diff --git a/.github/agents/agentic-workflows.agent.md b/.github/agents/agentic-workflows.agent.md index 2c7f53e9f8a..7c3daeea29a 100644 --- a/.github/agents/agentic-workflows.agent.md +++ b/.github/agents/agentic-workflows.agent.md @@ -16,7 +16,7 @@ This is a **dispatcher agent** that routes your request to the appropriate speci - **Debugging workflows**: Routes to `debug` prompt - **Upgrading workflows**: Routes to `upgrade-agentic-workflows` prompt - **Creating shared components**: Routes to `create-shared-agentic-workflow` prompt -- **Fixing Dependabot PRs**: Routes to `dependabot` prompt — use this when Dependabot opens PRs that modify generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`) or `https://github.com/github/gh-aw/blob/main/.github/aw/actions-lock.json`. Never merge those PRs directly; instead update the source `.md` files and rerun `gh aw compile --dependabot` to bundle all fixes +- **Fixing Dependabot PRs**: Routes to `dependabot` prompt — use this when Dependabot opens PRs that modify generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`). Never merge those PRs directly; instead update the source `.md` files and rerun `gh aw compile --dependabot` to bundle all fixes Workflows may optionally include: @@ -98,7 +98,7 @@ When you interact with this agent, it will: - "Design a shared workflow for database queries" ### Fix Dependabot PRs -**Load when**: User needs to close or fix open Dependabot PRs that update dependencies in generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`) or `https://github.com/github/gh-aw/blob/main/.github/aw/actions-lock.json` +**Load when**: User needs to close or fix open Dependabot PRs that update dependencies in generated manifest files (`.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`) **Prompt file**: https://github.com/github/gh-aw/blob/main/.github/aw/dependabot.md diff --git a/.github/aw/dependabot.md b/.github/aw/dependabot.md index 0701de05e99..b41a04c55d0 100644 --- a/.github/aw/dependabot.md +++ b/.github/aw/dependabot.md @@ -9,7 +9,7 @@ Read the ENTIRE content of this file carefully before proceeding. Follow the ins # Fixing Dependabot PRs for Agentic Workflow Dependencies > [!WARNING] -> **Never directly merge Dependabot PRs that modify generated files** such as `.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`, or `.github/aw/actions-lock.json`. These files are generated by the `gh aw` compiler and any direct changes will be overwritten on the next compilation. +> **Never directly merge Dependabot PRs that modify generated files** such as `.github/workflows/package.json`, `.github/workflows/requirements.txt`, or `.github/workflows/go.mod`. These files are generated by the `gh aw` compiler and any direct changes will be overwritten on the next compilation. ## Background @@ -21,8 +21,6 @@ The `gh aw compile --dependabot` command scans all agentic workflow files (`.git | `requirements.txt` | pip | `.github/workflows/requirements.txt` | | `go.mod` | Go | `.github/workflows/go.mod` | -The `.github/aw/actions-lock.json` file is also managed by the compiler and tracks pinned GitHub Actions versions used in all compiled workflows. - When Dependabot opens PRs to update these dependencies, the fix must be applied to the **source `.md` workflow files**, not the generated manifests. ## Fix Strategy: Bundle Multiple PRs @@ -45,7 +43,7 @@ Use GitHub tools to list all open Dependabot PRs: gh pr list --author "app/dependabot" --state open ``` -Filter for PRs affecting generated workflow manifests (title contains `Bump` or similar, files include `.github/workflows/package.json`, `.github/workflows/requirements.txt`, `.github/workflows/go.mod`, or `.github/aw/actions-lock.json`). +Filter for PRs affecting generated workflow manifests (title contains `Bump` or similar, files include `.github/workflows/package.json`, `.github/workflows/requirements.txt`, or `.github/workflows/go.mod`). ### 2. Identify Source `.md` Files