committed with its `github/gh-aw-actions/setup-cli` tag refs rewritten to SHA
172-
`1aa033c7bf25ac9428fe521065b90c30a7070c4e`. Re-apply that rewrite after
173-
regeneration; `tests/unit/test_shared_apm_workflow_contract.py` fails otherwise.
170+
`.github/workflows/agentics-maintenance.yml` is compiler-generated. Its
171+
`github/gh-aw-actions/setup-cli` refs must resolve to SHA
172+
`045beb2d14bda8d0c1f2e83b41527f63770d2855`; the workflow contract tests reject
173+
unpinned fallbacks. The three panel workflows declare their Ruby setup action
174+
in source: compiler-injected runtime steps bypass the action-pin cache.
175+
The engine-qualified `ruby-3.3` selector preserves Ruby 3.3 while keeping the
176+
custom action step through compiler runtime deduplication. Keep these source
177+
pins and `.github/aw/actions-lock.json` synchronized when upgrading Ruby.
178+
179+
Use `on.report-blocked-version: false` to keep activation jobs read-only.
180+
This suppresses only the compiler's new blocked-version notification issue;
181+
revocation checks still fail the run, and conclusion failure reports remain.
174182

175183
## Key Features of gh-aw
176184

@@ -190,5 +198,5 @@ regeneration; `tests/unit/test_shared_apm_workflow_contract.py` fails otherwise.
190198
- Workflows must be compiled to `.lock.yml` files before running in GitHub Actions
191199
- **Bash tools are enabled by default** - Don't restrict bash commands unnecessarily since workflows are sandboxed by the AWF
192200
- Follow security best practices: minimal permissions, explicit network access, no template injection
193-
- gh-aw v0.87.8 exposes `GH_AW_DEFAULT_OTLP_HEADERS` to the agent and MCP telemetry runtime when that enterprise secret is configured. Leave it unset unless agent-visible telemetry credentials are an accepted boundary.
201+
- gh-aw v0.89.15 exposes `GH_AW_DEFAULT_OTLP_HEADERS` and the optional secret-backed `GH_AW_DEFAULT_OTLP_ENDPOINT` to the agent and MCP telemetry runtime. Leave these secrets unset unless agent-visible telemetry credentials are an accepted boundary.
194202
- **Single-file output**: When creating a workflow, produce exactly **one** workflow `.md` file. Do not create separate documentation files (architecture docs, runbooks, usage guides, etc.). If documentation is needed, add a brief `## Usage` section inside the workflow file itself.

‎.github/agents/agentic-workflows.agent.md‎

Lines changed: 16 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -142,7 +142,7 @@ When a user interacts with you:
142142

143143
```bash
144144
# Install the repository's exact compiler version
145-
gh extension install github/gh-aw --pin v0.87.8 --force
145+
gh extension install github/gh-aw --pin v0.89.15 --force
146146

147147
# Initialize repository for agentic workflows
148148
gh aw init
@@ -162,15 +162,23 @@ gh aw fix --write
162162
gh aw compile --validate
163163
```
164164

165-
The repository compiler pin is gh-aw `v0.87.8` at tag commit
166-
`e973b8cc974ce0b3628a8f9759b40733b4bf146b`. Regenerate committed
165+
The repository compiler pin is gh-aw `v0.89.15` at tag commit
166+
`0fac96fb53dc7d2d82cdcc46049383f4a5734f16`. Regenerate committed
167167
`.lock.yml` files with that exact version. Use `--approve` only after
168168
reviewing action, container, permission, and secret changes.
169169

170-
`.github/workflows/agentics-maintenance.yml` is compiler-generated but
171-
committed with its `github/gh-aw-actions/setup-cli` tag refs rewritten to SHA
172-
`1aa033c7bf25ac9428fe521065b90c30a7070c4e`. Re-apply that rewrite after
173-
regeneration; `tests/unit/test_shared_apm_workflow_contract.py` fails otherwise.
170+
`.github/workflows/agentics-maintenance.yml` is compiler-generated. Its
171+
`github/gh-aw-actions/setup-cli` refs must resolve to SHA
172+
`045beb2d14bda8d0c1f2e83b41527f63770d2855`; the workflow contract tests reject
173+
unpinned fallbacks. The three panel workflows declare their Ruby setup action
174+
in source: compiler-injected runtime steps bypass the action-pin cache.
175+
The engine-qualified `ruby-3.3` selector preserves Ruby 3.3 while keeping the
176+
custom action step through compiler runtime deduplication. Keep these source
177+
pins and `.github/aw/actions-lock.json` synchronized when upgrading Ruby.
178+
179+
Use `on.report-blocked-version: false` to keep activation jobs read-only.
180+
This suppresses only the compiler's new blocked-version notification issue;
181+
revocation checks still fail the run, and conclusion failure reports remain.
174182

