Upgrade workflows to gh-aw v0.91.5

[lpcox]

Summary

Upgrade the repository's agentic workflows from gh-aw v0.91.4 to the latest pre-release, v0.91.5.

Changes

• Ran gh aw upgrade --pre-releases
• Updated gh-aw setup actions to v0.91.5
• Updated action pins for actions/setup-node and github/codeql-action/upload-sarif
• Updated gh-aw firewall container image pins
• Refreshed the agentic-workflows dispatcher skill
• Recompiled all 34 agentic workflows and regenerated their lock files

Verification

• gh aw compile — 34/34 workflows compiled successfully
• make agent-finished — passed formatting, build, lint, Go tests, and 675 Rust guard tests

The compiler reported the repository's existing advisory warnings, but no compilation errors.

[Copilot]

🟢 Approval recommended

The generated workflows and verified release pins are consistent with v0.91.5, with no unresolved issues found.

0 open findings

What changed in this PR

Upgrades all agentic workflows to gh-aw v0.91.5 and refreshes generated runtime configuration.

Changes:

• Updates gh-aw setup actions and dependency pins.
• Regenerates 34 workflow lock files with new firewall, routing, telemetry, and safe-output behavior.
• Refreshes the agentic-workflows skill catalog.

File	Description
.github/​aw/​actions-lock.json	Updates action and firewall pins.
.github/​skills/​agentic-workflows/​SKILL.md	Adds security-review debugging guidance.
.github/​workflows/​agentics-maintenance.yml	Upgrades maintenance jobs to v0.91.5.
.github/​workflows/​daily-compliance-checker.lock.yml	Regenerates compiled workflow.
.github/​workflows/​duplicate-code-detector.lock.yml	Regenerates compiled workflow.
.github/​workflows/​gateway-issue-dispatcher.lock.yml	Regenerates compiled workflow.
.github/​workflows/​ghcr-download-tracker.lock.yml	Regenerates compiled workflow.
.github/​workflows/​github-mcp-guard-coverage-checker.lock.yml	Regenerates compiled workflow.
.github/​workflows/​go-fan.lock.yml	Regenerates compiled workflow.
.github/​workflows/​go-logger.lock.yml	Regenerates compiled workflow.
.github/​workflows/​gpl-dependency-checker.lock.yml	Regenerates compiled workflow.
.github/​workflows/​guard-status-tracker.lock.yml	Regenerates compiled workflow.
.github/​workflows/​integrity-filtering-audit.lock.yml	Regenerates compiled workflow.
.github/​workflows/​issue-monster.lock.yml	Regenerates compiled workflow.
.github/​workflows/​large-payload-tester.lock.yml	Regenerates compiled workflow.
.github/​workflows/​mcp-gateway-log-analyzer.lock.yml	Regenerates compiled workflow.
.github/​workflows/​nightly-docs-reconciler.lock.yml	Regenerates compiled workflow.
.github/​workflows/​nightly-schema-updater.lock.yml	Regenerates compiled workflow.
.github/​workflows/​nightly-workflow-compiler.lock.yml	Regenerates compiled workflow.
.github/​workflows/​plan.lock.yml	Regenerates compiled workflow.
.github/​workflows/​readonly-stress-default.lock.yml	Regenerates compiled workflow.
.github/​workflows/​release.lock.yml	Regenerates compiled workflow.
.github/​workflows/​repo-assist.lock.yml	Regenerates compiled workflow.
.github/​workflows/​rust-guard-improver.lock.yml	Regenerates compiled workflow.
.github/​workflows/​semantic-function-refactor.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-allowonly.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-copilot.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-long-session.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-otel-tracing.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-proxy-github-script.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-safeoutputs-discussions.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-safeoutputs-issues.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-safeoutputs-labels.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-safeoutputs-prs.lock.yml	Regenerates compiled workflow.
.github/​workflows/​smoke-safeoutputs-reviews.lock.yml	Regenerates compiled workflow.
.github/​workflows/​test-coverage-improver.lock.yml	Regenerates compiled workflow.
.github/​workflows/​test-improver.lock.yml	Regenerates compiled workflow.

🧠 Review effort: Balanced

---

Give feedback about Copilot approvals in this survey to enter a drawing for a $150 gift card.

[github-actions]

🔒 mcpg Read-Only Stress — default

Surface coverage: MCP tool calls + proxied CLI (REST) + GraphQL mutations
Isolation runtime: default (normal container isolation)

Part	Surface	Op	Result	Expected	Status
A	MCP	reads (list_issues, list_pull_requests, get_file_contents, list_commits)	data returned	ALLOWED	✅
B	MCP	writes (reaction/star/issue/comment/branch/file/PR)	all 6 targeted write tools absent from the 23-tool read-only catalog	BLOCKED	⚠️
C	CLI	reads (list_issues, get_file_contents via gateway github CLI)	data returned	ALLOWED	✅
D	CLI	REST writes (reaction/star/issue/comment)	gh CLI unauthenticated (no GH_TOKEN) — not attempted	BLOCKED	⚠️
E	CLI	GraphQL mutations (addReaction/addStar/createIssue)	same auth gap as Part D — not attempted	BLOCKED	⚠️

Overall: INCONCLUSIVE

⚠️ Part B: the backend GitHub MCP server only exposes 23 read-only tools (get_*/list_*/search_*/issue_read/pull_request_read); none of the 6 targeted write tools (add_issue_comment, star_repository, issue_write, create_branch, create_or_update_file, create_pull_request) appear in the catalog at all. This confirms gh-aw's GITHUB_READ_ONLY=1 backend config but cannot independently exercise mcpg's own DIFC/guard write-blocking layer, since no write tool ever reaches a write-capable backend to begin with.

⚠️ Parts D/E: gh auth status shows no authenticated host and no GH_TOKEN is set in this job's environment, so no REST or GraphQL write call could even be attempted — the token-scope boundary could not be exercised in this run.

No writes leaked on any surface. Independent evidence of mcpg's own write-blocking is covered by internal/guard/internal/difc unit tests, not this probe.

🔒 mcpg read-only stress (default AWF runtime) by Read-Only Stress: default runtime