Upgrade gh-aw to v0.49.4 and disable activation comments on all workflows

.github/aw/actions-lock.json

@@ -74,6 +74,16 @@
       "repo": "github/gh-aw/actions/setup",
       "version": "v0.49.2",
       "sha": "1c8368cbfb9ff0cc0781d2d76586fabb3035b0cf"
+    },
+    "github/gh-aw/actions/setup@v0.49.4": {
+      "repo": "github/gh-aw/actions/setup",
+      "version": "v0.49.4",
+      "sha": "bf34f9947505c887fdc597a13b8ff277cccd9c20"
+    },
+    "github/gh-aw/actions/setup@v0.50.1": {
+      "repo": "github/gh-aw/actions/setup",
+      "version": "v0.50.1",
+      "sha": "fad43e3c91a4e1d43e458f68e96574127934e7d1"
     }
   }
 }

.github/workflows/agentics-maintenance.yml

@@ -49,7 +49,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Setup Scripts
-        uses: github/gh-aw/actions/setup@v0.49.2
+        uses: github/gh-aw/actions/setup@v0.50.1
         with:
           destination: /opt/gh-aw/actions
 

.github/workflows/gh-aw-agent-suggestions.md

@@ -63,6 +63,7 @@ tools:
   web-fetch:
 strict: false
 safe-outputs:
+  activation-comments: false
   noop:
   create-issue:
     max: 1

.github/workflows/gh-aw-branch-actions-detective.md

@@ -9,6 +9,7 @@ imports:
   - gh-aw-fragments/mcp-pagination.md
   - gh-aw-fragments/messages-footer.md
   - gh-aw-fragments/safe-output-create-issue.md
+  - gh-aw-fragments/network-ecosystems.md
 engine:
   id: copilot
   model: ${{ inputs.model }}
@@ -58,12 +59,9 @@ tools:
     toolsets: [repos, issues, search, actions]
   bash: true
   web-fetch:
-network:
-  allowed:
-    - defaults
-    - github
 strict: false
 safe-outputs:
+  activation-comments: false
   noop:
   create-issue:
     max: 1

.github/workflows/gh-aw-breaking-change-detector.md

@@ -64,6 +64,7 @@ tools:
   web-fetch:
 strict: false
 safe-outputs:
+  activation-comments: false
   noop:
   create-issue:
     max: 1

.github/workflows/gh-aw-bug-exterminator.md

@@ -58,16 +58,18 @@ concurrency:
   group: bug-exterminator
   cancel-in-progress: true
 permissions:
+  actions: read
   contents: read
   issues: read
   pull-requests: read
 tools:
   github:
-    toolsets: [repos, issues, pull_requests, search, labels]
+    toolsets: [repos, issues, pull_requests, search, labels, actions]
   bash: true
   web-fetch:
 strict: false
 safe-outputs:
+  activation-comments: false
   noop:
 timeout-minutes: 90
 steps:

.github/workflows/gh-aw-bug-hunter.md

@@ -54,16 +54,18 @@ concurrency:
   group: bug-hunter
   cancel-in-progress: true
 permissions:
+  actions: read
   contents: read
   issues: read
   pull-requests: read
 tools:
   github:
-    toolsets: [repos, issues, pull_requests, search, labels]
+    toolsets: [repos, issues, pull_requests, search, labels, actions]
   bash: true
   web-fetch:
 strict: false
 safe-outputs:
+  activation-comments: false
   noop:
   create-issue:
     max: 1

.github/workflows/gh-aw-code-duplication-detector.md

@@ -74,6 +74,7 @@ tools:
   serena: ["go", "python", "typescript", "java", "csharp", "rust"]
 strict: false
 safe-outputs:
+  activation-comments: false
   noop:
   create-issue:
     max: 1

.github/workflows/gh-aw-code-duplication-fixer.md

@@ -59,17 +59,19 @@ concurrency:
   group: code-duplication-fixer
   cancel-in-progress: true
 permissions:
+  actions: read
   contents: read
   issues: read
   pull-requests: read
 tools:
   github:
-    toolsets: [repos, issues, pull_requests, search]
+    toolsets: [repos, issues, pull_requests, search, actions]
   bash: true
   web-fetch:
   serena: ["go", "python", "typescript", "java", "csharp", "rust"]
 strict: false
 safe-outputs:
+  activation-comments: false
   noop:
 timeout-minutes: 90
 steps:

.github/workflows/gh-aw-code-simplifier.md

@@ -57,16 +57,18 @@ concurrency:
   group: code-simplifier
   cancel-in-progress: true
 permissions:
+  actions: read
   contents: read
   issues: read
   pull-requests: read
 tools:
   github:
-    toolsets: [repos, issues, pull_requests, search]
+    toolsets: [repos, issues, pull_requests, search, actions]
   bash: true
   web-fetch:
 strict: false
 safe-outputs:
+  activation-comments: false
   noop:
 timeout-minutes: 90
 steps: