[actions] Update GitHub Actions versions - 2026-05-02 by github-actions[bot] · Pull Request #29705 · github/gh-aw

github-actions · 2026-05-02T07:32:19Z

GitHub Actions Updates - 2026-05-02

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases.

📦 Actions Updated (full list)

Actions Updated

actions/github-script: v9 → v9.0.0 (SHA pinned)
docker/metadata-action: v6 → v6.0.0 (SHA pinned)
docker/setup-buildx-action: v4 → v4.0.0 (SHA pinned)
erlef/setup-beam: v1.24 → v1.24.0 (SHA updated)
github/codeql-action/upload-sarif: v4.35.2 → v4.35.3
github/stale-repos: v9.0.8 → v9.0.9
haskell-actions/setup: v2.11 → v2.11.0 (SHA pinned)
microsoft/apm-action: v1.4.2 + v1.5.0 → v1.5.1 (consolidated)

Summary

Total actions updated: 8
Update command: gh aw update
Workflow lock files: Not included (will be regenerated on next compile)

Notes

All action updates respect semantic versioning and maintain compatibility
Actions are pinned to commit SHAs for security
Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation

This PR was automatically created by the Daily Workflow Updater workflow.

Generated by Daily Workflow Updater · ● 355K · ◷

expires on May 3, 2026, 7:32 AM UTC

Changeset

Type: patch
Description: Updated pinned GitHub Actions versions to their latest compatible releases.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

Generated by Changeset Generator for issue #29705 · ◷

✨ PR Review Safe Output Test - Run 25248952178

💥 [THE END] — Illustrated by Smoke Claude · ● 199.8K · ◷

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

pelikhan · 2026-05-02T09:24:19Z

@copilot recompile

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/92ddb7e9-7055-445b-bc81-f339cac84c1b Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-05-02T09:29:53Z

@copilot recompile

Done. Recompiled all 207 workflow lock files in commit db6c2c3.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/actions/download-artifact/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/git/ref/tags/v8 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v9
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv ns.json and pkg/workflow/data/action_pins.json..." (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv it} (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv ithub/workflows (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/docker/metadata-action/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v6 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v4 --jq [.object.sha, .object.type] | @tsv (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch ithub/workflows --local ock.yml http.https://gitgit (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

github-actions · 2026-05-02T09:32:29Z

⚠️ Smoke Crush failed. Crush encountered unexpected challenges...

github-actions · 2026-05-02T09:32:32Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-05-02T09:32:32Z

⚠️ Smoke Gemini failed. Gemini encountered unexpected challenges...

github-actions · 2026-05-02T09:32:33Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-05-02T09:32:34Z

🚀 Smoke OpenCode MISSION COMPLETE! OpenCode delivered. 🔥

github-actions · 2026-05-02T09:33:08Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-05-02T09:36:01Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.53.0
jq	✅	1.7
yq	✅	4.52.5
curl	✅	8.5.0
gh	✅	2.89.0
node	✅	22.22.2
python3	✅	3.10.16 (PyPy)
go	✅	1.24.13
java	✅	21.0.10
dotnet	✅	10.0.201

Result: 12/12 tools available ✅

Overall Status: PASS

🔧 Tool validation by Agent Container Smoke Test · ● 219K · ◷

github-actions · 2026-05-02T09:39:45Z

Commit pushed: e075ff5

Generated by Changeset Generator

github-actions · 2026-05-02T09:40:09Z

Merged PRs: #29714 fix(sec-004): add safe-outputs-exempt annotations to 4 handler files; #29713 [architecture] Update architecture diagram 2026-05-02
✅ GitHub MCP ✅ Serena MCP ✅ Playwright
❌ Web Fetch MCP ✅ File Writing ✅ Bash Verification
✅ Build ❌ Comment Memory ✅ Cache Memory
Overall status: FAIL

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

ab.chatgpt.com
chatgpt.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · ◷

github-actions · 2026-05-02T09:42:08Z

CAVEMAN WAS HERE! 🦴 Smoke test agent run through. Many tools tested. All mostly work. Caveman grunt with approval. Fire hot. Code compile. Tests pass. Caveman happy! 🔥

📰 BREAKING: Report filed by Smoke Copilot · ● 1.2M · ◷

github-actions

Caveman look at PR. Actions updated to exact versions. Good pinning. SHA hashes present. Caveman approve.

