From 15897720e77b0945a7c81cd695e1c8835a9ad810 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 28 Jul 2026 11:51:12 +0000 Subject: [PATCH 1/9] Initial plan From 5a4d120a94f395bf143729cbf4d0a6cd96ff0c1f Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 28 Jul 2026 12:33:18 +0000 Subject: [PATCH 2/9] Fix DefaultCopilotVersion toolcache drift: update compat.json, script range fallback, emit GH_AW_COMPILED_VERSION in job envs Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- .github/aw/compat.json | 2 +- actions/setup/sh/install_copilot_cli.sh | 21 +++-- pkg/constants/version_constants_test.go | 104 ++++++++++++++++++++++ pkg/workflow/compiler_main_job_helpers.go | 10 +++ pkg/workflow/threat_detection_job.go | 11 +++ 5 files changed, 142 insertions(+), 6 deletions(-) diff --git a/.github/aw/compat.json b/.github/aw/compat.json index 0ea0160b78a..0cc6b903db3 100644 --- a/.github/aw/compat.json +++ b/.github/aw/compat.json @@ -10,7 +10,7 @@ "min-gh-aw": "0.72.0", "max-gh-aw": "*", "min-agent": "1.0.21", - "max-agent": "1.0.56", + "max-agent": "1.0.75", "open": true }, { diff --git a/actions/setup/sh/install_copilot_cli.sh b/actions/setup/sh/install_copilot_cli.sh index 5dada75d2bc..ce3d632d9fb 100755 --- a/actions/setup/sh/install_copilot_cli.sh +++ b/actions/setup/sh/install_copilot_cli.sh @@ -272,8 +272,8 @@ resolve_version_from_compat() { return 1 fi - if [[ ! "$compiled_version" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then - echo "GH_AW_COMPILED_VERSION '${compiled_version}' is not in vMAJOR.MINOR.PATCH format; skipping compatibility matrix resolution." >&2 + if [[ ! "$compiled_version" =~ ^v?[0-9]+\.[0-9]+\.[0-9]+$ ]]; then + echo "GH_AW_COMPILED_VERSION '${compiled_version}' is not in MAJOR.MINOR.PATCH format; skipping compatibility matrix resolution." >&2 return 1 fi @@ -422,8 +422,13 @@ find_cached_copilot_bin() { printf '%s\n' "$candidate" return 0 fi - echo " Skipping candidate (version mismatch: want ${requested_version_normalized}, got ${candidate_version_normalized})" >&2 - continue + # If no compat range is available, an exact match is required + if [ -z "$min_version" ] && [ -z "$max_version" ]; then + echo " Skipping candidate (version mismatch: want ${requested_version_normalized}, got ${candidate_version_normalized})" >&2 + continue + fi + echo " No exact match (want ${requested_version_normalized}); checking compat range ${min_version}..${max_version}" >&2 + # Fall through to range check below fi if [ -n "$min_version" ] && version_is_greater "$min_version" "$candidate_version_normalized"; then @@ -520,7 +525,13 @@ if [ -z "$VERSION" ]; then exit 1 fi else - echo "Explicit Copilot CLI version argument provided (${VERSION}); skipping compat matrix resolution." + echo "Explicit Copilot CLI version argument provided (${VERSION}); resolving compat window for toolcache range matching..." + if RESOLVED_COMPAT_INFO="$(resolve_version_from_compat "$COMPILED_GH_AW_VERSION" "${TEMP_DIR}/compat.json")"; then + IFS='|' read -r _UNUSED COMPAT_MATCHED_MIN_AGENT COMPAT_MATCHED_MAX_AGENT COMPAT_CACHE_TTL_DAYS <<< "$RESOLVED_COMPAT_INFO" + echo "Compat window resolved: ${COMPAT_MATCHED_MIN_AGENT}..${COMPAT_MATCHED_MAX_AGENT} (toolcache range matching enabled)" + else + echo "Compat window unavailable; exact toolcache match required for version ${VERSION}." >&2 + fi fi # Prefer the runner toolcache when a compatible Copilot CLI is already available. diff --git a/pkg/constants/version_constants_test.go b/pkg/constants/version_constants_test.go index ca725dee5cc..414ebfec07b 100644 --- a/pkg/constants/version_constants_test.go +++ b/pkg/constants/version_constants_test.go @@ -3,6 +3,13 @@ package constants import ( + "encoding/json" + "fmt" + "os" + "path/filepath" + "runtime" + "strconv" + "strings" "testing" "time" ) @@ -28,3 +35,100 @@ func TestDefaultPlaywrightCLIVersionOutsideCooldownWindow(t *testing.T) { t.Fatalf("@playwright/cli@%s is only %s old, but Playwright CLI installs enforce a %s npm release-age cooldown", DefaultPlaywrightCLIVersion, age.Round(time.Second), minReleaseAge) } } + +// TestDefaultCopilotVersionWithinCompatWindow asserts that DefaultCopilotVersion falls +// within the declared compat.json window so the runner toolcache can satisfy installs +// without a network download. Failures here indicate that either DefaultCopilotVersion +// or the compat.json max-agent needs to be updated. +func TestDefaultCopilotVersionWithinCompatWindow(t *testing.T) { + // Locate compat.json relative to this test file (three directories up from + // pkg/constants/ → repo root → .github/aw/compat.json). + _, testFile, _, ok := runtime.Caller(0) + if !ok { + t.Fatal("runtime.Caller failed") + } + compatPath := filepath.Join(filepath.Dir(testFile), "..", "..", ".github", "aw", "compat.json") + compatPath = filepath.Clean(compatPath) + + data, err := os.ReadFile(compatPath) + if err != nil { + t.Fatalf("read %s: %v", compatPath, err) + } + + var compat struct { + AgentCompatV1 struct { + Copilot []struct { + MinGhAw string `json:"min-gh-aw"` + MaxGhAw string `json:"max-gh-aw"` + MinAgent string `json:"min-agent"` + MaxAgent string `json:"max-agent"` + Open bool `json:"open"` + } `json:"copilot"` + } `json:"agent-compat-v1"` + } + if err := json.Unmarshal(data, &compat); err != nil { + t.Fatalf("parse %s: %v", compatPath, err) + } + + version := string(DefaultCopilotVersion) + + // Find the first open row (open: true means it covers the current gh-aw release). + for _, row := range compat.AgentCompatV1.Copilot { + if !row.Open { + continue + } + if row.MinAgent == "" || row.MaxAgent == "" { + t.Fatalf("compat row missing min-agent or max-agent: %+v", row) + } + if cmp, err := semverCmp(version, row.MinAgent); err != nil { + t.Fatalf("semverCmp(%q, %q): %v", version, row.MinAgent, err) + } else if cmp < 0 { + t.Fatalf("DefaultCopilotVersion %q is below compat min-agent %q; bump min-agent or lower DefaultCopilotVersion", version, row.MinAgent) + } + if cmp, err := semverCmp(version, row.MaxAgent); err != nil { + t.Fatalf("semverCmp(%q, %q): %v", version, row.MaxAgent, err) + } else if cmp > 0 { + t.Fatalf("DefaultCopilotVersion %q exceeds compat max-agent %q; update .github/aw/compat.json max-agent or lower DefaultCopilotVersion to prevent toolcache bypass", version, row.MaxAgent) + } + return // found and validated + } + t.Fatalf("no open compat row found in %s; add an open row for the current gh-aw release", compatPath) +} + +// semverCmp compares two semver strings (without leading "v") and returns -1, 0, or 1. +func semverCmp(a, b string) (int, error) { + pa, err := parseSemver(a) + if err != nil { + return 0, fmt.Errorf("parse %q: %w", a, err) + } + pb, err := parseSemver(b) + if err != nil { + return 0, fmt.Errorf("parse %q: %w", b, err) + } + for i := range pa { + if pa[i] < pb[i] { + return -1, nil + } + if pa[i] > pb[i] { + return 1, nil + } + } + return 0, nil +} + +func parseSemver(v string) ([3]int, error) { + v = strings.TrimPrefix(v, "v") + parts := strings.SplitN(v, ".", 3) + if len(parts) != 3 { + return [3]int{}, fmt.Errorf("expected MAJOR.MINOR.PATCH, got %q", v) + } + var out [3]int + for i, p := range parts { + n, err := strconv.Atoi(p) + if err != nil { + return [3]int{}, fmt.Errorf("part %d of %q is not a number: %w", i, v, err) + } + out[i] = n + } + return out, nil +} diff --git a/pkg/workflow/compiler_main_job_helpers.go b/pkg/workflow/compiler_main_job_helpers.go index 5139f6bc875..2ff87eca4d0 100644 --- a/pkg/workflow/compiler_main_job_helpers.go +++ b/pkg/workflow/compiler_main_job_helpers.go @@ -317,6 +317,16 @@ func (c *Compiler) buildMainJobEnv(data *WorkflowData) map[string]string { env["GH_AW_PROJECT_UTC"] = fmt.Sprintf("%q", utcOffset) } + // Expose the compiler version so the Copilot install script can resolve a + // compatible toolcache entry via compat-matrix range matching rather than + // requiring an exact version download on every job. + if IsRelease() { + if env == nil { + env = make(map[string]string) + } + env["GH_AW_COMPILED_VERSION"] = c.version + } + return env } diff --git a/pkg/workflow/threat_detection_job.go b/pkg/workflow/threat_detection_job.go index b3063e2da49..05e9a87fd8e 100644 --- a/pkg/workflow/threat_detection_job.go +++ b/pkg/workflow/threat_detection_job.go @@ -191,6 +191,16 @@ func (c *Compiler) buildDetectionJob(data *WorkflowData) (*Job, error) { environment = "environment: " + data.SafeOutputs.ThreatDetection.Environment } + var detectionJobEnv map[string]string + // Expose the compiler version so the Copilot install script can resolve a + // compatible toolcache entry via compat-matrix range matching rather than + // requiring an exact version download on every job. + if IsRelease() { + detectionJobEnv = map[string]string{ + "GH_AW_COMPILED_VERSION": c.version, + } + } + job := &Job{ Name: string(constants.DetectionJobName), Needs: needs, @@ -198,6 +208,7 @@ func (c *Compiler) buildDetectionJob(data *WorkflowData) (*Job, error) { RunsOn: c.indentYAMLLines(runsOn, " "), Environment: c.indentYAMLLines(environment, " "), Permissions: permissions, + Env: detectionJobEnv, Steps: steps, Outputs: outputs, } From 3ed368fc6b11e7e6c87b21049f3ffd2d5fab66d6 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 28 Jul 2026 13:04:18 +0000 Subject: [PATCH 3/9] docs(adr): add draft ADR-48593 for compat-range toolcache matching Draft ADR capturing the decision to run compat-matrix resolution unconditionally (even for explicit version requests) so the runner toolcache can satisfy Copilot CLI installs without a network download. --- ...-toolcache-for-explicit-copilot-version.md | 51 +++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md diff --git a/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md b/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md new file mode 100644 index 00000000000..ef8e451e6d1 --- /dev/null +++ b/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md @@ -0,0 +1,51 @@ +# ADR-48593: Enable Compat-Range Toolcache Matching for Explicit Copilot CLI Version Requests + +**Date**: 2026-07-28 +**Status**: Draft +**Deciders**: pelikhan, copilot-swe-agent + +--- + +### Context + +The Copilot CLI install script (`install_copilot_cli.sh`) has two code paths for locating a compatible binary: (1) range-based toolcache lookup driven by `compat.json`, and (2) exact-version toolcache lookup when an explicit version is passed. Path (1) allows a cached runner binary within the compat window to satisfy the install without a network download; path (2) requires an exact version match and falls back to a network download on any mismatch. + +Because `pkg/workflow/copilot_installer.go` always passes an explicit version (defaulting to `DefaultCopilotVersion` when unset), path (2) was the only path ever exercised in practice. When `DefaultCopilotVersion` (1.0.75) drifted past the `compat.json` `max-agent` (1.0.56), the cached runner toolcache entry (1.0.56) was always rejected by exact-match, forcing a network download on every agentic job. A CDN blip of ~30 s was sufficient to fail the job entirely—twice per run (once in the `agent` job, once in the `detection` job). Additionally, `GH_AW_COMPILED_VERSION` was never emitted in compiled job environments, so the install script had no compiled version to resolve a compat window even if it wanted to. + +### Decision + +We will run compat-matrix resolution unconditionally—including when an explicit version is provided—so that `find_cached_copilot_bin` receives a populated compat range and can fall through to range-based matching when the exact version is not cached. Specifically: + +- `install_copilot_cli.sh`: call `resolve_version_from_compat` in the explicit-version branch and populate `COMPAT_MATCHED_MIN_AGENT`/`COMPAT_MATCHED_MAX_AGENT`; in `find_cached_copilot_bin`, fall through to the range check when no exact match is found and a compat range is available, rather than unconditionally `continue`-ing. +- `compiler_main_job_helpers.go` / `threat_detection_job.go`: emit `GH_AW_COMPILED_VERSION` in job-level env for release builds so the script can resolve the compat window. +- `.github/aw/compat.json`: update `max-agent` from 1.0.56 to 1.0.75 to include the current `DefaultCopilotVersion`. +- `pkg/constants/version_constants_test.go`: add `TestDefaultCopilotVersionWithinCompatWindow` as a CI gate to assert `min-agent ≤ DefaultCopilotVersion ≤ max-agent`, preventing this class of drift from recurring. + +### Alternatives Considered + +#### Alternative 1: Remove explicit version pinning and always resolve via compat matrix + +The install script could drop the explicit-version argument and always use compat-matrix resolution to select the best available version. This would give full range-based toolcache matching without any bypass. It was rejected because the explicit version pin provides a stable, testable contract: callers can assert exactly which CLI version is installed. Losing that contract complicates debugging and prevents version-specific rollouts. + +#### Alternative 2: Only bump compat.json max-agent without changing the install script + +Updating `max-agent` to 1.0.75 would fix the immediate drift and allow the range check to pass in theory, but the install script's explicit-version branch still skips compat resolution and calls `find_cached_copilot_bin` with an empty compat range. The toolcache entry would continue to be rejected by exact-match. This approach fixes the data without fixing the logic, leaving the underlying bypass latent for the next drift cycle. + +### Consequences + +#### Positive +- Runner toolcache satisfies Copilot CLI installs for any version within the compat window, eliminating unnecessary network downloads on every agentic job. +- CDN failures during Copilot CLI download no longer cause hard job failures when a compatible cached binary exists. +- `TestDefaultCopilotVersionWithinCompatWindow` creates a CI gate that blocks future `DefaultCopilotVersion`/`compat.json` drift before it reaches production. + +#### Negative +- Range-based toolcache matching may serve a cached binary version that differs from the exact requested version; behavioral equivalence relies on the compat window being accurately defined. An overly broad window could accept an incompatible binary. +- `GH_AW_COMPILED_VERSION` is now present in compiled job-level environments for release builds, exposing compiler version metadata in workflow logs and to any downstream tool that reads job env vars. + +#### Neutral +- The compat window is now a load-bearing correctness invariant: `compat.json` must be updated alongside `DefaultCopilotVersion` on every bump, enforced by the new test. +- The change in `find_cached_copilot_bin` is a fall-through rather than a new code path; the existing range comparison logic below the exact-match block is unchanged. + +--- + +*ADR created by [adr-writer agent]. Review and finalize before changing status from Draft to Accepted.* From ad60f575b26cdb84e60e3ce6fa1a89376d3e2714 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 28 Jul 2026 13:41:47 +0000 Subject: [PATCH 4/9] Address review feedback: fix open *bool, wildcard guard, dev/release comment, default-pin-only range fallback Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- actions/setup/sh/install_copilot_cli.sh | 40 ++- actions/setup/sh/install_copilot_cli_test.sh | 305 +++++++++++++++++++ pkg/constants/version_constants_test.go | 20 +- pkg/workflow/compiler_main_job_helpers.go | 7 + pkg/workflow/threat_detection_job.go | 7 + 5 files changed, 360 insertions(+), 19 deletions(-) create mode 100755 actions/setup/sh/install_copilot_cli_test.sh diff --git a/actions/setup/sh/install_copilot_cli.sh b/actions/setup/sh/install_copilot_cli.sh index ce3d632d9fb..eafa2f3285e 100755 --- a/actions/setup/sh/install_copilot_cli.sh +++ b/actions/setup/sh/install_copilot_cli.sh @@ -29,6 +29,11 @@ COPILOT_DIR="${HOME}/.copilot" COPILOT_TOOLCACHE_MAX_DEPTH=4 COMPAT_URL="${COPILOT_COMPAT_URL:-https://raw.githubusercontent.com/github/gh-aw-actions/main/.github/aw/compat.json}" COMPILED_GH_AW_VERSION="${GH_AW_COMPILED_VERSION:-}" +# GH_AW_DEFAULT_COPILOT_VERSION is emitted by the compiler only for release builds. +# When set and VERSION equals this value, the requested version is the compiler-generated +# default pin (not a user-supplied explicit pin), so range-based toolcache matching is +# allowed as a fallback instead of requiring an exact version match. +DEFAULT_COPILOT_VERSION="${GH_AW_DEFAULT_COPILOT_VERSION:-}" SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" REPO_ROOT="$(cd "${SCRIPT_DIR}/../../.." && pwd)" COMPAT_BUNDLED_PATH="${COPILOT_COMPAT_BUNDLED_PATH:-${REPO_ROOT}/.github/aw/compat.json}" @@ -422,13 +427,8 @@ find_cached_copilot_bin() { printf '%s\n' "$candidate" return 0 fi - # If no compat range is available, an exact match is required - if [ -z "$min_version" ] && [ -z "$max_version" ]; then - echo " Skipping candidate (version mismatch: want ${requested_version_normalized}, got ${candidate_version_normalized})" >&2 - continue - fi - echo " No exact match (want ${requested_version_normalized}); checking compat range ${min_version}..${max_version}" >&2 - # Fall through to range check below + echo " Skipping candidate (version mismatch: want ${requested_version_normalized}, got ${candidate_version_normalized})" >&2 + continue fi if [ -n "$min_version" ] && version_is_greater "$min_version" "$candidate_version_normalized"; then @@ -525,12 +525,28 @@ if [ -z "$VERSION" ]; then exit 1 fi else - echo "Explicit Copilot CLI version argument provided (${VERSION}); resolving compat window for toolcache range matching..." - if RESOLVED_COMPAT_INFO="$(resolve_version_from_compat "$COMPILED_GH_AW_VERSION" "${TEMP_DIR}/compat.json")"; then - IFS='|' read -r _UNUSED COMPAT_MATCHED_MIN_AGENT COMPAT_MATCHED_MAX_AGENT COMPAT_CACHE_TTL_DAYS <<< "$RESOLVED_COMPAT_INFO" - echo "Compat window resolved: ${COMPAT_MATCHED_MIN_AGENT}..${COMPAT_MATCHED_MAX_AGENT} (toolcache range matching enabled)" + # VERSION was provided explicitly. Allow compat-range toolcache matching only when the + # requested version is the compiler-generated default pin (GH_AW_DEFAULT_COPILOT_VERSION), + # not a user-supplied explicit pin. User-pinned versions use exact-match-only to preserve + # the engine.version contract. + version_normalized="$(normalize_version "$VERSION")" + default_normalized="" + if [ -n "$DEFAULT_COPILOT_VERSION" ]; then + default_normalized="$(normalize_version "$DEFAULT_COPILOT_VERSION")" + fi + if [ -n "$default_normalized" ] && [ "$version_normalized" = "$default_normalized" ]; then + echo "Explicit Copilot CLI version argument provided (${VERSION}); this is the compiler-generated default pin, resolving compat window for toolcache range matching..." + if RESOLVED_COMPAT_INFO="$(resolve_version_from_compat "$COMPILED_GH_AW_VERSION" "${TEMP_DIR}/compat.json")"; then + IFS='|' read -r _UNUSED COMPAT_MATCHED_MIN_AGENT COMPAT_MATCHED_MAX_AGENT COMPAT_CACHE_TTL_DAYS <<< "$RESOLVED_COMPAT_INFO" + # Treat as "latest" so find_cached_copilot_bin uses range matching and applies TTL + # (same path as when VERSION is not set). VERSION is still used for the download URL. + REQUESTED_VERSION="latest" + echo "Compat window resolved: ${COMPAT_MATCHED_MIN_AGENT}..${COMPAT_MATCHED_MAX_AGENT} (toolcache range matching enabled)" + else + echo "Compat window unavailable; exact toolcache match required for version ${VERSION}." >&2 + fi else - echo "Compat window unavailable; exact toolcache match required for version ${VERSION}." >&2 + echo "Explicit Copilot CLI version argument provided (${VERSION}); exact toolcache match required." fi fi diff --git a/actions/setup/sh/install_copilot_cli_test.sh b/actions/setup/sh/install_copilot_cli_test.sh new file mode 100755 index 00000000000..bfae032aeac --- /dev/null +++ b/actions/setup/sh/install_copilot_cli_test.sh @@ -0,0 +1,305 @@ +#!/usr/bin/env bash +set +o histexpand + +# Tests for install_copilot_cli.sh version-matching and toolcache selection logic. +# Run: bash actions/setup/sh/install_copilot_cli_test.sh + +SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" + +TESTS_PASSED=0 +TESTS_FAILED=0 + +pass() { echo "PASS: $1"; TESTS_PASSED=$((TESTS_PASSED + 1)); } +fail() { echo "FAIL: $1"; echo " $2"; TESTS_FAILED=$((TESTS_FAILED + 1)); } + +# Source helper functions from the install script. +# We extract only the pure functions (no side-effecting top-level code). +source_install_functions() { + bash -c ' + # Minimal stubs required by the sourced functions + OS_NAME="linux" + ARCH_NAME="amd64" + COPILOT_TOOLCACHE_MAX_DEPTH=4 + + # Source relevant functions from the install script + . '"${SCRIPT_DIR}/install_copilot_cli.sh"' --source-only 2>/dev/null || true + '"$1"' + ' +} + +# Build a fake toolcache with a copilot-cli binary at the given version. +make_fake_toolcache() { + local root="$1" + local version="$2" + local arch="${3:-amd64}" + local bin_dir="${root}/copilot-cli/${version}/${arch}/bin" + mkdir -p "$bin_dir" + printf '#!