[lpcox]

Summary

Upgrades the repository’s agentic workflow outputs using the latest pre-release upgrade path available from gh-aw v1.0.1.

Changes

• Ran gh aw upgrade --pre-releases
• Updated github/gh-aw-actions/setup from v1.0.0 to v1.0.1
• Updated github/gh-aw-actions/setup-cli from v1.0.0 to v1.0.1
• Recompiled all 34 agentic workflows
• Regenerated 35 workflow YAML/lock outputs plus .github/aw/actions-lock.json

Relevant upstream changes

• Newer generated setup action pins and checksums
• Updated generated runtime/setup structure across compiled workflows
• Upstream unreleased guidance includes stricter trusted checksum-manifest handling and several workflow compiler/runtime hardening changes

Validation

• gh aw upgrade --pre-releases — 34/34 workflows compiled successfully
• make agent-finished — passed
  • Go formatting/build/lint passed
  • Go test suite passed
  • Rust guard suite passed (685 tests)

The compiler reported existing advisory warnings for /tmp/ prompt references, internal sandbox overrides, release concurrency/checkout settings, and one secret-expression warning; there were no compilation errors.

[github-actions]

🔒 mcpg Read-Only Stress — default

Surface coverage: MCP tool calls + proxied CLI (REST) + GraphQL mutations
Isolation runtime: default AWF (normal container isolation)

Part	Surface	Op	Result	Expected	Status
A	MCP	reads (list_issues, list_pull_requests, get_file_contents, list_commits)	data returned	ALLOWED	✅
B	MCP	writes (add_issue_comment/star_repository/issue_write/create_branch/create_or_update_file/create_pull_request)	all 6 write tools ABSENT from the 23-tool catalog; no call attempted	BLOCKED	⚠️
C	CLI	reads (github CLI list_issues, get_file_contents)	data returned	ALLOWED	✅
D	CLI	REST writes (reaction/star/issue/comment)	gh CLI unauthenticated — no write attempted	BLOCKED	⚠️
E	CLI	GraphQL mutations (addReaction/addStar/createIssue)	gh CLI unauthenticated — no mutation attempted	BLOCKED	⚠️

Overall: INCONCLUSIVE

⚠️ Part B: the GitHub MCP toolset exposed only 23 read-only tools; all 6 targeted write tools were absent from the catalog entirely (backend launched with GITHUB_READ_ONLY=1 per gh-aw architecture), so gateway-level write-blocking could not be independently exercised — this confirms backend/toolset config, not mcpg's own DIFC/guard layer.

⚠️ Parts D/E: gh auth status reported "You are not logged into any GitHub hosts" — the proxied CLI write/mutation probes could not be run, so the token-scope boundary was not validated this run.

No writes, reactions, stars, issues, comments, branches, files, or PRs were created or leaked in this run.

🔒 mcpg read-only stress (default AWF runtime) by Read-Only Stress: default runtime

[Copilot]

🔵 Needs a closer look

Upgrading all agentic workflows to a same-day gh-aw pre-release that uses write tokens, alongside runner, timeout, and permission changes, requires maintainer supply-chain review and live CI validation.

No open issues 🎉

What changed in this PR

Updates MCP Gateway’s generated agentic workflows to gh-aw v1.0.1, refreshing the runtime used for repository maintenance, smoke tests, and automated analysis.

Changes:

• Updates setup/setup-cli action pins and compiler metadata; selected workflows also move to Copilot CLI 1.0.103 with updated checksums.
• Adds harness-retry and safe-output outcome artifacts, plus read access to checks for conclusion jobs.
• Moves code-publication safe-output jobs to ubuntu-latest and limits other affected safe-output jobs to 15 minutes.

File	Description
.github/​workflows/​test-coverage-improver.lock.yml	Refreshes runtime and uses a full runner for publication.
.github/​workflows/​smoke-copilot.lock.yml	Refreshes runtime, diagnostics, and safe-output timeout.
.github/​workflows/​semantic-function-refactor.lock.yml	Updates generated setup, artifacts, permissions, and timeout.
.github/​workflows/​readonly-stress-default.lock.yml	Updates stress-test runtime and safe-output settings.
.github/​workflows/​nightly-workflow-compiler.lock.yml	Updates Copilot CLI and publication runner.
.github/​workflows/​nightly-schema-updater.lock.yml	Refreshes runtime and publication runner.
.github/​workflows/​nightly-docs-reconciler.lock.yml	Updates Copilot CLI, diagnostics, and safe-output timeout.
.github/​workflows/​mcp-gateway-log-analyzer.lock.yml	Updates analyzer runtime, diagnostics, and timeout.
.github/​workflows/​integrity-filtering-audit.lock.yml	Updates audit runtime, diagnostics, and timeout.
.github/​workflows/​guard-status-tracker.lock.yml	Updates tracker runtime, artifacts, and timeout.
.github/​workflows/​go-fan.lock.yml	Refreshes runtime, diagnostics, and safe-output settings.
.github/​workflows/​ghcr-download-tracker.lock.yml	Updates tracker runtime, diagnostics, and timeout.
.github/​workflows/​gateway-issue-dispatcher.lock.yml	Updates dispatcher runtime, artifacts, and timeout.
.github/​workflows/​duplicate-code-detector.lock.yml	Updates detector runtime, diagnostics, and timeout.
.github/​workflows/​agentics-maintenance.yml	Updates setup actions and installed gh-aw version.
.github/​aw/​actions-lock.json	Records v1.0.1 setup and setup-cli action pins.

_{Review effort: Max}