chore(workflows): add dev.azure.com and learn.microsoft.com to all network.allowed lists

[Copilot]

Adds dev.azure.com and learn.microsoft.com to the network.allowed list in all agentic workflow front-matter, and recompiles the matching lock files.

Summary

• Added dev.azure.com and learn.microsoft.com to network.allowed in all .github/workflows/*.md agentic workflow definitions.
• Merged latest main and resolved conflict in .github/aw/actions-lock.json.
• Recompiled all 15 agentic workflow lock files with gh-aw v0.75.3 (upgraded from v0.68.1).

Test plan

Compiled with gh aw compile — all 15 workflows compiled successfully with 0 errors.

[jamesadevine]

@copilot do the workflows need recompiling for the domain name change?

[Copilot]

@copilot do the workflows need recompiling for the domain name change?

Yes — network.allowed is a front-matter field that's compiled into the lock files (it controls the --allow-domains flag passed to awf and the GH_AW_ALLOWED_DOMAINS env var). I've recompiled all 14 workflows that compile successfully and pushed the updated lock files in 23f2d87. The 15th (update-awf-version) has a pre-existing unrelated schema error (state-reason is not a valid field) that prevents it from compiling.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.68.1
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.68.1 --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[jamesadevine]

@copilot Merge latest main and recompile all GitHub agentic workflows.

[Copilot]

@copilot Merge latest main and recompile all GitHub agentic workflows.

Done in 70a48c6. Merged latest main (3 commits: docs/init sync, fuzzy_schedule test fix, inlined-imports docs) and recompiled all 15 workflows. 14 compiled successfully with the lock files already up to date from the previous recompile. update-awf-version.md still fails with the same pre-existing state-reason schema error unrelated to this PR.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0.68.1
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0.68.1 --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[jamesadevine]

@copilot Resolve conflicts

[Copilot]

@copilot Resolve conflicts

Done in 701d6d6. Merged latest main, resolved the conflict in .github/aw/actions-lock.json (main had added gh-aw-actions/setup@v0.74.4 and @v0.75.3 entries), and recompiled all 15 workflows with gh-aw v0.75.3.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/github/gh-aw/releases/latest
  • Triggering command: /usr/bin/gh gh extension install github/gh-aw --force --pin v0.75.3 (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)