Repository navigation
ci: bump pinned gh-aw-actions and setup-dotnet dependencies - #2418
Merged
bradygaster merged 5 commits intoNov 9, 2026
Merged
Conversation
dependabot
Bot
requested review from
bradygaster and
tamirdresher
as code owners
November 8, 2026 13:49
Contributor
There was a problem hiding this comment.
🔵 Needs a closer look
The generated maintenance workflows mix gh-aw action refs from 0.91.7 with the v1.2.0 sync while relying on v0.81.6-generated script calls, and hosted workflow or strict runtime validation is unavailable.
No open issues 🎉
What changed in this PR
This pull request updates pinned GitHub Actions dependencies across CI, release, Copilot setup, and maintenance workflows while preserving immutable commit-SHA references.
Changes:
- Upgrades
github/gh-aw-actions/setupandsetup-clifrom v0.91.7 to v1.2.0. - Upgrades
actions/setup-dotnetfrom v6.0.0 to v6.1.0. - Preserves existing workflow inputs and behavior.
| File | Description |
|---|---|
.github/workflows/squad-agents-ai-release.yml |
Updates the .NET setup action used by the release workflow. |
.github/workflows/squad-agents-ai-ci.yml |
Updates the .NET setup action used by CI. |
.github/workflows/copilot-setup-steps.yml |
Updates the gh-aw CLI setup action used for Copilot environments. |
.github/workflows/agentics-maintenance.yml |
Updates gh-aw setup and CLI action pins across maintenance jobs. |
Review effort: Lite (auto)
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-fa20a8b590
branch
3 times, most recently
from
November 8, 2026 21:17
25598da to
afab4c9
Compare
Bumps the github-actions group with 3 updates in the / directory: [github/gh-aw-actions/setup](https://github.com/github/gh-aw-actions), [github/gh-aw-actions/setup-cli](https://github.com/github/gh-aw-actions) and [actions/setup-dotnet](https://github.com/actions/setup-dotnet). Updates `github/gh-aw-actions/setup` from 0.91.7 to 1.2.1 - [Release notes](https://github.com/github/gh-aw-actions/releases) - [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md) - [Commits](github/gh-aw-actions@7a07356...406c771) Updates `github/gh-aw-actions/setup-cli` from 0.91.7 to 1.2.1 - [Release notes](https://github.com/github/gh-aw-actions/releases) - [Changelog](https://github.com/github/gh-aw-actions/blob/main/CHANGELOG.md) - [Commits](github/gh-aw-actions@7a07356...406c771) Updates `actions/setup-dotnet` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](actions/setup-dotnet@a98b568...0f4a354) --- updated-dependencies: - dependency-name: actions/setup-dotnet dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/gh-aw-actions/setup dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/gh-aw-actions/setup-cli dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/github_actions/github-actions-fa20a8b590
branch
from
November 9, 2026 02:36
afab4c9 to
ab2b3c3
Compare
Contributor
🟢 Impact Analysis — PR #2418Risk tier: 🟢 LOW 📊 Summary
🎯 Risk Factors
📦 Modules Affectedci-workflows (4 files)
This report is generated automatically for every PR. See #733 for details. |
Contributor
🏗️ Architectural Review
Automated architectural review — informational only. |
Contributor
🛫 PR Readiness Check
PR Scope: 🔧 Infrastructure
|
| Status | Check | Details |
|---|---|---|
| ❌ | Single commit | 5 commits — consider squashing before review |
| ✅ | Not in draft | Ready for review |
| ✅ | Branch up to date | Up to date with dev |
| ❌ | Copilot review | No Copilot review yet — it may still be processing |
| ✅ | Changeset present | No source files changed — changeset not required |
| ✅ | Scope clean | No .squad/ or docs/proposals/ files |
| ✅ | No merge conflicts | No merge conflicts |
| ✅ | Copilot threads resolved | No Copilot review threads |
| ✅ | CI passing | All checks passing |
Files Changed (4 files, +18 −18)
| File | +/− |
|---|---|
.github/workflows/agentics-maintenance.yml |
+15 −15 |
.github/workflows/copilot-setup-steps.yml |
+1 −1 |
.github/workflows/squad-agents-ai-ci.yml |
+1 −1 |
.github/workflows/squad-agents-ai-release.yml |
+1 −1 |
Total: +18 −18
This check runs automatically on every push. Fix any ❌ items and push again.
See CONTRIBUTING.md and PR Requirements for details.
bradygaster
changed the title
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-fa20a8b590
branch
November 9, 2026 18:00
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 3 updates in the / directory: github/gh-aw-actions/setup, github/gh-aw-actions/setup-cli and actions/setup-dotnet.
Updates
github/gh-aw-actions/setupfrom 0.91.7 to 1.2.1Release notes
Sourced from github/gh-aw-actions/setup's releases.
... (truncated)
Commits
406c771chore: sync actions from gh-aw@v1.2.1 (#297)4607d46chore: sync actions from gh-aw@v1.2.0 (#296)221ba4fchore: sync actions from gh-aw@v1.0.1 (#295)9b62390chore: sync actions from gh-aw@v0.93.6 (#294)de9d416chore: sync actions from gh-aw@v0.93.5 (#293)40fb427chore: sync actions from gh-aw@v0.93.4 (#292)e89a567chore: sync actions from gh-aw@v0.93.3 (#291)d9128ebchore: sync actions from gh-aw@v0.93.2 (#290)a9e8b9fchore: sync actions from gh-aw@v0.93.1 (#289)7177a79fix: remove setup JS test tooling and data during sync (#288)Updates
github/gh-aw-actions/setup-clifrom 0.91.7 to 1.2.1Release notes
Sourced from github/gh-aw-actions/setup-cli's releases.
... (truncated)
Commits
406c771chore: sync actions from gh-aw@v1.2.1 (#297)4607d46chore: sync actions from gh-aw@v1.2.0 (#296)221ba4fchore: sync actions from gh-aw@v1.0.1 (#295)9b62390chore: sync actions from gh-aw@v0.93.6 (#294)de9d416chore: sync actions from gh-aw@v0.93.5 (#293)40fb427chore: sync actions from gh-aw@v0.93.4 (#292)e89a567chore: sync actions from gh-aw@v0.93.3 (#291)d9128ebchore: sync actions from gh-aw@v0.93.2 (#290)a9e8b9fchore: sync actions from gh-aw@v0.93.1 (#289)7177a79fix: remove setup JS test tooling and data during sync (#288)Updates
actions/setup-dotnetfrom 6.0.0 to 6.1.0Release notes
Sourced from actions/setup-dotnet's releases.
Commits
0f4a354Prepare v6.1.0 release with updated cache dependency (#798)6ec5c6bAdd fallback install directory when default is not writable (#785)62573f4Bump brace-expansion (#790)67290a9Bump handlebars from 4.7.9 to 4.7.10 (#792)0072421Bump actions/checkout from 7.0.0 to 7.0.1 (#788)9ead317Bump undici from 6.28.0 to 6.29.1 (#784)349aa19Add skip-lts-prepass input to optimize .NET SDK installation process (#791)e2cf7c6Bump eslint-plugin-jest from 29.15.2 to 29.16.6 (#771)7576362Bump eslint from 10.5.0 to 10.11.0 (#772)074373fAdd check-latest input to reuse a locally installed .NET SDK and skip network...