175183
## Key Features of gh-aw
176184

@@ -190,5 +198,5 @@ regeneration; `tests/unit/test_shared_apm_workflow_contract.py` fails otherwise.
190198
- Workflows must be compiled to `.lock.yml` files before running in GitHub Actions
191199
- **Bash tools are enabled by default** - Don't restrict bash commands unnecessarily since workflows are sandboxed by the AWF
192200
- Follow security best practices: minimal permissions, explicit network access, no template injection
193-
- gh-aw v0.87.8 exposes `GH_AW_DEFAULT_OTLP_HEADERS` to the agent and MCP telemetry runtime when that enterprise secret is configured. Leave it unset unless agent-visible telemetry credentials are an accepted boundary.
201+
- gh-aw v0.89.15 exposes `GH_AW_DEFAULT_OTLP_HEADERS` and the optional secret-backed `GH_AW_DEFAULT_OTLP_ENDPOINT` to the agent and MCP telemetry runtime. Leave these secrets unset unless agent-visible telemetry credentials are an accepted boundary.
194202
- **Single-file output**: When creating a workflow, produce exactly **one** workflow `.md` file. Do not create separate documentation files (architecture docs, runbooks, usage guides, etc.). If documentation is needed, add a brief `## Usage` section inside the workflow file itself.

‎.github/aw/actions-lock.json‎

Lines changed: 11 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -25,20 +25,25 @@
2525
"version": "v7",
2626
"sha": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"
2727
},
28-
"github/gh-aw-actions/setup-cli@v0.87.8": {
28+
"github/gh-aw-actions/setup-cli@v0.89.15": {
2929
"repo": "github/gh-aw-actions/setup-cli",
30-
"version": "v0.87.8",
31-
"sha": "1aa033c7bf25ac9428fe521065b90c30a7070c4e"
30+
"version": "v0.89.15",
31+
"sha": "045beb2d14bda8d0c1f2e83b41527f63770d2855"
3232
},
33-
"github/gh-aw-actions/setup@v0.87.8": {
33+
"github/gh-aw-actions/setup@v0.89.15": {
3434
"repo": "github/gh-aw-actions/setup",
35-
"version": "v0.87.8",
36-
"sha": "1aa033c7bf25ac9428fe521065b90c30a7070c4e"
35+
"version": "v0.89.15",
36+
"sha": "045beb2d14bda8d0c1f2e83b41527f63770d2855"
3737
},
3838
"microsoft/apm-action@v1.10.0": {
3939
"repo": "microsoft/apm-action",
4040
"version": "v1.10.0",
4141
"sha": "d723bb64ed70c135bbaf87d126b721dd2dae0439"
42+
},
43+
"ruby/setup-ruby@v1.323.0": {
44+
"repo": "ruby/setup-ruby",
45+
"version": "v1.323.0",
46+
"sha": "984c0c890880bbf811283d6f09c4607c62d210a4"
4247
}
4348
}
4449
}

‎.github/workflows/agentics-maintenance.yml‎

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.87.8). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
1+
# This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.89.15). DO NOT EDIT. To debug this workflow, load the skill at https://github.com/github/gh-aw/blob/main/debug.md
22
#
33
# ___ _ _
44
# / _ \ | | (_)
@@ -44,9 +44,9 @@ on:
4444
description: 'Optional maintenance operation to run'
4545
required: false
4646
type: choice
47-
default: ''
47+
default: 'none'
4848
options:
49-
- ''
49+
- 'none'
5050
- 'disable'
5151
- 'enable'
5252
- 'update'
@@ -88,13 +88,13 @@ permissions: {}
8888