/bin/sh\necho "copilot %s"\n' "$version" > "${bin_dir}/copilot" + chmod +x "${bin_dir}/copilot" +} + +# --------------------------------------------------------------------------- +# Test: explicit user pin does NOT fall back to an in-range cache entry +# --------------------------------------------------------------------------- +echo "Test 1: explicit user pin (not GH_AW_DEFAULT_COPILOT_VERSION) rejects in-range cache..." +FAKE_TC=$(mktemp -d) +make_fake_toolcache "$FAKE_TC" "1.0.56" + +result=$(bash -c ' + set +o histexpand + SCRIPT_DIR="'"${SCRIPT_DIR}"'" + # Source only the pure helper functions we need + . <(sed -n "/^normalize_version/,/^}/p; /^version_is_numeric/,/^}/p; /^version_is_greater/,/^}/p; /^is_cache_expired/,/^}/p; /^find_cached_copilot_bin/,/^}/p" \ + "${SCRIPT_DIR}/install_copilot_cli.sh" 2>/dev/null) 2>/dev/null || true + + normalize_version() { + local v="${1#v}" + echo "$v" + } + version_is_numeric() { + [[ "$1" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] + } + version_is_greater() { + local a="$1" b="$2" + [ "$(printf "%s\n%s" "$a" "$b" | sort -V | tail -1)" = "$a" ] && [ "$a" != "$b" ] + } + is_cache_expired() { return 1; } + + find_cached_copilot_bin() { + local requested_version="$1" + local min_version="$2" + local max_version="$3" + local cache_ttl_days="$4" + + local requested_version_normalized="" + if [ "$requested_version" != "latest" ]; then + requested_version_normalized="$(normalize_version "$requested_version")" + fi + + local RUNNER_TOOL_CACHE="'"${FAKE_TC}"'" + local ARCH_NAME="amd64" + local best_candidate="" + local best_version="" + + while IFS= read -r candidate; do + local candidate_dir candidate_arch candidate_version candidate_version_normalized + candidate_dir="$(dirname "$candidate")" + candidate_arch="$(basename "$(dirname "$candidate_dir")")" + candidate_version="$(basename "$(dirname "$(dirname "$candidate_dir")")")" + candidate_version_normalized="$(normalize_version "$candidate_version")" + + if ! version_is_numeric "$candidate_version_normalized"; then continue; fi + if [ "$candidate_arch" != "$ARCH_NAME" ]; then continue; fi + + if [ -n "$requested_version_normalized" ]; then + if [ "$candidate_version_normalized" = "$requested_version_normalized" ]; then + printf "%s\n" "$candidate" + return 0 + fi + # Exact match required for user-pinned versions; skip non-matching candidates + continue + fi + + if [ -n "$min_version" ] && version_is_greater "$min_version" "$candidate_version_normalized"; then continue; fi + if [ -n "$max_version" ] && version_is_greater "$candidate_version_normalized" "$max_version"; then continue; fi + + if [ -z "$best_candidate" ] || version_is_greater "$candidate_version_normalized" "$best_version"; then + best_candidate="$candidate" + best_version="$candidate_version_normalized" + fi + done < <(find "${RUNNER_TOOL_CACHE}/copilot-cli" -maxdepth 5 -name "copilot" -type f 2>/dev/null) + + if [ -n "$best_candidate" ]; then + printf "%s\n" "$best_candidate" + return 0 + fi + return 1 + } + + # User pin: version 1.0.0, compat range 1.0.21..1.0.75, cache has 1.0.56 + # Should NOT match because 1.0.0 != 1.0.56 (exact match required for user pins) + if find_cached_copilot_bin "1.0.0" "1.0.21" "1.0.75" "" >/dev/null 2>&1; then + echo "FOUND" + else + echo "NOT_FOUND" + fi +' 2>/dev/null) + +if [ "$result" = "NOT_FOUND" ]; then + pass "user pin 1.0.0 does not match in-range cached 1.0.56" +else + fail "user pin 1.0.0 should not match in-range cached 1.0.56" "got: $result" +fi +rm -rf "$FAKE_TC" + +# --------------------------------------------------------------------------- +# Test: compiler-default pin (REQUESTED_VERSION=latest) uses in-range cache +# --------------------------------------------------------------------------- +echo "Test 2: compiler-default pin (REQUESTED_VERSION=latest) accepts in-range cache..." +FAKE_TC=$(mktemp -d) +make_fake_toolcache "$FAKE_TC" "1.0.56" + +result=$(bash -c ' + set +o histexpand + normalize_version() { echo "${1#v}"; } + version_is_numeric() { [[ "$1" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; } + version_is_greater() { + local a="$1" b="$2" + [ "$(printf "%s\n%s" "$a" "$b" | sort -V | tail -1)" = "$a" ] && [ "$a" != "$b" ] + } + is_cache_expired() { return 1; } + + find_cached_copilot_bin() { + local requested_version="$1" + local min_version="$2" + local max_version="$3" + local cache_ttl_days="$4" + + local requested_version_normalized="" + if [ "$requested_version" != "latest" ]; then + requested_version_normalized="$(normalize_version "$requested_version")" + fi + + local RUNNER_TOOL_CACHE="'"${FAKE_TC}"'" + local ARCH_NAME="amd64" + local best_candidate="" + local best_version="" + + while IFS= read -r candidate; do + local candidate_dir candidate_arch candidate_version candidate_version_normalized + candidate_dir="$(dirname "$candidate")" + candidate_arch="$(basename "$(dirname "$candidate_dir")")" + candidate_version="$(basename "$(dirname "$(dirname "$candidate_dir")")")" + candidate_version_normalized="$(normalize_version "$candidate_version")" + + if ! version_is_numeric "$candidate_version_normalized"; then continue; fi + if [ "$candidate_arch" != "$ARCH_NAME" ]; then continue; fi + + if [ -n "$requested_version_normalized" ]; then + if [ "$candidate_version_normalized" = "$requested_version_normalized" ]; then + printf "%s\n" "$candidate" + return 0 + fi + continue + fi + + if [ -n "$min_version" ] && version_is_greater "$min_version" "$candidate_version_normalized"; then continue; fi + if [ -n "$max_version" ] && version_is_greater "$candidate_version_normalized" "$max_version"; then continue; fi + + if [ -z "$best_candidate" ] || version_is_greater "$candidate_version_normalized" "$best_version"; then + best_candidate="$candidate" + best_version="$candidate_version_normalized" + fi + done < <(find "${RUNNER_TOOL_CACHE}/copilot-cli" -maxdepth 5 -name "copilot" -type f 2>/dev/null) + + if [ -n "$best_candidate" ]; then + printf "%s\n" "$best_candidate" + return 0 + fi + return 1 + } + + # Compiler default: REQUESTED_VERSION=latest, compat range 1.0.21..1.0.75, cache has 1.0.56 + # Should match because range check applies (requested_version_normalized is empty for "latest") + if find_cached_copilot_bin "latest" "1.0.21" "1.0.75" "" >/dev/null 2>&1; then + echo "FOUND" + else + echo "NOT_FOUND" + fi +' 2>/dev/null) + +if [ "$result" = "FOUND" ]; then + pass "compiler-default (latest) accepts in-range cached 1.0.56" +else + fail "compiler-default (latest) should accept in-range cached 1.0.56" "got: $result" +fi +rm -rf "$FAKE_TC" + +# --------------------------------------------------------------------------- +# Test: explicit user pin with exact cache entry is accepted +# --------------------------------------------------------------------------- +echo "Test 3: explicit user pin with exact cache entry is accepted..." +FAKE_TC=$(mktemp -d) +make_fake_toolcache "$FAKE_TC" "1.0.0" + +result=$(bash -c ' + set +o histexpand + normalize_version() { echo "${1#v}"; } + version_is_numeric() { [[ "$1" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; } + version_is_greater() { + local a="$1" b="$2" + [ "$(printf "%s\n%s" "$a" "$b" | sort -V | tail -1)" = "$a" ] && [ "$a" != "$b" ] + } + is_cache_expired() { return 1; } + + find_cached_copilot_bin() { + local requested_version="$1" + local min_version="$2" + local max_version="$3" + local cache_ttl_days="$4" + + local requested_version_normalized="" + if [ "$requested_version" != "latest" ]; then + requested_version_normalized="$(normalize_version "$requested_version")" + fi + + local RUNNER_TOOL_CACHE="'"${FAKE_TC}"'" + local ARCH_NAME="amd64" + local best_candidate="" + local best_version="" + + while IFS= read -r candidate; do + local candidate_dir candidate_arch candidate_version candidate_version_normalized + candidate_dir="$(dirname "$candidate")" + candidate_arch="$(basename "$(dirname "$candidate_dir")")" + candidate_version="$(basename "$(dirname "$(dirname "$candidate_dir")")")" + candidate_version_normalized="$(normalize_version "$candidate_version")" + + if ! version_is_numeric "$candidate_version_normalized"; then continue; fi + if [ "$candidate_arch" != "$ARCH_NAME" ]; then continue; fi + + if [ -n "$requested_version_normalized" ]; then + if [ "$candidate_version_normalized" = "$requested_version_normalized" ]; then + printf "%s\n" "$candidate" + return 0 + fi + continue + fi + + if [ -n "$min_version" ] && version_is_greater "$min_version" "$candidate_version_normalized"; then continue; fi + if [ -n "$max_version" ] && version_is_greater "$candidate_version_normalized" "$max_version"; then continue; fi + + if [ -z "$best_candidate" ] || version_is_greater "$candidate_version_normalized" "$best_version"; then + best_candidate="$candidate" + best_version="$candidate_version_normalized" + fi + done < <(find "${RUNNER_TOOL_CACHE}/copilot-cli" -maxdepth 5 -name "copilot" -type f 2>/dev/null) + + if [ -n "$best_candidate" ]; then + printf "%s\n" "$best_candidate" + return 0 + fi + return 1 + } + + # User pin: exact match exists in cache + if find_cached_copilot_bin "1.0.0" "1.0.21" "1.0.75" "" >/dev/null 2>&1; then + echo "FOUND" + else + echo "NOT_FOUND" + fi +' 2>/dev/null) + +if [ "$result" = "FOUND" ]; then + pass "user pin 1.0.0 uses exact-match cache entry" +else + fail "user pin 1.0.0 should use exact-match cache entry" "got: $result" +fi +rm -rf "$FAKE_TC" + +# --------------------------------------------------------------------------- +# Summary +# --------------------------------------------------------------------------- +echo +echo "Results: ${TESTS_PASSED} passed, ${TESTS_FAILED} failed" +[ "$TESTS_FAILED" -eq 0 ] || exit 1 diff --git a/pkg/constants/version_constants_test.go b/pkg/constants/version_constants_test.go index 414ebfec07b..7c60c92efb6 100644 --- a/pkg/constants/version_constants_test.go +++ b/pkg/constants/version_constants_test.go @@ -62,7 +62,9 @@ func TestDefaultCopilotVersionWithinCompatWindow(t *testing.T) { MaxGhAw string `json:"max-gh-aw"` MinAgent string `json:"min-agent"` MaxAgent string `json:"max-agent"` - Open bool `json:"open"` + // Open is optional; per compat.schema.json it defaults to true when absent. + // Use *bool so we can distinguish an explicit false from an omitted field. + Open *bool `json:"open"` } `json:"copilot"` } `json:"agent-compat-v1"` } @@ -72,9 +74,10 @@ func TestDefaultCopilotVersionWithinCompatWindow(t *testing.T) { version := string(DefaultCopilotVersion) - // Find the first open row (open: true means it covers the current gh-aw release). + // Find the first open row (open: true, or absent which defaults to true per schema). for _, row := range compat.AgentCompatV1.Copilot { - if !row.Open { + // Skip rows that are explicitly closed (open: false). + if row.Open != nil && !*row.Open { continue } if row.MinAgent == "" || row.MaxAgent == "" { @@ -85,10 +88,13 @@ func TestDefaultCopilotVersionWithinCompatWindow(t *testing.T) { } else if cmp < 0 { t.Fatalf("DefaultCopilotVersion %q is below compat min-agent %q; bump min-agent or lower DefaultCopilotVersion", version, row.MinAgent) } - if cmp, err := semverCmp(version, row.MaxAgent); err != nil { - t.Fatalf("semverCmp(%q, %q): %v", version, row.MaxAgent, err) - } else if cmp > 0 { - t.Fatalf("DefaultCopilotVersion %q exceeds compat max-agent %q; update .github/aw/compat.json max-agent or lower DefaultCopilotVersion to prevent toolcache bypass", version, row.MaxAgent) + // max-agent may be "*" (wildcard) for catch-all rows; skip the upper-bound check in that case. + if row.MaxAgent != "*" { + if cmp, err := semverCmp(version, row.MaxAgent); err != nil { + t.Fatalf("semverCmp(%q, %q): %v", version, row.MaxAgent, err) + } else if cmp > 0 { + t.Fatalf("DefaultCopilotVersion %q exceeds compat max-agent %q; update .github/aw/compat.json max-agent or lower DefaultCopilotVersion to prevent toolcache bypass", version, row.MaxAgent) + } } return // found and validated } diff --git a/pkg/workflow/compiler_main_job_helpers.go b/pkg/workflow/compiler_main_job_helpers.go index 2ff87eca4d0..6536751cd80 100644 --- a/pkg/workflow/compiler_main_job_helpers.go +++ b/pkg/workflow/compiler_main_job_helpers.go @@ -320,11 +320,18 @@ func (c *Compiler) buildMainJobEnv(data *WorkflowData) map[string]string { // Expose the compiler version so the Copilot install script can resolve a // compatible toolcache entry via compat-matrix range matching rather than // requiring an exact version download on every job. + // GH_AW_COMPILED_VERSION and GH_AW_DEFAULT_COPILOT_VERSION are emitted only + // for release builds so that dev/CI builds do not accidentally enable toolcache + // range matching against a stale compat window. if IsRelease() { if env == nil { env = make(map[string]string) } env["GH_AW_COMPILED_VERSION"] = c.version + // GH_AW_DEFAULT_COPILOT_VERSION signals to the install script that the + // requested version is the compiler-generated default pin (not a user-supplied + // explicit pin), allowing compat-range toolcache matching as a fallback. + env["GH_AW_DEFAULT_COPILOT_VERSION"] = string(constants.DefaultCopilotVersion) } return env diff --git a/pkg/workflow/threat_detection_job.go b/pkg/workflow/threat_detection_job.go index 05e9a87fd8e..4891885a901 100644 --- a/pkg/workflow/threat_detection_job.go +++ b/pkg/workflow/threat_detection_job.go @@ -195,9 +195,16 @@ func (c *Compiler) buildDetectionJob(data *WorkflowData) (*Job, error) { // Expose the compiler version so the Copilot install script can resolve a // compatible toolcache entry via compat-matrix range matching rather than // requiring an exact version download on every job. + // GH_AW_COMPILED_VERSION and GH_AW_DEFAULT_COPILOT_VERSION are emitted only + // for release builds so that dev/CI builds do not accidentally enable toolcache + // range matching against a stale compat window. if IsRelease() { detectionJobEnv = map[string]string{ "GH_AW_COMPILED_VERSION": c.version, + // GH_AW_DEFAULT_COPILOT_VERSION signals to the install script that the + // requested version is the compiler-generated default pin (not a user-supplied + // explicit pin), allowing compat-range toolcache matching as a fallback. + "GH_AW_DEFAULT_COPILOT_VERSION": string(constants.DefaultCopilotVersion), } } From bb52032cb09a0282de92ab3aee27c64c5625d50b Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 28 Jul 2026 14:29:19 +0000 Subject: [PATCH 5/9] Preserve exact Copilot pins in compat fallback Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- actions/setup/sh/install_copilot_cli.sh | 21 +- actions/setup/sh/install_copilot_cli_test.sh | 347 +++--------------- ...-toolcache-for-explicit-copilot-version.md | 13 +- pkg/workflow/compiler_main_job_helpers.go | 9 +- pkg/workflow/copilot_engine_installation.go | 5 +- pkg/workflow/copilot_installer.go | 12 +- pkg/workflow/copilot_installer_test.go | 68 ++++ pkg/workflow/engine.go | 1 + .../threat_detection_inline_engine.go | 17 +- pkg/workflow/threat_detection_job.go | 9 +- 10 files changed, 165 insertions(+), 337 deletions(-) diff --git a/actions/setup/sh/install_copilot_cli.sh b/actions/setup/sh/install_copilot_cli.sh index eafa2f3285e..36e861a4133 100755 --- a/actions/setup/sh/install_copilot_cli.sh +++ b/actions/setup/sh/install_copilot_cli.sh @@ -29,11 +29,7 @@ COPILOT_DIR="${HOME}/.copilot" COPILOT_TOOLCACHE_MAX_DEPTH=4 COMPAT_URL="${COPILOT_COMPAT_URL:-https://raw.githubusercontent.com/github/gh-aw-actions/main/.github/aw/compat.json}" COMPILED_GH_AW_VERSION="${GH_AW_COMPILED_VERSION:-}" -# GH_AW_DEFAULT_COPILOT_VERSION is emitted by the compiler only for release builds. -# When set and VERSION equals this value, the requested version is the compiler-generated -# default pin (not a user-supplied explicit pin), so range-based toolcache matching is -# allowed as a fallback instead of requiring an exact version match. -DEFAULT_COPILOT_VERSION="${GH_AW_DEFAULT_COPILOT_VERSION:-}" +USE_COPILOT_COMPAT_RANGE=false SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" REPO_ROOT="$(cd "${SCRIPT_DIR}/../../.." && pwd)" COMPAT_BUNDLED_PATH="${COPILOT_COMPAT_BUNDLED_PATH:-${REPO_ROOT}/.github/aw/compat.json}" @@ -47,6 +43,7 @@ ROOTLESS=false for arg in "$@"; do case "$arg" in --rootless) ROOTLESS=true ;; + --compat-range) USE_COPILOT_COMPAT_RANGE=true ;; --*) echo "WARNING: Unknown flag: $arg" >&2 ;; *) if [ -z "$VERSION" ]; then @@ -525,16 +522,10 @@ if [ -z "$VERSION" ]; then exit 1 fi else - # VERSION was provided explicitly. Allow compat-range toolcache matching only when the - # requested version is the compiler-generated default pin (GH_AW_DEFAULT_COPILOT_VERSION), - # not a user-supplied explicit pin. User-pinned versions use exact-match-only to preserve - # the engine.version contract. - version_normalized="$(normalize_version "$VERSION")" - default_normalized="" - if [ -n "$DEFAULT_COPILOT_VERSION" ]; then - default_normalized="$(normalize_version "$DEFAULT_COPILOT_VERSION")" - fi - if [ -n "$default_normalized" ] && [ "$version_normalized" = "$default_normalized" ]; then + # The compiler opts its generated default pin into range matching explicitly. + # User-supplied engine.version pins require an exact toolcache match, including + # when their value happens to equal the compiler default. + if [ "$USE_COPILOT_COMPAT_RANGE" = "true" ]; then echo "Explicit Copilot CLI version argument provided (${VERSION}); this is the compiler-generated default pin, resolving compat window for toolcache range matching..." if RESOLVED_COMPAT_INFO="$(resolve_version_from_compat "$COMPILED_GH_AW_VERSION" "${TEMP_DIR}/compat.json")"; then IFS='|' read -r _UNUSED COMPAT_MATCHED_MIN_AGENT COMPAT_MATCHED_MAX_AGENT COMPAT_CACHE_TTL_DAYS <<< "$RESOLVED_COMPAT_INFO" diff --git a/actions/setup/sh/install_copilot_cli_test.sh b/actions/setup/sh/install_copilot_cli_test.sh index bfae032aeac..0cb070de200 100755 --- a/actions/setup/sh/install_copilot_cli_test.sh +++ b/actions/setup/sh/install_copilot_cli_test.sh @@ -1,305 +1,70 @@ #!/usr/bin/env bash -set +o histexpand +set -euo pipefail -# Tests for install_copilot_cli.sh version-matching and toolcache selection logic. +# Tests for install_copilot_cli.sh toolcache selection logic. # Run: bash actions/setup/sh/install_copilot_cli_test.sh SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" - -TESTS_PASSED=0 -TESTS_FAILED=0 - -pass() { echo "PASS: $1"; TESTS_PASSED=$((TESTS_PASSED + 1)); } -fail() { echo "FAIL: $1"; echo " $2"; TESTS_FAILED=$((TESTS_FAILED + 1)); } - -# Source helper functions from the install script. -# We extract only the pure functions (no side-effecting top-level code). -source_install_functions() { - bash -c ' - # Minimal stubs required by the sourced functions - OS_NAME="linux" - ARCH_NAME="amd64" - COPILOT_TOOLCACHE_MAX_DEPTH=4 - - # Source relevant functions from the install script - . '"${SCRIPT_DIR}/install_copilot_cli.sh"' --source-only 2>/dev/null || true - '"$1"' - ' -} - -# Build a fake toolcache with a copilot-cli binary at the given version. -make_fake_toolcache() { - local root="$1" - local version="$2" - local arch="${3:-amd64}" - local bin_dir="${root}/copilot-cli/${version}/${arch}/bin" - mkdir -p "$bin_dir" - printf '#!/bin/sh\necho "copilot %s"\n' "$version" > "${bin_dir}/copilot" - chmod +x "${bin_dir}/copilot" +INSTALL_SCRIPT="${SCRIPT_DIR}/install_copilot_cli.sh" +TEST_ROOT="$(mktemp -d)" +trap 'rm -rf "$TEST_ROOT"' EXIT + +# Load the production helpers without executing the install script's top-level code. +# Each function ends with an unindented closing brace. +# shellcheck source=/dev/null +source <(sed -n \ + -e '/^normalize_version()/,/^}/p' \ + -e '/^version_is_numeric()/,/^}/p' \ + -e '/^version_is_greater()/,/^}/p' \ + -e '/^is_cache_expired()/,/^}/p' \ + -e '/^find_cached_copilot_bin()/,/^}/p' \ + "$INSTALL_SCRIPT") + +export ARCH_NAME="x64" +export COPILOT_TOOLCACHE_MAX_DEPTH=4 +export SECONDS_PER_DAY=86400 +RUNNER_TOOL_CACHE="${TEST_ROOT}/toolcache" + +make_cached_copilot() { + local version="$1" + local binary="${RUNNER_TOOL_CACHE}/copilot-cli/${version}/${ARCH_NAME}/bin/copilot" + mkdir -p "$(dirname "$binary")" + printf '#!/usr/bin/env bash\nprintf "copilot %s\\n"\n' "$version" > "$binary" + chmod +x "$binary" + printf '%s\n' "$binary" } -# --------------------------------------------------------------------------- -# Test: explicit user pin does NOT fall back to an in-range cache entry -# --------------------------------------------------------------------------- -echo "Test 1: explicit user pin (not GH_AW_DEFAULT_COPILOT_VERSION) rejects in-range cache..." -FAKE_TC=$(mktemp -d) -make_fake_toolcache "$FAKE_TC" "1.0.56" - -result=$(bash -c ' - set +o histexpand - SCRIPT_DIR="'"${SCRIPT_DIR}"'" - # Source only the pure helper functions we need - . <(sed -n "/^normalize_version/,/^}/p; /^version_is_numeric/,/^}/p; /^version_is_greater/,/^}/p; /^is_cache_expired/,/^}/p; /^find_cached_copilot_bin/,/^}/p" \ - "${SCRIPT_DIR}/install_copilot_cli.sh" 2>/dev/null) 2>/dev/null || true - - normalize_version() { - local v="${1#v}" - echo "$v" - } - version_is_numeric() { - [[ "$1" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] - } - version_is_greater() { - local a="$1" b="$2" - [ "$(printf "%s\n%s" "$a" "$b" | sort -V | tail -1)" = "$a" ] && [ "$a" != "$b" ] - } - is_cache_expired() { return 1; } - - find_cached_copilot_bin() { - local requested_version="$1" - local min_version="$2" - local max_version="$3" - local cache_ttl_days="$4" - - local requested_version_normalized="" - if [ "$requested_version" != "latest" ]; then - requested_version_normalized="$(normalize_version "$requested_version")" - fi - - local RUNNER_TOOL_CACHE="'"${FAKE_TC}"'" - local ARCH_NAME="amd64" - local best_candidate="" - local best_version="" - - while IFS= read -r candidate; do - local candidate_dir candidate_arch candidate_version candidate_version_normalized - candidate_dir="$(dirname "$candidate")" - candidate_arch="$(basename "$(dirname "$candidate_dir")")" - candidate_version="$(basename "$(dirname "$(dirname "$candidate_dir")")")" - candidate_version_normalized="$(normalize_version "$candidate_version")" - - if ! version_is_numeric "$candidate_version_normalized"; then continue; fi - if [ "$candidate_arch" != "$ARCH_NAME" ]; then continue; fi - - if [ -n "$requested_version_normalized" ]; then - if [ "$candidate_version_normalized" = "$requested_version_normalized" ]; then - printf "%s\n" "$candidate" - return 0 - fi - # Exact match required for user-pinned versions; skip non-matching candidates - continue - fi - - if [ -n "$min_version" ] && version_is_greater "$min_version" "$candidate_version_normalized"; then continue; fi - if [ -n "$max_version" ] && version_is_greater "$candidate_version_normalized" "$max_version"; then continue; fi - - if [ -z "$best_candidate" ] || version_is_greater "$candidate_version_normalized" "$best_version"; then - best_candidate="$candidate" - best_version="$candidate_version_normalized" - fi - done < <(find "${RUNNER_TOOL_CACHE}/copilot-cli" -maxdepth 5 -name "copilot" -type f 2>/dev/null) - - if [ -n "$best_candidate" ]; then - printf "%s\n" "$best_candidate" - return 0 - fi - return 1 - } - - # User pin: version 1.0.0, compat range 1.0.21..1.0.75, cache has 1.0.56 - # Should NOT match because 1.0.0 != 1.0.56 (exact match required for user pins) - if find_cached_copilot_bin "1.0.0" "1.0.21" "1.0.75" "" >/dev/null 2>&1; then - echo "FOUND" - else - echo "NOT_FOUND" +assert_found() { + local description="$1" + shift + if ! find_cached_copilot_bin "$@" >/dev/null; then + echo "FAIL: ${description}" >&2 + exit 1 fi -' 2>/dev/null) - -if [ "$result" = "NOT_FOUND" ]; then - pass "user pin 1.0.0 does not match in-range cached 1.0.56" -else - fail "user pin 1.0.0 should not match in-range cached 1.0.56" "got: $result" -fi -rm -rf "$FAKE_TC" - -# --------------------------------------------------------------------------- -# Test: compiler-default pin (REQUESTED_VERSION=latest) uses in-range cache -# --------------------------------------------------------------------------- -echo "Test 2: compiler-default pin (REQUESTED_VERSION=latest) accepts in-range cache..." -FAKE_TC=$(mktemp -d) -make_fake_toolcache "$FAKE_TC" "1.0.56" - -result=$(bash -c ' - set +o histexpand - normalize_version() { echo "${1#v}"; } - version_is_numeric() { [[ "$1" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; } - version_is_greater() { - local a="$1" b="$2" - [ "$(printf "%s\n%s" "$a" "$b" | sort -V | tail -1)" = "$a" ] && [ "$a" != "$b" ] - } - is_cache_expired() { return 1; } - - find_cached_copilot_bin() { - local requested_version="$1" - local min_version="$2" - local max_version="$3" - local cache_ttl_days="$4" - - local requested_version_normalized="" - if [ "$requested_version" != "latest" ]; then - requested_version_normalized="$(normalize_version "$requested_version")" - fi - - local RUNNER_TOOL_CACHE="'"${FAKE_TC}"'" - local ARCH_NAME="amd64" - local best_candidate="" - local best_version="" - - while IFS= read -r candidate; do - local candidate_dir candidate_arch candidate_version candidate_version_normalized - candidate_dir="$(dirname "$candidate")" - candidate_arch="$(basename "$(dirname "$candidate_dir")")" - candidate_version="$(basename "$(dirname "$(dirname "$candidate_dir")")")" - candidate_version_normalized="$(normalize_version "$candidate_version")" - - if ! version_is_numeric "$candidate_version_normalized"; then continue; fi - if [ "$candidate_arch" != "$ARCH_NAME" ]; then continue; fi - - if [ -n "$requested_version_normalized" ]; then - if [ "$candidate_version_normalized" = "$requested_version_normalized" ]; then - printf "%s\n" "$candidate" - return 0 - fi - continue - fi - - if [ -n "$min_version" ] && version_is_greater "$min_version" "$candidate_version_normalized"; then continue; fi - if [ -n "$max_version" ] && version_is_greater "$candidate_version_normalized" "$max_version"; then continue; fi - - if [ -z "$best_candidate" ] || version_is_greater "$candidate_version_normalized" "$best_version"; then - best_candidate="$candidate" - best_version="$candidate_version_normalized" - fi - done < <(find "${RUNNER_TOOL_CACHE}/copilot-cli" -maxdepth 5 -name "copilot" -type f 2>/dev/null) - - if [ -n "$best_candidate" ]; then - printf "%s\n" "$best_candidate" - return 0 - fi - return 1 - } + echo "PASS: ${description}" +} - # Compiler default: REQUESTED_VERSION=latest, compat range 1.0.21..1.0.75, cache has 1.0.56 - # Should match because range check applies (requested_version_normalized is empty for "latest") - if find_cached_copilot_bin "latest" "1.0.21" "1.0.75" "" >/dev/null 2>&1; then - echo "FOUND" - else - echo "NOT_FOUND" +assert_not_found() { + local description="$1" + shift + if find_cached_copilot_bin "$@" >/dev/null; then + echo "FAIL: ${description}" >&2 + exit 1 fi -' 2>/dev/null) - -if [ "$result" = "FOUND" ]; then - pass "compiler-default (latest) accepts in-range cached 1.0.56" -else - fail "compiler-default (latest) should accept in-range cached 1.0.56" "got: $result" -fi -rm -rf "$FAKE_TC" - -# --------------------------------------------------------------------------- -# Test: explicit user pin with exact cache entry is accepted -# --------------------------------------------------------------------------- -echo "Test 3: explicit user pin with exact cache entry is accepted..." -FAKE_TC=$(mktemp -d) -make_fake_toolcache "$FAKE_TC" "1.0.0" - -result=$(bash -c ' - set +o histexpand - normalize_version() { echo "${1#v}"; } - version_is_numeric() { [[ "$1" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]]; } - version_is_greater() { - local a="$1" b="$2" - [ "$(printf "%s\n%s" "$a" "$b" | sort -V | tail -1)" = "$a" ] && [ "$a" != "$b" ] - } - is_cache_expired() { return 1; } - - find_cached_copilot_bin() { - local requested_version="$1" - local min_version="$2" - local max_version="$3" - local cache_ttl_days="$4" - - local requested_version_normalized="" - if [ "$requested_version" != "latest" ]; then - requested_version_normalized="$(normalize_version "$requested_version")" - fi - - local RUNNER_TOOL_CACHE="'"${FAKE_TC}"'" - local ARCH_NAME="amd64" - local best_candidate="" - local best_version="" - - while IFS= read -r candidate; do - local candidate_dir candidate_arch candidate_version candidate_version_normalized - candidate_dir="$(dirname "$candidate")" - candidate_arch="$(basename "$(dirname "$candidate_dir")")" - candidate_version="$(basename "$(dirname "$(dirname "$candidate_dir")")")" - candidate_version_normalized="$(normalize_version "$candidate_version")" - - if ! version_is_numeric "$candidate_version_normalized"; then continue; fi - if [ "$candidate_arch" != "$ARCH_NAME" ]; then continue; fi - - if [ -n "$requested_version_normalized" ]; then - if [ "$candidate_version_normalized" = "$requested_version_normalized" ]; then - printf "%s\n" "$candidate" - return 0 - fi - continue - fi - - if [ -n "$min_version" ] && version_is_greater "$min_version" "$candidate_version_normalized"; then continue; fi - if [ -n "$max_version" ] && version_is_greater "$candidate_version_normalized" "$max_version"; then continue; fi - - if [ -z "$best_candidate" ] || version_is_greater "$candidate_version_normalized" "$best_version"; then - best_candidate="$candidate" - best_version="$candidate_version_normalized" - fi - done < <(find "${RUNNER_TOOL_CACHE}/copilot-cli" -maxdepth 5 -name "copilot" -type f 2>/dev/null) + echo "PASS: ${description}" +} - if [ -n "$best_candidate" ]; then - printf "%s\n" "$best_candidate" - return 0 - fi - return 1 - } +cached_binary="$(make_cached_copilot "1.0.56")" - # User pin: exact match exists in cache - if find_cached_copilot_bin "1.0.0" "1.0.21" "1.0.75" "" >/dev/null 2>&1; then - echo "FOUND" - else - echo "NOT_FOUND" - fi -' 2>/dev/null) +assert_not_found \ + "explicit pin equal to the compiler default rejects a mismatched in-range cache entry" \ + "1.0.75" "1.0.21" "1.0.75" "14" -if [ "$result" = "FOUND" ]; then - pass "user pin 1.0.0 uses exact-match cache entry" -else - fail "user pin 1.0.0 should use exact-match cache entry" "got: $result" -fi -rm -rf "$FAKE_TC" +assert_found \ + "compiler default accepts an in-range cache entry" \ + "latest" "1.0.21" "1.0.75" "" -# --------------------------------------------------------------------------- -# Summary -# --------------------------------------------------------------------------- -echo -echo "Results: ${TESTS_PASSED} passed, ${TESTS_FAILED} failed" -[ "$TESTS_FAILED" -eq 0 ] || exit 1 +touch -d "20 days ago" "$cached_binary" +assert_not_found \ + "compiler-default range fallback rejects an expired cache entry" \ + "latest" "1.0.21" "1.0.75" "14" diff --git a/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md b/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md index ef8e451e6d1..61c7e6641f9 100644 --- a/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md +++ b/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md @@ -1,4 +1,4 @@ -# ADR-48593: Enable Compat-Range Toolcache Matching for Explicit Copilot CLI Version Requests +# ADR-48593: Enable Compat-Range Toolcache Matching for the Default Copilot CLI Version **Date**: 2026-07-28 **Status**: Draft @@ -14,9 +14,10 @@ Because `pkg/workflow/copilot_installer.go` always passes an explicit version (d ### Decision -We will run compat-matrix resolution unconditionally—including when an explicit version is provided—so that `find_cached_copilot_bin` receives a populated compat range and can fall through to range-based matching when the exact version is not cached. Specifically: +We will opt the compiler-generated default version into compat-matrix resolution so that `find_cached_copilot_bin` receives a populated compat range. User-supplied `engine.version` pins continue to require an exact match, even when their value equals `DefaultCopilotVersion`. Specifically: -- `install_copilot_cli.sh`: call `resolve_version_from_compat` in the explicit-version branch and populate `COMPAT_MATCHED_MIN_AGENT`/`COMPAT_MATCHED_MAX_AGENT`; in `find_cached_copilot_bin`, fall through to the range check when no exact match is found and a compat range is available, rather than unconditionally `continue`-ing. +- `copilot_installer.go`: pass `--compat-range` only for a compiler-generated default in release builds. +- `install_copilot_cli.sh`: resolve and use the compat range only when `--compat-range` is present. - `compiler_main_job_helpers.go` / `threat_detection_job.go`: emit `GH_AW_COMPILED_VERSION` in job-level env for release builds so the script can resolve the compat window. - `.github/aw/compat.json`: update `max-agent` from 1.0.56 to 1.0.75 to include the current `DefaultCopilotVersion`. - `pkg/constants/version_constants_test.go`: add `TestDefaultCopilotVersionWithinCompatWindow` as a CI gate to assert `min-agent ≤ DefaultCopilotVersion ≤ max-agent`, preventing this class of drift from recurring. @@ -34,17 +35,17 @@ Updating `max-agent` to 1.0.75 would fix the immediate drift and allow the range ### Consequences #### Positive -- Runner toolcache satisfies Copilot CLI installs for any version within the compat window, eliminating unnecessary network downloads on every agentic job. +- Runner toolcache satisfies default Copilot CLI installs with any version within the compat window, eliminating unnecessary network downloads on every agentic job. - CDN failures during Copilot CLI download no longer cause hard job failures when a compatible cached binary exists. - `TestDefaultCopilotVersionWithinCompatWindow` creates a CI gate that blocks future `DefaultCopilotVersion`/`compat.json` drift before it reaches production. #### Negative -- Range-based toolcache matching may serve a cached binary version that differs from the exact requested version; behavioral equivalence relies on the compat window being accurately defined. An overly broad window could accept an incompatible binary. +- Default-version range matching may serve a cached binary version that differs from `DefaultCopilotVersion`; behavioral equivalence relies on the compat window being accurately defined. An overly broad window could accept an incompatible binary. - `GH_AW_COMPILED_VERSION` is now present in compiled job-level environments for release builds, exposing compiler version metadata in workflow logs and to any downstream tool that reads job env vars. #### Neutral - The compat window is now a load-bearing correctness invariant: `compat.json` must be updated alongside `DefaultCopilotVersion` on every bump, enforced by the new test. -- The change in `find_cached_copilot_bin` is a fall-through rather than a new code path; the existing range comparison logic below the exact-match block is unchanged. +- User-supplied `engine.version` values retain exact-match semantics. --- diff --git a/pkg/workflow/compiler_main_job_helpers.go b/pkg/workflow/compiler_main_job_helpers.go index 6536751cd80..f239fc6afa3 100644 --- a/pkg/workflow/compiler_main_job_helpers.go +++ b/pkg/workflow/compiler_main_job_helpers.go @@ -320,18 +320,13 @@ func (c *Compiler) buildMainJobEnv(data *WorkflowData) map[string]string { // Expose the compiler version so the Copilot install script can resolve a // compatible toolcache entry via compat-matrix range matching rather than // requiring an exact version download on every job. - // GH_AW_COMPILED_VERSION and GH_AW_DEFAULT_COPILOT_VERSION are emitted only - // for release builds so that dev/CI builds do not accidentally enable toolcache - // range matching against a stale compat window. + // GH_AW_COMPILED_VERSION is emitted only for release builds so that dev/CI builds + // do not accidentally enable toolcache range matching against a stale compat window. if IsRelease() { if env == nil { env = make(map[string]string) } env["GH_AW_COMPILED_VERSION"] = c.version - // GH_AW_DEFAULT_COPILOT_VERSION signals to the install script that the - // requested version is the compiler-generated default pin (not a user-supplied - // explicit pin), allowing compat-range toolcache matching as a fallback. - env["GH_AW_DEFAULT_COPILOT_VERSION"] = string(constants.DefaultCopilotVersion) } return env diff --git a/pkg/workflow/copilot_engine_installation.go b/pkg/workflow/copilot_engine_installation.go index ca4135865b2..e929a8eea13 100644 --- a/pkg/workflow/copilot_engine_installation.go +++ b/pkg/workflow/copilot_engine_installation.go @@ -146,9 +146,11 @@ func (e *CopilotEngine) GetInstallationSteps(workflowData *WorkflowData) []GitHu // When no explicit version is set, normalize the engine config so downstream // consumers observe the effective installed value. copilotVersion := string(constants.DefaultCopilotVersion) + useCompatRange := IsRelease() if workflowData.EngineConfig != nil { if workflowData.EngineConfig.Version != "" { copilotVersion = workflowData.EngineConfig.Version + useCompatRange = useCompatRange && workflowData.EngineConfig.VersionDefaulted copilotInstallLog.Printf("Using engine.version for Copilot CLI installation: %s", copilotVersion) } else { // Normalize engine config version to the effective installed version so @@ -156,6 +158,7 @@ func (e *CopilotEngine) GetInstallationSteps(workflowData *WorkflowData) []GitHu // This mutates workflowData by design because subsequent generation steps // in the same compile flow should observe the effective installed version. workflowData.EngineConfig.Version = copilotVersion + workflowData.EngineConfig.VersionDefaulted = true copilotInstallLog.Printf("No engine.version specified, using default Copilot CLI version: %s", copilotVersion) } } @@ -167,7 +170,7 @@ func (e *CopilotEngine) GetInstallationSteps(workflowData *WorkflowData) []GitHu // The "Copy Copilot CLI to daemon-visible path" step in nodejs.go then copies from // the rootless location to ${RUNNER_TEMP}/gh-aw/bin/copilot where AWF expects it. rootless := isArcDindTopology(workflowData) - npmSteps := GenerateCopilotInstallerSteps(copilotVersion, "Install GitHub Copilot CLI", rootless) + npmSteps := generateCopilotInstallerSteps(copilotVersion, "Install GitHub Copilot CLI", rootless, useCompatRange) if len(inlineDriverWriteStep) > 0 { npmSteps = append(npmSteps, inlineDriverWriteStep) } diff --git a/pkg/workflow/copilot_installer.go b/pkg/workflow/copilot_installer.go index c98f8719953..5bdf74e476a 100644 --- a/pkg/workflow/copilot_installer.go +++ b/pkg/workflow/copilot_installer.go @@ -10,6 +10,10 @@ var copilotInstallerLog = logger.New("workflow:copilot_installer") // GenerateCopilotInstallerSteps creates GitHub Actions steps to install the Copilot CLI using the official installer. // When rootless is true, the script installs into $HOME/.local/bin without sudo. func GenerateCopilotInstallerSteps(version, stepName string, rootless bool) []GitHubActionStep { + return generateCopilotInstallerSteps(version, stepName, rootless, false) +} + +func generateCopilotInstallerSteps(version, stepName string, rootless, useCompatRange bool) []GitHubActionStep { // If no version is specified, use the pinned default version from constants. if version == "" { version = string(constants.DefaultCopilotVersion) @@ -22,6 +26,10 @@ func GenerateCopilotInstallerSteps(version, stepName string, rootless bool) []Gi if rootless { rootlessFlag = " --rootless" } + compatRangeFlag := "" + if useCompatRange { + compatRangeFlag = " --compat-range" + } // Use the install_copilot_cli.sh script from actions/setup/sh // This script includes retry logic for robustness against transient network failures. @@ -36,7 +44,7 @@ func GenerateCopilotInstallerSteps(version, stepName string, rootless bool) []Gi copilotInstallerLog.Printf("Version contains GitHub Actions expression, using env var for injection safety: %s", version) stepLines := []string{ " - name: " + stepName, - ` run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" "${ENGINE_VERSION}"` + rootlessFlag, + ` run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" "${ENGINE_VERSION}"` + rootlessFlag + compatRangeFlag, " env:", " GH_HOST: github.com", " ENGINE_VERSION: " + version, @@ -46,7 +54,7 @@ func GenerateCopilotInstallerSteps(version, stepName string, rootless bool) []Gi stepLines := []string{ " - name: " + stepName, - " run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\" " + version + rootlessFlag, + " run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\" " + version + rootlessFlag + compatRangeFlag, " env:", " GH_HOST: github.com", } diff --git a/pkg/workflow/copilot_installer_test.go b/pkg/workflow/copilot_installer_test.go index 4592205324e..777bbffa7fe 100644 --- a/pkg/workflow/copilot_installer_test.go +++ b/pkg/workflow/copilot_installer_test.go @@ -157,9 +157,39 @@ func TestCopilotEngineWithVersion(t *testing.T) { } } +func TestCopilotEngineExplicitDefaultVersionRequiresExactMatch(t *testing.T) { + originalIsRelease := isReleaseBuild + isReleaseBuild = true + t.Cleanup(func() { isReleaseBuild = originalIsRelease }) + + engine := NewCopilotEngine() + workflowData := &WorkflowData{ + Name: "test-workflow", + EngineConfig: &EngineConfig{ + Version: string(constants.DefaultCopilotVersion), + }, + } + + steps := engine.GetInstallationSteps(workflowData) + for _, step := range steps { + stepContent := strings.Join(step, "\n") + if strings.Contains(stepContent, "install_copilot_cli.sh") { + if strings.Contains(stepContent, "--compat-range") { + t.Fatalf("explicit engine.version equal to the default must require an exact match:\n%s", stepContent) + } + return + } + } + t.Fatal("Could not find install step with install_copilot_cli.sh") +} + func TestCopilotEngineWithoutVersion(t *testing.T) { // When engine.version is not set, the default pinned version must be used and // EngineConfig.Version must be normalized to the effective installed value. + originalIsRelease := isReleaseBuild + isReleaseBuild = true + t.Cleanup(func() { isReleaseBuild = originalIsRelease }) + engine := NewCopilotEngine() workflowData := &WorkflowData{ @@ -192,6 +222,44 @@ func TestCopilotEngineWithoutVersion(t *testing.T) { if !strings.Contains(installStep, `install_copilot_cli.sh" `+string(constants.DefaultCopilotVersion)) { t.Errorf("Expected default Copilot version in install step, got:\n%s", installStep) } + if !strings.Contains(installStep, "--compat-range") { + t.Errorf("Expected compiler default version to enable compat-range matching, got:\n%s", installStep) + } + + // A later detection job sees the normalized version and must retain its default provenance. + secondSteps := engine.GetInstallationSteps(workflowData) + for _, step := range secondSteps { + stepContent := strings.Join(step, "\n") + if strings.Contains(stepContent, "install_copilot_cli.sh") { + if !strings.Contains(stepContent, "--compat-range") { + t.Fatalf("normalized compiler default must retain compat-range matching:\n%s", stepContent) + } + return + } + } + t.Fatal("Could not find second install step with install_copilot_cli.sh") +} + +func TestCopilotEngineDevelopmentBuildRequiresExactMatch(t *testing.T) { + originalIsRelease := isReleaseBuild + isReleaseBuild = false + t.Cleanup(func() { isReleaseBuild = originalIsRelease }) + + engine := NewCopilotEngine() + steps := engine.GetInstallationSteps(&WorkflowData{ + Name: "test-workflow", + EngineConfig: &EngineConfig{}, + }) + for _, step := range steps { + stepContent := strings.Join(step, "\n") + if strings.Contains(stepContent, "install_copilot_cli.sh") { + if strings.Contains(stepContent, "--compat-range") { + t.Fatalf("development builds must require an exact match:\n%s", stepContent) + } + return + } + } + t.Fatal("Could not find install step with install_copilot_cli.sh") } func TestGenerateCopilotInstallerSteps_ExpressionVersion(t *testing.T) { diff --git a/pkg/workflow/engine.go b/pkg/workflow/engine.go index 98db36836c5..bbe7384964d 100644 --- a/pkg/workflow/engine.go +++ b/pkg/workflow/engine.go @@ -46,6 +46,7 @@ func toEngineEnvValueString(value any) (string, bool) { type EngineConfig struct { ID string Version string + VersionDefaulted bool // Internal provenance: Version was populated from the compiler default. LLMProvider LLMProvider // Inference provider override for this engine (engine.provider / engine.model-provider) PermissionMode string MaxTurns string diff --git a/pkg/workflow/threat_detection_inline_engine.go b/pkg/workflow/threat_detection_inline_engine.go index 2ca084c3ef6..ae937e98590 100644 --- a/pkg/workflow/threat_detection_inline_engine.go +++ b/pkg/workflow/threat_detection_inline_engine.go @@ -62,14 +62,15 @@ func (c *Compiler) buildDetectionEngineExecutionStep(data *WorkflowData) []strin detectionEngineConfig = &EngineConfig{ID: engineSetting} } else { detectionEngineConfig = &EngineConfig{ - ID: detectionEngineConfig.ID, - Version: detectionEngineConfig.Version, - Env: detectionEngineConfig.Env, - Config: detectionEngineConfig.Config, - Args: detectionEngineConfig.Args, - APITarget: detectionEngineConfig.APITarget, - HarnessScript: detectionEngineConfig.HarnessScript, - Driver: detectionEngineConfig.Driver, + ID: detectionEngineConfig.ID, + Version: detectionEngineConfig.Version, + VersionDefaulted: detectionEngineConfig.VersionDefaulted, + Env: detectionEngineConfig.Env, + Config: detectionEngineConfig.Config, + Args: detectionEngineConfig.Args, + APITarget: detectionEngineConfig.APITarget, + HarnessScript: detectionEngineConfig.HarnessScript, + Driver: detectionEngineConfig.Driver, } } if detectionEngineConfig.ID == "" { diff --git a/pkg/workflow/threat_detection_job.go b/pkg/workflow/threat_detection_job.go index 4891885a901..65db88a7304 100644 --- a/pkg/workflow/threat_detection_job.go +++ b/pkg/workflow/threat_detection_job.go @@ -195,16 +195,11 @@ func (c *Compiler) buildDetectionJob(data *WorkflowData) (*Job, error) { // Expose the compiler version so the Copilot install script can resolve a // compatible toolcache entry via compat-matrix range matching rather than // requiring an exact version download on every job. - // GH_AW_COMPILED_VERSION and GH_AW_DEFAULT_COPILOT_VERSION are emitted only - // for release builds so that dev/CI builds do not accidentally enable toolcache - // range matching against a stale compat window. + // GH_AW_COMPILED_VERSION is emitted only for release builds so that dev/CI builds + // do not accidentally enable toolcache range matching against a stale compat window. if IsRelease() { detectionJobEnv = map[string]string{ "GH_AW_COMPILED_VERSION": c.version, - // GH_AW_DEFAULT_COPILOT_VERSION signals to the install script that the - // requested version is the compiler-generated default pin (not a user-supplied - // explicit pin), allowing compat-range toolcache matching as a fallback. - "GH_AW_DEFAULT_COPILOT_VERSION": string(constants.DefaultCopilotVersion), } } From f51cf40d9e311a03135ad45780f4b8d19a5d767b Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Tue, 28 Jul 2026 17:16:56 +0000 Subject: [PATCH 6/9] fix: make open Copilot compat range unbounded Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- .github/aw/compat.json | 2 +- .github/aw/compat.schema.json | 24 ++++++++++++++++--- .github/workflows/cgo.yml | 14 ++++++++++- actions/setup/sh/install_copilot_cli.sh | 5 +++- actions/setup/sh/install_copilot_cli_test.sh | 4 ++++ ...-toolcache-for-explicit-copilot-version.md | 10 ++++---- pkg/constants/version_constants_test.go | 20 ++++++---------- 7 files changed, 55 insertions(+), 24 deletions(-) diff --git a/.github/aw/compat.json b/.github/aw/compat.json index 0cc6b903db3..84c1772edeb 100644 --- a/.github/aw/compat.json +++ b/.github/aw/compat.json @@ -10,7 +10,7 @@ "min-gh-aw": "0.72.0", "max-gh-aw": "*", "min-agent": "1.0.21", - "max-agent": "1.0.75", + "max-agent": "*", "open": true }, { diff --git a/.github/aw/compat.schema.json b/.github/aw/compat.schema.json index 6a8e16afa9e..6883b8ee008 100644 --- a/.github/aw/compat.schema.json +++ b/.github/aw/compat.schema.json @@ -62,6 +62,12 @@ { "type": "string", "enum": ["*"] } ] }, + "agentBound": { + "oneOf": [ + { "$ref": "#/definitions/semver" }, + { "type": "string", "enum": ["*"] } + ] + }, "agentRows": { "type": "array", "minItems": 1, @@ -75,18 +81,30 @@ "min-gh-aw": { "$ref": "#/definitions/semver" }, "max-gh-aw": { "$ref": "#/definitions/ghAwBound" }, "min-agent": { "$ref": "#/definitions/semver" }, - "max-agent": { "$ref": "#/definitions/semver" }, + "max-agent": { "$ref": "#/definitions/agentBound" }, "open": { "type": "boolean", "default": true, - "description": "When true (the default), the setup action's weekly release process may continue bumping max-agent for this row. Set to false to freeze during rollback or quarantine. Permitted only on the catch-all row (max-gh-aw == \"*\"); bounded rows are closed-by-construction." + "description": "When true (the default), max-agent must be unbounded (\"*\"). Set to false to freeze the row with a specific max-agent during rollback or quarantine. Permitted only on the catch-all row (max-gh-aw == \"*\"); bounded rows are closed-by-construction." } }, "if": { "properties": { "max-gh-aw": { "const": "*" } } }, - "then": {}, + "then": { + "if": { + "properties": { "open": { "const": false } }, + "required": ["open"] + }, + "then": { + "properties": { "max-agent": { "$ref": "#/definitions/semver" } } + }, + "else": { + "properties": { "max-agent": { "const": "*" } } + } + }, "else": { + "properties": { "max-agent": { "$ref": "#/definitions/semver" } }, "not": { "required": ["open"] } } } diff --git a/.github/workflows/cgo.yml b/.github/workflows/cgo.yml index b05de076e80..89c5218a3a9 100644 --- a/.github/workflows/cgo.yml +++ b/.github/workflows/cgo.yml @@ -951,7 +951,7 @@ jobs: } } - for (const k of ['min-gh-aw', 'min-agent', 'max-agent']) { + for (const k of ['min-gh-aw', 'min-agent']) { if (k in row && !semverRe.test(row[k])) { errors.push(`${where}.