You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
chore: upgrade and recompile all workflows to gh-aw v0.69.2 (#2144)
* chore: upgrade and recompile all workflows to gh-aw v0.69.2
- Upgrade gh-aw/actions/setup v0.68.7 → v0.69.2
- Upgrade gh-aw-actions/setup v0.68.7 → v0.69.2
- Upgrade gh-aw-actions/setup-cli v0.68.7 → v0.69.2
- Upgrade actions/github-script v8 → v9.0.0
- Recompile all 29 workflow lock files
- Post-process smoke/build-test lock files
Co-authored-by: Copilot <[email protected]>
* chore: bump mcpg to v0.2.29 in smoke-claude, smoke-codex, smoke-copilot
Set sandbox.mcp.version: v0.2.29 in frontmatter to test the GraphQL
fix for gh pr list / gh issue list via the CLI proxy.
Disables strict mode in these three workflows to allow the
sandbox.mcp.version field (internal implementation detail).
Tracking issue: github/gh-aw-mcpg#4276
Co-authored-by: Copilot <[email protected]>
* fix: correct double-indentation of [shell_environment_policy] in Codex config.toml
The postprocess script had an extra ${indent} before $3 in the replacement
string, but $3 already captures the indent prefix. This caused
[shell_environment_policy] to be double-indented (20 spaces instead of 10).
Fix: remove the redundant ${indent} from the replacement string.
Co-authored-by: Copilot <[email protected]>
* fix: use custom openai-proxy provider to disable WebSocket in Codex config.toml
The built-in 'openai' provider ID is reserved in Codex and cannot be overridden
via [model_providers.openai] — Codex requires a 'name' field and treats it as a
custom provider definition, causing 'Error loading config.toml: missing field
`name` in `model_providers.openai`'.
Fix: define a custom 'openai-proxy' provider that:
- points to the AWF api-proxy sidecar at http://172.30.0.30:10000
- sets supports_websockets=false to force REST (Codex v0.121+ ignores
OPENAI_BASE_URL for WebSocket, connecting directly to wss://api.openai.com)
- uses OPENAI_API_KEY (placeholder injected by AWF); the sidecar replaces it
with the real key before forwarding to OpenAI
Also set model_provider = "openai-proxy" to activate the custom provider.
Co-authored-by: Copilot <[email protected]>
---------
Co-authored-by: Copilot <[email protected]>
@@ -92,7 +92,7 @@ When you interact with this agent, it will:
92
92
### Create a Report-Generating Workflow
93
93
**Load when**: The workflow being created or updated produces reports — recurring status updates, audit summaries, analyses, or any structured output posted as a GitHub issue, discussion, or comment
- "Create a shared component for Notion integration"
@@ -112,7 +112,7 @@ When you interact with this agent, it will:
112
112
### Fix Dependabot PRs
113
113
**Load when**: User needs to close or fix open Dependabot PRs that update dependencies in generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`)
- "Fix the open Dependabot PRs for npm dependencies"
@@ -122,7 +122,7 @@ When you interact with this agent, it will:
122
122
### Analyze Test Coverage
123
123
**Load when**: The workflow reads, analyzes, or reports test coverage — whether triggered by a PR, a schedule, or a slash command. Always consult this prompt before designing the coverage data strategy.
- "Create a workflow that comments coverage on PRs"
@@ -169,10 +169,10 @@ gh aw compile --validate
169
169
170
170
## Important Notes
171
171
172
-
- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/github-agentic-workflows.md for complete documentation
172
+
- Always reference the instructions file at https://github.com/github/gh-aw/blob/v0.69.2/.github/aw/github-agentic-workflows.md for complete documentation
173
173
- Use the MCP tool `agentic-workflows` when running in GitHub Copilot Cloud
174
174
- Workflows must be compiled to `.lock.yml` files before running in GitHub Actions
175
175
-**Bash tools are enabled by default** - Don't restrict bash commands unnecessarily since workflows are sandboxed by the AWF
176
176
- Follow security best practices: minimal permissions, explicit network access, no template injection
177
-
-**Network configuration**: Use ecosystem identifiers (`node`, `python`, `go`, etc.) or explicit FQDNs in `network.allowed`. Bare shorthands like `npm` or `pypi` are **not** valid. See https://github.com/github/gh-aw/blob/v0.68.7/.github/aw/network.md for the full list of valid ecosystem identifiers and domain patterns.
177
+
-**Network configuration**: Use ecosystem identifiers (`node`, `python`, `go`, etc.) or explicit FQDNs in `network.allowed`. Bare shorthands like `npm` or `pypi` are **not** valid. See https://github.com/github/gh-aw/blob/v0.69.2/.github/aw/network.md for the full list of valid ecosystem identifiers and domain patterns.
178
178
-**Single-file output**: When creating a workflow, produce exactly **one** workflow `.md` file. Do not create separate documentation files (architecture docs, runbooks, usage guides, etc.). If documentation is needed, add a brief `## Usage` section inside the workflow file itself.
0 commit comments