8989
jobs:
9090
close-expired-discussions:
91-
if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '') }}
91+
if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'none') }}
9292
runs-on: ubuntu-slim
9393
permissions:
9494
discussions: write
9595
steps:
9696
- name: Setup Scripts
97-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
97+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
9898
with:
9999
destination: ${{ runner.temp }}/gh-aw/actions
100100

@@ -109,13 +109,13 @@ jobs:
109109
const { main } = require(path.join(actionsDir, 'close_expired_discussions.cjs'));
110110
await main();
111111
close-expired-issues:
112-
if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '') }}
112+
if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'none') }}
113113
runs-on: ubuntu-slim
114114
permissions:
115115
issues: write
116116
steps:
117117
- name: Setup Scripts
118-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
118+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
119119
with:
120120
destination: ${{ runner.temp }}/gh-aw/actions
121121

@@ -130,13 +130,13 @@ jobs:
130130
const { main } = require(path.join(actionsDir, 'close_expired_issues.cjs'));
131131
await main();
132132
close-expired-pull-requests:
133-
if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '') }}
133+
if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'none') }}
134134
runs-on: ubuntu-slim
135135
permissions:
136136
pull-requests: write
137137
steps:
138138
- name: Setup Scripts
139-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
139+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
140140
with:
141141
destination: ${{ runner.temp }}/gh-aw/actions
142142

@@ -152,13 +152,13 @@ jobs:
152152
await main();
153153
154154
cleanup-cache-memory:
155-
if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'clean_cache_memories') }}
155+
if: ${{ (!(github.event.repository.fork)) && github.event_name != 'push' && (github.event_name != 'workflow_dispatch' && github.event_name != 'workflow_call' || inputs.operation == '' || inputs.operation == 'none' || inputs.operation == 'clean_cache_memories') }}
156156
runs-on: ubuntu-slim
157157
permissions:
158158
actions: write
159159
steps:
160160
- name: Setup Scripts
161-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
161+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
162162
with:
163163
destination: ${{ runner.temp }}/gh-aw/actions
164164

@@ -174,7 +174,7 @@ jobs:
174174
await main();
175175
176176
run_operation:
177-
if: ${{ (github.event_name == 'workflow_dispatch' || github.event_name == 'workflow_call') && inputs.operation != '' && inputs.operation != 'safe_outputs' && inputs.operation != 'create_labels' && inputs.operation != 'activity_report' && inputs.operation != 'close_agentic_workflows_issues' && inputs.operation != 'clean_cache_memories' && inputs.operation != 'update_pull_request_branches' && inputs.operation != 'validate' && inputs.operation != 'forecast' && (!(github.event.repository.fork)) }}
177+
if: ${{ (github.event_name == 'workflow_dispatch' || github.event_name == 'workflow_call') && inputs.operation != '' && inputs.operation != 'none' && inputs.operation != 'safe_outputs' && inputs.operation != 'create_labels' && inputs.operation != 'activity_report' && inputs.operation != 'close_agentic_workflows_issues' && inputs.operation != 'clean_cache_memories' && inputs.operation != 'update_pull_request_branches' && inputs.operation != 'validate' && inputs.operation != 'forecast' && (!(github.event.repository.fork)) }}
178178
runs-on: ubuntu-slim
179179
permissions:
180180
actions: write
@@ -189,7 +189,7 @@ jobs:
189189
persist-credentials: false
190190

191191
- name: Setup Scripts
192-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
192+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
193193
with:
194194
destination: ${{ runner.temp }}/gh-aw/actions
195195

@@ -206,9 +206,9 @@ jobs:
206206
await main();
207207
208208
- name: Install gh-aw
209-
uses: github/gh-aw-actions/setup-cli@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
209+
uses: github/gh-aw-actions/setup-cli@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
210210
with:
211-
version: v0.87.8
211+
version: v0.89.15
212212

213213
- name: Run operation
214214
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -240,7 +240,7 @@ jobs:
240240
pull-requests: write
241241
steps:
242242
- name: Setup Scripts
243-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
243+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
244244
with:
245245
destination: ${{ runner.temp }}/gh-aw/actions
246246

