[dependabot]

Bumps github/gh-aw/actions/setup from 0.93.3 to 1.0.1.

Release notes

Sourced from github/gh-aw/actions/setup's releases.

v1.0.1

🌟 Release Highlights

v1.0.1 focuses on safer pull request outputs, smoother compile and update workflows, and improved observability.

✨ What's New

• Lock-safe pull request outputs: code-producing workflows now use lock-safe PR outputs, with a suggested lock exclusion when workflow permission pushes fail (#72396, #72423).
• Actions-lock integration: compile can now optionally integrate with actions-lock (#72395).
• Guided pull_request_target fixes: guided remediation with safe role restriction (#72412).
• Interactive org and enterprise update rollouts (#72418).
• Native Actions expression grammar replaces legacy expression parsing (#72413).
• Richer unified sessions: safe-output, safe job/script, and memory-save outcomes are now recorded (#72146, #72138, #72133), plus harness retry telemetry in spans and usage artifacts (#71934).
• Copilot CLI upgraded to 1.0.103 with a reviewed checksum pin (#72099).

🐛 Bug Fixes & Improvements

• Preserve cancelled startup failure diagnostics and suppress noisy startup-failure reports for cancelled jobs (#72432, #72405).
• Fix privileged AWF environment forwarding on sudo-rs (#72409).
• Merge imported job outputs with main workflow precedence (#72407).
• Honor newer cached action pins in runtime setup (#72272).
• Trust same-repository bot PRs triggered by labels (#72074).
• Enforce ubuntu-slim timeout limits and upgrade default runners for longer jobs (#72131).
• Fill model pricing gaps and accept none/max for pinned Codex routing (#72414, #70952).
• Harden AWF release download retries and fix work-queue provisioning recovery (#72157, #72400).

📚 Documentation

• New explanation of the activation gate and CAO integration (#72379) and a leaner troubleshooting guide (#72280).

Generated by 🚀 Release · copilot · auto · ~15 AIC · ⊞ 12.9K

---

What's Changed

• Trust same-repository bot PRs triggered by labels by @pelikhan with @Copilot in github/gh-aw#72074
• Upgrade Copilot CLI to 1.0.103 with reviewed checksum pin by @pelikhan with @Copilot in github/gh-aw#72099
• [blog] Agent of the Day – 2026-10-26 by @github-actions[bot] in github/gh-aw#72127
• Soften container pin update failure messages by @dsyme in github/gh-aw#72093
• Use Gonum helpers for grader descriptive statistics by @pelikhan with @Copilot in github/gh-aw#72100
• Correct map tool usage in built-in ledger smoke workflow by @pelikhan with @Copilot in github/gh-aw#72095
• Make setup action reference tests deterministic by @pelikhan in github/gh-aw#72155
• Enforce ubuntu-slim timeout limits and upgrade default runners for longer jobs by @pelikhan with @Copilot in github/gh-aw#72131
• Record memory save outcomes in unified sessions and conclusion data by @pelikhan with @Copilot in github/gh-aw#72133
• Model routing: accept none/max for pinned Codex and add routed Codex smoke by @SivaKesava1 with @Copilot in github/gh-aw#70952
• Preserve harness retry telemetry in spans and usage artifacts by @pelikhan with @Copilot in github/gh-aw#71934
• Record safe job and script outcomes in unified sessions by @pelikhan with @Copilot in github/gh-aw#72146

... (truncated)

Changelog

Sourced from github/gh-aw/actions/setup's changelog.

Changelog

All notable changes to this project will be documented in this file.

Unreleased

Security

Allow explicitly on.bots-listed Apps to check out same-repository PRs on edited events only when the webhook reports a non-null object-valued body change and no other changed fields. Missing change metadata, title/base changes, and mixed edits continue to require write-or-higher repository permission.

Breaking changes

pull_request_target workflows now default to same-repository PRs only in both strict and non-strict mode. Omitting forks is equivalent to forks: []; no explicit empty list is required. To admit forks, configure exact owner/repo entries or deliberately trusted owner/* patterns, then recompile. Explicit "*" permits unrestricted admission in both modes; strict mode warns and recommends restricting forks instead of rejecting compilation. Strict mode still rejects expressions and unsupported pattern forms. Actor authorization and trusted-checkout restrictions remain mandatory in strict mode; acknowledge-risk, disabled checkout, and trusted checkout policies do not bypass fork-pattern validation or suppress the unrestricted-forks warning.

The gh aw outcomes command has been removed. Use gh aw logs --outcomes to evaluate selected runs, or pipe a run ID to gh aw logs --stdin --repo owner/repo --outcomes. JSON reports now carry per-run observations in .outcomes[] and episode rollups in .episode_outcomes. Historical repository scoring and the separate offline episode-join command have also been removed. Use gh aw logs --episodes --outcomes for episode summaries. --outcomes-dir remains available for JSONL export.

compile --dry-run now rejects authored host steps, custom MCP servers/scripts, custom safe-output scripts, enabled Bash graders, and authored OIDC permissions, including imports. Custom jobs and custom safe-output jobs become disabled, credential-free placeholders with empty outputs. Existing actionable scanner findings fail alongside added findings. Migrate by removing unsupported declarations in a separate diagnostic workflow, reviewing skipped dependencies, and resolving actionable findings before live testing. Ordinary compilation is unchanged; dry-run is still not a hosted execution sandbox.

AWF and downloaded Copilot CLI releases now require a reviewed checksum-manifest digest bundled in the trusted setup action or supplied as literal sandbox.agent.checksums-sha256 (AWF) / engine.checksums-sha256 (Copilot) frontmatter alongside an explicit release version. These values pin checksums.txt / SHA256SUMS.txt, not individual executables. Unreviewed downloads without a supplied pin and latest downloads fail closed instead of trusting a checksum from the same HTTPS origin. Built-in pins cover AWF v0.28.62,

... (truncated)

Commits

• 0627fdb fix: preserve privileged AWF environment on sudo-rs (#72409)
• 0012ca2 Refactor issue and comment Markdown into report trees (#72415)
• d5a51e0 chore: remove dead functions — 3 functions removed (#72463)
• 6380147 Preserve cancelled startup failure diagnostics (#72432)
• a70dfda Add Agent of the Day blog post (#72460)
• 307fa9d fix: refresh vendored Node image pin to patched build (#72382)
• fb98d34 Suggest lock exclusion for workflow permission push failures (#72423)
• b9bb2c5 Replace legacy expression parsing with native Actions grammar (#72413)
• e4dff8d Add interactive org and enterprise update rollouts (#72418)
• deb2957 Add lock-safe pull request outputs and migrate code-producing workflows (#72396)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, github-actions. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.