Update action pins to latest releases (checkout v6.0.2, download-artifact v7.0.0) by Copilot · Pull Request #11618 · github/gh-aw

Copilot · 2026-01-24T10:43:40Z

Problem

Action pins in .github/aw/actions-lock.json were using outdated versions, preventing workflows from leveraging latest bug fixes and features.

Changes

Updated action pins:

actions/checkout: Added v6, v6.0.2 entries (latest: de0fac2e4500dabe0009e67214ff5f5447ce83dd)
actions/download-artifact: Added v6, v7, v7.0.0 entries (latest: 37930b1c2abaa49bbe596cd826c3c89aef350131)
Added v5 floating tag for checkout (maintains major version pin support)

Impact:

139 workflow lock files regenerated with updated SHAs
Workflows using @v5.0.1 → @v6.0.2 for checkout
Workflows using @v6.0.0 → @v7.0.0 for download-artifact
Workflows with floating major tags (e.g., @v5) remain unchanged (intentional)
Test expectations updated: 41 → 47 pin entries, version priority order adjusted

Note: Original issue mentioned upload-artifact v7, but that version doesn't exist yet. Updated download-artifact to v7 instead, which does have a v7.0.0 release.

Files Changed

.github/aw/actions-lock.json - Source of truth (+6 entries)
pkg/workflow/data/action_pins.json - Auto-synced during build
pkg/workflow/action_pins_test.go - Updated count and version expectations
139 workflow .lock.yml files - Regenerated with new SHAs

Original prompt

Ensure that Outdated action versions are updated to the latest release when running the "update" command:

actions/checkout is using v5.0.1 version instead of v6.0.1

actions/upload-artifacts is using v6.0.0 instead of v7.0.0
...

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

Changeset

Type: patch
Description: Pin workflows to the latest checkout and download-artifact releases and regenerate the lockfiles.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Changeset

Type: patch
Description: Pin workflows to the latest checkout and download-artifact releases and regenerate the lockfiles.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

- Add actions/checkout@v5, v6, v6.0.2 entries - Add actions/download-artifact@v6, v7, v7.0.0 entries - Update workflow lock files with new SHAs Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Updated 139 workflow lock files to use latest action versions: - actions/checkout v5.0.1 → v6.0.2 - actions/download-artifact v6.0.0 → v7.0.0 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Update expected count from 41 to 47 entries and update expected checkout version from v5.0.1 to v6.0.2 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

github-actions · 2026-01-24T11:07:05Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-01-24T11:07:06Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-01-24T11:07:07Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-01-24T11:07:09Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-01-24T11:08:11Z

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

github-actions · 2026-01-24T11:11:02Z

PR titles:
Fix template injection validator false positives when env: follows run:
Refactor CodingAgentEngine using Interface Segregation Principle
✅ GitHub MCP merged PRs; ✅ safeinputs-gh PR list
✅ Serena activate; ✅ Playwright title
✅ Tavily search; ✅ file write
✅ Bash cat verify; ✅ Discussion query+comment
Overall status: PASS

AI generated by Smoke Codex

github-actions · 2026-01-24T11:12:29Z

Smoke Test: Claude Engine - PASS ✅

Last 2 Merged PRs:

Fix template injection validator false positives when env: follows run: #11586: Fix template injection validator false positives
Refactor CodingAgentEngine using Interface Segregation Principle #11607: Refactor CodingAgentEngine using ISP

Test Results:

✅ GitHub MCP
✅ Safe Inputs GH CLI
✅ Serena MCP
✅ Make Build
✅ Playwright
✅ Tavily Search
✅ File Write
✅ Bash Tool
✅ Discussion Interaction

Overall: PASS

AI generated by Smoke Claude

github-actions · 2026-01-24T11:35:25Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-01-24T11:35:25Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-01-24T11:35:27Z

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

github-actions · 2026-01-24T11:35:30Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-01-24T11:36:29Z

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

github-actions · 2026-01-24T11:39:01Z

Smoke test results:
Add diagnostic logging to MCP gateway health check failures ✅
Fix template injection validator false positives when env: follows run: ✅
safeinputs-gh pr list ✅
serena activate_project ✅
playwright github.com title ✅
tavily search ✅
file write+cat ✅
discussion comment ✅
Overall: PASS