📰 BREAKING: Report filed by Smoke Copilot · ● 1.2M

github-actions · 2026-05-02T09:42:21Z

      "sha": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
    },
-    "actions/github-script@v9": {
+    "actions/github-script@v9.0.0": {


Ug! Version now exact. v9.0.0 good. Old v9 was fuzzy. Caveman approve pinning.

github-actions · 2026-05-02T09:42:21Z

    },
-    "docker/metadata-action@v6": {
+    "docker/metadata-action@v6.0.0": {
      "repo": "docker/metadata-action",


SHA pinned. Good. Caveman trust hash. Hash not lie.

github-actions · 2026-05-02T09:42:50Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

github-actions · 2026-05-02T09:42:59Z

💥 Smoke Test Results — Run 25248952178

Core tests: ✅1 ✅2 ✅3 ✅4 ✅5 ✅6 ✅7 ✅8 ✅9 ✅10 ✅11 ✅12
PR review tests: ✅13 ✅14 ✅15 ⚠️16 ✅17 ✅18 ⚠️19

Overall: ✅ PASS (2 skipped: no unresolved threads / no test PR to close)

💥 [THE END] — Illustrated by Smoke Claude · ● 199.8K · ◷

github-actions

💥 Automated smoke test review - all systems nominal! This review was generated by the Claude smoke test agent for run 25248952178. Review comments above check action version pinning.

💥 [THE END] — Illustrated by Smoke Claude · ● 199.8K

github-actions · 2026-05-02T09:43:02Z

      "sha": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c"
    },
-    "actions/github-script@v9": {
+    "actions/github-script@v9.0.0": {


✅ Good update: actions/github-script pinned to explicit semver v9.0.0. This improves reproducibility by avoiding implicit version resolution. Smoke test review comment — Run 25248952178.

github-actions · 2026-05-02T09:43:02Z

 #   - actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 #   - actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
-#   - actions/github-script@373c709c69115d41ff229c7e5df9f8788daa9553 # v9
+#   - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9


✅ SHA reference updated for actions/github-script. The lock file correctly reflects the new pinned SHA for v9.0.0. Smoke test review comment — Run 25248952178.

chore: update GitHub Actions versions 2026-05-02

a7b9818

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

github-actions Bot added automation dependencies Pull requests that update a dependency file labels May 2, 2026

github-actions Bot mentioned this pull request May 2, 2026

[Contribution Check Report] Contribution Check — 2026-05-02 #29664

Closed

Copilot started work on behalf of pelikhan May 2, 2026 09:24 View session

chore: recompile workflow lock files after actions update

db6c2c3

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/92ddb7e9-7055-445b-bc81-f339cac84c1b Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI requested a review from pelikhan May 2, 2026 09:31

Copilot finished work on behalf of pelikhan May 2, 2026 09:31

pelikhan added the smoke label May 2, 2026

github-actions Bot removed the smoke label May 2, 2026

github-actions Bot mentioned this pull request May 2, 2026

Smoke Test: Claude - 25248852773 #29726

Closed

Add changeset

e075ff5

github-actions Bot added the smoke-copilot label May 2, 2026

github-actions Bot commented May 2, 2026

View reviewed changes

github-actions Bot mentioned this pull request May 2, 2026

Smoke Test: Claude - 25248952178 #29731

Closed

github-actions Bot added the smoke-claude label May 2, 2026

github-actions Bot commented May 2, 2026

View reviewed changes

pelikhan merged commit 625f95d into main May 2, 2026
1 check passed

pelikhan deleted the actions/update-2026-05-02-d1dd26c5a789f26c branch May 2, 2026 09:44

Conversation

github-actions Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

GitHub Actions Updates - 2026-05-02

Actions Updated

Summary

Notes

Changeset

Uh oh!

pelikhan commented May 2, 2026

Uh oh!

Copilot AI commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

github-actions Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented May 2, 2026

Uh oh!

github-actions Bot commented May 2, 2026

Agent Container Tool Check

Uh oh!

github-actions Bot commented May 2, 2026

Uh oh!

github-actions Bot commented May 2, 2026

Uh oh!

github-actions Bot commented May 2, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot May 2, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot May 2, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented May 2, 2026

Uh oh!

github-actions Bot commented May 2, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions Bot May 2, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot May 2, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions Bot commented May 2, 2026 •

edited

Loading

Copilot AI commented May 2, 2026 •

edited

Loading

github-actions Bot commented May 2, 2026 •

edited

Loading

github-actions Bot commented May 2, 2026 •

edited

Loading

github-actions Bot commented May 2, 2026 •

edited

Loading

github-actions Bot commented May 2, 2026 •

edited

Loading

github-actions Bot commented May 2, 2026 •

edited

Loading