chore: upgrade gh-aw extension to v0.83.4 pre-release and recompile workflows by lpcox · Pull Request #6681 · github/gh-aw-firewall

lpcox · 2026-07-28T12:08:03Z

Summary

Upgrades the gh-aw extension to v0.83.4 (latest pre-release) and recompiles all agentic workflows.

Changes

Upgraded gh-aw to v0.83.4 using gh aw upgrade --pre-releases
Recompiled all 57 agentic workflows with the new compiler
Fixed test: Updated smoke-gemini-workflow.test.ts to match the new AWF binary install mechanism (install_awf_binary.sh replaces --build-local)

Test Results

All 4124 tests pass (npm test ✅).

…orkflows - Upgraded gh-aw to v0.83.4 using 'gh aw upgrade --pre-releases' - Recompiled all 57 agentic workflows - Updated smoke-gemini test to match new AWF binary install mechanism (install_awf_binary.sh replaces --build-local) Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

github-actions · 2026-07-28T12:10:48Z

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	99.11%	99.14%	📈 +0.03%
Statements	99.03%	99.06%	📈 +0.03%
Functions	99.53%	99.53%	➡️ +0.00%
Branches	95.67%	95.67%	➡️ +0.00%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
`src/log-directory-setup.ts`	96.2% → 100.0% (+3.78%)	96.3% → 100.0% (+3.71%)

Coverage comparison generated by scripts/ci/compare-coverage.ts

Copilot

Pull request overview

Upgrades gh-aw to v0.83.4 and regenerates agentic workflow locks with the new compiler output.

Changes:

Recompiled agentic workflows with sparse checkout and packaged AWF installation.
Updated generated runtime, logging, and session-state handling.
Adjusted the Gemini workflow test for the new installer.

Show a summary per file

File	Description
`scripts/ci/smoke-gemini-workflow.test.ts`	Updates AWF installer assertions.
`.github/workflows/update-release-notes.lock.yml`	Regenerates release-notes workflow.
`.github/workflows/test-hard-cap-ai-credits.lock.yml`	Regenerates AI-credit cap test.
`.github/workflows/test-coverage-reporter.lock.yml`	Regenerates coverage reporter.
`.github/workflows/test-coverage-improver.lock.yml`	Regenerates coverage improver.
`.github/workflows/smoke-sink-visibility-blocked.lock.yml`	Regenerates blocked-sink smoke test.
`.github/workflows/smoke-sink-visibility-allowed.lock.yml`	Regenerates allowed-sink smoke test.
`.github/workflows/smoke-services.lock.yml`	Regenerates services smoke test.
`.github/workflows/smoke-otel-tracing.lock.yml`	Updates OTEL workflow and diagnostics paths.
`.github/workflows/smoke-gvisor.lock.yml`	Regenerates gVisor smoke test.
`.github/workflows/smoke-gvisor-codex.lock.yml`	Regenerates gVisor Codex test.
`.github/workflows/smoke-gvisor-claude.lock.yml`	Regenerates gVisor Claude test.
`.github/workflows/smoke-gvisor-build-test.lock.yml`	Regenerates gVisor build test.
`.github/workflows/smoke-gemini.lock.yml`	Regenerates Gemini smoke test.
`.github/workflows/smoke-docker-sbx-codex.lock.yml`	Regenerates sbx Codex test.
`.github/workflows/smoke-docker-sbx-claude.lock.yml`	Regenerates sbx Claude test.
`.github/workflows/smoke-docker-sbx-build-test.lock.yml`	Regenerates sbx build test.
`.github/workflows/smoke-copilot.lock.yml`	Regenerates Copilot smoke test.
`.github/workflows/smoke-copilot-network-isolation.lock.yml`	Regenerates Copilot isolation test.
`.github/workflows/smoke-copilot-byok.lock.yml`	Updates BYOK model resolution.
`.github/workflows/smoke-copilot-byok-aoai-entra.lock.yml`	Updates Entra BYOK model resolution.
`.github/workflows/smoke-copilot-byok-aoai-apikey.lock.yml`	Updates API-key BYOK model resolution.
`.github/workflows/smoke-claude.lock.yml`	Regenerates Claude smoke test.
`.github/workflows/smoke-chroot.lock.yml`	Regenerates chroot smoke test.
`.github/workflows/security-guard.lock.yml`	Regenerates Security Guard.
`.github/workflows/sbx-gvisor-doc-updater.lock.yml`	Regenerates runtime-doc updater.
`.github/workflows/refactoring-scanner.lock.yml`	Regenerates refactoring scanner.
`.github/workflows/red-team-benchmark.lock.yml`	Regenerates red-team benchmark.
`.github/workflows/plan.lock.yml`	Regenerates planning workflow.
`.github/workflows/network-isolation-test.lock.yml`	Regenerates isolation smoke test.
`.github/workflows/issue-monster.lock.yml`	Regenerates issue workflow.
`.github/workflows/export-audit.lock.yml`	Regenerates export audit.
`.github/workflows/duplicate-code-detector.lock.yml`	Regenerates duplication scanner.
`.github/workflows/doc-maintainer.lock.yml`	Regenerates documentation maintainer.
`.github/workflows/dependency-security-monitor.lock.yml`	Regenerates dependency monitor.
`.github/workflows/copilot-token-usage-analyzer.lock.yml`	Regenerates Copilot usage analyzer.
`.github/workflows/copilot-token-optimizer.lock.yml`	Regenerates Copilot optimizer.
`.github/workflows/contribution-check.lock.yml`	Regenerates contribution checker.
`.github/workflows/cli-flag-consistency-checker.lock.yml`	Regenerates CLI consistency checker.
`.github/workflows/claude-token-usage-analyzer.lock.yml`	Regenerates Claude usage analyzer.
`.github/workflows/claude-token-optimizer.lock.yml`	Regenerates Claude optimizer.
`.github/workflows/ci-cd-gaps-assessment.lock.yml`	Regenerates CI/CD assessment.
`.github/workflows/build-test.lock.yml`	Regenerates build test suite.
`.github/workflows/build-test-network-isolation.lock.yml`	Regenerates isolated build tests.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comments suppressed due to low confidence (1)

