[actions] Update GitHub Actions versions - 2026-04-03

[github-actions]

GitHub Actions Updates - 2026-04-03

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases and recompiles all workflow lock files.

Summary

• Total actions updated: 6
• Update command: gh aw update
• Workflow lock files: Recompiled — all 183 workflow .lock.yml files regenerated with updated action versions

Notes

• All action updates respect semantic versioning and maintain compatibility
• Actions are pinned to commit SHAs for security
• pkg/workflow/data/action_pins.json synced from actions-lock.json (stale entries removed, github/gh-aw-actions/setup updated to v0.65.7)

Testing

The updated actions will be automatically used in workflow compilations. No manual testing required.

---

This PR was automatically created by the Daily Workflow Updater workflow.

Generated by Daily Workflow Updater · ● 427K · ◷

• expires on Apr 4, 2026, 9:00 PM UTC

[pelikhan]

@copilot recompile

[Copilot]

@copilot recompile

Done. Recompiled all 183 workflow files with the updated action versions. The lock files were already up-to-date; pkg/workflow/data/action_pins.json was synced from actions-lock.json in commit 1fdbe7f.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/graphql
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw %H %ct %D (http block)
• https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
  • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha ithub/workflows --global p/bin/git (http block)
• https://api.github.com/repos/github/gh-aw
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility logs/user.env (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility th .prettierigno-f committer.name /opt/pipx_bin/gi-f (http block)
• https://api.github.com/repos/githubnext/agentics/git/ref/tags/
  • Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha (http block)
  • Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/# --jq .object.sha get 026-04-03-c538a388407b49b3 $name) { hasDiscussionsEnabled } } credential.userngit (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)