Update GitHub Actions versions and apply activation output transformations by Copilot · Pull Request #16374 · github/gh-aw

Copilot · 2026-02-17T14:50:56Z

Actions Updated

super-linter/super-linter: v8.2.1 → v8.5.0
github/stale-repos: v3 → v3.0.2

Activation Output Transformations

The compiler now generates prompts within the activation job context, eliminating the need to pass sanitized content through job outputs. Transformed needs.activation.outputs.* references to steps.sanitized.outputs.* in 13 workflows:

Before:

**Triggering Content**: "${{ needs.activation.outputs.text }}"

After:

**Triggering Content**: "${{ steps.sanitized.outputs.text }}"

This removes the compute_text step from activation jobs and eliminates text, title, and body from activation job outputs, as these are now referenced directly from the sanitization step.

Affected Workflows

archie
brave
changeset
cloclo
craft
grumpy-reviewer
issue-classifier
pdf-summary
plan
poem-bot
q
scout
security-review

All 155 workflow lock files regenerated.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

https://api.github.com/graphql
- Triggering command: /usr/bin/gh gh run download 22093060270 -n agent-artifacts -D /tmp/patch-download (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
- Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw l ary.lock.yml s.lock.yml sues�� ock.yml lock.yml e_modules/.bin/sh e-checker.lock.yinfocmp .yml ndexer.lock.yml yml (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha runs/20260217-145817-14213/test-286115266/.github/workflows /tmp/go-build361148110/b100/vet.cfg 148110/b347/vet.cfg l (http block)
https://api.github.com/repos/actions/ai-inference/git/ref/tags/v2
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v2 --jq .object.sha (http block)
https://api.github.com/repos/actions/ai-inference/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/releases --jq .[].tag_name -c=4 -nolocalimports -importcfg /tmp/go-build3050419851/b279/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/gitutil/gitutil.go (http block)
https://api.github.com/repos/actions/attest-build-provenance/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/attest-build-provenance/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/cache/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/cache/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/11bd71901bbe5b1630ceea73d27597364c9af683 --jq .object.sha (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha ole.test git 64/pkg/tool/linux_amd64/vet get --local ache/go/1.25.0/x--show-toplevel 64/pkg/tool/linux_amd64/vet (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha se 148110/b074/vet.cfg 148110/b390/logger.test t/agentics/contegit (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha auto-triage-issues.md ../../../**/*.json 148110/b169/vet.cfg --ignore-path ../../../.prettirev-parse me: String!) { --show-toplevel /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/vet -uns�� -unreachable=false /tmp/go-build361148110/b046/vet.cfg 148110/b340/vet.cfg --noprofile (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha -bool -buildtags /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/link -o /tmp/go-build361148110/b412/testutil.test -importcfg /usr/bin/git -s -w -buildmode=exe git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha xterm-color cfg 64/pkg/tool/linux_amd64/vet (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha -unreachable=false /tmp/go-build361148110/b287/vet.cfg /usr/bin/git ithub/workflows (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha ets.TOKEN }} /usr/bin/gh /usr/bin/git graphql -f x_amd64/vet git rev-�� tup/sh/sanitize_path.sh' '/usr/bin:/usr/local/bin:::' && echo "$PATH" x_amd64/vet /usr/bin/git k rev-parse x_amd64/vet git (http block)
https://api.github.com/repos/actions/checkout/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v6 --jq .object.sha rsions (http block)
https://api.github.com/repos/actions/checkout/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/checkout/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/create-github-app-token/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/create-github-app-token/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/download-artifact/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/download-artifact/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v7
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v7 --jq .object.sha (http block)
https://api.github.com/repos/actions/github-script/git/ref/tags/v8
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha k/gh-aw/gh-aw/.github/workflows (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha ithub/workflows (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha --noprofile (http block)
