Upgrade agentic workflows to v0.46.1

[Copilot]

Upgrades all agentic workflows from v0.42.13 to v0.46.1 via gh aw upgrade.

Changes

Core Updates:

• Dispatcher agent and prompt references: v0.42.13 → v0.46.1
• Field rename: infer: false → disable-model-invocation: true
• Codemod: needs.activation.outputs.text → steps.sanitized.outputs.text (plan.md)
• GitHub Actions versions updated and all lock files regenerated

Network Configuration (Strict Mode Compliance):

v0.46.1 enforces ecosystem names over specific domains in strict mode:

• gpl-dependency-checker.md: [proxy.golang.org, sum.golang.org, pkg.go.dev] → go ecosystem
• large-payload-tester.md, nightly-mcp-stress-test.md: removed explicit docker.io → containers ecosystem
• smoke-codex.md, smoke-copilot.md: strict: false (custom domains github, playwright not in ecosystem registry)

All 19 workflows compile without errors.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/actions/cache/releases
  • Triggering command: /usr/bin/gh gh api /repos/actions/cache/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha ependency-checker.lock.yml --global git pull.rebase (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v5
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha ependency-checker.lock.yml --global p/bin/git pull.rebase (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v6
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha ependency-checker.md ame s (http block)
• https://api.github.com/repos/actions/checkout/releases
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/actions/download-artifact/releases
  • Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/actions/github-script/releases
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/actions/setup-go/git/ref/tags/v6
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha l --global /usr/local/bin/git user.name (http block)
• https://api.github.com/repos/actions/setup-go/releases
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/actions/setup-node/releases
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/actions/setup-python/releases
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-python/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v4 --jq .object.sha gger.lock.yml --global /usr/local/bin/git user.email (http block)
• https://api.github.com/repos/actions/upload-artifact/git/ref/tags/v5
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v5 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v5 --jq .object.sha logs/command.sh (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/git/ref/tags/v5 --jq .object.sha ependency-checker.md ame ache/uv/0.10.4/x86_64/git (http block)
• https://api.github.com/repos/actions/upload-artifact/releases
  • Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/anchore/sbom-action/releases
  • Triggering command: /usr/bin/gh gh api /repos/anchore/sbom-action/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/astral-sh/setup-uv/releases
  • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/docker/build-push-action/git/ref/tags/v6
  • Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha ependency-checker.md ame bin/git (http block)
• https://api.github.com/repos/docker/build-push-action/releases
  • Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/docker/login-action/git/ref/tags/v3
  • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha ependency-checker.md ame e/git pull.rebase (http block)
• https://api.github.com/repos/docker/login-action/releases
  • Triggering command: /usr/bin/gh gh api /repos/docker/login-action/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v3
  • Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha ependency-checker.md --global e/git pull.rebase (http block)
• https://api.github.com/repos/docker/setup-buildx-action/releases
  • Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/docker/setup-qemu-action/git/ref/tags/v3
  • Triggering command: /usr/bin/gh gh api /repos/docker/setup-qemu-action/git/ref/tags/v3 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/docker/setup-qemu-action/git/ref/tags/v3 --jq .object.sha ependency-checker.lock.yml --global /home/REDACTED/.config/composer/vendor/bin/git pull.rebase (http block)
• https://api.github.com/repos/docker/setup-qemu-action/releases
  • Triggering command: /usr/bin/gh gh api /repos/docker/setup-qemu-action/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/github/gh-aw-mcpg/actions/workflows
  • Triggering command: `/usr/bin/gh gh workflow list --all --json id,name,path,state s to v0.46.1

• Applied codemods: transformed activation outputs to sanitized step in plan.md
• Fixed network configurations for strict mode compliance:
  • gpl-dependency-chec 64/bin/git` (http block)

• https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.46.1
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.46.1 --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.46.1 --jq .object.sha l --global bin/git user.name (http block)
• https://api.github.com/repos/github/gh-aw/releases
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/releases --jq .[].tag_name (http block)
• https://api.github.com/repos/github/gh-aw/releases/latest
  • Triggering command: /home/REDACTED/.local/share/gh/extensions/gh-aw/gh-aw /home/REDACTED/.local/share/gh/extensions/gh-aw/gh-aw upgrade --verbose (http block)
• https://api.github.com/repos/githubnext/gh-aw/releases
  • Triggering command: /usr/bin/gh gh api /repos/githubnext/gh-aw/releases --jq .[].tag_name (http block)
• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login r.lock.yml --global t user.name (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull request overview

This PR upgrades all agentic workflows from v0.42.13 to v0.46.1 via the gh aw upgrade command, applying automated version updates, field renames, codemods, and network configuration fixes for strict mode compliance.

Changes:

• Updated dispatcher agent and all workflow references from v0.42.13 to v0.46.1
• Renamed field infer: false to disable-model-invocation: true in agent configuration
• Applied codemod transforming needs.activation.outputs.text to steps.sanitized.outputs.text in plan.md
• Fixed network configurations for strict mode: replaced specific domains with ecosystem names (go, containers)
• Set strict: false for workflows using custom domains not in ecosystem registry
• Updated GitHub Actions versions and regenerated all lock files

Reviewed changes

Copilot reviewed 27 out of 27 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/agents/agentic-workflows.agent.md	Updated agent config: version v0.46.1, field rename to disable-model-invocation
.github/workflows/plan.md	Applied codemod: activation outputs → sanitized step outputs
.github/workflows/gpl-dependency-checker.md	Network config: replaced Go-specific domains with go ecosystem
.github/workflows/large-payload-tester.md	Network config: removed explicit docker.io (uses containers ecosystem)
.github/workflows/nightly-mcp-stress-test.md	Network config: removed explicit docker.io
.github/workflows/smoke-codex.md	Set strict: false for custom domain support
.github/workflows/smoke-copilot.md	Set strict: false for custom domain support
.github/workflows/language-support-tester.lock.yml	Added container pre-pull step to prevent initialization timeouts
.github/workflows/*.lock.yml (all)	Regenerated with v0.46.1: version updates, API proxy support, prompt artifact handling
.github/workflows/agentics-maintenance.yml	Updated to v0.46.1, adjusted cron schedule

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.