chore: upgrade and recompile all workflows to gh-aw v0.69.2

[lpcox]

Summary

Upgrades all agentic workflow lock files to gh-aw v0.69.2 and recompiles.

Action upgrades

Action	From	To
gh-aw/actions/setup	v0.68.7	v0.69.2
gh-aw-actions/setup	v0.68.7	v0.69.2
gh-aw-actions/setup-cli	v0.68.7	v0.69.2
actions/github-script	v8	v9.0.0

Changes

• 29 workflow lock files recompiled
• Post-processing applied to smoke/build-test lock files
• No codemods needed (gh aw fix reported no fixes needed)

[Copilot]

Pull request overview

This PR upgrades the repository’s agentic workflow lock files to gh-aw v0.69.2 and recompiles them, updating pinned action SHAs/versions and regenerating the compiled workflow runtime steps accordingly.

Changes:

• Bumps gh-aw action versions/SHAs across workflows (and updates the workflow metadata/compiled version markers to v0.69.2).
• Regenerates workflow runtime steps (e.g., MCP gateway port changes, CLI proxy step naming, agent config folder list updates).
• Updates the repo’s gh-aw action lock mapping for setup / setup-cli / github/gh-aw/actions/setup.

Show a summary per file

File	Description
.github/workflows/update-release-notes.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and container/action refs.
.github/workflows/test-coverage-improver.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and safe-outputs schema.
.github/workflows/smoke-copilot-byok.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and allowed-domains env injection.
.github/workflows/security-review.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and cache step naming.
.github/workflows/plan.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and allowed-domains env injection.
.github/workflows/firewall-issue-dispatcher.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and container/action refs.
.github/workflows/doc-maintainer.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and safe-outputs schema.
.github/workflows/dependency-security-monitor.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and safe-outputs schema.
.github/workflows/cli-flag-consistency-checker.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and container/action refs.
.github/workflows/ci-doctor.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and cache step naming.
.github/workflows/ci-cd-gaps-assessment.lock.yml	Recompiled lock file to v0.69.2; updates runtime steps and container/action refs.
.github/aw/actions-lock.json	Updates gh-aw action lock entries to v0.69.2 SHAs.
.github/agents/agentic-workflows.agent.md	Updates referenced gh-aw documentation/prompt URLs to v0.69.2.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 31/31 changed files
• Comments generated: 10

[github-actions]

Smoke test results:

• ✅ GitHub MCP: Last 2 merged PRs retrieved
• ✅ Playwright: GitHub page title verified
• ✅ File Writing: Test file created
• ✅ Bash Tool: File verified

Status: PASS

💥 [THE END] — Illustrated by Smoke Claude

[github-actions]

🔥 Smoke Test: Copilot BYOK (Offline) Mode

Test	Result
GitHub MCP (list merged PRs)	✅ Latest merged: #2136
GitHub.com connectivity	⚠️ Template vars not expanded (${{ steps.smoke-data.outputs.SMOKE_HTTP_CODE }})
File write/read	⚠️ Template vars not expanded — file path unavailable
BYOK inference (agent → api-proxy → api.githubcopilot.com)	✅ Responding now

Overall: PARTIAL — BYOK inference and MCP confirmed ✅; pre-step outputs not injected into prompt.

Running in BYOK offline mode (COPILOT_OFFLINE=true) via api-proxy → api.githubcopilot.com.

PR author: @lpcox | No assignees.

🔑 BYOK report filed by Smoke Copilot BYOK

[github-actions]

🔬 Smoke Test Results

Test	Result
GitHub MCP (list merged PRs)	✅ PR #2136 returned
GitHub.com HTTP connectivity	⚠️ Pre-step data unavailable (template vars not expanded)
File write/read	⚠️ Pre-step data unavailable (template vars not expanded)

Overall: PARTIAL — MCP connectivity confirmed; pre-computed test data was not injected.

PR author: @lpcox | Assignees: none

📰 BREAKING: Report filed by Smoke Copilot

[github-actions]

Smoke test results:
PR titles:

• fix: inject OPENAI_API_KEY/CODEX_API_KEY placeholders for Codex api-proxy routing
• Increase Smoke Claude turn budget to prevent premature engine termination

1. GitHub MCP review last 2 merged PRs: ✅
2. safeinputs-gh query 2 PRs: ❌ (tool unavailable; fallback gh used)
3. Playwright github.com title contains GitHub: ✅
4. Tavily search returned >=1 result: ❌ (tool unavailable)
5. File write in /tmp/gh-aw/agent: ✅
6. Bash cat verification: ✅
7. Discussion query+oracle comment: ❌ (query tool unavailable; fallback query + comment posted to discussion [Pelis Agent Factory Advisor] Agentic Workflow Maturity Analysis — April 2026 #2143)
8. npm ci && npm run build: ✅
   Overall status: FAIL

Warning

⚠️ Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

[github-actions]

Smoke Test: GitHub Actions Services Connectivity

Check	Result
redis-cli PING → host.docker.internal:6379	❌ FAILED — redis-cli not available (no apt access in sandbox)
pg_isready → host.docker.internal:5432	❌ FAILED — no response
psql SELECT 1 → smoketest db	❌ FAILED — no response (port unreachable)

All 3 checks failed. host.docker.internal resolves to 172.17.0.1 but neither port 6379 nor 5432 is reachable from this sandbox environment. The smoke-services label was not applied.

🔌 Service connectivity validated by Smoke Services

[github-actions]

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	passed	✅ PASS
Go	env	✅	passed	✅ PASS
Go	uuid	✅	passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	passed	✅ PASS
Node.js	execa	✅	passed	✅ PASS
Node.js	p-limit	✅	passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #2144 · ● 732.1K · ◷