fix(workflows): prevent doc-freshness-check from modifying source files

[Copilot]

• Add ## Scope Restriction section to doc-freshness-check prompt
• Add create-issue safe output with labels: [source-code, docs]
• Instruct agent to file issues for source-code drift via create-issue
• Regenerate doc-freshness-check.lock.yml
• Merge latest main (through 8b10d17 — adds dev.azure.com and learn.microsoft.com to network allowed lists, bumps to v0.75.3)
• Recompile all 15 workflows

[jamesadevine]

@copilot Add create-issue safeoutputs and advise the agent to file an issue for incorrect source code documents. Add the tags source-code and docs

[Copilot]

@copilot Add create-issue safeoutputs and advise the agent to file an issue for incorrect source code documents. Add the tags source-code and docs

Done in 67d078c. Added create-issue to safe-outputs: with labels: [source-code, docs] and updated the Scope Restriction section to instruct the agent to call create-issue when it finds source-code drift it cannot fix through documentation updates alone. The lock file has been regenerated.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/graphql
  • Triggering command: /usr/bin/gh gh release list --repo github/gh-aw --limit 5 (http block)
• https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.68.1
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.68.1 --jq .object.sha (http block)
• https://api.github.com/repos/github/gh-aw/releases/latest
  • Triggering command: /usr/bin/gh gh extension upgrade aw (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[jamesadevine]

@copilot Merge latest main and recompile the workflows.

[Copilot]

@copilot Merge latest main and recompile the workflows.

Done in 0ea993a. Merged latest main (through 4960dd2) and recompiled all 15 workflows. Note: update-awf-version.md has a pre-existing compile error on main (state-reason is no longer a valid close-issue field — unrelated to this PR).

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.68.1
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.68.1 --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)