${k} ('${row[k]}') is not a valid semver (MAJOR.MINOR.PATCH)`); } @@ -959,6 +959,9 @@ jobs: if ('max-gh-aw' in row && row['max-gh-aw'] !== '*' && !semverRe.test(row['max-gh-aw'])) { errors.push(`${where}.max-gh-aw ('${row['max-gh-aw']}') must be either '*' or a valid semver`); } + if ('max-agent' in row && row['max-agent'] !== '*' && !semverRe.test(row['max-agent'])) { + errors.push(`${where}.max-agent ('${row['max-agent']}') must be either '*' or a valid semver`); + } if ('min-agent' in row && 'max-agent' in row && semverRe.test(row['min-agent']) && semverRe.test(row['max-agent'])) { if (cmp(row['min-agent'], row['max-agent']) > 0) { @@ -970,6 +973,12 @@ jobs: if ('open' in row && typeof row['open'] !== 'boolean') { errors.push(`${where}.open must be a boolean`); } + if (row['open'] !== false && row['max-agent'] !== '*') { + errors.push(`${where}.max-agent must be '*' when the catch-all row is open`); + } + if (row['open'] === false && !semverRe.test(row['max-agent'])) { + errors.push(`${where}.max-agent must be a valid semver when the catch-all row is closed`); + } } else if ('max-gh-aw' in row) { if (semverRe.test(row['min-gh-aw']) && semverRe.test(row['max-gh-aw'])) { if (cmp(row['min-gh-aw'], row['max-gh-aw']) > 0) { @@ -979,6 +988,9 @@ jobs: if ('open' in row) { errors.push(`${where}: 'open' is only permitted on the catch-all row (max-gh-aw '*'); bounded rows are closed-by-construction`); } + if (!semverRe.test(row['max-agent'])) { + errors.push(`${where}.max-agent must be a valid semver on a bounded row`); + } } }); diff --git a/actions/setup/sh/install_copilot_cli.sh b/actions/setup/sh/install_copilot_cli.sh index 36e861a4133..367f10fb2c6 100755 --- a/actions/setup/sh/install_copilot_cli.sh +++ b/actions/setup/sh/install_copilot_cli.sh @@ -306,6 +306,9 @@ resolve_version_from_compat() { fi IFS='|' read -r resolved_version row_index row_min_aw row_max_aw row_min_agent row_max_agent cache_ttl_days <<< "$resolved_info" + if [ "$resolved_version" = "*" ]; then + resolved_version="latest" + fi echo "Compatibility matrix source: $(cat "$compat_source")" >&2 echo "Compatibility matrix matched row ${row_index}: gh-aw ${row_min_aw}..${row_max_aw}, copilot ${row_min_agent}..${row_max_agent}" >&2 echo "Resolved Copilot CLI version from compatibility matrix: ${resolved_version}" >&2 @@ -433,7 +436,7 @@ find_cached_copilot_bin() { continue fi - if [ -n "$max_version" ] && version_is_greater "$candidate_version_normalized" "$max_version"; then + if [ -n "$max_version" ] && [ "$max_version" != "*" ] && version_is_greater "$candidate_version_normalized" "$max_version"; then echo " Skipping candidate (above compat maximum: ${candidate_version_normalized} > ${max_version})" >&2 continue fi diff --git a/actions/setup/sh/install_copilot_cli_test.sh b/actions/setup/sh/install_copilot_cli_test.sh index 0cb070de200..7f2f8cf649f 100755 --- a/actions/setup/sh/install_copilot_cli_test.sh +++ b/actions/setup/sh/install_copilot_cli_test.sh @@ -64,6 +64,10 @@ assert_found \ "compiler default accepts an in-range cache entry" \ "latest" "1.0.21" "1.0.75" "" +assert_found \ + "compiler default accepts an entry in an open-ended range" \ + "latest" "1.0.21" "*" "" + touch -d "20 days ago" "$cached_binary" assert_not_found \ "compiler-default range fallback rejects an expired cache entry" \ diff --git a/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md b/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md index 61c7e6641f9..cccf70ed985 100644 --- a/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md +++ b/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md @@ -19,8 +19,8 @@ We will opt the compiler-generated default version into compat-matrix resolution - `copilot_installer.go`: pass `--compat-range` only for a compiler-generated default in release builds. - `install_copilot_cli.sh`: resolve and use the compat range only when `--compat-range` is present. - `compiler_main_job_helpers.go` / `threat_detection_job.go`: emit `GH_AW_COMPILED_VERSION` in job-level env for release builds so the script can resolve the compat window. -- `.github/aw/compat.json`: update `max-agent` from 1.0.56 to 1.0.75 to include the current `DefaultCopilotVersion`. -- `pkg/constants/version_constants_test.go`: add `TestDefaultCopilotVersionWithinCompatWindow` as a CI gate to assert `min-agent ≤ DefaultCopilotVersion ≤ max-agent`, preventing this class of drift from recurring. +- `.github/aw/compat.json`: make the open row's `max-agent` unbounded so compiler-default updates remain in the current compatibility window. +- `pkg/constants/version_constants_test.go`: add `TestDefaultCopilotVersionWithinCompatWindow` as a CI gate to assert that `DefaultCopilotVersion` remains in the open compatibility window. ### Alternatives Considered @@ -30,21 +30,21 @@ The install script could drop the explicit-version argument and always use compa #### Alternative 2: Only bump compat.json max-agent without changing the install script -Updating `max-agent` to 1.0.75 would fix the immediate drift and allow the range check to pass in theory, but the install script's explicit-version branch still skips compat resolution and calls `find_cached_copilot_bin` with an empty compat range. The toolcache entry would continue to be rejected by exact-match. This approach fixes the data without fixing the logic, leaving the underlying bypass latent for the next drift cycle. +Making `max-agent` unbounded fixes the data drift, but the install script's explicit-version branch still skips compat resolution and calls `find_cached_copilot_bin` with an empty compat range. The toolcache entry would continue to be rejected by exact-match. This approach fixes the data without fixing the logic. ### Consequences #### Positive - Runner toolcache satisfies default Copilot CLI installs with any version within the compat window, eliminating unnecessary network downloads on every agentic job. - CDN failures during Copilot CLI download no longer cause hard job failures when a compatible cached binary exists. -- `TestDefaultCopilotVersionWithinCompatWindow` creates a CI gate that blocks future `DefaultCopilotVersion`/`compat.json` drift before it reaches production. +- `TestDefaultCopilotVersionWithinCompatWindow` creates a CI gate that ensures `DefaultCopilotVersion` remains in the open compatibility window. #### Negative - Default-version range matching may serve a cached binary version that differs from `DefaultCopilotVersion`; behavioral equivalence relies on the compat window being accurately defined. An overly broad window could accept an incompatible binary. - `GH_AW_COMPILED_VERSION` is now present in compiled job-level environments for release builds, exposing compiler version metadata in workflow logs and to any downstream tool that reads job env vars. #### Neutral -- The compat window is now a load-bearing correctness invariant: `compat.json` must be updated alongside `DefaultCopilotVersion` on every bump, enforced by the new test. +- The compat window is now a load-bearing correctness invariant, enforced by the new test. - User-supplied `engine.version` values retain exact-match semantics. --- diff --git a/pkg/constants/version_constants_test.go b/pkg/constants/version_constants_test.go index 7c60c92efb6..d4ca27725d7 100644 --- a/pkg/constants/version_constants_test.go +++ b/pkg/constants/version_constants_test.go @@ -38,8 +38,7 @@ func TestDefaultPlaywrightCLIVersionOutsideCooldownWindow(t *testing.T) { // TestDefaultCopilotVersionWithinCompatWindow asserts that DefaultCopilotVersion falls // within the declared compat.json window so the runner toolcache can satisfy installs -// without a network download. Failures here indicate that either DefaultCopilotVersion -// or the compat.json max-agent needs to be updated. +// without a network download. func TestDefaultCopilotVersionWithinCompatWindow(t *testing.T) { // Locate compat.json relative to this test file (three directories up from // pkg/constants/ → repo root → .github/aw/compat.json). @@ -74,28 +73,23 @@ func TestDefaultCopilotVersionWithinCompatWindow(t *testing.T) { version := string(DefaultCopilotVersion) - // Find the first open row (open: true, or absent which defaults to true per schema). + // Find the open catch-all row (open: true, or absent which defaults to true per schema). for _, row := range compat.AgentCompatV1.Copilot { - // Skip rows that are explicitly closed (open: false). - if row.Open != nil && !*row.Open { + // Skip bounded rows and catch-all rows that are explicitly closed. + if row.MaxGhAw != "*" || (row.Open != nil && !*row.Open) { continue } if row.MinAgent == "" || row.MaxAgent == "" { t.Fatalf("compat row missing min-agent or max-agent: %+v", row) } + if row.MaxAgent != "*" { + t.Fatalf("open compat row max-agent is %q, want \"*\"", row.MaxAgent) + } if cmp, err := semverCmp(version, row.MinAgent); err != nil { t.Fatalf("semverCmp(%q, %q): %v", version, row.MinAgent, err) } else if cmp < 0 { t.Fatalf("DefaultCopilotVersion %q is below compat min-agent %q; bump min-agent or lower DefaultCopilotVersion", version, row.MinAgent) } - // max-agent may be "*" (wildcard) for catch-all rows; skip the upper-bound check in that case. - if row.MaxAgent != "*" { - if cmp, err := semverCmp(version, row.MaxAgent); err != nil { - t.Fatalf("semverCmp(%q, %q): %v", version, row.MaxAgent, err) - } else if cmp > 0 { - t.Fatalf("DefaultCopilotVersion %q exceeds compat max-agent %q; update .github/aw/compat.json max-agent or lower DefaultCopilotVersion to prevent toolcache bypass", version, row.MaxAgent) - } - } return // found and validated } t.Fatalf("no open compat row found in %s; add an open row for the current gh-aw release", compatPath) From 43892250417fcb3bc07c4da7f6127c62263aa69a Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 29 Jul 2026 10:10:54 +0000 Subject: [PATCH 7/9] Simplify Copilot installer version precedence Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com> --- .github/workflows/ab-testing-advisor.lock.yml | 3 +- .github/workflows/ace-editor.lock.yml | 6 +- .../agent-performance-analyzer.lock.yml | 9 ++- .../workflows/agent-persona-explorer.lock.yml | 3 +- .../workflows/agentic-token-audit.lock.yml | 9 ++- .../agentic-token-optimizer.lock.yml | 6 +- .../agentic-token-trend-audit.lock.yml | 9 ++- .github/workflows/archie.lock.yml | 9 ++- .../workflows/architecture-guardian.lock.yml | 9 ++- .github/workflows/artifacts-summary.lock.yml | 9 ++- .github/workflows/auto-triage-issues.lock.yml | 3 +- .github/workflows/bot-detection.lock.yml | 6 +- .../breaking-change-checker.lock.yml | 9 ++- .../workflows/chaos-pr-bundle-fuzzer.lock.yml | 3 +- .github/workflows/ci-coach.lock.yml | 9 ++- .../cli-consistency-checker.lock.yml | 9 ++- .../workflows/code-scanning-fixer.lock.yml | 9 ++- .github/workflows/code-simplifier.lock.yml | 9 ++- .../commit-changes-analyzer.lock.yml | 3 +- .../constraint-solving-potd.lock.yml | 9 ++- .github/workflows/contribution-check.lock.yml | 9 ++- .../copilot-centralization-drilldown.lock.yml | 9 ++- .../copilot-centralization-optimizer.lock.yml | 9 ++- .../copilot-cli-deep-research.lock.yml | 9 ++- .github/workflows/copilot-opt.lock.yml | 9 ++- .../copilot-pr-merged-report.lock.yml | 9 ++- .../copilot-pr-nlp-analysis.lock.yml | 9 ++- .../copilot-pr-prompt-analysis.lock.yml | 9 ++- .github/workflows/craft.lock.yml | 9 ++- ...aily-agent-of-the-day-blog-writer.lock.yml | 9 ++- .../daily-ambient-context-optimizer.lock.yml | 9 ++- .../daily-architecture-diagram.lock.yml | 9 ++- .../daily-assign-issue-to-user.lock.yml | 9 ++- ...daily-awf-spec-compiler-surfacing.lock.yml | 3 +- .../workflows/daily-byok-ollama-test.lock.yml | 6 +- .../workflows/daily-cli-performance.lock.yml | 9 ++- .../workflows/daily-cli-tools-tester.lock.yml | 9 ++- .../daily-community-attribution.lock.yml | 9 ++- .../workflows/daily-compiler-quality.lock.yml | 9 ++- ...ly-compiler-threat-spec-optimizer.lock.yml | 9 ++- .../daily-credit-limit-test.lock.yml | 6 +- .github/workflows/daily-doc-updater.lock.yml | 3 +- .../daily-experiment-report.lock.yml | 9 ++- .github/workflows/daily-file-diet.lock.yml | 9 ++- .../workflows/daily-firewall-report.lock.yml | 9 ++- .../daily-formal-spec-verifier.lock.yml | 6 +- .../workflows/daily-function-namer.lock.yml | 3 +- .../workflows/daily-geo-optimizer.lock.yml | 9 ++- .../daily-github-docs-seo-optimizer.lock.yml | 6 +- .../daily-go-test-parallelizer.lock.yml | 6 +- .github/workflows/daily-hippo-learn.lock.yml | 3 +- .../workflows/daily-issues-report.lock.yml | 9 ++- .../daily-malicious-code-scan.lock.yml | 6 +- .../daily-max-ai-credits-test.lock.yml | 6 +- .../daily-mcp-concurrency-analysis.lock.yml | 9 ++- .../workflows/daily-model-inventory.lock.yml | 9 ++- .../workflows/daily-model-resolution.lock.yml | 6 +- .../daily-multi-device-docs-tester.lock.yml | 3 +- .github/workflows/daily-news.lock.yml | 3 +- .../daily-performance-summary.lock.yml | 9 ++- .github/workflows/daily-regulatory.lock.yml | 9 ++- .../workflows/daily-repo-chronicle.lock.yml | 9 ++- .../daily-safe-output-integrator.lock.yml | 9 ++- .../workflows/daily-secrets-analysis.lock.yml | 9 ++- .../daily-security-observability.lock.yml | 9 ++- .github/workflows/daily-semgrep-scan.lock.yml | 9 ++- .../workflows/daily-sentrux-report.lock.yml | 9 ++- .../workflows/daily-skill-optimizer.lock.yml | 9 ++- .../daily-spdd-spec-planner.lock.yml | 6 +- .../daily-spending-forecast.lock.yml | 6 +- .../workflows/daily-squid-image-scan.lock.yml | 6 +- .../daily-syntax-error-quality.lock.yml | 9 ++- .github/workflows/daily-team-status.lock.yml | 6 +- .../daily-testify-uber-super-expert.lock.yml | 6 +- ...dows-terminal-integration-builder.lock.yml | 6 +- .../workflows/daily-workflow-updater.lock.yml | 6 +- .../dataflow-pr-discussion-dataset.lock.yml | 9 ++- .github/workflows/dead-code-remover.lock.yml | 6 +- .github/workflows/delight.lock.yml | 9 ++- .github/workflows/dependabot-burner.lock.yml | 6 +- .../workflows/dependabot-go-checker.lock.yml | 9 ++- .../deployment-incident-monitor.lock.yml | 9 ++- .../workflows/designer-drift-audit.lock.yml | 6 +- .github/workflows/dev-hawk.lock.yml | 9 ++- .github/workflows/dictation-prompt.lock.yml | 6 +- .../workflows/discussion-task-miner.lock.yml | 9 ++- .github/workflows/docs-noob-tester.lock.yml | 9 ++- .github/workflows/draft-pr-cleanup.lock.yml | 9 ++- .github/workflows/eslint-miner.lock.yml | 6 +- .github/workflows/eslint-monster.lock.yml | 3 +- .github/workflows/evoskill-evolver.lock.yml | 9 ++- .../example-failure-category-filter.lock.yml | 6 +- .../example-permissions-warning.lock.yml | 3 +- .github/workflows/firewall-escape.lock.yml | 6 +- .github/workflows/firewall.lock.yml | 3 +- .../workflows/functional-pragmatist.lock.yml | 6 +- .../github-remote-mcp-auth-test.lock.yml | 6 +- .../workflows/glossary-maintainer.lock.yml | 9 ++- .github/workflows/gpclean.lock.yml | 9 ++- .../impeccable-skills-reviewer.lock.yml | 6 +- .github/workflows/issue-monster.lock.yml | 3 +- .github/workflows/issue-triage-agent.lock.yml | 9 ++- .github/workflows/jsweep.lock.yml | 6 +- .../workflows/layout-spec-maintainer.lock.yml | 6 +- .github/workflows/lint-monster.lock.yml | 3 +- .github/workflows/linter-miner.lock.yml | 6 +- .../mattpocock-skills-reviewer.lock.yml | 6 +- .github/workflows/mcp-inspector.lock.yml | 6 +- .github/workflows/mergefest.lock.yml | 6 +- .github/workflows/metrics-collector.lock.yml | 6 +- .../workflows/notion-issue-summary.lock.yml | 6 +- .../objective-impact-report.lock.yml | 6 +- .github/workflows/org-health-report.lock.yml | 6 +- .github/workflows/outcome-collector.lock.yml | 6 +- .github/workflows/pdf-summary.lock.yml | 6 +- .github/workflows/plan.lock.yml | 9 ++- .github/workflows/poem-bot.lock.yml | 3 +- .../pr-code-quality-reviewer.lock.yml | 9 ++- .../workflows/pr-description-caveman.lock.yml | 6 +- .../workflows/pr-nitpick-reviewer.lock.yml | 6 +- .github/workflows/pr-sous-chef.lock.yml | 3 +- .github/workflows/pr-triage-agent.lock.yml | 9 ++- .github/workflows/python-data-charts.lock.yml | 6 +- .github/workflows/q.lock.yml | 6 +- .../workflows/refactoring-cadence.lock.yml | 6 +- .github/workflows/refiner.lock.yml | 9 ++- .github/workflows/release.lock.yml | 6 +- .../workflows/repo-audit-analyzer.lock.yml | 9 ++- .github/workflows/repo-tree-map.lock.yml | 6 +- .../repository-quality-improver.lock.yml | 6 +- .github/workflows/research.lock.yml | 9 ++- .../schema-consistency-checker.lock.yml | 3 +- .../workflows/security-compliance.lock.yml | 6 +- .github/workflows/security-review.lock.yml | 9 ++- .../sighthound-security-scan.lock.yml | 6 +- .github/workflows/skillet.lock.yml | 6 +- .../workflows/slide-deck-maintainer.lock.yml | 6 +- .../smoke-copilot-aoai-apikey.lock.yml | 9 ++- .../smoke-copilot-aoai-entra.lock.yml | 9 ++- .github/workflows/smoke-copilot-arm.lock.yml | 6 +- .github/workflows/smoke-copilot-auto.lock.yml | 6 +- .github/workflows/smoke-copilot-mai.lock.yml | 6 +- .github/workflows/smoke-copilot-sdk.lock.yml | 6 +- .../workflows/smoke-copilot-small.lock.yml | 6 +- .../smoke-copilot-sub-agents.lock.yml | 9 ++- .github/workflows/smoke-copilot.lock.yml | 9 ++- .../smoke-create-cross-repo-pr.lock.yml | 6 +- .github/workflows/smoke-multi-pr.lock.yml | 6 +- .../workflows/smoke-otel-backends.lock.yml | 6 +- .github/workflows/smoke-pi.lock.yml | 3 +- .github/workflows/smoke-project.lock.yml | 9 ++- .../workflows/smoke-service-ports.lock.yml | 6 +- .github/workflows/smoke-temporary-id.lock.yml | 9 ++- .github/workflows/smoke-test-tools.lock.yml | 6 +- .../smoke-update-cross-repo-pr.lock.yml | 6 +- .../smoke-workflow-call-with-inputs.lock.yml | 6 +- .../workflows/smoke-workflow-call.lock.yml | 6 +- .github/workflows/spec-enforcer.lock.yml | 3 +- .github/workflows/spec-extractor.lock.yml | 6 +- .github/workflows/spec-librarian.lock.yml | 6 +- .github/workflows/stale-pr-cleanup.lock.yml | 9 ++- .../workflows/stale-repo-identifier.lock.yml | 9 ++- .github/workflows/sub-issue-closer.lock.yml | 9 ++- .github/workflows/super-linter.lock.yml | 6 +- .../workflows/technical-doc-writer.lock.yml | 9 ++- .github/workflows/terminal-stylist.lock.yml | 6 +- .../workflows/test-quality-sentinel.lock.yml | 9 ++- .github/workflows/tidy.lock.yml | 9 ++- .../workflows/ubuntu-image-analyzer.lock.yml | 6 +- .../uk-ai-operational-resilience.lock.yml | 6 +- .github/workflows/unbloat-docs.lock.yml | 3 +- .github/workflows/update-astro.lock.yml | 6 +- .github/workflows/video-analyzer.lock.yml | 6 +- .../visual-regression-checker.lock.yml | 6 +- .../weekly-blog-post-writer.lock.yml | 9 ++- .../weekly-editors-health-check.lock.yml | 6 +- .../workflows/weekly-issue-summary.lock.yml | 6 +- .../weekly-safe-outputs-spec-review.lock.yml | 6 +- .github/workflows/workflow-generator.lock.yml | 6 +- .../workflow-health-manager.lock.yml | 6 +- .../workflows/workflow-normalizer.lock.yml | 6 +- .../workflow-skill-extractor.lock.yml | 6 +- actions/setup/sh/install_copilot_cli.sh | 63 ++++++++-------- actions/setup/sh/install_copilot_cli_test.sh | 49 +++++++++++++ ...-toolcache-for-explicit-copilot-version.md | 52 -------------- pkg/workflow/copilot_engine_installation.go | 11 +-- pkg/workflow/copilot_installer.go | 25 +++---- pkg/workflow/copilot_installer_test.go | 71 ++++++------------- 188 files changed, 960 insertions(+), 574 deletions(-) delete mode 100644 docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md diff --git a/.github/workflows/ab-testing-advisor.lock.yml b/.github/workflows/ab-testing-advisor.lock.yml index ba75a179790..23a2302a5b6 100644 --- a/.github/workflows/ab-testing-advisor.lock.yml +++ b/.github/workflows/ab-testing-advisor.lock.yml @@ -1444,9 +1444,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/ace-editor.lock.yml b/.github/workflows/ace-editor.lock.yml index 3cd1987b841..ff011d08c23 100644 --- a/.github/workflows/ace-editor.lock.yml +++ b/.github/workflows/ace-editor.lock.yml @@ -544,9 +544,10 @@ jobs: GITHUB_TOKEN: ${{ github.token }} run: bash "${RUNNER_TEMP}/gh-aw/actions/configure_git_credentials.sh" - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1292,9 +1293,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/agent-performance-analyzer.lock.yml b/.github/workflows/agent-performance-analyzer.lock.yml index 0287b9364a4..eab53ff71a9 100644 --- a/.github/workflows/agent-performance-analyzer.lock.yml +++ b/.github/workflows/agent-performance-analyzer.lock.yml @@ -605,9 +605,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1668,9 +1669,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1860,9 +1862,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/agent-persona-explorer.lock.yml b/.github/workflows/agent-persona-explorer.lock.yml index cc38821955c..ed8e596ef2f 100644 --- a/.github/workflows/agent-persona-explorer.lock.yml +++ b/.github/workflows/agent-persona-explorer.lock.yml @@ -1569,9 +1569,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/agentic-token-audit.lock.yml b/.github/workflows/agentic-token-audit.lock.yml index 0d513d2a785..bc79ad06c8c 100644 --- a/.github/workflows/agentic-token-audit.lock.yml +++ b/.github/workflows/agentic-token-audit.lock.yml @@ -572,9 +572,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1591,9 +1592,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1804,9 +1806,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/agentic-token-optimizer.lock.yml b/.github/workflows/agentic-token-optimizer.lock.yml index 8f1cbcc90d2..b8189be5720 100644 --- a/.github/workflows/agentic-token-optimizer.lock.yml +++ b/.github/workflows/agentic-token-optimizer.lock.yml @@ -531,9 +531,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1404,9 +1405,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/agentic-token-trend-audit.lock.yml b/.github/workflows/agentic-token-trend-audit.lock.yml index 36eed6e4d34..847b0781a5c 100644 --- a/.github/workflows/agentic-token-trend-audit.lock.yml +++ b/.github/workflows/agentic-token-trend-audit.lock.yml @@ -548,9 +548,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1542,9 +1543,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1726,9 +1728,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/archie.lock.yml b/.github/workflows/archie.lock.yml index 2fce18e161d..5093c9a0ba4 100644 --- a/.github/workflows/archie.lock.yml +++ b/.github/workflows/archie.lock.yml @@ -572,9 +572,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1535,9 +1536,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1721,9 +1723,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/architecture-guardian.lock.yml b/.github/workflows/architecture-guardian.lock.yml index c189fb0840f..8bb18f9c1e6 100644 --- a/.github/workflows/architecture-guardian.lock.yml +++ b/.github/workflows/architecture-guardian.lock.yml @@ -564,9 +564,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1526,9 +1527,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1718,9 +1720,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/artifacts-summary.lock.yml b/.github/workflows/artifacts-summary.lock.yml index f59c11008e6..45c6aad407f 100644 --- a/.github/workflows/artifacts-summary.lock.yml +++ b/.github/workflows/artifacts-summary.lock.yml @@ -504,9 +504,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1427,9 +1428,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1613,9 +1615,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/auto-triage-issues.lock.yml b/.github/workflows/auto-triage-issues.lock.yml index b598d06302e..db0b8139bb0 100644 --- a/.github/workflows/auto-triage-issues.lock.yml +++ b/.github/workflows/auto-triage-issues.lock.yml @@ -1472,9 +1472,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/bot-detection.lock.yml b/.github/workflows/bot-detection.lock.yml index f30e92603af..0da5698b52d 100644 --- a/.github/workflows/bot-detection.lock.yml +++ b/.github/workflows/bot-detection.lock.yml @@ -525,9 +525,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1448,9 +1449,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/breaking-change-checker.lock.yml b/.github/workflows/breaking-change-checker.lock.yml index cfb10b78fac..031c4d2e36c 100644 --- a/.github/workflows/breaking-change-checker.lock.yml +++ b/.github/workflows/breaking-change-checker.lock.yml @@ -555,9 +555,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1521,9 +1522,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1713,9 +1715,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/chaos-pr-bundle-fuzzer.lock.yml b/.github/workflows/chaos-pr-bundle-fuzzer.lock.yml index 7399eab2cbe..a9f1f7bcb66 100644 --- a/.github/workflows/chaos-pr-bundle-fuzzer.lock.yml +++ b/.github/workflows/chaos-pr-bundle-fuzzer.lock.yml @@ -1433,9 +1433,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/ci-coach.lock.yml b/.github/workflows/ci-coach.lock.yml index 27010847095..5aa95e4590d 100644 --- a/.github/workflows/ci-coach.lock.yml +++ b/.github/workflows/ci-coach.lock.yml @@ -608,9 +608,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1578,9 +1579,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1770,9 +1772,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/cli-consistency-checker.lock.yml b/.github/workflows/cli-consistency-checker.lock.yml index 31c04ce2af8..e392bcc7369 100644 --- a/.github/workflows/cli-consistency-checker.lock.yml +++ b/.github/workflows/cli-consistency-checker.lock.yml @@ -507,9 +507,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1439,9 +1440,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1625,9 +1627,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/code-scanning-fixer.lock.yml b/.github/workflows/code-scanning-fixer.lock.yml index 9ba9d37a703..754417bf21a 100644 --- a/.github/workflows/code-scanning-fixer.lock.yml +++ b/.github/workflows/code-scanning-fixer.lock.yml @@ -543,9 +543,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1519,9 +1520,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1705,9 +1707,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/code-simplifier.lock.yml b/.github/workflows/code-simplifier.lock.yml index 44da75e1f20..a9c889a863d 100644 --- a/.github/workflows/code-simplifier.lock.yml +++ b/.github/workflows/code-simplifier.lock.yml @@ -537,9 +537,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1476,9 +1477,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1688,9 +1690,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/commit-changes-analyzer.lock.yml b/.github/workflows/commit-changes-analyzer.lock.yml index 34cce24a842..71afb8f1122 100644 --- a/.github/workflows/commit-changes-analyzer.lock.yml +++ b/.github/workflows/commit-changes-analyzer.lock.yml @@ -1388,9 +1388,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/constraint-solving-potd.lock.yml b/.github/workflows/constraint-solving-potd.lock.yml index 4acbcc1bc83..bf740f8d6ae 100644 --- a/.github/workflows/constraint-solving-potd.lock.yml +++ b/.github/workflows/constraint-solving-potd.lock.yml @@ -512,9 +512,10 @@ jobs: GITHUB_TOKEN: ${{ github.token }} run: bash "${RUNNER_TEMP}/gh-aw/actions/configure_git_credentials.sh" - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1449,9 +1450,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1633,9 +1635,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/contribution-check.lock.yml b/.github/workflows/contribution-check.lock.yml index a31cd067b98..0b9adf0d6c8 100644 --- a/.github/workflows/contribution-check.lock.yml +++ b/.github/workflows/contribution-check.lock.yml @@ -600,9 +600,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1581,9 +1582,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1765,9 +1767,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/copilot-centralization-drilldown.lock.yml b/.github/workflows/copilot-centralization-drilldown.lock.yml index e3fdee49137..f3b1174c94f 100644 --- a/.github/workflows/copilot-centralization-drilldown.lock.yml +++ b/.github/workflows/copilot-centralization-drilldown.lock.yml @@ -499,9 +499,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1412,9 +1413,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1626,9 +1628,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/copilot-centralization-optimizer.lock.yml b/.github/workflows/copilot-centralization-optimizer.lock.yml index ec56c649e5a..134dab63400 100644 --- a/.github/workflows/copilot-centralization-optimizer.lock.yml +++ b/.github/workflows/copilot-centralization-optimizer.lock.yml @@ -528,9 +528,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1462,9 +1463,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1676,9 +1678,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/copilot-cli-deep-research.lock.yml b/.github/workflows/copilot-cli-deep-research.lock.yml index 898d47df3af..714341c7565 100644 --- a/.github/workflows/copilot-cli-deep-research.lock.yml +++ b/.github/workflows/copilot-cli-deep-research.lock.yml @@ -531,9 +531,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1481,9 +1482,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1667,9 +1669,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/copilot-opt.lock.yml b/.github/workflows/copilot-opt.lock.yml index 585f1300137..f9351364361 100644 --- a/.github/workflows/copilot-opt.lock.yml +++ b/.github/workflows/copilot-opt.lock.yml @@ -560,9 +560,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1545,9 +1546,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1729,9 +1731,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/copilot-pr-merged-report.lock.yml b/.github/workflows/copilot-pr-merged-report.lock.yml index 69c1eb91c40..261521026a1 100644 --- a/.github/workflows/copilot-pr-merged-report.lock.yml +++ b/.github/workflows/copilot-pr-merged-report.lock.yml @@ -500,9 +500,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1405,9 +1406,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1591,9 +1593,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/copilot-pr-nlp-analysis.lock.yml b/.github/workflows/copilot-pr-nlp-analysis.lock.yml index 35107f04154..e78af299843 100644 --- a/.github/workflows/copilot-pr-nlp-analysis.lock.yml +++ b/.github/workflows/copilot-pr-nlp-analysis.lock.yml @@ -601,9 +601,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1595,9 +1596,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1781,9 +1783,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/copilot-pr-prompt-analysis.lock.yml b/.github/workflows/copilot-pr-prompt-analysis.lock.yml index cb5055621e8..96568e02114 100644 --- a/.github/workflows/copilot-pr-prompt-analysis.lock.yml +++ b/.github/workflows/copilot-pr-prompt-analysis.lock.yml @@ -569,9 +569,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1534,9 +1535,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1720,9 +1722,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/craft.lock.yml b/.github/workflows/craft.lock.yml index 94bc2b8cd0a..557cef462b6 100644 --- a/.github/workflows/craft.lock.yml +++ b/.github/workflows/craft.lock.yml @@ -575,9 +575,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1535,9 +1536,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1721,9 +1723,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml b/.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml index f390619a24d..76a7affc6e5 100644 --- a/.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml +++ b/.github/workflows/daily-agent-of-the-day-blog-writer.lock.yml @@ -578,9 +578,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1672,9 +1673,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1856,9 +1858,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-ambient-context-optimizer.lock.yml b/.github/workflows/daily-ambient-context-optimizer.lock.yml index f4d0a7c2de1..2b09aa11d27 100644 --- a/.github/workflows/daily-ambient-context-optimizer.lock.yml +++ b/.github/workflows/daily-ambient-context-optimizer.lock.yml @@ -559,9 +559,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1545,9 +1546,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1729,9 +1731,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-architecture-diagram.lock.yml b/.github/workflows/daily-architecture-diagram.lock.yml index f64fdc79873..054f91d5783 100644 --- a/.github/workflows/daily-architecture-diagram.lock.yml +++ b/.github/workflows/daily-architecture-diagram.lock.yml @@ -572,9 +572,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1607,9 +1608,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1799,9 +1801,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-assign-issue-to-user.lock.yml b/.github/workflows/daily-assign-issue-to-user.lock.yml index a87a9b0701c..9e49605866d 100644 --- a/.github/workflows/daily-assign-issue-to-user.lock.yml +++ b/.github/workflows/daily-assign-issue-to-user.lock.yml @@ -499,9 +499,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1455,9 +1456,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1641,9 +1643,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml b/.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml index d907930db78..5bca72922de 100644 --- a/.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml +++ b/.github/workflows/daily-awf-spec-compiler-surfacing.lock.yml @@ -1425,9 +1425,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-byok-ollama-test.lock.yml b/.github/workflows/daily-byok-ollama-test.lock.yml index ba305725780..e556e25765d 100644 --- a/.github/workflows/daily-byok-ollama-test.lock.yml +++ b/.github/workflows/daily-byok-ollama-test.lock.yml @@ -534,9 +534,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1429,9 +1430,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-cli-performance.lock.yml b/.github/workflows/daily-cli-performance.lock.yml index d1175fb9e09..32705772efd 100644 --- a/.github/workflows/daily-cli-performance.lock.yml +++ b/.github/workflows/daily-cli-performance.lock.yml @@ -568,9 +568,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1733,9 +1734,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1919,9 +1921,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-cli-tools-tester.lock.yml b/.github/workflows/daily-cli-tools-tester.lock.yml index cb5423b96a5..cbc0cd1dcba 100644 --- a/.github/workflows/daily-cli-tools-tester.lock.yml +++ b/.github/workflows/daily-cli-tools-tester.lock.yml @@ -544,9 +544,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1551,9 +1552,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1735,9 +1737,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-community-attribution.lock.yml b/.github/workflows/daily-community-attribution.lock.yml index 54d2b8d3895..87a056ae433 100644 --- a/.github/workflows/daily-community-attribution.lock.yml +++ b/.github/workflows/daily-community-attribution.lock.yml @@ -599,9 +599,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1629,9 +1630,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1819,9 +1821,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-compiler-quality.lock.yml b/.github/workflows/daily-compiler-quality.lock.yml index ab588b03107..d6122a7a7a0 100644 --- a/.github/workflows/daily-compiler-quality.lock.yml +++ b/.github/workflows/daily-compiler-quality.lock.yml @@ -581,9 +581,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1604,9 +1605,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1796,9 +1798,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml b/.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml index 3ef3e67f9ea..9abd5c2559b 100644 --- a/.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml +++ b/.github/workflows/daily-compiler-threat-spec-optimizer.lock.yml @@ -514,9 +514,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1519,9 +1520,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1703,9 +1705,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-credit-limit-test.lock.yml b/.github/workflows/daily-credit-limit-test.lock.yml index 8dc13b21fb6..69f056c41ed 100644 --- a/.github/workflows/daily-credit-limit-test.lock.yml +++ b/.github/workflows/daily-credit-limit-test.lock.yml @@ -481,9 +481,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1378,9 +1379,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-doc-updater.lock.yml b/.github/workflows/daily-doc-updater.lock.yml index a57b62696a8..a6a1035ff26 100644 --- a/.github/workflows/daily-doc-updater.lock.yml +++ b/.github/workflows/daily-doc-updater.lock.yml @@ -1514,9 +1514,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-experiment-report.lock.yml b/.github/workflows/daily-experiment-report.lock.yml index fee389ea6c0..54d4fd74e65 100644 --- a/.github/workflows/daily-experiment-report.lock.yml +++ b/.github/workflows/daily-experiment-report.lock.yml @@ -560,9 +560,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1579,9 +1580,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1765,9 +1767,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-file-diet.lock.yml b/.github/workflows/daily-file-diet.lock.yml index 5f05cd864cf..67faeb073ca 100644 --- a/.github/workflows/daily-file-diet.lock.yml +++ b/.github/workflows/daily-file-diet.lock.yml @@ -525,9 +525,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1514,9 +1515,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1700,9 +1702,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-firewall-report.lock.yml b/.github/workflows/daily-firewall-report.lock.yml index 3c97a0185d6..a8ba11f07d3 100644 --- a/.github/workflows/daily-firewall-report.lock.yml +++ b/.github/workflows/daily-firewall-report.lock.yml @@ -543,9 +543,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1519,9 +1520,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1731,9 +1733,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-formal-spec-verifier.lock.yml b/.github/workflows/daily-formal-spec-verifier.lock.yml index 95c41fdc46a..318ec3282a9 100644 --- a/.github/workflows/daily-formal-spec-verifier.lock.yml +++ b/.github/workflows/daily-formal-spec-verifier.lock.yml @@ -560,9 +560,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1553,9 +1554,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-function-namer.lock.yml b/.github/workflows/daily-function-namer.lock.yml index 824e68f17ac..38f8c4409da 100644 --- a/.github/workflows/daily-function-namer.lock.yml +++ b/.github/workflows/daily-function-namer.lock.yml @@ -1512,9 +1512,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-geo-optimizer.lock.yml b/.github/workflows/daily-geo-optimizer.lock.yml index b87bb251686..1115990ab2a 100644 --- a/.github/workflows/daily-geo-optimizer.lock.yml +++ b/.github/workflows/daily-geo-optimizer.lock.yml @@ -521,9 +521,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1508,9 +1509,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1694,9 +1696,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-github-docs-seo-optimizer.lock.yml b/.github/workflows/daily-github-docs-seo-optimizer.lock.yml index e19786a2a88..6ad792b063e 100644 --- a/.github/workflows/daily-github-docs-seo-optimizer.lock.yml +++ b/.github/workflows/daily-github-docs-seo-optimizer.lock.yml @@ -436,9 +436,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1304,9 +1305,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-go-test-parallelizer.lock.yml b/.github/workflows/daily-go-test-parallelizer.lock.yml index bbbe9a6c28e..2214259a713 100644 --- a/.github/workflows/daily-go-test-parallelizer.lock.yml +++ b/.github/workflows/daily-go-test-parallelizer.lock.yml @@ -517,9 +517,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1459,9 +1460,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-hippo-learn.lock.yml b/.github/workflows/daily-hippo-learn.lock.yml index bc0ccfaf39d..c600c685276 100644 --- a/.github/workflows/daily-hippo-learn.lock.yml +++ b/.github/workflows/daily-hippo-learn.lock.yml @@ -1606,9 +1606,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-issues-report.lock.yml b/.github/workflows/daily-issues-report.lock.yml index f5bcece16d9..b8999623c55 100644 --- a/.github/workflows/daily-issues-report.lock.yml +++ b/.github/workflows/daily-issues-report.lock.yml @@ -770,9 +770,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1772,9 +1773,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1962,9 +1964,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-malicious-code-scan.lock.yml b/.github/workflows/daily-malicious-code-scan.lock.yml index a52f6825082..386fc4edfe9 100644 --- a/.github/workflows/daily-malicious-code-scan.lock.yml +++ b/.github/workflows/daily-malicious-code-scan.lock.yml @@ -507,9 +507,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1417,9 +1418,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-max-ai-credits-test.lock.yml b/.github/workflows/daily-max-ai-credits-test.lock.yml index 9bf32ee15e7..1a039fc18eb 100644 --- a/.github/workflows/daily-max-ai-credits-test.lock.yml +++ b/.github/workflows/daily-max-ai-credits-test.lock.yml @@ -424,9 +424,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1276,9 +1277,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-mcp-concurrency-analysis.lock.yml b/.github/workflows/daily-mcp-concurrency-analysis.lock.yml index 7525bc08fed..b6d5b04d46a 100644 --- a/.github/workflows/daily-mcp-concurrency-analysis.lock.yml +++ b/.github/workflows/daily-mcp-concurrency-analysis.lock.yml @@ -539,9 +539,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1602,9 +1603,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1788,9 +1790,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-model-inventory.lock.yml b/.github/workflows/daily-model-inventory.lock.yml index ec324e95161..141e5d5bd68 100644 --- a/.github/workflows/daily-model-inventory.lock.yml +++ b/.github/workflows/daily-model-inventory.lock.yml @@ -532,9 +532,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1783,9 +1784,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1969,9 +1971,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-model-resolution.lock.yml b/.github/workflows/daily-model-resolution.lock.yml index d4d945f9d2e..40eaba519ad 100644 --- a/.github/workflows/daily-model-resolution.lock.yml +++ b/.github/workflows/daily-model-resolution.lock.yml @@ -542,9 +542,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1518,9 +1519,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-multi-device-docs-tester.lock.yml b/.github/workflows/daily-multi-device-docs-tester.lock.yml index 9758b16b581..6fe341dd7d0 100644 --- a/.github/workflows/daily-multi-device-docs-tester.lock.yml +++ b/.github/workflows/daily-multi-device-docs-tester.lock.yml @@ -1491,9 +1491,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-news.lock.yml b/.github/workflows/daily-news.lock.yml index 4accaba7a47..9f225261253 100644 --- a/.github/workflows/daily-news.lock.yml +++ b/.github/workflows/daily-news.lock.yml @@ -1693,9 +1693,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-performance-summary.lock.yml b/.github/workflows/daily-performance-summary.lock.yml index cdd196ccedd..df07ba3c00d 100644 --- a/.github/workflows/daily-performance-summary.lock.yml +++ b/.github/workflows/daily-performance-summary.lock.yml @@ -563,9 +563,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -2058,9 +2059,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -2242,9 +2244,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-regulatory.lock.yml b/.github/workflows/daily-regulatory.lock.yml index e3bbea67985..d69b9c14715 100644 --- a/.github/workflows/daily-regulatory.lock.yml +++ b/.github/workflows/daily-regulatory.lock.yml @@ -513,9 +513,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1954,9 +1955,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -2166,9 +2168,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-repo-chronicle.lock.yml b/.github/workflows/daily-repo-chronicle.lock.yml index e5aaae17972..cd8ec632e1b 100644 --- a/.github/workflows/daily-repo-chronicle.lock.yml +++ b/.github/workflows/daily-repo-chronicle.lock.yml @@ -557,9 +557,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1536,9 +1537,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1722,9 +1724,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-safe-output-integrator.lock.yml b/.github/workflows/daily-safe-output-integrator.lock.yml index 07bac4f033c..cb8b2af737f 100644 --- a/.github/workflows/daily-safe-output-integrator.lock.yml +++ b/.github/workflows/daily-safe-output-integrator.lock.yml @@ -509,9 +509,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1485,9 +1486,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1699,9 +1701,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-secrets-analysis.lock.yml b/.github/workflows/daily-secrets-analysis.lock.yml index d04e8759f18..cc6959e01b3 100644 --- a/.github/workflows/daily-secrets-analysis.lock.yml +++ b/.github/workflows/daily-secrets-analysis.lock.yml @@ -506,9 +506,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1437,9 +1438,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1651,9 +1653,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-security-observability.lock.yml b/.github/workflows/daily-security-observability.lock.yml index 62d353ac7cd..0ab59c39cd7 100644 --- a/.github/workflows/daily-security-observability.lock.yml +++ b/.github/workflows/daily-security-observability.lock.yml @@ -630,9 +630,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1665,9 +1666,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1877,9 +1879,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-semgrep-scan.lock.yml b/.github/workflows/daily-semgrep-scan.lock.yml index e54504cce26..5d57db4487e 100644 --- a/.github/workflows/daily-semgrep-scan.lock.yml +++ b/.github/workflows/daily-semgrep-scan.lock.yml @@ -545,9 +545,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1511,9 +1512,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1731,9 +1733,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-sentrux-report.lock.yml b/.github/workflows/daily-sentrux-report.lock.yml index 499d11a1bc6..c33a2cf7be6 100644 --- a/.github/workflows/daily-sentrux-report.lock.yml +++ b/.github/workflows/daily-sentrux-report.lock.yml @@ -542,9 +542,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1489,9 +1490,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1701,9 +1703,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-skill-optimizer.lock.yml b/.github/workflows/daily-skill-optimizer.lock.yml index d7d2955d240..932bf8beadf 100644 --- a/.github/workflows/daily-skill-optimizer.lock.yml +++ b/.github/workflows/daily-skill-optimizer.lock.yml @@ -513,9 +513,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1453,9 +1454,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1665,9 +1667,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-spdd-spec-planner.lock.yml b/.github/workflows/daily-spdd-spec-planner.lock.yml index 92eaeaf0f6b..588f4de0d5c 100644 --- a/.github/workflows/daily-spdd-spec-planner.lock.yml +++ b/.github/workflows/daily-spdd-spec-planner.lock.yml @@ -535,9 +535,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1512,9 +1513,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-spending-forecast.lock.yml b/.github/workflows/daily-spending-forecast.lock.yml index 036ee337061..307edf563e7 100644 --- a/.github/workflows/daily-spending-forecast.lock.yml +++ b/.github/workflows/daily-spending-forecast.lock.yml @@ -531,9 +531,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1494,9 +1495,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-squid-image-scan.lock.yml b/.github/workflows/daily-squid-image-scan.lock.yml index 7b0504b6dfc..869f56702c6 100644 --- a/.github/workflows/daily-squid-image-scan.lock.yml +++ b/.github/workflows/daily-squid-image-scan.lock.yml @@ -490,9 +490,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1412,9 +1413,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-syntax-error-quality.lock.yml b/.github/workflows/daily-syntax-error-quality.lock.yml index 8b1f540485b..24b8521f09b 100644 --- a/.github/workflows/daily-syntax-error-quality.lock.yml +++ b/.github/workflows/daily-syntax-error-quality.lock.yml @@ -515,9 +515,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1453,9 +1454,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1667,9 +1669,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/daily-team-status.lock.yml b/.github/workflows/daily-team-status.lock.yml index ba08033583b..b3ece00077e 100644 --- a/.github/workflows/daily-team-status.lock.yml +++ b/.github/workflows/daily-team-status.lock.yml @@ -491,9 +491,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1412,9 +1413,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-testify-uber-super-expert.lock.yml b/.github/workflows/daily-testify-uber-super-expert.lock.yml index d9eed7ea9fc..8143c145761 100644 --- a/.github/workflows/daily-testify-uber-super-expert.lock.yml +++ b/.github/workflows/daily-testify-uber-super-expert.lock.yml @@ -548,9 +548,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1555,9 +1556,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/daily-windows-terminal-integration-builder.lock.yml b/.github/workflows/daily-windows-terminal-integration-builder.lock.yml index 7699075d974..2a99e9b2f0d 100644 --- a/.github/workflows/daily-windows-terminal-integration-builder.lock.yml +++ b/.github/workflows/daily-windows-terminal-integration-builder.lock.yml @@ -484,9 +484,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1383,9 +1384,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/daily-workflow-updater.lock.yml b/.github/workflows/daily-workflow-updater.lock.yml index c1a9667f0e7..7058c5e4aae 100644 --- a/.github/workflows/daily-workflow-updater.lock.yml +++ b/.github/workflows/daily-workflow-updater.lock.yml @@ -503,9 +503,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1436,9 +1437,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/dataflow-pr-discussion-dataset.lock.yml b/.github/workflows/dataflow-pr-discussion-dataset.lock.yml index 03483d5cadf..866b06886a1 100644 --- a/.github/workflows/dataflow-pr-discussion-dataset.lock.yml +++ b/.github/workflows/dataflow-pr-discussion-dataset.lock.yml @@ -819,9 +819,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1843,9 +1844,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -2061,9 +2063,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/dead-code-remover.lock.yml b/.github/workflows/dead-code-remover.lock.yml index 3f39f5842e2..6feb17c533c 100644 --- a/.github/workflows/dead-code-remover.lock.yml +++ b/.github/workflows/dead-code-remover.lock.yml @@ -557,9 +557,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1507,9 +1508,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/delight.lock.yml b/.github/workflows/delight.lock.yml index 047caeab4af..ed1a8b0fba1 100644 --- a/.github/workflows/delight.lock.yml +++ b/.github/workflows/delight.lock.yml @@ -531,9 +531,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1557,9 +1558,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1771,9 +1773,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/dependabot-burner.lock.yml b/.github/workflows/dependabot-burner.lock.yml index 4fe3d34dffc..376bb01360f 100644 --- a/.github/workflows/dependabot-burner.lock.yml +++ b/.github/workflows/dependabot-burner.lock.yml @@ -596,9 +596,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1597,9 +1598,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/dependabot-go-checker.lock.yml b/.github/workflows/dependabot-go-checker.lock.yml index db185687c50..293407640fa 100644 --- a/.github/workflows/dependabot-go-checker.lock.yml +++ b/.github/workflows/dependabot-go-checker.lock.yml @@ -549,9 +549,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1533,9 +1534,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1751,9 +1753,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/deployment-incident-monitor.lock.yml b/.github/workflows/deployment-incident-monitor.lock.yml index 1a306441194..1b303969cd3 100644 --- a/.github/workflows/deployment-incident-monitor.lock.yml +++ b/.github/workflows/deployment-incident-monitor.lock.yml @@ -519,9 +519,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1453,9 +1454,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1665,9 +1667,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/designer-drift-audit.lock.yml b/.github/workflows/designer-drift-audit.lock.yml index c2c2c6dff94..375b2358231 100644 --- a/.github/workflows/designer-drift-audit.lock.yml +++ b/.github/workflows/designer-drift-audit.lock.yml @@ -490,9 +490,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1389,9 +1390,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/dev-hawk.lock.yml b/.github/workflows/dev-hawk.lock.yml index db95f658939..49de337ae59 100644 --- a/.github/workflows/dev-hawk.lock.yml +++ b/.github/workflows/dev-hawk.lock.yml @@ -570,9 +570,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1562,9 +1563,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1776,9 +1778,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/dictation-prompt.lock.yml b/.github/workflows/dictation-prompt.lock.yml index 01d8d663a97..b7a4b21ed4b 100644 --- a/.github/workflows/dictation-prompt.lock.yml +++ b/.github/workflows/dictation-prompt.lock.yml @@ -505,9 +505,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1433,9 +1434,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/discussion-task-miner.lock.yml b/.github/workflows/discussion-task-miner.lock.yml index 10f8b1a5cbb..618931adba5 100644 --- a/.github/workflows/discussion-task-miner.lock.yml +++ b/.github/workflows/discussion-task-miner.lock.yml @@ -531,9 +531,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1547,9 +1548,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1761,9 +1763,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/docs-noob-tester.lock.yml b/.github/workflows/docs-noob-tester.lock.yml index 3bd983fa12f..8d088ad16f6 100644 --- a/.github/workflows/docs-noob-tester.lock.yml +++ b/.github/workflows/docs-noob-tester.lock.yml @@ -518,9 +518,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1490,9 +1491,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1676,9 +1678,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/draft-pr-cleanup.lock.yml b/.github/workflows/draft-pr-cleanup.lock.yml index 8cac651b810..e1c7abb8590 100644 --- a/.github/workflows/draft-pr-cleanup.lock.yml +++ b/.github/workflows/draft-pr-cleanup.lock.yml @@ -500,9 +500,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1475,9 +1476,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1689,9 +1691,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/eslint-miner.lock.yml b/.github/workflows/eslint-miner.lock.yml index bdb806d0ce8..7b6d9ccbe0d 100644 --- a/.github/workflows/eslint-miner.lock.yml +++ b/.github/workflows/eslint-miner.lock.yml @@ -513,9 +513,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1457,9 +1458,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/eslint-monster.lock.yml b/.github/workflows/eslint-monster.lock.yml index 556af1369e4..62ce0ec050b 100644 --- a/.github/workflows/eslint-monster.lock.yml +++ b/.github/workflows/eslint-monster.lock.yml @@ -1559,9 +1559,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/evoskill-evolver.lock.yml b/.github/workflows/evoskill-evolver.lock.yml index b966152d2e3..cef4a06a08c 100644 --- a/.github/workflows/evoskill-evolver.lock.yml +++ b/.github/workflows/evoskill-evolver.lock.yml @@ -508,9 +508,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1484,9 +1485,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1698,9 +1700,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/example-failure-category-filter.lock.yml b/.github/workflows/example-failure-category-filter.lock.yml index 5b55643b760..3a0140e714f 100644 --- a/.github/workflows/example-failure-category-filter.lock.yml +++ b/.github/workflows/example-failure-category-filter.lock.yml @@ -473,9 +473,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1373,9 +1374,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/example-permissions-warning.lock.yml b/.github/workflows/example-permissions-warning.lock.yml index c28fd9dc19b..5e462d1644f 100644 --- a/.github/workflows/example-permissions-warning.lock.yml +++ b/.github/workflows/example-permissions-warning.lock.yml @@ -505,9 +505,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server diff --git a/.github/workflows/firewall-escape.lock.yml b/.github/workflows/firewall-escape.lock.yml index 0103860af2b..e42c463cc10 100644 --- a/.github/workflows/firewall-escape.lock.yml +++ b/.github/workflows/firewall-escape.lock.yml @@ -576,9 +576,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1538,9 +1539,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/firewall.lock.yml b/.github/workflows/firewall.lock.yml index 2d4512e37c4..2edc62c0913 100644 --- a/.github/workflows/firewall.lock.yml +++ b/.github/workflows/firewall.lock.yml @@ -502,9 +502,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/functional-pragmatist.lock.yml b/.github/workflows/functional-pragmatist.lock.yml index 1ecc3ffaf1b..986be9758cd 100644 --- a/.github/workflows/functional-pragmatist.lock.yml +++ b/.github/workflows/functional-pragmatist.lock.yml @@ -511,9 +511,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1439,9 +1440,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/github-remote-mcp-auth-test.lock.yml b/.github/workflows/github-remote-mcp-auth-test.lock.yml index 9f018430045..b79c66e3805 100644 --- a/.github/workflows/github-remote-mcp-auth-test.lock.yml +++ b/.github/workflows/github-remote-mcp-auth-test.lock.yml @@ -512,9 +512,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1427,9 +1428,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | diff --git a/.github/workflows/glossary-maintainer.lock.yml b/.github/workflows/glossary-maintainer.lock.yml index de967134122..12e2c1ddf25 100644 --- a/.github/workflows/glossary-maintainer.lock.yml +++ b/.github/workflows/glossary-maintainer.lock.yml @@ -598,9 +598,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1605,9 +1606,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1817,9 +1819,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/gpclean.lock.yml b/.github/workflows/gpclean.lock.yml index 7cdd639a9f6..9d970be23e5 100644 --- a/.github/workflows/gpclean.lock.yml +++ b/.github/workflows/gpclean.lock.yml @@ -581,9 +581,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1538,9 +1539,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1756,9 +1758,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/impeccable-skills-reviewer.lock.yml b/.github/workflows/impeccable-skills-reviewer.lock.yml index 671ada4e944..7ce5d998327 100644 --- a/.github/workflows/impeccable-skills-reviewer.lock.yml +++ b/.github/workflows/impeccable-skills-reviewer.lock.yml @@ -554,9 +554,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1547,9 +1548,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/issue-monster.lock.yml b/.github/workflows/issue-monster.lock.yml index 0c41588a6fc..60850c7b22f 100644 --- a/.github/workflows/issue-monster.lock.yml +++ b/.github/workflows/issue-monster.lock.yml @@ -1836,9 +1836,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/issue-triage-agent.lock.yml b/.github/workflows/issue-triage-agent.lock.yml index 8178d007069..866a397df2a 100644 --- a/.github/workflows/issue-triage-agent.lock.yml +++ b/.github/workflows/issue-triage-agent.lock.yml @@ -491,9 +491,10 @@ jobs: GITHUB_TOKEN: ${{ github.token }} run: bash "${RUNNER_TEMP}/gh-aw/actions/configure_git_credentials.sh" - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1610,9 +1611,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1822,9 +1824,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/jsweep.lock.yml b/.github/workflows/jsweep.lock.yml index 83c77d213c5..384f50ef2c1 100644 --- a/.github/workflows/jsweep.lock.yml +++ b/.github/workflows/jsweep.lock.yml @@ -543,9 +543,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1504,9 +1505,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/layout-spec-maintainer.lock.yml b/.github/workflows/layout-spec-maintainer.lock.yml index ab86a8cac06..630c9409633 100644 --- a/.github/workflows/layout-spec-maintainer.lock.yml +++ b/.github/workflows/layout-spec-maintainer.lock.yml @@ -518,9 +518,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1489,9 +1490,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/lint-monster.lock.yml b/.github/workflows/lint-monster.lock.yml index dc591ecb123..9478b886d3b 100644 --- a/.github/workflows/lint-monster.lock.yml +++ b/.github/workflows/lint-monster.lock.yml @@ -1554,9 +1554,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/linter-miner.lock.yml b/.github/workflows/linter-miner.lock.yml index cf2432c327d..ae1338c139a 100644 --- a/.github/workflows/linter-miner.lock.yml +++ b/.github/workflows/linter-miner.lock.yml @@ -543,9 +543,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1531,9 +1532,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/mattpocock-skills-reviewer.lock.yml b/.github/workflows/mattpocock-skills-reviewer.lock.yml index d87d1f8b1de..426ac0b479d 100644 --- a/.github/workflows/mattpocock-skills-reviewer.lock.yml +++ b/.github/workflows/mattpocock-skills-reviewer.lock.yml @@ -702,9 +702,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1719,9 +1720,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/mcp-inspector.lock.yml b/.github/workflows/mcp-inspector.lock.yml index f9a313b0027..09d60eb43f8 100644 --- a/.github/workflows/mcp-inspector.lock.yml +++ b/.github/workflows/mcp-inspector.lock.yml @@ -639,9 +639,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1993,9 +1994,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/mergefest.lock.yml b/.github/workflows/mergefest.lock.yml index efb5b15ea79..cc2bd2bd1cc 100644 --- a/.github/workflows/mergefest.lock.yml +++ b/.github/workflows/mergefest.lock.yml @@ -572,9 +572,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1539,9 +1540,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/metrics-collector.lock.yml b/.github/workflows/metrics-collector.lock.yml index 85eebf05ace..6853b36f834 100644 --- a/.github/workflows/metrics-collector.lock.yml +++ b/.github/workflows/metrics-collector.lock.yml @@ -569,9 +569,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1563,9 +1564,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/notion-issue-summary.lock.yml b/.github/workflows/notion-issue-summary.lock.yml index d186acdc2db..472d2125152 100644 --- a/.github/workflows/notion-issue-summary.lock.yml +++ b/.github/workflows/notion-issue-summary.lock.yml @@ -510,9 +510,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1428,9 +1429,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/objective-impact-report.lock.yml b/.github/workflows/objective-impact-report.lock.yml index 26c4a74fb61..4384e9d0b47 100644 --- a/.github/workflows/objective-impact-report.lock.yml +++ b/.github/workflows/objective-impact-report.lock.yml @@ -489,9 +489,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1476,9 +1477,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/org-health-report.lock.yml b/.github/workflows/org-health-report.lock.yml index e3fae88b013..3082a62c7f5 100644 --- a/.github/workflows/org-health-report.lock.yml +++ b/.github/workflows/org-health-report.lock.yml @@ -561,9 +561,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1548,9 +1549,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/outcome-collector.lock.yml b/.github/workflows/outcome-collector.lock.yml index 23546ed356f..2f5ef957ef7 100644 --- a/.github/workflows/outcome-collector.lock.yml +++ b/.github/workflows/outcome-collector.lock.yml @@ -531,9 +531,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1488,9 +1489,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/pdf-summary.lock.yml b/.github/workflows/pdf-summary.lock.yml index 5ad1a35a043..c3b716388c7 100644 --- a/.github/workflows/pdf-summary.lock.yml +++ b/.github/workflows/pdf-summary.lock.yml @@ -614,9 +614,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1613,9 +1614,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/plan.lock.yml b/.github/workflows/plan.lock.yml index e45509ec1bf..a2ac9804236 100644 --- a/.github/workflows/plan.lock.yml +++ b/.github/workflows/plan.lock.yml @@ -611,9 +611,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1612,9 +1613,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1830,9 +1832,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/poem-bot.lock.yml b/.github/workflows/poem-bot.lock.yml index 229935b5c6b..3116a70fe1e 100644 --- a/.github/workflows/poem-bot.lock.yml +++ b/.github/workflows/poem-bot.lock.yml @@ -1828,9 +1828,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/pr-code-quality-reviewer.lock.yml b/.github/workflows/pr-code-quality-reviewer.lock.yml index b8765dbe8d6..0bb08ac0a3f 100644 --- a/.github/workflows/pr-code-quality-reviewer.lock.yml +++ b/.github/workflows/pr-code-quality-reviewer.lock.yml @@ -611,9 +611,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1637,9 +1638,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1851,9 +1853,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/pr-description-caveman.lock.yml b/.github/workflows/pr-description-caveman.lock.yml index 04d4357abeb..4cc134348ea 100644 --- a/.github/workflows/pr-description-caveman.lock.yml +++ b/.github/workflows/pr-description-caveman.lock.yml @@ -519,9 +519,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1445,9 +1446,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/pr-nitpick-reviewer.lock.yml b/.github/workflows/pr-nitpick-reviewer.lock.yml index 508f54b68e7..145bb8763bc 100644 --- a/.github/workflows/pr-nitpick-reviewer.lock.yml +++ b/.github/workflows/pr-nitpick-reviewer.lock.yml @@ -573,9 +573,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1590,9 +1591,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/pr-sous-chef.lock.yml b/.github/workflows/pr-sous-chef.lock.yml index c369e03b9db..14e50587181 100644 --- a/.github/workflows/pr-sous-chef.lock.yml +++ b/.github/workflows/pr-sous-chef.lock.yml @@ -1885,9 +1885,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/pr-triage-agent.lock.yml b/.github/workflows/pr-triage-agent.lock.yml index cb4f3565b5a..7ece553ad42 100644 --- a/.github/workflows/pr-triage-agent.lock.yml +++ b/.github/workflows/pr-triage-agent.lock.yml @@ -538,9 +538,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1868,9 +1869,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -2080,9 +2082,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/python-data-charts.lock.yml b/.github/workflows/python-data-charts.lock.yml index 530cf37f2d5..15807768499 100644 --- a/.github/workflows/python-data-charts.lock.yml +++ b/.github/workflows/python-data-charts.lock.yml @@ -587,9 +587,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1615,9 +1616,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/q.lock.yml b/.github/workflows/q.lock.yml index 78b1d724ee9..5bc7cee2c17 100644 --- a/.github/workflows/q.lock.yml +++ b/.github/workflows/q.lock.yml @@ -633,9 +633,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1687,9 +1688,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/refactoring-cadence.lock.yml b/.github/workflows/refactoring-cadence.lock.yml index 98d62ffc1af..906d104f0c6 100644 --- a/.github/workflows/refactoring-cadence.lock.yml +++ b/.github/workflows/refactoring-cadence.lock.yml @@ -538,9 +538,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1481,9 +1482,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/refiner.lock.yml b/.github/workflows/refiner.lock.yml index 7c54f074765..3ce8fec8825 100644 --- a/.github/workflows/refiner.lock.yml +++ b/.github/workflows/refiner.lock.yml @@ -551,9 +551,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1587,9 +1588,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1799,9 +1801,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/release.lock.yml b/.github/workflows/release.lock.yml index c304ab3d38c..9c5b9022c01 100644 --- a/.github/workflows/release.lock.yml +++ b/.github/workflows/release.lock.yml @@ -540,9 +540,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1973,9 +1974,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/repo-audit-analyzer.lock.yml b/.github/workflows/repo-audit-analyzer.lock.yml index 2a86b32533c..abcef5d33d6 100644 --- a/.github/workflows/repo-audit-analyzer.lock.yml +++ b/.github/workflows/repo-audit-analyzer.lock.yml @@ -538,9 +538,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1483,9 +1484,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1695,9 +1697,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/repo-tree-map.lock.yml b/.github/workflows/repo-tree-map.lock.yml index cbdd42dd468..49e6661bb7a 100644 --- a/.github/workflows/repo-tree-map.lock.yml +++ b/.github/workflows/repo-tree-map.lock.yml @@ -505,9 +505,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1414,9 +1415,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/repository-quality-improver.lock.yml b/.github/workflows/repository-quality-improver.lock.yml index e893c7fe0d7..3f6bc8d9c8c 100644 --- a/.github/workflows/repository-quality-improver.lock.yml +++ b/.github/workflows/repository-quality-improver.lock.yml @@ -546,9 +546,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1477,9 +1478,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/research.lock.yml b/.github/workflows/research.lock.yml index 7b783535680..51b5dc5ad46 100644 --- a/.github/workflows/research.lock.yml +++ b/.github/workflows/research.lock.yml @@ -513,9 +513,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1458,9 +1459,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1670,9 +1672,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/schema-consistency-checker.lock.yml b/.github/workflows/schema-consistency-checker.lock.yml index 9128f8e28cf..544d99c94a9 100644 --- a/.github/workflows/schema-consistency-checker.lock.yml +++ b/.github/workflows/schema-consistency-checker.lock.yml @@ -1440,9 +1440,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/security-compliance.lock.yml b/.github/workflows/security-compliance.lock.yml index dcc8580677d..a3044a32d3d 100644 --- a/.github/workflows/security-compliance.lock.yml +++ b/.github/workflows/security-compliance.lock.yml @@ -546,9 +546,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1482,9 +1483,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/security-review.lock.yml b/.github/workflows/security-review.lock.yml index 8771317b7e5..97d47a500a4 100644 --- a/.github/workflows/security-review.lock.yml +++ b/.github/workflows/security-review.lock.yml @@ -603,9 +603,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1853,9 +1854,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -2067,9 +2069,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/sighthound-security-scan.lock.yml