@@ -291,7 +291,7 @@ jobs:
291291
persist-credentials: false
292292

293293
- name: Setup Scripts
294-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
294+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
295295
with:
296296
destination: ${{ runner.temp }}/gh-aw/actions
297297

@@ -341,7 +341,7 @@ jobs:
341341
persist-credentials: false
342342

343343
- name: Setup Scripts
344-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
344+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
345345
with:
346346
destination: ${{ runner.temp }}/gh-aw/actions
347347

@@ -358,9 +358,9 @@ jobs:
358358
await main();
359359
360360
- name: Install gh-aw
361-
uses: github/gh-aw-actions/setup-cli@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
361+
uses: github/gh-aw-actions/setup-cli@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
362362
with:
363-
version: v0.87.8
363+
version: v0.89.15
364364

365365
- name: Create missing labels
366366
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -391,7 +391,7 @@ jobs:
391391
persist-credentials: false
392392

393393
- name: Setup Scripts
394-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
394+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
395395
with:
396396
destination: ${{ runner.temp }}/gh-aw/actions
397397

@@ -408,9 +408,9 @@ jobs:
408408
await main();
409409
410410
- name: Install gh-aw
411-
uses: github/gh-aw-actions/setup-cli@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
411+
uses: github/gh-aw-actions/setup-cli@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
412412
with:
413-
version: v0.87.8
413+
version: v0.89.15
414414

415415
- name: Restore activity report logs cache
416416
id: activity_report_logs_cache
@@ -498,7 +498,7 @@ jobs:
498498
persist-credentials: false
499499

500500
- name: Setup Scripts
501-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
501+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
502502
with:
503503
destination: ${{ runner.temp }}/gh-aw/actions
504504

@@ -515,9 +515,9 @@ jobs:
515515
await main();
516516
517517
- name: Install gh-aw
518-
uses: github/gh-aw-actions/setup-cli@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
518+
uses: github/gh-aw-actions/setup-cli@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
519519
with:
520-
version: v0.87.8
520+
version: v0.89.15
521521

522522
- name: Restore forecast report logs cache
523523
id: forecast_report_logs_cache
@@ -594,7 +594,7 @@ jobs:
594594
issues: write
595595
steps:
596596
- name: Setup Scripts
597-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
597+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
598598
with:
599599
destination: ${{ runner.temp }}/gh-aw/actions
600600

@@ -635,7 +635,7 @@ jobs:
635635
persist-credentials: false
636636

637637
- name: Setup Scripts
638-
uses: github/gh-aw-actions/setup@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
638+
uses: github/gh-aw-actions/setup@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
639639
with:
640640
destination: ${{ runner.temp }}/gh-aw/actions
641641

@@ -652,9 +652,9 @@ jobs:
652652
await main();
653653
654654
- name: Install gh-aw
655-
uses: github/gh-aw-actions/setup-cli@1aa033c7bf25ac9428fe521065b90c30a7070c4e # v0.87.8
655+
uses: github/gh-aw-actions/setup-cli@045beb2d14bda8d0c1f2e83b41527f63770d2855 # v0.89.15
656656
with:
657-
version: v0.87.8
657+
version: v0.89.15
658658

659659
- name: Validate workflows and file issue on findings
660660
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0

‎.github/workflows/auth-acceptance.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ jobs:
6868
python-version: ${{ env.PYTHON_VERSION }}
6969

7070
- name: Install uv
71-
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
71+
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
7272

7373
- name: Install dependencies
7474
run: uv sync --frozen
@@ -155,7 +155,7 @@ jobs:
155155
python-version: ${{ env.PYTHON_VERSION }}
156156

157157
- name: Install uv
158-
uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
158+
uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
159159

160160
- name: Install dependencies
161161
run: uv sync --frozen --extra dev
@@ -164,7 +164,7 @@ jobs:
164164
run: uv run pip install -e .
165165

166166
- name: Azure login (Workload Identity Federation)
167-
uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2
167+
uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0
168168
with:
169169
client-id: ${{ secrets.AZURE_CLIENT_ID }}
170170
tenant-id: ${{ secrets.AZURE_TENANT_ID }}

0 commit comments

Comments
 (0)