bump microsoft/apm-action to v1.4.1, add DefaultAPMActionVersion constant, rebuild wasm, recompile by Copilot · Pull Request #23150 · github/gh-aw

Copilot · 2026-03-26T18:08:21Z

microsoft/apm-action@v1.4.0 had a bug where it shadowed a caller-provided GITHUB_TOKEN with GITHUB_APM_PAT (defaulting to github.token), breaking cross-org private repo installs. v1.4.1 fixes this.

Changes

microsoft/apm-action v1.4.0 → v1.4.1 (cc84c04 → a190b0b) in .github/aw/actions-lock.json and synced to pkg/workflow/data/action_pins.json
DefaultAPMActionVersion = "v1.4.1" added to pkg/constants/constants.go to explicitly track the microsoft/apm-action GitHub Action version
apm_dependencies.go updated to use GetActionPinWithData with DefaultAPMActionVersion (consistent with the DefaultGitHubScriptVersion pattern used elsewhere)
smoke-claude.lock.yml recompiled — the only workflow using APM dependencies
Wasm binary rebuilt against updated action pins

[!WARNING]

📱 Kick off Copilot coding agent tasks wherever you are with GitHub Mobile, available on iOS and Android.

✨ PR Review Safe Output Test - Run 23614910060

💥 [THE END] — Illustrated by Smoke Claude · ◷

Changeset

Type: patch
Description: Updated microsoft/apm-action to v1.4.1 and added DefaultAPMActionVersion-based pin resolution for APM dependencies to fix token handling for cross-org private repository installs.

Generated by Changeset Generator for issue #23150 · ◷

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/b91e25a7-ae33-4865-8f9f-a12764022f43 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

pelikhan · 2026-03-26T18:42:43Z

@copilot recompile all workflows

Copilot · 2026-03-26T18:47:05Z

@copilot recompile all workflows

All 178 workflows are already recompiled — make recompile was run as part of the original commit and produces no further diffs. Only smoke-claude.lock.yml changed since it's the only workflow that references microsoft/apm-action.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
https://api.github.com/repos/github/gh-aw
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility (http block)
https://api.github.com/repos/github/gh-aw-actions/git/ref/tags/v0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw-actions/git/ref/tags/v0 --jq .object.sha (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

pelikhan · 2026-03-26T19:35:34Z

@copilot update the apm versions in constants.go

…m_dependencies.go Agent-Logs-Url: https://github.com/github/gh-aw/sessions/6f67c46c-88b1-47af-b28d-762a5de182a4 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-03-26T19:46:42Z

@copilot update the apm versions in constants.go

Added DefaultAPMActionVersion = "v1.4.1" to pkg/constants/constants.go and updated apm_dependencies.go to use it via GetActionPinWithData (consistent with the DefaultGitHubScriptVersion pattern). Commit: d8ae8fd

Copilot

Pull request overview

Updates the pinned microsoft/apm-action version to pick up a bugfix around token handling, and threads an explicit default action version constant through APM workflow generation so lockfiles and pins stay in sync.

Changes:

Bumped microsoft/apm-action pin from v1.4.0 to v1.4.1 (SHA update) in action pin/lock data.
Added DefaultAPMActionVersion = "v1.4.1" and used it when generating the APM pack step via GetActionPinWithData.
Recompiled the locked smoke workflow to reference the new pinned SHA.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
`pkg/workflow/data/action_pins.json`	Updates the stored pin for `microsoft/apm-action` to `v1.4.1` / new SHA.
`pkg/workflow/apm_dependencies.go`	Resolves `microsoft/apm-action` pin using `GetActionPinWithData` and the new default version constant.
`pkg/constants/constants.go`	Introduces `DefaultAPMActionVersion` to centrally track the default action version.
`.github/workflows/smoke-claude.lock.yml`	Updates the workflow lock to use the new `microsoft/apm-action` SHA/comment.
`.github/aw/actions-lock.json`	Updates the action lock entry for `microsoft/apm-action` to `v1.4.1` / new SHA.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-26T19:51:55Z

pkg/workflow/apm_dependencies.go


-	actionRef := GetActionPin("microsoft/apm-action")
+	actionRef, err := GetActionPinWithData("microsoft/apm-action", string(constants.DefaultAPMActionVersion), data)
+	if err != nil {


