Skip to content

chore(ci): dependabot ignore for gh-aw compiler-owned action refs#73

Merged
zircote merged 1 commit into
mainfrom
chore/dependabot-ignore-gh-aw
Jun 12, 2026
Merged

chore(ci): dependabot ignore for gh-aw compiler-owned action refs#73
zircote merged 1 commit into
mainfrom
chore/dependabot-ignore-gh-aw

Conversation

@zircote

@zircote zircote commented Jun 12, 2026

Copy link
Copy Markdown
Owner

Prevents recurrence of the lock-file drift that broke all agentic workflows (gh-aw refs bumped by dependabot without gh aw compile, exit 127 at Start MCP Gateway — fixed in #72). gh-aw upgrades go through gh aw upgrade.

…iles

gh-aw action refs in .lock.yml are compiler output; bumping them without
recompiling broke every agentic workflow (exit 127 at Start MCP Gateway).
gh-aw upgrades go through `gh aw upgrade`.
Copilot AI review requested due to automatic review settings June 12, 2026 18:53
@zircote zircote enabled auto-merge June 12, 2026 18:53

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates Dependabot configuration to prevent automated updates of gh-aw-compiler-owned GitHub Action references, avoiding compiled workflow lockfile drift that can break agentic workflow runtime.

Changes:

  • Added Dependabot ignore rules for github/gh-aw and github/gh-aw-actions under the github-actions ecosystem.
  • Documented the rationale inline (upgrades should go through gh aw upgrade / recompilation rather than Dependabot bumps).

@zircote zircote merged commit e10f62e into main Jun 12, 2026
21 checks passed
@zircote zircote deleted the chore/dependabot-ignore-gh-aw branch June 12, 2026 18:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants