chore(ci): bump gh-aw setup action to v0.74.8#9358
Draft
polmichel wants to merge 2 commits into
Draft
Conversation
Contributor
There was a problem hiding this comment.
No issues found across 2 files
Confidence score: 5/5
- Automated review surfaced no issues in the provided summaries.
- No files require special attention.
Shadow auto-approve: would auto-approve. This is a low-risk CI chore that bumps a pinned GitHub action version from v0.71.5 to v0.74.8 and normalizes the Dependabot config to match the gh aw compile tooling, with no changes to business logic, production infrastructure, or critical paths.
Re-trigger cubic
Removes `min-integrity: approved` and `approval-labels: [state/ai-pipeline-ready]` from the four bug-agent workflow frontmatters and regenerates the lock.yml files via `gh aw compile` (pinned to v0.71.5 to match the compiler version recorded in `.github/aw/actions-lock.json`). Restores the pre-#9319 behavior where the bug pipeline is not gated behind the approval label. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
71dba19 to
253a417
Compare
Upgrades `gh aw` (the GitHub CLI extension that compiles agentic workflows) from v0.71.5 to v0.74.8 and regenerates the lock files via `gh aw compile`: - `.github/aw/actions-lock.json`: `github/gh-aw-actions/setup` v0.71.5 → v0.74.8. - `.github/workflows/bug-agent-*.lock.yml`: recompiled at v0.74.8. - `.github/dependabot.yml`: reformatted into the gh-aw-managed shape with a new ignore rule for `github/gh-aw-actions/**` (version-locked to the gh-aw compiler; do not bump via dependabot). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
9a7f34e to
565c705
Compare
Base automatically changed from
pmi-revert-pipeline-auth-approver-label
to
stable
May 26, 2026 17:59
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
gh aw compilerto 0.74.8 and update locked yml files.Notes
dependabot.ymlreformatting (dropping the# yamllint disable rule:truthyand section comments, reflowing quotes) is enforced bygh aw compile— manual edits get overwritten on the next run.Test plan
github-actionson Mondays after merge.gh aw compileproduces no diff after this lands (i.e. lock state is stable).🤖 Generated with Claude Code
Summary by cubic
Bump
github/gh-aw-actions/setupto v0.74.8 and normalize Dependabot config to the gh-aw managed format. This stabilizesgh aw compileoutput and prevents Dependabot from bumping compiler-managed actions..github/aw/actions-lock.json:github/gh-aw-actions/setupv0.71.5 → v0.74.8 (sha updated)..github/dependabot.yml: reformatted to gh-aw shape and added ignore forgithub/gh-aw-actions/**; schedule, labels, and target branch unchanged.Written for commit 9a7f34e. Summary will update on new commits. Review in cubic