GetActionPinWithData can return an empty actionRef with err == nil when it can’t pin the requested version (e.g., strict mode with no exact match, or repo not present in pins). This code only falls back on err != nil, so you can end up emitting uses: (empty) which produces invalid workflow YAML. Handle actionRef == "" as a failure case too, and fall back to a safe reference (e.g., repo@DefaultAPMActionVersion or GetActionPin(...)) while still logging the warning.

Suggested change

if err != nil {

if err != nil || actionRef == "" {

Copilot · 2026-03-26T19:51:56Z

pkg/workflow/data/action_pins.json

    "super-linter/super-linter@v8.5.0": {
      "repo": "super-linter/super-linter",
      "version": "v8.5.0",
      "sha": "61abc07d755095a68f4987d1c2c3d1d64408f1f9"
+    },
+    "microsoft/apm-action@v1.4.1": {
+      "repo": "microsoft/apm-action",
+      "version": "v1.4.1",
+      "sha": "a190b0b1a91031057144dc136acf9757a59c9e4d"
    }


The entries object in this file is otherwise kept in lexicographic order by key (e.g., haskell-actions/... then oven-sh/...). The newly added microsoft/apm-action@v1.4.1 entry is appended after super-linter/..., which breaks the established ordering and makes future diffs noisier. Move this entry to its sorted position.

Copilot · 2026-03-26T19:51:56Z

.github/aw/actions-lock.json

    "super-linter/super-linter@v8.5.0": {
      "repo": "super-linter/super-linter",
      "version": "v8.5.0",
      "sha": "61abc07d755095a68f4987d1c2c3d1d64408f1f9"
+    },
+    "microsoft/apm-action@v1.4.1": {
+      "repo": "microsoft/apm-action",
+      "version": "v1.4.1",
+      "sha": "a190b0b1a91031057144dc136acf9757a59c9e4d"
    }


The entries object appears to be maintained in lexicographic order by key throughout the file, but the new microsoft/apm-action@v1.4.1 entry is appended after super-linter/.... Reinsert it at the appropriate sorted location to keep the lockfile deterministic and reduce diff noise.

github-actions · 2026-03-26T19:52:32Z

❌ Tool validation failed! Agent Container Smoke Test detected missing tools: failed

github-actions · 2026-03-26T19:52:37Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-03-26T19:52:37Z

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

github-actions · 2026-03-26T19:52:39Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-03-26T19:55:55Z

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

github-actions · 2026-03-26T20:01:55Z

💥 Smoke test 23614910060 results:

Overall: PARTIAL (17 pass, 1 skipped)

💥 [THE END] — Illustrated by Smoke Claude · ◷

github-actions

💥 Automated smoke test review - all systems nominal! Reviewed the APM action bump from v1.4.0 to v1.4.1 with the new DefaultAPMActionVersion constant. The changes look clean and consistent with existing patterns.

💥 [THE END] — Illustrated by Smoke Claude

github-actions · 2026-03-26T20:01:58Z

pkg/constants/constants.go

 	},
 }

+// DefaultAPMActionVersion is the default version of the microsoft/apm-action GitHub Action


The constant DefaultAPMActionVersion follows the same pattern as DefaultGitHubScriptVersion. Consider adding a brief comment linking to the upstream release notes or changelog so future reviewers can quickly verify what changed between versions.

github-actions · 2026-03-26T20:04:55Z

Commit pushed: ab0b8eb

Generated by Changeset Generator

github-actions · 2026-03-26T20:05:25Z

Smoke Test: Codex 23614909967

Merged PRs: fix: fetch remote branch before pushing CI trigger empty commit to avoid non-fast-forward rejection #23152 fix: fetch remote branch before pushing CI trigger empty commit to avoid non-fast-forward rejection; Fall back to original base commit when git am --3way fails due to merge conflicts #23132 Fall back to original base commit when git am --3way fails due to merge conflicts
GitHub MCP: ✅
Serena MCP (activate + symbols): ✅
Playwright title check: ✅
Web-fetch check: ✅
File write + bash verify + build: ✅
Overall: PASS

🔮 The oracle has spoken through Smoke Codex · ◷

Initial plan

7e1037c

Copilot AI assigned Copilot and pelikhan Mar 26, 2026

Copilot started work on behalf of pelikhan March 26, 2026 18:08 View session

Update microsoft/apm-action to v1.4.1, build wasm, recompile workflows

3f372a3

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/b91e25a7-ae33-4865-8f9f-a12764022f43 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~[WIP] Update apm-action and Microsoft/apm version, build wasm and recompile~~ bump microsoft/apm-action to v1.4.1, rebuild wasm, recompile Mar 26, 2026

Copilot AI requested a review from pelikhan March 26, 2026 18:25

Copilot finished work on behalf of pelikhan March 26, 2026 18:25

Copilot started work on behalf of pelikhan March 26, 2026 18:42 View session

Copilot finished work on behalf of pelikhan March 26, 2026 18:47

Copilot started work on behalf of pelikhan March 26, 2026 19:35 View session

Add DefaultAPMActionVersion constant to constants.go and use it in ap…

d8ae8fd

…m_dependencies.go Agent-Logs-Url: https://github.com/github/gh-aw/sessions/6f67c46c-88b1-47af-b28d-762a5de182a4 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot AI changed the title ~~bump microsoft/apm-action to v1.4.1, rebuild wasm, recompile~~ bump microsoft/apm-action to v1.4.1, add DefaultAPMActionVersion constant, rebuild wasm, recompile Mar 26, 2026

Merge branch 'main' into copilot/update-apm-action-and-version

ae7b04e

Copilot finished work on behalf of pelikhan March 26, 2026 19:47

pelikhan marked this pull request as ready for review March 26, 2026 19:48

Copilot AI review requested due to automatic review settings March 26, 2026 19:48

Copilot started reviewing on behalf of pelikhan March 26, 2026 19:49 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

pelikhan added the smoke label Mar 26, 2026

github-actions bot removed the smoke label Mar 26, 2026

github-actions bot mentioned this pull request Mar 26, 2026

Smoke Test: Claude - 23614910060 #23159

Closed

github-actions bot added the smoke-claude label Mar 26, 2026

github-actions bot reviewed Mar 26, 2026

View reviewed changes

Add changeset [skip-ci]

6a3450d

github-actions bot added the smoke-codex label Mar 26, 2026

pelikhan merged commit a68967c into main Mar 26, 2026

pelikhan deleted the copilot/update-apm-action-and-version branch March 26, 2026 20:16

Conversation

Copilot AI commented Mar 26, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Changeset

Uh oh!

pelikhan commented Mar 26, 2026

Uh oh!

Copilot AI commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

I tried to connect to the following addresses, but was blocked by firewall rules:

Uh oh!

pelikhan commented Mar 26, 2026

Uh oh!

Copilot AI commented Mar 26, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 26, 2026

Uh oh!

github-actions bot commented Mar 26, 2026

Uh oh!

github-actions bot commented Mar 26, 2026

Uh oh!

github-actions bot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actions bot Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions bot commented Mar 26, 2026

Uh oh!

github-actions bot commented Mar 26, 2026

Smoke Test: Codex 23614909967

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Mar 26, 2026 •

edited by github-actions bot

Loading

Copilot AI commented Mar 26, 2026 •

edited

Loading

github-actions bot commented Mar 26, 2026 •

edited

Loading

github-actions bot commented Mar 26, 2026 •

edited

Loading

github-actions bot commented Mar 26, 2026 •

edited

Loading