https://api.github.com/repos/actions/github-script/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/github-script/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/setup-dotnet/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-dotnet/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/4dc6199c7b1a012772edbd06daecab0f50c9053c --jq .object.sha (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha artifacts-summary.md pkg/mod/github.com/stretchr/testify@v1.11.1/assert/assertion_format.go 148110/b171/vet.cfg ithub/workflows (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v5 --jq .object.sha (http block)
https://api.github.com/repos/actions/setup-go/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v6 --jq .object.sha ock.yml ml rgo/bin/git (http block)
https://api.github.com/repos/actions/setup-go/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/releases --jq .[].tag_name (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/releases --jq .[].tag_name -c=4 -nolocalimports -importcfg /tmp/go-build3050419851/b318/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/repoutil/repoutil.go (http block)
https://api.github.com/repos/actions/setup-java/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-java/releases --jq .[].tag_name -c=4 -nolocalimports -importcfg /tmp/go-build3050419851/b277/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/envutil/envutil.go (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha archie.md k/gh-aw/gh-aw/pkg/cli/fileutil/fileutil_test.go ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile --noprofile (http block)
https://api.github.com/repos/actions/setup-node/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha -c=4 -nolocalimports -importcfg /tmp/go-build3982254784/b001/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/cmd/gh-aw/main.go (http block)
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v6 --jq .object.sha TOKEN"; }; f get TOKEN"; }; f get k/_temp/ghcca-node/node/bin/git (http block)
https://api.github.com/repos/actions/setup-node/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/setup-python/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/setup-python/releases --jq .[].tag_name (http block)
https://api.github.com/repos/actions/upload-artifact/releases
- Triggering command: /usr/bin/gh gh api /repos/actions/upload-artifact/releases --jq .[].tag_name (http block)
https://api.github.com/repos/anchore/sbom-action/git/ref/tags/v0
- Triggering command: /usr/bin/gh gh api /repos/anchore/sbom-action/git/ref/tags/v0 --jq .object.sha (http block)
https://api.github.com/repos/anchore/sbom-action/releases
- Triggering command: /usr/bin/gh gh api /repos/anchore/sbom-action/releases --jq .[].tag_name (http block)
https://api.github.com/repos/astral-sh/setup-uv/releases
- Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/releases --jq .[].tag_name (http block)
https://api.github.com/repos/cli/gh-extension-precompile/releases
- Triggering command: /usr/bin/gh gh api /repos/cli/gh-extension-precompile/releases --jq .[].tag_name (http block)
https://api.github.com/repos/denoland/setup-deno/releases
- Triggering command: /usr/bin/gh gh api /repos/denoland/setup-deno/releases --jq .[].tag_name -c=4 -nolocalimports -importcfg /tmp/go-build3050419851/b320/importcfg -embedcfg /tmp/go-build3050419851/b320/embedcfg -pack (http block)
https://api.github.com/repos/docker/build-push-action/git/ref/tags/v6
- Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/git/ref/tags/v6 --jq .object.sha (http block)
https://api.github.com/repos/docker/build-push-action/releases
- Triggering command: /usr/bin/gh gh api /repos/docker/build-push-action/releases --jq .[].tag_name (http block)
https://api.github.com/repos/docker/login-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/git/ref/tags/v3 --jq .object.sha (http block)
https://api.github.com/repos/docker/login-action/releases
- Triggering command: /usr/bin/gh gh api /repos/docker/login-action/releases --jq .[].tag_name (http block)
https://api.github.com/repos/docker/metadata-action/git/ref/tags/v5
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/git/ref/tags/v5 --jq .object.sha (http block)
https://api.github.com/repos/docker/metadata-action/releases
- Triggering command: /usr/bin/gh gh api /repos/docker/metadata-action/releases --jq .[].tag_name (http block)
https://api.github.com/repos/docker/setup-buildx-action/git/ref/tags/v3
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/git/ref/tags/v3 --jq .object.sha (http block)
https://api.github.com/repos/docker/setup-buildx-action/releases
- Triggering command: /usr/bin/gh gh api /repos/docker/setup-buildx-action/releases --jq .[].tag_name -c=4 -nolocalimports -importcfg /tmp/go-build3050419851/b271/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/tty/tty.go (http block)