b/.github/workflows/sighthound-security-scan.lock.yml index cc435a185bb..9f4d234043e 100644 --- a/.github/workflows/sighthound-security-scan.lock.yml +++ b/.github/workflows/sighthound-security-scan.lock.yml @@ -493,9 +493,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1393,9 +1394,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/skillet.lock.yml b/.github/workflows/skillet.lock.yml index 20103d460bc..bcef1adddb0 100644 --- a/.github/workflows/skillet.lock.yml +++ b/.github/workflows/skillet.lock.yml @@ -586,9 +586,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1564,9 +1565,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/slide-deck-maintainer.lock.yml b/.github/workflows/slide-deck-maintainer.lock.yml index 8e06260a673..bd36555ec97 100644 --- a/.github/workflows/slide-deck-maintainer.lock.yml +++ b/.github/workflows/slide-deck-maintainer.lock.yml @@ -572,9 +572,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install Playwright CLI @@ -1576,9 +1577,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-aoai-apikey.lock.yml b/.github/workflows/smoke-copilot-aoai-apikey.lock.yml index b1a35d2be31..34161809cd6 100644 --- a/.github/workflows/smoke-copilot-aoai-apikey.lock.yml +++ b/.github/workflows/smoke-copilot-aoai-apikey.lock.yml @@ -729,9 +729,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install Playwright CLI @@ -2684,9 +2685,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -2904,9 +2906,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-aoai-entra.lock.yml b/.github/workflows/smoke-copilot-aoai-entra.lock.yml index b8dd6a5fa9c..f54c0258312 100644 --- a/.github/workflows/smoke-copilot-aoai-entra.lock.yml +++ b/.github/workflows/smoke-copilot-aoai-entra.lock.yml @@ -740,9 +740,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install Playwright CLI @@ -2706,9 +2707,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -2931,9 +2933,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-arm.lock.yml b/.github/workflows/smoke-copilot-arm.lock.yml index 8196f1a4fc1..2000a4b9a97 100644 --- a/.github/workflows/smoke-copilot-arm.lock.yml +++ b/.github/workflows/smoke-copilot-arm.lock.yml @@ -657,9 +657,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install Playwright CLI @@ -2483,9 +2484,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-auto.lock.yml b/.github/workflows/smoke-copilot-auto.lock.yml index 7e563379c26..8f688d91e58 100644 --- a/.github/workflows/smoke-copilot-auto.lock.yml +++ b/.github/workflows/smoke-copilot-auto.lock.yml @@ -529,9 +529,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1434,9 +1435,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-mai.lock.yml b/.github/workflows/smoke-copilot-mai.lock.yml index 417c3743a6d..2195f8d59c3 100644 --- a/.github/workflows/smoke-copilot-mai.lock.yml +++ b/.github/workflows/smoke-copilot-mai.lock.yml @@ -561,9 +561,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1506,9 +1507,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-sdk.lock.yml b/.github/workflows/smoke-copilot-sdk.lock.yml index b0dd20700b4..4b3d8be0018 100644 --- a/.github/workflows/smoke-copilot-sdk.lock.yml +++ b/.github/workflows/smoke-copilot-sdk.lock.yml @@ -558,9 +558,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1485,9 +1486,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-small.lock.yml b/.github/workflows/smoke-copilot-small.lock.yml index 101b5e92e8b..7b7c4a6b63b 100644 --- a/.github/workflows/smoke-copilot-small.lock.yml +++ b/.github/workflows/smoke-copilot-small.lock.yml @@ -558,9 +558,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1479,9 +1480,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-copilot-sub-agents.lock.yml b/.github/workflows/smoke-copilot-sub-agents.lock.yml index 0bebcd1a6dd..7c46b7fbc13 100644 --- a/.github/workflows/smoke-copilot-sub-agents.lock.yml +++ b/.github/workflows/smoke-copilot-sub-agents.lock.yml @@ -522,9 +522,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1445,9 +1446,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1665,9 +1667,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js) diff --git a/.github/workflows/smoke-copilot.lock.yml b/.github/workflows/smoke-copilot.lock.yml index 8e401e17eda..6f643140fd4 100644 --- a/.github/workflows/smoke-copilot.lock.yml +++ b/.github/workflows/smoke-copilot.lock.yml @@ -740,9 +740,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install TypeScript LSP dependencies @@ -2699,9 +2700,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -2917,9 +2919,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-create-cross-repo-pr.lock.yml b/.github/workflows/smoke-create-cross-repo-pr.lock.yml index 9546938f4f3..e1ee0623e10 100644 --- a/.github/workflows/smoke-create-cross-repo-pr.lock.yml +++ b/.github/workflows/smoke-create-cross-repo-pr.lock.yml @@ -602,9 +602,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1610,9 +1611,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-multi-pr.lock.yml b/.github/workflows/smoke-multi-pr.lock.yml index 7698ceff09e..6df156d99bf 100644 --- a/.github/workflows/smoke-multi-pr.lock.yml +++ b/.github/workflows/smoke-multi-pr.lock.yml @@ -568,9 +568,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1563,9 +1564,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-otel-backends.lock.yml b/.github/workflows/smoke-otel-backends.lock.yml index 2eaaf6e10f9..178784f1fa8 100644 --- a/.github/workflows/smoke-otel-backends.lock.yml +++ b/.github/workflows/smoke-otel-backends.lock.yml @@ -607,9 +607,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1666,9 +1667,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-pi.lock.yml b/.github/workflows/smoke-pi.lock.yml index fa51a0ad83a..1b6237f6372 100644 --- a/.github/workflows/smoke-pi.lock.yml +++ b/.github/workflows/smoke-pi.lock.yml @@ -1567,9 +1567,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-project.lock.yml b/.github/workflows/smoke-project.lock.yml index 31b2cfe80fc..04ee81d6f02 100644 --- a/.github/workflows/smoke-project.lock.yml +++ b/.github/workflows/smoke-project.lock.yml @@ -612,9 +612,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1826,9 +1827,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -2044,9 +2046,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-service-ports.lock.yml b/.github/workflows/smoke-service-ports.lock.yml index e5a91a26384..2c5935738bf 100644 --- a/.github/workflows/smoke-service-ports.lock.yml +++ b/.github/workflows/smoke-service-ports.lock.yml @@ -565,9 +565,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1557,9 +1558,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-temporary-id.lock.yml b/.github/workflows/smoke-temporary-id.lock.yml index 8a4702fc161..ee7d55a83a1 100644 --- a/.github/workflows/smoke-temporary-id.lock.yml +++ b/.github/workflows/smoke-temporary-id.lock.yml @@ -606,9 +606,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1675,9 +1676,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1893,9 +1895,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-test-tools.lock.yml b/.github/workflows/smoke-test-tools.lock.yml index e115316157b..7989be1a859 100644 --- a/.github/workflows/smoke-test-tools.lock.yml +++ b/.github/workflows/smoke-test-tools.lock.yml @@ -595,9 +595,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1587,9 +1588,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-update-cross-repo-pr.lock.yml b/.github/workflows/smoke-update-cross-repo-pr.lock.yml index d60042cbff1..9b257e93a6c 100644 --- a/.github/workflows/smoke-update-cross-repo-pr.lock.yml +++ b/.github/workflows/smoke-update-cross-repo-pr.lock.yml @@ -637,9 +637,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1644,9 +1645,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-workflow-call-with-inputs.lock.yml b/.github/workflows/smoke-workflow-call-with-inputs.lock.yml index d01b37d77ab..056104e7428 100644 --- a/.github/workflows/smoke-workflow-call-with-inputs.lock.yml +++ b/.github/workflows/smoke-workflow-call-with-inputs.lock.yml @@ -588,9 +588,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1524,9 +1525,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/smoke-workflow-call.lock.yml b/.github/workflows/smoke-workflow-call.lock.yml index 0a7f66cb5d9..72fed13187e 100644 --- a/.github/workflows/smoke-workflow-call.lock.yml +++ b/.github/workflows/smoke-workflow-call.lock.yml @@ -587,9 +587,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1513,9 +1514,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/spec-enforcer.lock.yml b/.github/workflows/spec-enforcer.lock.yml index c85d04d85fe..87cc27fdca0 100644 --- a/.github/workflows/spec-enforcer.lock.yml +++ b/.github/workflows/spec-enforcer.lock.yml @@ -1470,9 +1470,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/spec-extractor.lock.yml b/.github/workflows/spec-extractor.lock.yml index c5d38344e9d..aa6bc150024 100644 --- a/.github/workflows/spec-extractor.lock.yml +++ b/.github/workflows/spec-extractor.lock.yml @@ -542,9 +542,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1563,9 +1564,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/spec-librarian.lock.yml b/.github/workflows/spec-librarian.lock.yml index b5adede671c..057725d7585 100644 --- a/.github/workflows/spec-librarian.lock.yml +++ b/.github/workflows/spec-librarian.lock.yml @@ -524,9 +524,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1520,9 +1521,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/stale-pr-cleanup.lock.yml b/.github/workflows/stale-pr-cleanup.lock.yml index 9b9c354778c..55cafd962a3 100644 --- a/.github/workflows/stale-pr-cleanup.lock.yml +++ b/.github/workflows/stale-pr-cleanup.lock.yml @@ -501,9 +501,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1470,9 +1471,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1684,9 +1686,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/stale-repo-identifier.lock.yml b/.github/workflows/stale-repo-identifier.lock.yml index 7890a38cf89..f1f0f656584 100644 --- a/.github/workflows/stale-repo-identifier.lock.yml +++ b/.github/workflows/stale-repo-identifier.lock.yml @@ -639,9 +639,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1697,9 +1698,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1909,9 +1911,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/sub-issue-closer.lock.yml b/.github/workflows/sub-issue-closer.lock.yml index 20446850a75..b868815dbce 100644 --- a/.github/workflows/sub-issue-closer.lock.yml +++ b/.github/workflows/sub-issue-closer.lock.yml @@ -504,9 +504,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1470,9 +1471,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1682,9 +1684,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/super-linter.lock.yml b/.github/workflows/super-linter.lock.yml index dcdae8d44a5..81e0394e450 100644 --- a/.github/workflows/super-linter.lock.yml +++ b/.github/workflows/super-linter.lock.yml @@ -547,9 +547,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1486,9 +1487,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/technical-doc-writer.lock.yml b/.github/workflows/technical-doc-writer.lock.yml index 07e6b57bb13..60ca17fbe3e 100644 --- a/.github/workflows/technical-doc-writer.lock.yml +++ b/.github/workflows/technical-doc-writer.lock.yml @@ -593,9 +593,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1604,9 +1605,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1816,9 +1818,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/terminal-stylist.lock.yml b/.github/workflows/terminal-stylist.lock.yml index 1044c873ae1..fdbc342bfc9 100644 --- a/.github/workflows/terminal-stylist.lock.yml +++ b/.github/workflows/terminal-stylist.lock.yml @@ -515,9 +515,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1454,9 +1455,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/test-quality-sentinel.lock.yml b/.github/workflows/test-quality-sentinel.lock.yml index f074b16dd04..54db6f6854c 100644 --- a/.github/workflows/test-quality-sentinel.lock.yml +++ b/.github/workflows/test-quality-sentinel.lock.yml @@ -626,9 +626,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1615,9 +1616,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1808,9 +1810,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/tidy.lock.yml b/.github/workflows/tidy.lock.yml index 28c97b7d058..0c3b20abada 100644 --- a/.github/workflows/tidy.lock.yml +++ b/.github/workflows/tidy.lock.yml @@ -585,9 +585,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1589,9 +1590,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1801,9 +1803,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/ubuntu-image-analyzer.lock.yml b/.github/workflows/ubuntu-image-analyzer.lock.yml index 692388f3fea..4bdd21490ad 100644 --- a/.github/workflows/ubuntu-image-analyzer.lock.yml +++ b/.github/workflows/ubuntu-image-analyzer.lock.yml @@ -522,9 +522,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1479,9 +1480,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/uk-ai-operational-resilience.lock.yml b/.github/workflows/uk-ai-operational-resilience.lock.yml index d5cd9c091d2..c5a0b7dc55a 100644 --- a/.github/workflows/uk-ai-operational-resilience.lock.yml +++ b/.github/workflows/uk-ai-operational-resilience.lock.yml @@ -518,9 +518,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1497,9 +1498,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/unbloat-docs.lock.yml b/.github/workflows/unbloat-docs.lock.yml index 8391dec7eb4..ed13088156e 100644 --- a/.github/workflows/unbloat-docs.lock.yml +++ b/.github/workflows/unbloat-docs.lock.yml @@ -1576,9 +1576,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/update-astro.lock.yml b/.github/workflows/update-astro.lock.yml index 9682e6d44ab..167969e8026 100644 --- a/.github/workflows/update-astro.lock.yml +++ b/.github/workflows/update-astro.lock.yml @@ -527,9 +527,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1501,9 +1502,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/video-analyzer.lock.yml b/.github/workflows/video-analyzer.lock.yml index b3b00bfea63..81f4fb1d08a 100644 --- a/.github/workflows/video-analyzer.lock.yml +++ b/.github/workflows/video-analyzer.lock.yml @@ -518,9 +518,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1434,9 +1435,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/visual-regression-checker.lock.yml b/.github/workflows/visual-regression-checker.lock.yml index acfa7094797..7fd7c47a348 100644 --- a/.github/workflows/visual-regression-checker.lock.yml +++ b/.github/workflows/visual-regression-checker.lock.yml @@ -573,9 +573,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install Playwright CLI @@ -1509,9 +1510,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/weekly-blog-post-writer.lock.yml b/.github/workflows/weekly-blog-post-writer.lock.yml index deae2d8d3b4..c1d4051b72e 100644 --- a/.github/workflows/weekly-blog-post-writer.lock.yml +++ b/.github/workflows/weekly-blog-post-writer.lock.yml @@ -653,9 +653,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1688,9 +1689,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI @@ -1906,9 +1908,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/weekly-editors-health-check.lock.yml b/.github/workflows/weekly-editors-health-check.lock.yml index 68f55918525..d30c9ef57ca 100644 --- a/.github/workflows/weekly-editors-health-check.lock.yml +++ b/.github/workflows/weekly-editors-health-check.lock.yml @@ -512,9 +512,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install Playwright CLI @@ -1509,9 +1510,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/weekly-issue-summary.lock.yml b/.github/workflows/weekly-issue-summary.lock.yml index 8ebd8d064c5..3067a171284 100644 --- a/.github/workflows/weekly-issue-summary.lock.yml +++ b/.github/workflows/weekly-issue-summary.lock.yml @@ -546,9 +546,10 @@ jobs: GITHUB_TOKEN: ${{ github.token }} run: bash "${RUNNER_TEMP}/gh-aw/actions/configure_git_credentials.sh" - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1515,9 +1516,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/weekly-safe-outputs-spec-review.lock.yml b/.github/workflows/weekly-safe-outputs-spec-review.lock.yml index 43e40f7a2ee..d346e94fc61 100644 --- a/.github/workflows/weekly-safe-outputs-spec-review.lock.yml +++ b/.github/workflows/weekly-safe-outputs-spec-review.lock.yml @@ -509,9 +509,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1448,9 +1449,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/workflow-generator.lock.yml b/.github/workflows/workflow-generator.lock.yml index e37b743dd7f..1849e3f4a3f 100644 --- a/.github/workflows/workflow-generator.lock.yml +++ b/.github/workflows/workflow-generator.lock.yml @@ -544,9 +544,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1532,9 +1533,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/workflow-health-manager.lock.yml b/.github/workflows/workflow-health-manager.lock.yml index 1f248faf559..049b822a912 100644 --- a/.github/workflows/workflow-health-manager.lock.yml +++ b/.github/workflows/workflow-health-manager.lock.yml @@ -538,9 +538,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1552,9 +1553,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/workflow-normalizer.lock.yml b/.github/workflows/workflow-normalizer.lock.yml index f4aef11bf1d..7d4ef30f4ce 100644 --- a/.github/workflows/workflow-normalizer.lock.yml +++ b/.github/workflows/workflow-normalizer.lock.yml @@ -540,9 +540,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1512,9 +1513,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/.github/workflows/workflow-skill-extractor.lock.yml b/.github/workflows/workflow-skill-extractor.lock.yml index 9cf0ae9b5c9..f6d4de82b08 100644 --- a/.github/workflows/workflow-skill-extractor.lock.yml +++ b/.github/workflows/workflow-skill-extractor.lock.yml @@ -511,9 +511,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Determine automatic lockdown mode for GitHub MCP Server @@ -1480,9 +1481,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Execute GitHub Copilot CLI diff --git a/actions/setup/sh/install_copilot_cli.sh b/actions/setup/sh/install_copilot_cli.sh index 367f10fb2c6..5030375c421 100755 --- a/actions/setup/sh/install_copilot_cli.sh +++ b/actions/setup/sh/install_copilot_cli.sh @@ -29,7 +29,7 @@ COPILOT_DIR="${HOME}/.copilot" COPILOT_TOOLCACHE_MAX_DEPTH=4 COMPAT_URL="${COPILOT_COMPAT_URL:-https://raw.githubusercontent.com/github/gh-aw-actions/main/.github/aw/compat.json}" COMPILED_GH_AW_VERSION="${GH_AW_COMPILED_VERSION:-}" -USE_COPILOT_COMPAT_RANGE=false +DEFAULT_COPILOT_VERSION="${GH_AW_DEFAULT_COPILOT_VERSION:-}" SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)" REPO_ROOT="$(cd "${SCRIPT_DIR}/../../.." && pwd)" COMPAT_BUNDLED_PATH="${COPILOT_COMPAT_BUNDLED_PATH:-${REPO_ROOT}/.github/aw/compat.json}" @@ -43,7 +43,6 @@ ROOTLESS=false for arg in "$@"; do case "$arg" in --rootless) ROOTLESS=true ;; - --compat-range) USE_COPILOT_COMPAT_RANGE=true ;; --*) echo "WARNING: Unknown flag: $arg" >&2 ;; *) if [ -z "$VERSION" ]; then @@ -508,41 +507,41 @@ EOF TEMP_DIR=$(mktemp -d) trap 'rm -rf "$TEMP_DIR"' EXIT -# Resolve a compatible Copilot version from compat matrix unless the caller passed an explicit version. -if [ -z "$VERSION" ]; then - echo "No explicit Copilot CLI version requested. Attempting compat-driven version resolution..." - if RESOLVED_COMPAT_INFO="$(resolve_version_from_compat "$COMPILED_GH_AW_VERSION" "${TEMP_DIR}/compat.json")"; then - IFS='|' read -r RESOLVED_COMPAT_VERSION COMPAT_MATCHED_MIN_AGENT COMPAT_MATCHED_MAX_AGENT COMPAT_CACHE_TTL_DAYS <<< "$RESOLVED_COMPAT_INFO" - VERSION="$RESOLVED_COMPAT_VERSION" +select_copilot_version() { + local compat_file="$1" + local compat_resolved=false + local resolved_compat_info="" + + # Prefer an explicit engine.version. Without one, try a compatible cached version + # before downloading the compiler's pinned default. + if [ -n "$VERSION" ]; then + echo "Explicit Copilot CLI version argument provided (${VERSION}); exact toolcache match required." + return 0 + fi + + echo "No explicit Copilot CLI version requested. Attempting compat-driven toolcache resolution..." + if resolved_compat_info="$(resolve_version_from_compat "$COMPILED_GH_AW_VERSION" "$compat_file")"; then + IFS='|' read -r _UNUSED COMPAT_MATCHED_MIN_AGENT COMPAT_MATCHED_MAX_AGENT COMPAT_CACHE_TTL_DAYS <<< "$resolved_compat_info" REQUESTED_VERSION="latest" + compat_resolved=true echo "Using compat-resolved Copilot CLI window: ${COMPAT_MATCHED_MIN_AGENT}..${COMPAT_MATCHED_MAX_AGENT}" - echo "Will install compat max-agent ${VERSION} if no cached version satisfies the window." else - echo "ERROR: Failed to resolve Copilot CLI version from compatibility matrix." >&2 - echo "ERROR: Cannot install without a compatible version." >&2 - echo "To fix: Pass an explicit version as an argument (e.g., 'install_copilot_cli.sh 1.0.56')" >&2 - echo " or ensure GH_AW_COMPILED_VERSION matches a row in .github/aw/compat.json" >&2 - exit 1 + echo "Compatibility window unavailable; falling back to the default Copilot CLI version." >&2 fi -else - # The compiler opts its generated default pin into range matching explicitly. - # User-supplied engine.version pins require an exact toolcache match, including - # when their value happens to equal the compiler default. - if [ "$USE_COPILOT_COMPAT_RANGE" = "true" ]; then - echo "Explicit Copilot CLI version argument provided (${VERSION}); this is the compiler-generated default pin, resolving compat window for toolcache range matching..." - if RESOLVED_COMPAT_INFO="$(resolve_version_from_compat "$COMPILED_GH_AW_VERSION" "${TEMP_DIR}/compat.json")"; then - IFS='|' read -r _UNUSED COMPAT_MATCHED_MIN_AGENT COMPAT_MATCHED_MAX_AGENT COMPAT_CACHE_TTL_DAYS <<< "$RESOLVED_COMPAT_INFO" - # Treat as "latest" so find_cached_copilot_bin uses range matching and applies TTL - # (same path as when VERSION is not set). VERSION is still used for the download URL. - REQUESTED_VERSION="latest" - echo "Compat window resolved: ${COMPAT_MATCHED_MIN_AGENT}..