.github/workflows/smoke-otel-tracing.lock.yml:1123

The token-usage diagnostic has the same stale directory change: API proxy records are stored under api-proxy-logs, not api-proxy. As written, this branch silently skips existing token usage records.

Files reviewed: 58/58 changed files
Comments generated: 22
Review effort level: Medium

+    expect(lock).toContain('Install AWF binary');
+    expect(lock).toContain('install_awf_binary.sh');


+          sparse-checkout: |
+            .github
+            .agents
+            .antigravity
+            .claude


+          if [ -f /tmp/gh-aw/sandbox/firewall/logs/api-proxy/otel.jsonl ]; then
            echo "OTEL spans exported:"
-            wc -l /tmp/gh-aw/sandbox/firewall/logs/api-proxy-logs/otel.jsonl
+            wc -l /tmp/gh-aw/sandbox/firewall/logs/api-proxy/otel.jsonl
            echo "Sample spans:"
-            head -5 /tmp/gh-aw/sandbox/firewall/logs/api-proxy-logs/otel.jsonl
+            head -5 /tmp/gh-aw/sandbox/firewall/logs/api-proxy/otel.jsonl


          COPILOT_DUMMY_BYOK: dummy-byok-key-for-offline-mode
          COPILOT_GITHUB_TOKEN: ${{ github.token }}
-          COPILOT_MODEL: ${{ env.COPILOT_MODEL }}
+          COPILOT_MODEL: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || vars.GH_AW_DEFAULT_MODEL_COPILOT || 'claude-sonnet-4.6' }}


          COPILOT_AGENT_RUNNER_TYPE: STANDALONE
          COPILOT_DUMMY_BYOK: dummy-byok-key-for-offline-mode
-          COPILOT_MODEL: ${{ env.COPILOT_MODEL }}
+          COPILOT_MODEL: ${{ vars.GH_AW_MODEL_AGENT_COPILOT || vars.GH_AW_DEFAULT_MODEL_COPILOT || 'claude-sonnet-4.6' }}


+          sparse-checkout: |
+            .github
+            .agents
+            .antigravity
+            .claude


+          sparse-checkout: |
+            .github
+            .agents
+            .antigravity
+            .claude


+          sparse-checkout: |
+            .github
+            .agents
+            .antigravity
+            .claude


+          sparse-checkout: |
+            .github
+            .agents
+            .antigravity
+            .claude


+          sparse-checkout: |
+            .github
+            .agents
+            .antigravity
+            .claude


lpcox · 2026-07-28T14:36:42Z

@copilot address review feedback but ignore feedback on compiled .lock.yml files

Copilot · 2026-07-28T14:39:46Z

@copilot address review feedback but ignore feedback on compiled .lock.yml files

Addressed the applicable non-lock review feedback in 4796fcb by updating scripts/ci/smoke-gemini-workflow.test.ts to validate the post-processed workflow output without making .lock.yml changes.

github-actions · 2026-07-28T14:50:32Z

✅ Copilot review passed with no inline comments.

@lpcox Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.

Copilot AI review requested due to automatic review settings July 28, 2026 12:08

Copilot started reviewing on behalf of lpcox July 28, 2026 12:08 View session

Copilot AI reviewed Jul 28, 2026

View reviewed changes

Copilot started work on behalf of lpcox July 28, 2026 14:37 View session

test: validate smoke gemini lock postprocessing output

4796fcb

Copilot finished work on behalf of lpcox July 28, 2026 14:40

lpcox merged commit a8a4f1e into main Jul 28, 2026
24 checks passed

lpcox deleted the upgrade-gh-aw-prerelease-july-28 branch July 28, 2026 16:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: upgrade gh-aw extension to v0.83.4 pre-release and recompile workflows - #6681

chore: upgrade gh-aw extension to v0.83.4 pre-release and recompile workflows#6681
lpcox merged 2 commits into
mainfrom
upgrade-gh-aw-prerelease-july-28

lpcox commented Jul 28, 2026

Uh oh!

github-actions Bot commented Jul 28, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

lpcox commented Jul 28, 2026

Uh oh!

Copilot AI commented Jul 28, 2026

Uh oh!

github-actions Bot commented Jul 28, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

		expect(lock).toContain('Install AWF binary');
		expect(lock).toContain('install_awf_binary.sh');

Uh oh!

Conversation

lpcox commented Jul 28, 2026

Summary

Changes

Test Results

Uh oh!

github-actions Bot commented Jul 28, 2026

✅ Coverage Check Passed

Overall Coverage

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Review details

Uh oh!

lpcox commented Jul 28, 2026

Uh oh!

Copilot AI commented Jul 28, 2026

Uh oh!

github-actions Bot commented Jul 28, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants