[actions] Update GitHub Actions versions - 2026-04-24

[Copilot]

Applies the actions version update patch from workflow run 24911657602 that failed to push automatically.

Actions updated

• actions/setup-node: v6.3.0 → v6.4.0 (10 workflow files)
• microsoft/apm-action: v1.4.1 → v1.4.2 (shared/apm.md)

Files changed

• .github/aw/actions-lock.json — removed v6.3.0 entry, updated apm-action SHA to 9fe9337
• pkg/actionpins/data/action_pins.json — synced from actions-lock
• 10 workflow .md files — setup-node version bump
• 11 .lock.yml files — recompiled from updated sources

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/graphql
  • Triggering command: /usr/bin/gh gh run download 24911657602 -n agent -D /tmp/agent-24911657602 (http block)
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw pVjYxvy42VP- (http block)
• https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
  • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq [.object.sha, .object.type] | @tsv (http block)
• https://api.github.com/repos/github/gh-aw
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .default_branch assword=$GITHUB_TOKEN"; }; f store assword=$GITHUB_TOKEN"; }; f store cal/bin/which credential.helpegit (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[Copilot]

Pull request overview

Updates pinned GitHub Actions versions across workflow sources and generated lockfiles, aligning the repository’s action pin data with the latest patch releases.

Changes:

• Bumped actions/setup-node from v6.3.0 to v6.4.0 in 10 workflow source (.md) files and regenerated the corresponding .lock.yml workflows.
• Updated microsoft/apm-action from v1.4.1 to v1.4.2 in shared workflow content and the affected compiled workflow.
• Synced action pin datasets by updating .github/aw/actions-lock.json and pkg/actionpins/data/action_pins.json to reflect the new versions/SHAs.

Show a summary per file

File	Description
.github/aw/actions-lock.json	Updates the canonical action lock entries for setup-node and apm-action.
pkg/actionpins/data/action_pins.json	Syncs embedded action pin data with the updated actions lock.
.github/workflows/update-astro.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/unbloat-docs.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/tidy.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/technical-doc-writer.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/slide-deck-maintainer.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/shared/ci-data-analysis.md	Bumps actions/setup-node to v6.4.0 in shared workflow source.
.github/workflows/hourly-ci-cleaner.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/go-logger.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/daily-skill-optimizer.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/daily-astrostylelite-markdown-spellcheck.md	Bumps actions/setup-node to v6.4.0 in workflow source.
.github/workflows/shared/apm.md	Bumps microsoft/apm-action to v1.4.2 in shared workflow source.
.github/workflows/update-astro.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/unbloat-docs.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/tidy.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/technical-doc-writer.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/slide-deck-maintainer.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/hourly-ci-cleaner.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/go-logger.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/daily-skill-optimizer.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/daily-astrostylelite-markdown-spellcheck.lock.yml	Regenerated compiled workflow with updated pinned action SHAs.
.github/workflows/ci-coach.lock.yml	Regenerated compiled workflow due to shared content/action pin updates.
.github/workflows/smoke-claude.lock.yml	Updates pinned microsoft/apm-action SHA/version to v1.4.2.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 24/24 changed files
• Comments generated: 2