${COMPAT_MATCHED_MAX_AGENT} (toolcache range matching enabled)" - else - echo "Compat window unavailable; exact toolcache match required for version ${VERSION}." >&2 - fi - else - echo "Explicit Copilot CLI version argument provided (${VERSION}); exact toolcache match required." + + VERSION="$DEFAULT_COPILOT_VERSION" + if [ -z "$VERSION" ]; then + echo "ERROR: Cannot install without an explicit, compatible, or default Copilot CLI version." >&2 + echo "To fix: Pass a version argument or set GH_AW_DEFAULT_COPILOT_VERSION." >&2 + return 1 fi -fi + if [ "$compat_resolved" = "false" ]; then + REQUESTED_VERSION="$VERSION" + fi + echo "Will install default Copilot CLI version ${VERSION} if no cached version satisfies the compatibility window." +} + +select_copilot_version "${TEMP_DIR}/compat.json" # Prefer the runner toolcache when a compatible Copilot CLI is already available. if CACHED_COPILOT_BIN="$(find_cached_copilot_bin "$REQUESTED_VERSION" "${COMPAT_MATCHED_MIN_AGENT}" "${COMPAT_MATCHED_MAX_AGENT}" "${COMPAT_CACHE_TTL_DAYS}")"; then diff --git a/actions/setup/sh/install_copilot_cli_test.sh b/actions/setup/sh/install_copilot_cli_test.sh index 7f2f8cf649f..bbe13fd9ad2 100755 --- a/actions/setup/sh/install_copilot_cli_test.sh +++ b/actions/setup/sh/install_copilot_cli_test.sh @@ -18,6 +18,7 @@ source <(sed -n \ -e '/^version_is_greater()/,/^}/p' \ -e '/^is_cache_expired()/,/^}/p' \ -e '/^find_cached_copilot_bin()/,/^}/p' \ + -e '/^select_copilot_version()/,/^}/p' \ "$INSTALL_SCRIPT") export ARCH_NAME="x64" @@ -72,3 +73,51 @@ touch -d "20 days ago" "$cached_binary" assert_not_found \ "compiler-default range fallback rejects an expired cache entry" \ "latest" "1.0.21" "1.0.75" "14" + +VERSION="1.0.0" +DEFAULT_COPILOT_VERSION="1.0.75" +COMPILED_GH_AW_VERSION="0.83.1" +REQUESTED_VERSION="$VERSION" +COMPAT_MATCHED_MIN_AGENT="" +COMPAT_MATCHED_MAX_AGENT="" +COMPAT_CACHE_TTL_DAYS="" +resolve_version_from_compat() { + echo "FAIL: explicit pin attempted compatibility resolution" >&2 + return 1 +} +select_copilot_version "${TEST_ROOT}/compat.json" >/dev/null +if [ "$VERSION" != "1.0.0" ] || [ "$REQUESTED_VERSION" != "1.0.0" ]; then + echo "FAIL: explicit engine.version did not take precedence" >&2 + exit 1 +fi +echo "PASS: explicit engine.version takes precedence" + +VERSION="" +REQUESTED_VERSION="latest" +resolve_version_from_compat() { + printf 'latest|1.0.21|*|14\n' +} +select_copilot_version "${TEST_ROOT}/compat.json" >/dev/null +if [ "$VERSION" != "1.0.75" ] || + [ "$REQUESTED_VERSION" != "latest" ] || + [ "$COMPAT_MATCHED_MIN_AGENT" != "1.0.21" ] || + [ "$COMPAT_MATCHED_MAX_AGENT" != "*" ]; then + echo "FAIL: compatibility range did not precede the default fallback" >&2 + exit 1 +fi +echo "PASS: compatibility range precedes the default fallback" + +VERSION="" +REQUESTED_VERSION="latest" +COMPAT_MATCHED_MIN_AGENT="" +COMPAT_MATCHED_MAX_AGENT="" +COMPAT_CACHE_TTL_DAYS="" +resolve_version_from_compat() { + return 1 +} +select_copilot_version "${TEST_ROOT}/compat.json" >/dev/null 2>&1 +if [ "$VERSION" != "1.0.75" ] || [ "$REQUESTED_VERSION" != "1.0.75" ]; then + echo "FAIL: unavailable compatibility range did not fall back to the exact default" >&2 + exit 1 +fi +echo "PASS: unavailable compatibility range falls back to the exact default" diff --git a/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md b/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md deleted file mode 100644 index cccf70ed985..00000000000 --- a/docs/adr/48593-enable-compat-range-toolcache-for-explicit-copilot-version.md +++ /dev/null @@ -1,52 +0,0 @@ -# ADR-48593: Enable Compat-Range Toolcache Matching for the Default Copilot CLI Version - -**Date**: 2026-07-28 -**Status**: Draft -**Deciders**: pelikhan, copilot-swe-agent - ---- - -### Context - -The Copilot CLI install script (`install_copilot_cli.sh`) has two code paths for locating a compatible binary: (1) range-based toolcache lookup driven by `compat.json`, and (2) exact-version toolcache lookup when an explicit version is passed. Path (1) allows a cached runner binary within the compat window to satisfy the install without a network download; path (2) requires an exact version match and falls back to a network download on any mismatch. - -Because `pkg/workflow/copilot_installer.go` always passes an explicit version (defaulting to `DefaultCopilotVersion` when unset), path (2) was the only path ever exercised in practice. When `DefaultCopilotVersion` (1.0.75) drifted past the `compat.json` `max-agent` (1.0.56), the cached runner toolcache entry (1.0.56) was always rejected by exact-match, forcing a network download on every agentic job. A CDN blip of ~30 s was sufficient to fail the job entirely—twice per run (once in the `agent` job, once in the `detection` job). Additionally, `GH_AW_COMPILED_VERSION` was never emitted in compiled job environments, so the install script had no compiled version to resolve a compat window even if it wanted to. - -### Decision - -We will opt the compiler-generated default version into compat-matrix resolution so that `find_cached_copilot_bin` receives a populated compat range. User-supplied `engine.version` pins continue to require an exact match, even when their value equals `DefaultCopilotVersion`. Specifically: - -- `copilot_installer.go`: pass `--compat-range` only for a compiler-generated default in release builds. -- `install_copilot_cli.sh`: resolve and use the compat range only when `--compat-range` is present. -- `compiler_main_job_helpers.go` / `threat_detection_job.go`: emit `GH_AW_COMPILED_VERSION` in job-level env for release builds so the script can resolve the compat window. -- `.github/aw/compat.json`: make the open row's `max-agent` unbounded so compiler-default updates remain in the current compatibility window. -- `pkg/constants/version_constants_test.go`: add `TestDefaultCopilotVersionWithinCompatWindow` as a CI gate to assert that `DefaultCopilotVersion` remains in the open compatibility window. - -### Alternatives Considered - -#### Alternative 1: Remove explicit version pinning and always resolve via compat matrix - -The install script could drop the explicit-version argument and always use compat-matrix resolution to select the best available version. This would give full range-based toolcache matching without any bypass. It was rejected because the explicit version pin provides a stable, testable contract: callers can assert exactly which CLI version is installed. Losing that contract complicates debugging and prevents version-specific rollouts. - -#### Alternative 2: Only bump compat.json max-agent without changing the install script - -Making `max-agent` unbounded fixes the data drift, but the install script's explicit-version branch still skips compat resolution and calls `find_cached_copilot_bin` with an empty compat range. The toolcache entry would continue to be rejected by exact-match. This approach fixes the data without fixing the logic. - -### Consequences - -#### Positive -- Runner toolcache satisfies default Copilot CLI installs with any version within the compat window, eliminating unnecessary network downloads on every agentic job. -- CDN failures during Copilot CLI download no longer cause hard job failures when a compatible cached binary exists. -- `TestDefaultCopilotVersionWithinCompatWindow` creates a CI gate that ensures `DefaultCopilotVersion` remains in the open compatibility window. - -#### Negative -- Default-version range matching may serve a cached binary version that differs from `DefaultCopilotVersion`; behavioral equivalence relies on the compat window being accurately defined. An overly broad window could accept an incompatible binary. -- `GH_AW_COMPILED_VERSION` is now present in compiled job-level environments for release builds, exposing compiler version metadata in workflow logs and to any downstream tool that reads job env vars. - -#### Neutral -- The compat window is now a load-bearing correctness invariant, enforced by the new test. -- User-supplied `engine.version` values retain exact-match semantics. - ---- - -*ADR created by [adr-writer agent]. Review and finalize before changing status from Draft to Accepted.* diff --git a/pkg/workflow/copilot_engine_installation.go b/pkg/workflow/copilot_engine_installation.go index 076c435800c..5ccd9677c43 100644 --- a/pkg/workflow/copilot_engine_installation.go +++ b/pkg/workflow/copilot_engine_installation.go @@ -142,15 +142,18 @@ func (e *CopilotEngine) GetInstallationSteps(workflowData *WorkflowData) []GitHu return appendCopilotLSPInstallSteps(steps, workflowData) } - // Use engine.version if provided, otherwise fall back to the default pinned version. + // Use engine.version if provided. Otherwise let the installer try the compat + // range before falling back to the default pinned version. // When no explicit version is set, normalize the engine config so downstream // consumers observe the effective installed value. copilotVersion := string(constants.DefaultCopilotVersion) - useCompatRange := IsRelease() + installerVersion := "" if workflowData.EngineConfig != nil { if workflowData.EngineConfig.Version != "" { copilotVersion = workflowData.EngineConfig.Version - useCompatRange = useCompatRange && workflowData.EngineConfig.VersionDefaulted + if !workflowData.EngineConfig.VersionDefaulted { + installerVersion = copilotVersion + } copilotInstallLog.Printf("Using engine.version for Copilot CLI installation: %s", copilotVersion) } else { // Normalize engine config version to the effective installed version so @@ -170,7 +173,7 @@ func (e *CopilotEngine) GetInstallationSteps(workflowData *WorkflowData) []GitHu // The "Copy Copilot CLI to daemon-visible path" step in nodejs.go then copies from // the rootless location to ${RUNNER_TEMP}/gh-aw/bin/copilot where AWF expects it. rootless := isArcDindTopology(workflowData) - npmSteps := generateCopilotInstallerSteps(copilotVersion, "Install GitHub Copilot CLI", rootless, useCompatRange) + npmSteps := GenerateCopilotInstallerSteps(installerVersion, "Install GitHub Copilot CLI", rootless) if len(inlineDriverWriteStep) > 0 { npmSteps = append(npmSteps, inlineDriverWriteStep) } diff --git a/pkg/workflow/copilot_installer.go b/pkg/workflow/copilot_installer.go index 5bdf74e476a..19f31fa129e 100644 --- a/pkg/workflow/copilot_installer.go +++ b/pkg/workflow/copilot_installer.go @@ -10,27 +10,12 @@ var copilotInstallerLog = logger.New("workflow:copilot_installer") // GenerateCopilotInstallerSteps creates GitHub Actions steps to install the Copilot CLI using the official installer. // When rootless is true, the script installs into $HOME/.local/bin without sudo. func GenerateCopilotInstallerSteps(version, stepName string, rootless bool) []GitHubActionStep { - return generateCopilotInstallerSteps(version, stepName, rootless, false) -} - -func generateCopilotInstallerSteps(version, stepName string, rootless, useCompatRange bool) []GitHubActionStep { - // If no version is specified, use the pinned default version from constants. - if version == "" { - version = string(constants.DefaultCopilotVersion) - copilotInstallerLog.Printf("No version specified, using default: %s", version) - } - copilotInstallerLog.Printf("Generating Copilot installer steps using install_copilot_cli.sh: version=%s, rootless=%v", version, rootless) rootlessFlag := "" if rootless { rootlessFlag = " --rootless" } - compatRangeFlag := "" - if useCompatRange { - compatRangeFlag = " --compat-range" - } - // Use the install_copilot_cli.sh script from actions/setup/sh // This script includes retry logic for robustness against transient network failures. // The script downloads the Copilot CLI using curl with hardcoded github.com URLs. @@ -44,19 +29,25 @@ func generateCopilotInstallerSteps(version, stepName string, rootless, useCompat copilotInstallerLog.Printf("Version contains GitHub Actions expression, using env var for injection safety: %s", version) stepLines := []string{ " - name: " + stepName, - ` run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" "${ENGINE_VERSION}"` + rootlessFlag + compatRangeFlag, + ` run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" "${ENGINE_VERSION}"` + rootlessFlag, " env:", " GH_HOST: github.com", + " GH_AW_DEFAULT_COPILOT_VERSION: " + string(constants.DefaultCopilotVersion), " ENGINE_VERSION: " + version, } return []GitHubActionStep{GitHubActionStep(stepLines)} } + versionArgument := "" + if version != "" { + versionArgument = " " + version + } stepLines := []string{ " - name: " + stepName, - " run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\" " + version + rootlessFlag + compatRangeFlag, + " run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\"" + versionArgument + rootlessFlag, " env:", " GH_HOST: github.com", + " GH_AW_DEFAULT_COPILOT_VERSION: " + string(constants.DefaultCopilotVersion), } return []GitHubActionStep{GitHubActionStep(stepLines)} diff --git a/pkg/workflow/copilot_installer_test.go b/pkg/workflow/copilot_installer_test.go index 777bbffa7fe..a15cfc2e404 100644 --- a/pkg/workflow/copilot_installer_test.go +++ b/pkg/workflow/copilot_installer_test.go @@ -60,16 +60,18 @@ func TestGenerateCopilotInstallerSteps(t *testing.T) { }, }, { - name: "empty version uses default", + name: "empty version uses compat then default", version: "", stepName: "Install GitHub Copilot CLI", - expectedVersion: string(constants.DefaultCopilotVersion), // Should use DefaultCopilotVersion + expectedVersion: "", shouldContain: []string{ - "bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\" " + string(constants.DefaultCopilotVersion), + "run: bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\"\n", "GH_HOST: github.com", // Must pin GH_HOST to prevent GHES workflow-level overrides + "GH_AW_DEFAULT_COPILOT_VERSION: " + string(constants.DefaultCopilotVersion), }, shouldNotContain: []string{ "gh.io/copilot-install | sudo bash", + "install_copilot_cli.sh\" " + string(constants.DefaultCopilotVersion), }, }, } @@ -100,9 +102,11 @@ func TestGenerateCopilotInstallerSteps(t *testing.T) { } // Verify the version is correctly passed to the install script - expectedVersionLine := "bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\" " + tt.expectedVersion - if !strings.Contains(stepContent, expectedVersionLine) { - t.Errorf("Expected version to be set to '%s', but step content was:\n%s", tt.expectedVersion, stepContent) + if tt.expectedVersion != "" { + expectedVersionLine := "bash \"${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh\" " + tt.expectedVersion + if !strings.Contains(stepContent, expectedVersionLine) { + t.Errorf("Expected version to be set to '%s', but step content was:\n%s", tt.expectedVersion, stepContent) + } } }) } @@ -110,7 +114,7 @@ func TestGenerateCopilotInstallerSteps(t *testing.T) { func TestCopilotEngineWithVersion(t *testing.T) { // engine.version must be honored: when an explicit version is set it should be - // passed to the installer and compat.json resolution must be skipped. + // passed to the installer before compat.json or the default are considered. engine := NewCopilotEngine() customVersion := "1.0.0" @@ -142,7 +146,7 @@ func TestCopilotEngineWithVersion(t *testing.T) { t.Fatal("Could not find install step with install_copilot_cli.sh") } - // Should pass the user-specified version to the installer (compat.json skipped). + // Should pass the user-specified version to the installer. if !strings.Contains(installStep, `install_copilot_cli.sh" `+customVersion) { t.Errorf("Expected user-specified version %q in install step, got:\n%s", customVersion, installStep) } @@ -158,10 +162,6 @@ func TestCopilotEngineWithVersion(t *testing.T) { } func TestCopilotEngineExplicitDefaultVersionRequiresExactMatch(t *testing.T) { - originalIsRelease := isReleaseBuild - isReleaseBuild = true - t.Cleanup(func() { isReleaseBuild = originalIsRelease }) - engine := NewCopilotEngine() workflowData := &WorkflowData{ Name: "test-workflow", @@ -174,8 +174,8 @@ func TestCopilotEngineExplicitDefaultVersionRequiresExactMatch(t *testing.T) { for _, step := range steps { stepContent := strings.Join(step, "\n") if strings.Contains(stepContent, "install_copilot_cli.sh") { - if strings.Contains(stepContent, "--compat-range") { - t.Fatalf("explicit engine.version equal to the default must require an exact match:\n%s", stepContent) + if !strings.Contains(stepContent, `install_copilot_cli.sh" `+string(constants.DefaultCopilotVersion)) { + t.Fatalf("explicit engine.version equal to the default must be passed as an exact pin:\n%s", stepContent) } return } @@ -184,12 +184,9 @@ func TestCopilotEngineExplicitDefaultVersionRequiresExactMatch(t *testing.T) { } func TestCopilotEngineWithoutVersion(t *testing.T) { - // When engine.version is not set, the default pinned version must be used and + // When engine.version is not set, the installer must try the compat range before + // falling back to the default pinned version, and // EngineConfig.Version must be normalized to the effective installed value. - originalIsRelease := isReleaseBuild - isReleaseBuild = true - t.Cleanup(func() { isReleaseBuild = originalIsRelease }) - engine := NewCopilotEngine() workflowData := &WorkflowData{ @@ -218,12 +215,12 @@ func TestCopilotEngineWithoutVersion(t *testing.T) { t.Fatal("Could not find install step with install_copilot_cli.sh") } - // Should use the default pinned version. - if !strings.Contains(installStep, `install_copilot_cli.sh" `+string(constants.DefaultCopilotVersion)) { - t.Errorf("Expected default Copilot version in install step, got:\n%s", installStep) + // Should omit a positional version so the script can try the compat range. + if strings.Contains(installStep, `install_copilot_cli.sh" `+string(constants.DefaultCopilotVersion)) { + t.Errorf("Expected no positional default Copilot version in install step, got:\n%s", installStep) } - if !strings.Contains(installStep, "--compat-range") { - t.Errorf("Expected compiler default version to enable compat-range matching, got:\n%s", installStep) + if !strings.Contains(installStep, "GH_AW_DEFAULT_COPILOT_VERSION: "+string(constants.DefaultCopilotVersion)) { + t.Errorf("Expected pinned default Copilot version as fallback env, got:\n%s", installStep) } // A later detection job sees the normalized version and must retain its default provenance. @@ -231,8 +228,8 @@ func TestCopilotEngineWithoutVersion(t *testing.T) { for _, step := range secondSteps { stepContent := strings.Join(step, "\n") if strings.Contains(stepContent, "install_copilot_cli.sh") { - if !strings.Contains(stepContent, "--compat-range") { - t.Fatalf("normalized compiler default must retain compat-range matching:\n%s", stepContent) + if strings.Contains(stepContent, `install_copilot_cli.sh" `+string(constants.DefaultCopilotVersion)) { + t.Fatalf("normalized compiler default must still omit the positional version:\n%s", stepContent) } return } @@ -240,28 +237,6 @@ func TestCopilotEngineWithoutVersion(t *testing.T) { t.Fatal("Could not find second install step with install_copilot_cli.sh") } -func TestCopilotEngineDevelopmentBuildRequiresExactMatch(t *testing.T) { - originalIsRelease := isReleaseBuild - isReleaseBuild = false - t.Cleanup(func() { isReleaseBuild = originalIsRelease }) - - engine := NewCopilotEngine() - steps := engine.GetInstallationSteps(&WorkflowData{ - Name: "test-workflow", - EngineConfig: &EngineConfig{}, - }) - for _, step := range steps { - stepContent := strings.Join(step, "\n") - if strings.Contains(stepContent, "install_copilot_cli.sh") { - if strings.Contains(stepContent, "--compat-range") { - t.Fatalf("development builds must require an exact match:\n%s", stepContent) - } - return - } - } - t.Fatal("Could not find install step with install_copilot_cli.sh") -} - func TestGenerateCopilotInstallerSteps_ExpressionVersion(t *testing.T) { tests := []struct { name string From 0757e8735601bc47b24ee165403e5e0bd3eca928 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 29 Jul 2026 16:04:53 +0000 Subject: [PATCH 8/9] Defer default Copilot version until cache miss Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com> --- actions/setup/sh/install_copilot_cli.sh | 15 +++++++++------ .../TestWasmGolden_AllEngines/copilot.golden | 3 ++- .../basic-copilot.golden | 3 ++- .../playwright-cli-mode.golden | 3 ++- .../smoke-copilot.golden | 3 ++- .../with-imports.golden | 3 ++- 6 files changed, 19 insertions(+), 11 deletions(-) diff --git a/actions/setup/sh/install_copilot_cli.sh b/actions/setup/sh/install_copilot_cli.sh index 5030375c421..b6f8ab49392 100755 --- a/actions/setup/sh/install_copilot_cli.sh +++ b/actions/setup/sh/install_copilot_cli.sh @@ -530,15 +530,12 @@ select_copilot_version() { fi VERSION="$DEFAULT_COPILOT_VERSION" - if [ -z "$VERSION" ]; then - echo "ERROR: Cannot install without an explicit, compatible, or default Copilot CLI version." >&2 - echo "To fix: Pass a version argument or set GH_AW_DEFAULT_COPILOT_VERSION." >&2 - return 1 - fi if [ "$compat_resolved" = "false" ]; then REQUESTED_VERSION="$VERSION" fi - echo "Will install default Copilot CLI version ${VERSION} if no cached version satisfies the compatibility window." + if [ -n "$VERSION" ]; then + echo "Will install default Copilot CLI version ${VERSION} if no cached version satisfies the compatibility window." + fi } select_copilot_version "${TEMP_DIR}/compat.json" @@ -561,6 +558,12 @@ if CACHED_COPILOT_BIN="$(find_cached_copilot_bin "$REQUESTED_VERSION" "${COMPAT_ exit 1 fi +if [ -z "$VERSION" ]; then + echo "ERROR: Cannot install without an explicit, compatible, or default Copilot CLI version." >&2 + echo "To fix: Pass a version argument or set GH_AW_DEFAULT_COPILOT_VERSION." >&2 + exit 1 +fi + # Build download URLs if [ -z "$VERSION" ] || [ "$VERSION" = "latest" ]; then BASE_URL="https://github.com/${COPILOT_REPO}/releases/latest/download" diff --git a/pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden b/pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden index 7a953e02417..70f5d610892 100644 --- a/pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden +++ b/pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden @@ -405,9 +405,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Determine automatic lockdown mode for GitHub MCP Server diff --git a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden index e663346eff3..823b6fe3a78 100644 --- a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden +++ b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden @@ -405,9 +405,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Determine automatic lockdown mode for GitHub MCP Server diff --git a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden index 4358be0f2e6..7dfb0f5f369 100644 --- a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden +++ b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden @@ -416,9 +416,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Install Playwright CLI diff --git a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden index 0208333217d..5f97b2f871f 100644 --- a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden +++ b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden @@ -564,9 +564,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Determine automatic lockdown mode for GitHub MCP Server diff --git a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden index 11b45c62458..cf4c902135b 100644 --- a/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden +++ b/pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden @@ -406,9 +406,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" vAWF_VERSION --rootless - name: Determine automatic lockdown mode for GitHub MCP Server From 04561cc368a17184fe2f705c87ef68d795d39a82 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 29 Jul 2026 17:23:49 +0000 Subject: [PATCH 9/9] chore: refresh workflows after main update Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com> --- .github/workflows/daily-graft-intelligence.lock.yml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/.github/workflows/daily-graft-intelligence.lock.yml b/.github/workflows/daily-graft-intelligence.lock.yml index e3e8b225015..36d5cdbf0ee 100644 --- a/.github/workflows/daily-graft-intelligence.lock.yml +++ b/.github/workflows/daily-graft-intelligence.lock.yml @@ -510,9 +510,10 @@ jobs: const { main } = require('${{ runner.temp }}/gh-aw/actions/checkout_pr_branch.cjs'); await main(); - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 --rootless - name: Install GitHub Copilot SDK (Node.js) @@ -1489,9 +1490,10 @@ jobs: - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install threat-detect binary if: always() && steps.detection_guard.outputs.run_detection == 'true' run: | @@ -1675,9 +1677,10 @@ jobs: node-version: '24' package-manager-cache: false - name: Install GitHub Copilot CLI - run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" 1.0.75 + run: bash "${RUNNER_TEMP}/gh-aw/actions/install_copilot_cli.sh" env: GH_HOST: github.com + GH_AW_DEFAULT_COPILOT_VERSION: 1.0.75 - name: Install AWF binary run: bash "${RUNNER_TEMP}/gh-aw/actions/install_awf_binary.sh" v0.27.42 - name: Install GitHub Copilot SDK (Node.js)