Repository navigation
chore: upgrade community workflows to gh-aw v0.88.7 - #18
Merged
Merged
Conversation
Regenerate the three community submission locks with Copilot CLI 1.0.80 and the compiler defaults. Preserve submission instructions and file allowlists, and cover runtime compatibility and output guards. Assisted-by: GitHub Copilot (model: GPT-6 Astra, autonomous) Co-authored-by: Copilot App <[email protected]>
There was a problem hiding this comment.
Copilot review overview
🔵 Needs a closer look
The large generated runtime change still requires the outstanding controlled workflow runs.
Review effort: Balanced
Findings: None
What changed in this PR
Upgrades three community submission workflow locks to gh-aw v0.88.7 and Copilot CLI 1.0.80 while preserving existing submission safeguards.
Changes:
- Regenerates immutable workflow locks with updated runtime and security defaults.
- Adds tests for permissions, activation guards, draft PR scope, pins, and fail-closed threat detection.
| File | Description |
|---|---|
.github/workflows/add-community-bundle.lock.yml |
Updates bundle automation runtime. |
.github/workflows/add-community-extension.lock.yml |
Updates extension automation runtime. |
.github/workflows/add-community-preset.lock.yml |
Updates preset automation runtime. |
tests/test_github_workflows.py |
Validates upgraded locks and preserved safeguards. |
💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
11 tasks done
KSchlobohm
added a commit
that referenced
this pull request
Sep 24, 2026
* chore: upgrade community workflows to gh-aw v0.88.7 (#18) Regenerate the three community submission locks with Copilot CLI 1.0.80 and the compiler defaults. Preserve submission instructions and file allowlists, and cover runtime compatibility and output guards. Assisted-by: GitHub Copilot (model: GPT-6 Astra, autonomous) Co-authored-by: Copilot App <[email protected]> * fix(workflows): exempt bug-fix from PR-count confirmation Apply the community maintenance-workflow exemption to bug-fix while preserving assessment gates and harness-managed draft publication. Add static exemption and runtime-import coverage. Assisted-by: GitHub Copilot (model: GPT-6 Astra, autonomous) Co-authored-by: Copilot App <[email protected]> * chore(workflows): refresh maintenance workflow body hashes Regenerate bug-fix and the three community workflow lockfiles with gh-aw v0.88.7 after the PR-count exemption changes. Only body_hash metadata changes; executable YAML is unchanged. Assisted-by: GitHub Copilot (model: GPT-6 Astra, autonomous) Co-authored-by: Copilot App <[email protected]> --------- Co-authored-by: Copilot App <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Upgrade the three community submission workflows (
add-community-bundle,add-community-extension, andadd-community-preset) from gh-aw v0.79.8 / Copilot CLI 1.0.60 to gh-aw v0.88.7 / Copilot CLI 1.0.80, matching the baseline already used by the assessment and bug workflows.This PR targets the fork's
mainfor controlled testing before any upstream submission.autofallback model, and Copilot-specific protected-file list, consistent with chore: upgrade bug-fix and bug-test to gh-aw v0.88.7 github/spec-kit#4604.The workflow Markdown and submission instructions are unchanged. Each workflow retains its two-file allowlist, label gates, bot exclusions, and draft-only PR configuration. No catalog changes, contributor documentation changes, shared action-pin edits, or workflow-logic fixes are included.
Testing
uv run specify --helppython -m pytest tests/test_github_workflows.py -q— 27 passed, 7 existing Bash-dependent cases skipped on Windows.All three workflows compiled with gh-aw v0.88.7 using
--strict --validate --no-check-update, with zero warnings. A second compilation reproduced the locks byte-for-byte. Ruff andgit diff --checkpassed.Controlled fork runs remain outstanding. Compilation and static checks do not establish successful submission processing or complete runtime behavior.
AI Disclosure
GitHub Copilot (GPT-6 Astra) prepared the generated locks, compatibility tests, local validation, and this description on behalf of @KSchlobohm. The human contributor directed scope, approved adopting the existing compiler defaults, and approved publication to the fork only. The agent-authored commit includes attribution.