[actions] Update GitHub Actions versions - 2026-04-28 by github-actions[bot] · Pull Request #28984 · github/gh-aw

github-actions · 2026-04-28T21:10:05Z

GitHub Actions Updates - 2026-04-28

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases.

📦 Actions Updated (full list)

Actions Updated

microsoft/apm-action: v1.4.2 → v1.5.0

Summary

Total actions updated: 1
Update command: gh aw update
Workflow lock files: Not included (will be regenerated on next compile)

Notes

All action updates respect semantic versioning and maintain compatibility
Actions are pinned to commit SHAs for security
Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation

Testing

The updated actions will be automatically used in workflow compilations. No manual testing required.

This PR was automatically created by the Daily Workflow Updater workflow.

Generated by Daily Workflow Updater · ● 509.4K · ◷

expires on Apr 29, 2026, 9:09 PM UTC

✨ PR Review Safe Output Test - Run 25080367957

💥 [THE END] — Illustrated by Smoke Claude · ● 214.2K · ◷

- microsoft/apm-action: v1.4.2 → v1.5.0 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

pelikhan · 2026-04-28T22:02:39Z

@copilot merge main and recompile

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/9da4721d-92a7-4125-bcff-54e6d3c9b617 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

…4-28-00451bf45e7ea6cc Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/9da4721d-92a7-4125-bcff-54e6d3c9b617 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-04-28T22:08:38Z

@copilot merge main and recompile

Done — merged main and recompiled all 203 workflow lock files successfully (e7bf11c).

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -embedcfg /tmp/go-build3739393812/b275/embedcfg -pack (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -embedcfg /tmp/go-build3739393812/b349/embedcfg -pack (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch submodules | hearemote.origin.url (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

github-actions · 2026-04-28T22:13:04Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-04-28T22:13:05Z

🚀 Smoke OpenCode MISSION COMPLETE! OpenCode delivered. 🔥

github-actions · 2026-04-28T22:13:09Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-04-28T22:13:21Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-04-28T22:13:30Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-04-28T22:14:20Z

⚠️ Smoke Crush failed. Crush encountered unexpected challenges...

github-actions · 2026-04-28T22:17:08Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	4.52.5
curl	✅	8.5.0
gh	✅	2.89.0
node	✅	22.22.2
python3	✅	3.10.16 (PyPy 7.3.19)
go	✅	1.24.13
java	✅	10.0.201
dotnet	✅	10.0.201

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · ● 163.3K · ◷

github-actions · 2026-04-28T22:20:33Z

PRs: #28983 fix: remove partial destination file on io.Copy failure in CopyFile; #28982 fix: add length guard in matchPattern to prevent false positives with overlapping prefix/suffix wildcards
✅ GitHub MCP ✅ Serena ✅ Playwright ✅ File/Bash ✅ Build
❌ Web Fetch unavailable; ❌ Comment Memory missing
Overall: FAIL

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · ◷

github-actions · 2026-04-28T22:21:07Z

Smoke Test: Copilot Engine — PR #28984

Test	Result
GitHub MCP	✅
MCP Scripts GH CLI	✅
Serena CLI	✅
Playwright	✅
Web Fetch	✅
File Writing + Bash	✅
Discussion Interaction	✅
Build gh-aw	✅
Upload Artifact	✅
Discussion Creation	✅
Workflow Dispatch	✅
PR Review	✅
Comment Memory	✅

Overall: ✅ PASS

PR: [actions] Update GitHub Actions versions - 2026-04-28 by @app/github-actions | Assignees: @Copilot, @gh-aw-bot

📰 BREAKING: Report filed by Smoke Copilot · ● 1.2M · ◷

github-actions · 2026-04-28T22:21:08Z

🤖 Beep boop! The smoke test agent has touched down! 🛸

I've analyzed your daily code metrics and they look absolutely chef's kiss — 76/100 quality score, 2.18 test-to-source ratio? That's not a codebase, that's a work of art. 🎨

The smoke test passed with flying colors (✅ all green), the gh-aw binary compiled beautifully, and I even left some inline PR comments to prove I was here.

Consider this my digital graffiti: The Copilot was here — run §25080367933 🚀

📰 BREAKING: Report filed by Smoke Copilot · ● 1.2M · ◷

github-actions · 2026-04-28T22:21:13Z

Comment Memory

# Smoke Test Comment Memory

Code runs unseen,
agents whirl through pipelines bright,
tests light up the dark.

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

📰 BREAKING: Report filed by Smoke Copilot · ● 1.2M · ◷

github-actions

Automated smoke test review: This PR updates the SHA pin for microsoft/apm-action@v1.4.2 and adds a new entry for v1.5.0 across action_pins.json and the compiled smoke-claude lock file. The changes look correct and consistent across all three files.

