chore: sync workflow templates

[stranske]

Sync Summary

Files Updated

• agents-auto-pilot.yml: Auto-pilot - end-to-end automation orchestrator (format → optimize → agent → verify)
• artifact-cache/ (1 files): Restores, discovers, and caches workflow artifacts by daily, weekly, or run window

Files Skipped

• pr-00-gate.yml: File exists and sync_mode is create_only
• ci.yml: File exists and sync_mode is create_only
• renovate.json: File exists and sync_mode is create_only
• cross-repo-smoke.yml: File exists and sync_mode is create_only
• llm_slots.json: None

---

Review Checklist

• CI passes with updated workflows
• No repo-specific customizations were overwritten

Source: stranske/Workflows
Source SHA: 0a419d57312129fc4e2e3f767ed436295f81afd3
Template hash: eaf8a4b7c51b
Sync branch: sync/workflows-eaf8a4b7c51b
Consumer repo: stranske/Ready
Manifest: .github/sync-manifest.yml

Summary by CodeRabbit

• Chores
  • Updated build infrastructure dependencies to enhance workflow performance and system reliability.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: d85ab86c-febe-49e1-8418-45bbf70e8e55

📥 Commits

Reviewing files that changed from the base of the PR and between 9df0497 and dec0bf0.

📒 Files selected for processing (2)

• .github/actions/artifact-cache/action.yml
• .github/workflows/agents-auto-pilot.yml

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• stranske/Workflows (auto-detected)

📜 Recent review details

🧰 Additional context used

📓 Path-based instructions (4)

{pyproject.toml,.github/workflows/*.{yml,yaml}}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

{pyproject.toml,.github/workflows/*.{yml,yaml}}: For Python projects with coverage thresholds, ensure both pyproject.toml ([tool.coverage.report] fail_under) and workflow files have matching coverage-min settings, or the lower one will determine the actual threshold
The Manager-Database repository has a coverage threshold of 75%

Files:

• .github/workflows/agents-auto-pilot.yml

.github/workflows/*.{yml,yaml}

📄 CodeRabbit inference engine (.github/copilot-instructions.md)

For GitHub Actions workflow startup_failure errors, check for invalid YAML syntax, invalid permissions: block in workflow_call reusable workflows, invalid permission scopes, or circular workflow references

Files:

• .github/workflows/agents-auto-pilot.yml

.github/workflows/**/*.{yml,yaml}

📄 CodeRabbit inference engine (CLAUDE.md)

Reference reusable workflows in consumer repos with @main unless intentionally pinning to an exact commit SHA for a controlled reason.

Files:

• .github/workflows/agents-auto-pilot.yml

.github/workflows/*.yml

📄 CodeRabbit inference engine (AGENTS.md)

First-party consumers should reference reusable workflows with @main unless intentionally pinning to an exact commit SHA for a controlled reason

Files:

• .github/workflows/agents-auto-pilot.yml

🔀 Multi-repo context stranske/Workflows

Based on my exploration, I have sufficient information to conclude. Let me summarize my findings:

Linked repositories findings

stranske/Workflows

Summary of Changes:
This PR syncs workflow template files from the source repository stranske/Workflows (already using actions/cache v6) to the target repository stranske/Ready (currently on v5).

Key Findings:

1. artifact-cache action (.github/actions/artifact-cache/action.yml) [::stranske/Workflows::]

   • Line 62: Updated from actions/cache@v5 to pinned commit actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6
   • This composite action wraps actions/cache and uses its cache-hit output
   • The action implementation in artifact_cache.js does not have any direct dependencies on v5-specific behavior—it only depends on the cache-hit output which is stable across versions

2. agents-auto-pilot.yml [::stranske/Workflows::]

   • Line 225: Updated from a v5 reference to pinned commit actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6
   • Used for caching pip dependencies (LLM requirements)
   • No custom logic dependent on cache behavior—standard usage pattern

3. Consumers of artifact-cache in stranske/Workflows [::stranske/Workflows::]

   • selftest-reusable-ci.yml: Uses artifact-cache with daily window resolution
   • maint-coverage-guard.yml: Uses artifact-cache three times with weekly resolution
   • reusable-10-ci-python.yml: Uses artifact-cache with daily resolution
   • agents-weekly-metrics.yml: Uses artifact-cache with weekly resolution
   • All these workflows are already deployed with v6 in the source repository

4. Version Status in Source Repository [::stranske/Workflows::]

   • All direct actions/cache references in the source repository (Workflows) are already on v6 (commit 2c8a9bd7457de244a408f35966fab2fb45fda9c8)
   • The version update was committed in 0a419d5 with message "chore(deps): update actions/cache action to v6 (#2520)"
   • This indicates the changes have been tested and validated in the source repository

Breaking Change Assessment:

• The v5→v6 migration uses a pinned commit hash rather than a major version tag, which provides reproducibility
• The artifact-cache action's dependency on actions/cache is minimal—it only uses the cache-hit output, which is compatible between v5 and v6
• No custom cache key formats or behavior-specific logic detected that would break on v6

🔇 Additional comments (2)

.github/workflows/agents-auto-pilot.yml (1)

225-225: LGTM!

The upgrade to actions/cache v6 using the same pinned commit SHA as the composite action ensures consistency across the codebase. The linked repositories context confirms this change has been successfully deployed and tested in the source repository.

.github/actions/artifact-cache/action.yml (1)

62-62: 📐 Maintainability & Code Quality

No action required—commit SHA is correct.

The pinned commit 2c8a9bd7457de244a408f35966fab2fb45fda9c8 is confirmed to be the v6 release of actions/cache. This commit is already deployed and tested in the source repository (stranske/Workflows), as documented in the source repo commit message "chore(deps): update actions/cache action to v6 (#2520)".

---

📝 Walkthrough

Walkthrough

Two CI files are updated to pin actions/cache to the v6 commit SHA: the composite artifact-cache action's restore step and the agents-auto-pilot workflow's pip cache step. Each change is a single-line reference update from the v5 pin to a v6 pin.

Changes

actions/cache v6 upgrade

Layer / File(s)	Summary
Update actions/cache to v6 .github/actions/artifact-cache/action.yml, .github/workflows/agents-auto-pilot.yml	Replaces the v5-pinned actions/cache reference with the v6 commit SHA in the artifact-cache restore step and the agents-auto-pilot pip cache step.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore: sync workflow templates' accurately describes the PR's primary purpose of synchronizing workflow template files from a source repository to the target repository.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch sync/workflows-eaf8a4b7c51b

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Workflow state fingerprint for Keepalive Loop Reporter. Do not edit.

[github-actions]

Workflow state fingerprint for Agents Gate Followups. Do not edit.