https://api.github.com/repos/erlef/setup-beam/releases
- Triggering command: /usr/bin/gh gh api /repos/erlef/setup-beam/releases --jq .[].tag_name (http block)
https://api.github.com/repos/github/codeql-action/releases
- Triggering command: /usr/bin/gh gh api /repos/github/codeql-action/releases --jq .[].tag_name -c=4 -nolocalimports -importcfg /tmp/go-build3050419851/b001/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/cmd/gh-aw/main.go (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
- Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
- Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 config 64/pkg/tool/linux_amd64/vet remote.origin.urgit (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
- Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 -f 64/pkg/tool/linux_amd64/vet -f owner=github -f 64/pkg/tool/linux_amd64/vet m/_c�� xterm-color cfg 64/pkg/tool/linux_amd64/vet nore (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
- Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
- Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
- Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 (http block)
https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
- Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 (http block)
https://api.github.com/repos/github/gh-aw/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path k/gh-aw/gh-aw/.g-p (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 /tmp/go-build361148110/b404/importcfg -pack /tmp/go-build361148110/b404/_testmain.go api k/gh-aw/gh-aw/.g-errorsas -f x_amd64/compile l owner=github -f x_amd64/compile (http block)
- Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/c4e091835c7a94dc7d3acb8ed3ae145afb4995f3
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/c4e091835c7a94dc7d3acb8ed3ae145afb4995f3 --jq .object.sha (http block)
https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
- Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha xterm-color (http block)
https://api.github.com/repos/github/stale-repos/releases
- Triggering command: /usr/bin/gh gh api /repos/github/stale-repos/releases --jq .[].tag_name (http block)
https://api.github.com/repos/githubnext/agentics/contents/workflows/ci-doctor.md
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/contents/workflows/ci-doctor.md?ref=ea350161ad5dcc9624cf510f134c6a9e39a6f94d --jq .content (http block)
https://api.github.com/repos/githubnext/agentics/contents/workflows/daily-team-status.md
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/contents/workflows/daily-team-status.md?ref=d3422bf940923ef1d43db5559652b8e1e71869f3 --jq .content (http block)
https://api.github.com/repos/githubnext/agentics/git/ref/tags/-
- Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/- --jq .object.sha (http block)
https://api.github.com/repos/haskell-actions/setup/releases
- Triggering command: /usr/bin/gh gh api /repos/haskell-actions/setup/releases --jq .[].tag_name (http block)
https://api.github.com/repos/nonexistent/repo/actions/runs/12345
- Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion (http block)
https://api.github.com/repos/oven-sh/setup-bun/releases
- Triggering command: /usr/bin/gh gh api /repos/oven-sh/setup-bun/releases --jq .[].tag_name (http block)
https://api.github.com/repos/owner/repo/actions/workflows
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo me: String!) { -nilfunc (http block)
- Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo /home/REDACTED/wor-nilfunc (http block)
https://api.github.com/repos/owner/repo/contents/file.md
- Triggering command: /tmp/go-build361148110/b368/cli.test /tmp/go-build361148110/b368/cli.test -test.testlogfile=/tmp/go-build361148110/b368/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true (http block)
https://api.github.com/repos/ruby/setup-ruby/releases
- Triggering command: /usr/bin/gh gh api /repos/ruby/setup-ruby/releases --jq .[].tag_name (http block)
https://api.github.com/repos/super-linter/super-linter/releases
- Triggering command: /usr/bin/gh gh api /repos/super-linter/super-linter/releases --jq .[].tag_name -c=4 -nolocalimports -importcfg /tmp/go-build3050419851/b275/importcfg -pack /home/REDACTED/work/gh-aw/gh-aw/pkg/styles/theme.go (http block)
- Triggering command: /usr/bin/gh gh api /repos/super-linter/super-linter/releases --jq .[].tag_name (http block)
https://api.github.com/repos/test-owner/test-repo/actions/secrets
- Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name ithub/workflows (http block)
https://api.github.com/user
- Triggering command: /usr/bin/gh gh api user --jq .login (http block)
- Triggering command: /usr/bin/gh gh api user --jq .login --noprofile (http block)
- Triggering command: /usr/bin/gh gh api user --jq .login /home/REDACTED/work/gh-aw/gh-aw/pkg/styles/theme.g-f (http block)

If you need me to access, download, or install something from one of these locations, you can either:

Configure Actions setup steps to set up my environment, which run before the firewall is enabled
Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

This section details on the original issue you should resolve

<issue_title>[actions] Update GitHub Actions versions - February 17, 2026</issue_title>
<issue_description>## GitHub Actions Updates - February 17, 2026

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases.

Actions Updated

super-linter/super-linter: v8.2.1 → v8.5.0
github/stale-repos: v3 → v3.0.2

Summary

Total actions updated: 2
Update command: gh aw update --verbose
Workflow files: 13 workflow .md files updated with activation output transformations

Workflow Files Modified

The following workflow files were updated to apply activation output transformations:

archie.md
brave.md
changeset.md
cloclo.md
craft.md
grumpy-reviewer.md
issue-classifier.md
pdf-summary.md
plan.md
poem-bot.md
q.md
scout.md
security-review.md

Notes

All action updates respect semantic versioning and maintain compatibility
Actions are pinned to commit SHAs for security
Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation
Activation output transformations were automatically applied by the compiler

Testing

The updated actions will be automatically used in workflow compilations. No manual testing required.

This PR was automatically created by the Daily Workflow Updater workflow.

AI generated by Daily Workflow Updater

expires on Feb 18, 2026, 9:35 AM UTC

[!NOTE]
This was originally intended as a pull request, but the git push operation failed.

Workflow Run: View run details and download patch artifact

The patch file is available in the agent-artifacts artifact in the workflow run linked above.

To apply the patch locally:

# Download the artifact from the workflow run https://github.com/github/gh-aw/actions/runs/22093060270
# (Use GitHub MCP tools if gh CLI is not available)
gh run download 22093060270 -n agent-artifacts

# The patch file will be at agent-artifacts/tmp/gh-aw/aw.patch after download
# Apply the patch
git am agent-artifacts/tmp/gh-aw/aw.patch

Show patch preview (282 of 282 lines)

From 53aa8dcadcbacf1c5e2a76eb047673f0a5b7ce55 Mon Sep 17 00:00:00 2001
From: GitHub Actions <actions@github.com>
Date: Tue, 17 Feb 2026 09:33:46 +0000
Subject: [PATCH] [actions] Update GitHub Actions versions - February 17, 2026

- Updated super-linter/super-linter from v8.2.1 to v8.5.0
- Updated github/stale-repos from v3 to v3.0.2
- Applied activation output transformations to affected workflows

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 .github/aw/actions-lock.json          | 10 ----------
 .github/workflows/archie.md           |  4 ++--
 .github/workflows/brave.md            |  2 +-
 .github/workflows/changeset.md        |  2 +-
 .github/workflows/cloclo.md           |  2 +-
 .github/workflows/craft.md            | 10 +++++-----
 .github/workflows/grumpy-reviewer.md  |  2 +-
 .github/workflows/issue-classifier.md |  2 +-
 .github/workflows/pdf-summary.md      |  2 +-
 .github/workflows/plan.md             |  2 +-
 .github/workflows/poem-bot.md         |  2 +-
 .github/workflows/q.md                |  4 ++--
 .github/workflows/scout.md            |  2 +-
 .github/workflows/security-review.md  |  2 +-
 14 files changed, 19 insertions(+), 29 deletions(-)

diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json
index 8ea5eab..29175c8 100644
--- a/.github/aw/actions-lock.json
+++ b/.github/aw/actions-lock.json
@@ -160,11 +160,6 @@
       "version": "v3.32.3",
       "sha": "17ec405481c24be464d4b2c5727a82f700ddb189"
     },
-    "github/stale-repos@v3": {
-      "repo": "github/stale-repos",
-      "version": "v3",
-      "sha": "3477b6488008d9411aaf22a0924ec7c1f6a69980"
-    },
     "github/stale-repos@v3.0.2": {
       "repo": "github/stale-repos",
       "version": "v3.0.2",
@@ -185,11 +180,6 @@
       "version": "v1.288.0",
       "sha": "09a7688d3b55cf0e976497ff046b70949eeaccfd"
     },
-    "super-linter/super-linter@v8.2.1": {
-      "repo": "super-linter/super-linter",
-      "version": "v8.2.1",
-      "sha": "
... (truncated)

Comments on the Issue (you are @copilot in this section)

Fixes [actions] Update GitHub Actions versions - February 17, 2026 #16316

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

…tions - Update super-linter/super-linter: v8.2.1 → v8.5.0 - Update github/stale-repos: v3 → v3.0.2 - Apply activation output transformations to 13 workflows - Recompile all workflow lock files Files updated: - 13 workflows with activation output transformations - 2 workflows with action version updates - All corresponding .lock.yml files regenerated Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot

Pull request overview

This PR updates GitHub Actions to their latest versions and applies activation output transformations across workflow definitions. The compiler now generates prompts directly within the activation job context, eliminating intermediate job outputs.

