Upgrade agentic workflows and fix stale PR cleanup - #916
Conversation
Upgrade the generated agentic workflow assets and ensure stale PR discovery includes every result page and draft pull requests. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 968a22c2-327f-4d26-8f86-1c59bcd323ea
Address remaining high-confidence items from #899 by bounding the code-testing pipeline and adding eval coverage for grade-tests and find-untested-sources. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: e430fee9-d3df-4ef5-85a4-745ae4b17046
There was a problem hiding this comment.
Pull request overview
This PR upgrades the repository’s gh-aw/agentic workflow runtime and regenerates the associated lock files, while also fixing the stale PR cleanup agent so it reliably finds and processes all old open PRs (including drafts) by paginating through the full result set and providing a noop path when nothing needs action.
Changes:
- Upgraded gh-aw runtime/action pins and regenerated multiple
.lock.ymlworkflows plus the generated maintenance workflow. - Updated the stale PR agent instructions to search only older PRs, include drafts, paginate all pages, and process oldest activity first.
- Added a Copilot Agent “setup steps” workflow and introduced an “agentic-workflows” router skill/agent documentation.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/markdown-linter.md | Updates action pins (checkout + super-linter). |
| .github/workflows/devops-health-investigate.lock.yml | Regenerated lock workflow for newer gh-aw runtime and updated safe outputs / MCP gateway wiring. |
| .github/workflows/copilot-setup-steps.yml | Adds a dedicated Copilot Agent setup workflow (checkout + gh-aw CLI install). |
| .github/workflows/close-stale-prs.agent.md | Updates agent instructions to paginate and include drafts; adds noop behavior. |
| .github/workflows/close-stale-prs.agent.lock.yml | Regenerated lock workflow for the stale PR agent with updated runtime and tooling. |
| .github/workflows/agentics-maintenance.yml | Regenerated maintenance workflow for v0.82.8 with split expiration cleanup jobs and updated caching/forecast steps. |
| .github/skills/agentic-workflows/SKILL.md | Adds an agentic workflow “router” skill for selecting the right gh-aw prompt/guide. |
| .github/aw/actions-lock.json | Updates locked action versions (notably checkout v7 and gh-aw actions v0.82.8). |
| .github/agents/agentic-workflows.md | Updates dispatcher agent metadata and points prompt URLs to raw.githubusercontent.com main branch references. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 14/15 changed files
- Comments generated: 2
Pin the Copilot setup checkout action and include the cutoff date in stale PR search results. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 968a22c2-327f-4d26-8f86-1c59bcd323ea
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: 5e19d263-02a6-45b1-9cfb-424fa4d10863
…-stale-pr-cleanup
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a464e6e4-3e45-41fe-b17d-887c8cb8a448
|
👋 @Evangelink — this PR has merge conflict. When you're ready, please address the feedback and push an update; the triage bot will pick up the next state automatically. (Add the |
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a464e6e4-3e45-41fe-b17d-887c8cb8a448
Skill Coverage Report
Uncovered:
|
|
/evaluate |
Skill Validation Results
[1] Model: claude-opus-4.6 | Judge: claude-opus-4.6 🔍 Full Results - additional metrics and failure investigation steps
▶ Sessions Visualisation -- interactive replay of all evaluation sessions |
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: a464e6e4-3e45-41fe-b17d-887c8cb8a448
Skill Validation Results
[1] Model: claude-opus-4.6 | Judge: claude-opus-4.6 🔍 Full Results - additional metrics and failure investigation steps
▶ Sessions Visualisation -- interactive replay of all evaluation sessions |
Summary
This PR combines an agentic workflow runtime upgrade and stale-PR cleanup fix with related dotnet-test skill and evaluation improvements already present on the branch.
Agentic workflows
nooppath when no stale PR action is requiredThe failed stale-PR run emitted only one warning for PR 703 because it inspected only the newest 100 open pull requests. The corrected search surfaces all eight old draft PRs that were previously beyond the first page.
dotnet-test skills and evaluations
Why
copilot-setup-steps.ymlis newgh aw upgradegenerated this repository-level setup workflow so GitHub Copilot coding agent sessions can install the matchinggh-awCLI before working with agentic workflows. GitHub recognizes thecopilot-setup-stepsjob name and runs it during Copilot agent environment setup. The file is part of the upgraded gh-aw integration, not part of the stale PR cleanup runtime itself.Security review
The post-merge gh-aw compilation flagged
COPILOT_PAT_0throughCOPILOT_PAT_9as newly referenced restricted secrets. These references come frommain's shared PAT-pool integration. I reviewed the flow: the trustedpat_pooljob only checks which secrets are non-empty and emits a numeric index; the agent job then resolves that index to the matching secret through thecase()expression. Secret values are not emitted by the selector or exposed to untrusted steps. No new actions or redirect changes were flagged by compilation. The secret additions are safe to approve.