chore: upgrade all workflows to gh-aw v0.71.0

[lpcox]

Summary

Upgraded all 31 agentic workflows from gh-aw v0.69.2 to v0.71.0.

Changes

gh-aw Version Update

• Previous: v0.69.2
• New: v0.71.0

Key Changes from Changelog

v0.71.0:

• Setup Node.js now included in threat-detection jobs
• OTLP tracing for cancelled runs
• Claude engine: bypassPermissions → acceptEdits

v0.70.0:

• merge-pull-request safe output
• Container image digest pinning
• gh-proxy mode (tools.github.mode: gh-proxy)
• Sticky comments for add_comment
• Multi-repo push_to_pull_request_branch
• Fixed action pin regression from v0.68.3

Workflow .md Changes (4 files)

Codemod migrated features.cli-proxy: true → tools.github.mode: gh-proxy:

• issue-monster.md
• smoke-copilot.md
• test-coverage-improver.md
• test-improver.md

Manually removed empty features: keys left by codemod.

Action Version Bumps

• gh-aw-actions/setup: v0.69.2 → v0.71.0
• gh-aw-actions/copilot-setup-steps: v0.68.2 → v0.71.0
• actions/setup-node: v6.3.0 → v6.4.0
• astral-sh/setup-uv: v8.0.0 → v8.1.0
• github/codeql-action: v4.35.1 → v4.35.2
• super-linter/super-linter: v2.10.4 → v2.11.0
• getsentry/sentry-cli-action: v1.301.0 → v1.305.0

Upgrade Method

• Ran gh aw upgrade (v0.71.0)
• Fixed 4 compilation errors (empty features: keys)
• Recompiled all 31 workflows successfully

Testing

• ✅ All 31 workflows compile successfully
• ✅ All .lock.yml files generated
• ✅ 0 compilation errors, 2 pre-existing warnings

[Copilot]

Pull request overview

This PR upgrades the repository’s agentic workflows to gh-aw v0.71.0, updating workflow frontmatter, pinned action SHAs, and generated lock files to match the new compiler/runtime behavior.

Changes:

• Bumps gh-aw / gh-aw-actions versions and refreshes generated .lock.yml workflow outputs.
• Migrates GitHub tool configuration from features.cli-proxy: true to tools.github.mode: gh-proxy in affected workflow .md sources.
• Updates the maintenance workflow and action lock metadata to the new pinned SHAs/versions.

Show a summary per file

File	Description
.github/workflows/test-improver.md	Removes features.cli-proxy and configures GitHub tool mode: gh-proxy.
.github/workflows/test-coverage-improver.md	Removes features.cli-proxy and configures GitHub tool mode: gh-proxy.
.github/workflows/smoke-copilot.md	Removes features.cli-proxy and configures GitHub tool mode: gh-proxy.
.github/workflows/issue-monster.md	Removes features.cli-proxy and configures GitHub tool mode: gh-proxy.
.github/workflows/semantic-function-refactor.lock.yml	Regenerated lock file with v0.71.0 metadata and updated pinned deps/images.
.github/workflows/nightly-docs-reconciler.lock.yml	Regenerated lock file with v0.71.0 metadata and updated pinned deps/images.
.github/workflows/mcp-gateway-log-analyzer.lock.yml	Regenerated lock file with v0.71.0 metadata and updated pinned deps/images.
.github/workflows/integrity-filtering-audit.lock.yml	Regenerated lock file with v0.71.0 metadata and updated pinned deps/images.
.github/workflows/gpl-dependency-checker.lock.yml	Regenerated lock file with v0.71.0 metadata and updated pinned deps/images.
.github/workflows/github-mcp-guard-coverage-checker.lock.yml	Regenerated lock file with v0.71.0 metadata and updated pinned deps/images.
.github/workflows/ghcr-download-tracker.lock.yml	Regenerated lock file with v0.71.0 metadata and updated pinned deps/images.
.github/workflows/gateway-issue-dispatcher.lock.yml	Regenerated lock file with v0.71.0 metadata and updated pinned deps/images.
.github/workflows/agentics-maintenance.yml	Updates pinned actions/versions and revises activity report generation steps.
.github/aw/actions-lock.json	Updates pinned action versions/SHAs and includes new action pins from upgrade.
.github/agents/agentic-workflows.agent.md	Updates documentation links to gh-aw v0.71.0.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 36/38 changed files
• Comments generated: 8