Add evergreen agentic workflow for automated PR health maintenance

[Copilot]

New agentic workflow that runs every 5 minutes to detect and fix merge conflicts and CI failures across open PRs.

Design

• Deterministic selection: Pre-flight Python step fetches all open PRs sorted by number ascending, checks each for merge conflicts (mergeable state) and failing CI (check-runs + commit status APIs), selects the first unhealthy PR
• Attempt tracking: Per-PR state persisted in repo-memory (branch memory/evergreen) as pr-{number}.md files containing HEAD SHA + attempt count. Counter resets when SHA changes; caps at 5 attempts per repo state
• Agent instructions: Resolve merge conflicts (merge base branch, resolve intelligently), fix CI failures (read logs, identify root cause, surgical fix), push via push-to-pull-request-branch safe output

Safe outputs

• Max 3 pushes to PR branches per run
• Max 3 comments per run
• 30-minute timeout

Manual dispatch

Supports workflow_dispatch with optional pr_number input to target a specific PR, bypassing the scheduling/selection logic.

[mrjf]

@copilot fix CI

[Copilot]

@copilot fix CI

Fixed in 5dfd6b6 — merged main to pick up the lint fixes. The CI failure was caused by pre-existing lint errors in src/core/frame.ts, src/core/series.ts, and tests/stats/value_counts.test.ts that were already fixed on main. All 1130 tests, lint, and typecheck now pass.

[mrjf]

@copilot you need to compile this agentic workflow

https://github.com/github/gh-aw

[Copilot]

@copilot you need to compile this agentic workflow

https://github.com/github/gh-aw

Compiled in 1055bb2 — ran gh aw compile .github/workflows/evergreen.md which generated the evergreen.lock.yml (73KB).

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• github.github.com
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)