Changes:

Updated super-linter/super-linter from v8.2.1 to v8.5.0
Updated github/stale-repos from v3 to v3.0.2
Transformed activation output references from needs.activation.outputs.* to steps.sanitized.outputs.* in 13 workflows

Reviewed changes

Copilot reviewed 30 out of 30 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
`.github/workflows/super-linter.md`	Updated super-linter action reference to v8.5.0
`.github/workflows/super-linter.lock.yml`	Updated super-linter SHA and frontmatter hash
`.github/workflows/stale-repo-identifier.md`	Updated stale-repos action reference to v3.0.2
`.github/workflows/stale-repo-identifier.lock.yml`	Updated stale-repos SHA and frontmatter hash
`.github/workflows/security-review.md`	Changed activation output reference to steps.sanitized
`.github/workflows/security-review.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/scout.md`	Changed activation output reference to steps.sanitized
`.github/workflows/scout.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/q.md`	Changed activation output references to steps.sanitized
`.github/workflows/q.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/poem-bot.md`	Changed activation output reference to steps.sanitized
`.github/workflows/poem-bot.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/plan.md`	Changed activation output reference to steps.sanitized
`.github/workflows/plan.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/pdf-summary.md`	Changed activation output reference to steps.sanitized
`.github/workflows/pdf-summary.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/issue-classifier.md`	Changed activation output reference to steps.sanitized
`.github/workflows/issue-classifier.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/grumpy-reviewer.md`	Changed activation output reference to steps.sanitized
`.github/workflows/grumpy-reviewer.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/craft.md`	Changed activation output references to steps.sanitized
`.github/workflows/craft.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/cloclo.md`	Changed activation output reference to steps.sanitized
`.github/workflows/cloclo.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/changeset.md`	Changed activation output reference to steps.sanitized
`.github/workflows/changeset.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/brave.md`	Changed activation output reference to steps.sanitized
`.github/workflows/brave.lock.yml`	Removed activation job outputs and compute_text step
`.github/workflows/archie.md`	Changed activation output references to steps.sanitized
`.github/workflows/archie.lock.yml`	Removed activation job outputs and compute_text step

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-17T15:06:17Z

.github/workflows/super-linter.md

  -e VALIDATE_MARKDOWN=true \
  -v $(pwd):/tmp/lint \
-  ghcr.io/super-linter/super-linter:slim-v8
+  ghcr.io/super-linter/super-linter:slim-v8.5.0


The Docker image reference includes the full version tag v8.5.0, but this differs from the pattern shown in the original line which used slim-v8. Consider whether this should remain as slim-v8 (pointing to the latest v8.x version) or if the explicit version is intentional for consistency with the GitHub Action version pinning.

Copilot · 2026-02-17T15:06:18Z

.github/workflows/super-linter.md

  -e VALIDATE_MARKDOWN=true \
  -v $(pwd):/tmp/lint \
-  ghcr.io/super-linter/super-linter:slim-v8
+  ghcr.io/super-linter/super-linter:slim-v8.5.0


The Docker image reference includes the full version tag v8.5.0, but this differs from the pattern shown in the original line which used slim-v8. Consider whether this should remain as slim-v8 (pointing to the latest v8.x version) or if the explicit version is intentional for consistency with the GitHub Action version pinning.

Initial plan

72066e4

Copilot AI assigned Copilot and pelikhan Feb 17, 2026

Copilot started work on behalf of pelikhan February 17, 2026 14:51 View session

Copilot AI changed the title ~~[WIP] Update GitHub Actions versions to latest compatible releases~~ Update GitHub Actions versions and apply activation output transformations Feb 17, 2026

Copilot AI requested a review from pelikhan February 17, 2026 15:03

Copilot finished work on behalf of pelikhan February 17, 2026 15:03

pelikhan marked this pull request as ready for review February 17, 2026 15:04

Copilot AI review requested due to automatic review settings February 17, 2026 15:04

pelikhan merged commit 7379472 into main Feb 17, 2026
158 of 159 checks passed

pelikhan deleted the copilot/update-github-actions-versions branch February 17, 2026 15:05

Copilot AI reviewed Feb 17, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Update GitHub Actions versions and apply activation output transformations#16374

Update GitHub Actions versions and apply activation output transformations#16374
pelikhan merged 2 commits intomainfrom
copilot/update-github-actions-versions

Copilot AI commented Feb 17, 2026 •

edited

Loading

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Copilot AI Feb 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Comments

Conversation

Copilot AI commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Actions Updated

Activation Output Transformations

Affected Workflows

I tried to connect to the following addresses, but was blocked by firewall rules:

Actions Updated

Summary

Workflow Files Modified

Notes

Testing

Comments on the Issue (you are @copilot in this section)

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Feb 17, 2026 •

edited

Loading