📰 BREAKING: Report filed by Smoke Copilot · ● 1.2M

github-actions · 2026-04-28T22:21:14Z

      "version": "v1.4.2",
-      "sha": "9fe9337ef58b5e620e0113071ceb47a6a8a232f7"
+      "sha": "677ddbfb986cdf36d99d26e167aff29b3e80486d"
+    },


The SHA for microsoft/apm-action@v1.4.2 has been updated to 677ddbfb986cdf36d99d26e167aff29b3e80486d. Good to see pin updates keeping dependencies locked to verified commits.

github-actions · 2026-04-28T22:21:14Z

+    "microsoft/apm-action@v1.5.0": {
+      "repo": "microsoft/apm-action",
+      "version": "v1.5.0",
+      "sha": "454b8a1d279376a47df8bb8d525ec076ca0fcef7"


New entry for microsoft/apm-action@v1.5.0 with SHA 454b8a1d279376a47df8bb8d525ec076ca0fcef7 — nice to add the new version to the pins registry proactively.

github-actions · 2026-04-28T22:25:25Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-04-28T22:28:45Z

Smoke Test Run §25080367957

Core Tests (#1–12): ✅✅✅✅✅✅✅✅✅ ❌ ✅✅
PR Review Tests (#13–19): ✅✅✅⚠️✅✅⚠️

Test	Result
1 GitHub MCP	✅
2 MCP Scripts GH CLI	✅
3 Serena (3 symbols found)	✅
4 Make Build	✅
5 Playwright	✅
6 Tavily Search	✅
7 File Write	✅
8 Bash	✅
9 Discussion comment	✅
10 AW MCP status	❌
11 Slack	✅
12 Code Scanning Alert	✅
13 Update PR	✅
14 Review Comments	✅
15 Submit Review	✅
16 Resolve Thread	⚠️
17 Add Reviewer	✅
18 Push to Branch	✅
19 Close PR	⚠️

Overall: PARTIAL (1 fail: AW MCP status tool error; 2 skipped)

💥 [THE END] — Illustrated by Smoke Claude · ● 214.2K · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

💥 [THE END] — Illustrated by Smoke Claude · ● 214.2K

github-actions · 2026-04-28T22:28:45Z

      "repo": "microsoft/apm-action",
      "version": "v1.4.2",
-      "sha": "9fe9337ef58b5e620e0113071ceb47a6a8a232f7"
+      "sha": "677ddbfb986cdf36d99d26e167aff29b3e80486d"


✅ SHA updated for microsoft/apm-action@v1.4.2 — good to see the pin being kept current.

github-actions · 2026-04-28T22:28:46Z

      "repo": "microsoft/apm-action",
      "version": "v1.4.2",
-      "sha": "9fe9337ef58b5e620e0113071ceb47a6a8a232f7"
+      "sha": "677ddbfb986cdf36d99d26e167aff29b3e80486d"


✅ Consistent SHA update across both pkg/workflow/data/action_pins.json and pkg/actionpins/data/action_pins.json — good consistency.

chore: update GitHub Actions versions 2026-04-28

aee0c80

- microsoft/apm-action: v1.4.2 → v1.5.0 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

github-actions Bot added automation dependencies Pull requests that update a dependency file labels Apr 28, 2026

github-actions Bot mentioned this pull request Apr 28, 2026

[Contribution Check Report] Contribution Check — 2026-04-28 #28835

Closed

Copilot started work on behalf of pelikhan April 28, 2026 22:02 View session

Copilot AI and others added 3 commits April 28, 2026 22:06

chore: save working state before merge

b01aa63

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/9da4721d-92a7-4125-bcff-54e6d3c9b617 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Merge remote-tracking branch 'origin/main' into actions/update-2026-0…

1517946

…4-28-00451bf45e7ea6cc Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

chore: merge main and recompile workflow lock files

e7bf11c

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/9da4721d-92a7-4125-bcff-54e6d3c9b617 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan April 28, 2026 22:09

Copilot AI requested a review from pelikhan April 28, 2026 22:09

pelikhan added the smoke label Apr 28, 2026

github-actions Bot removed the smoke label Apr 28, 2026

pelikhan merged commit 0e13462 into main Apr 28, 2026
156 of 159 checks passed

pelikhan deleted the actions/update-2026-04-28-00451bf45e7ea6cc branch April 28, 2026 22:20

github-actions Bot added the smoke-copilot label Apr 28, 2026

github-actions Bot commented Apr 28, 2026

View reviewed changes

github-actions Bot mentioned this pull request Apr 28, 2026

Smoke Test: Claude - 25080367957 #28996

Closed

github-actions Bot commented Apr 28, 2026

View reviewed changes

Conversation

github-actions Bot commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

GitHub Actions Updates - 2026-04-28

Actions Updated

Summary

Notes

Testing

Uh oh!

pelikhan commented Apr 28, 2026

Uh oh!

Copilot AI commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

github-actions Bot commented Apr 28, 2026

Uh oh!

github-actions Bot commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Apr 28, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented Apr 28, 2026

Uh oh!

Uh oh!

github-actions Bot commented Apr 28, 2026

Smoke Test: Copilot Engine — PR #28984

Uh oh!

github-actions Bot commented Apr 28, 2026

Uh oh!

github-actions Bot commented Apr 28, 2026

Comment Memory

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Apr 28, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Apr 28, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Apr 28, 2026

Uh oh!

github-actions Bot commented Apr 28, 2026

Smoke Test Run §25080367957

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Apr 28, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot Apr 28, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions Bot commented Apr 28, 2026 •

edited

Loading

Copilot AI commented Apr 28, 2026 •

edited

Loading

github-actions Bot commented Apr 28, 2026 •

edited

Loading

github-actions Bot commented Apr 28, 2026 •

edited

Loading

github-actions Bot commented Apr 28, 2026 •

edited

Loading

github-actions Bot commented Apr 28, 2026 •

edited

Loading

github-actions Bot commented Apr 28, 2026 •

edited

Loading