AI generated by Smoke Codex

github-actions · 2026-01-24T11:39:38Z

Smoke Test Results

PRs Reviewed:

Add diagnostic logging to MCP gateway health check failures #11628: Add diagnostic logging to MCP gateway health check failures
Add workflow update step to upgrade command #11619: Add workflow update step to upgrade command

Test Results:

✅ GitHub MCP
✅ Safe Inputs GH CLI
✅ Serena MCP
✅ Make Build
✅ Playwright
✅ Tavily Web Search
✅ File Writing
✅ Bash Tool
✅ Discussion Interaction

Overall Status: PASS

AI generated by Smoke Claude

Initial plan

b9a86ad

Copilot AI assigned Copilot and pelikhan Jan 24, 2026

Copilot started work on behalf of pelikhan January 24, 2026 10:44 View session

Copilot AI and others added 4 commits January 24, 2026 10:48

Initial exploration - understanding action version update requirements

260de97

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Update action versions to latest releases

a9ef019

- Add actions/checkout@v5, v6, v6.0.2 entries - Add actions/download-artifact@v6, v7, v7.0.0 entries - Update workflow lock files with new SHAs Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Recompile all workflows with updated action versions

a318cfd

Updated 139 workflow lock files to use latest action versions: - actions/checkout v5.0.1 → v6.0.2 - actions/download-artifact v6.0.0 → v7.0.0 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Fix action pins tests after adding new versions

83ccf3c

Update expected count from 41 to 47 entries and update expected checkout version from v5.0.1 to v6.0.2 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update outdated action versions to latest releases~~ Update action pins to latest releases (checkout v6.0.2, download-artifact v7.0.0) Jan 24, 2026

Copilot AI requested a review from pelikhan January 24, 2026 11:06

Copilot finished work on behalf of pelikhan January 24, 2026 11:06

pelikhan added the smoke label Jan 24, 2026

Add changeset [skip-ci]

96279a7

github-actions bot added smoke-codex and removed smoke labels Jan 24, 2026

github-actions bot mentioned this pull request Jan 24, 2026

Smoke Test: Claude - 21314137132 #11627

Closed

github-actions bot added the smoke-claude label Jan 24, 2026

Add diagnostic logging to MCP gateway health check failures (#11628)

8ac4009

pelikhan added smoke and removed smoke-claude smoke-codex labels Jan 24, 2026

Add changeset [skip-ci]

a48695a

github-actions bot added smoke-codex and removed smoke labels Jan 24, 2026

github-actions bot mentioned this pull request Jan 24, 2026

Smoke Test: Claude - 21314476372 #11634

Closed

github-actions bot added the smoke-claude label Jan 24, 2026

pelikhan marked this pull request as ready for review January 24, 2026 11:55

pelikhan merged commit db1a542 into main Jan 24, 2026
84 checks passed

pelikhan deleted the copilot/update-outdated-action-versions branch January 24, 2026 11:55

github-actions bot mentioned this pull request Jan 24, 2026

[docs] Document GitHub App token minting for GitHub MCP server #11687

Closed

Conversation

Copilot AI commented Jan 24, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Problem

Changes

Files Changed

Changeset

Changeset

Uh oh!

github-actions bot commented Jan 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 24, 2026

Uh oh!

github-actions bot commented Jan 24, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 24, 2026

Uh oh!

github-actions bot commented Jan 24, 2026

Uh oh!

github-actions bot commented Jan 24, 2026

Smoke Test: Claude Engine - PASS ✅

Uh oh!

github-actions bot commented Jan 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 24, 2026 • edited by agentic-workflows-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Jan 24, 2026

Uh oh!

github-actions bot commented Jan 24, 2026

Uh oh!

github-actions bot commented Jan 24, 2026

Uh oh!

github-actions bot commented Jan 24, 2026

Smoke Test Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Jan 24, 2026 •

edited by agentic-workflows-dev bot

Loading

github-actions bot commented Jan 24, 2026 •

edited

Loading

github-actions bot commented Jan 24, 2026 •

edited by agentic-workflows-dev bot

Loading

github-actions bot commented Jan 24, 2026 •

edited

Loading

github-actions bot commented Jan 24, 2026 •

edited

Loading

github-actions bot commented Jan 24, 2026 •

edited

Loading

github-actions bot commented Jan 24, 2026 •

edited by agentic-workflows-dev bot

Loading