Add compiler version to lock file metadata for release builds

[Copilot]

Compiled workflow lock files now include the gh-aw version that generated them, but only for release builds to avoid noise in development.

Changes

• Extended LockMetadata struct with optional CompilerVersion field
• Modified GenerateLockMetadata to populate version when IsRelease() is true (set via -X main.isRelease=true linker flag during release builds)
• Updated metadata extraction and tests to handle the new field

Metadata Format

Dev builds (unchanged):

{"schema_version":"v1","frontmatter_hash":"abc123..."}

Release builds (new):

{"schema_version":"v1","frontmatter_hash":"abc123...","compiler_version":"v0.1.2"}

The version field is omitted from dev builds to keep lock file diffs clean during development. Release builds set -X main.isRelease=true in scripts/build-release.sh, which activates version tracking.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/graphql
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw -nolocalimports -importcfg git conf�� user.email test@example.com /usr/bin/git ta (http block)
• https://api.github.com/repos/actions/ai-inference/git/ref/tags/v1
  • Triggering command: /usr/bin/gh gh api /repos/actions/ai-inference/git/ref/tags/v1 --jq .object.sha --show-toplevel x_amd64/vet g_.a w/js/**/*.json' git (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v3
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v3 --jq .object.sha "prettier" --write 'scripts/**/*.js' --ignore-pa-p (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha --noprofile x_amd64/vet /usr/bin/bash (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha se 0647803/b346/vet.cfg 64/pkg/tool/linux_amd64/vet ath ../../../.prgit (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v4 --jq .object.sha /tmp/shared-actions-test68858505 config /usr/bin/git remote.origin.urgit (http block)
• https://api.github.com/repos/actions/checkout/git/ref/tags/v5
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha 3769051881/.github/workflows -buildtags 64/bin/bash -errorsas -ifaceassert -nilfunc git push�� -v origin 64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha :latest 64/pkg/tool/linux_amd64/compile /usr/bin/infocmp g_.a --global node infocmp -1 xterm-color 64/pkg/tool/linux_amd64/vet /usr/bin/git --local jPk66clKJ 64/pkg/tool/linu--show-toplevel git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/checkout/git/ref/tags/v5 --jq .object.sha image:v1.0.0 x_amd64/compile /usr/bin/git se 8567657/b192/vetrev-parse ache/go/1.25.0/x--show-toplevel git rev-�� --show-toplevel ache/go/1.25.0/x--jq /usr/bin/git ub/workflows origin tnet/tools/git git (http block)
• https://api.github.com/repos/actions/github-script/git/ref/tags/v8
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha --local .cfg 64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha w-version-metadata main ache/go/1.25.0/x64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v8 --jq .object.sha ../pkg/workflow/js/**/*.json' --ignore-path ../../../.prettierignore om/stretchr/testify@v1.11.1/assert/assertion_format.go .cfg (http block)
• https://api.github.com/repos/actions/setup-go/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-go/git/ref/tags/v4 --jq .object.sha /ref/tags/v8 x_amd64/vet /opt/hostedtoolcache/node/24.13.0/x64/bin/bash (http block)
• https://api.github.com/repos/actions/setup-node/git/ref/tags/v4
  • Triggering command: /usr/bin/gh gh api /repos/actions/setup-node/git/ref/tags/v4 --jq .object.sha (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/1/artifacts
  • Triggering command: /usr/bin/gh gh run download 1 --dir test-logs/run-1 /tmp/go-build2518567657/b114/vetgithub.com/github/gh-aw/pkg/constants k/gh-aw/gh-aw/actions/setup/js/n-lang=go1.25 -c=4 -nolocalimports -importcfg /opt/hostedtoolcache/go/1.25.0/x-goversion ache�� ty-test.md -buildtags p/bin/bash rkflow/js/**/*.jgit -ifaceassert erignore sh (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/12345/artifacts
  • Triggering command: /usr/bin/gh gh run download 12345 --dir test-logs/run-12345 /tmp/go-build251-ifaceassert x_amd64/vet (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/12346/artifacts
  • Triggering command: /usr/bin/gh gh run download 12346 --dir test-logs/run-12346 /tmp/go-build2518567657/b082/vet.cfg x_amd64/link (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/2/artifacts
  • Triggering command: /usr/bin/gh gh run download 2 --dir test-logs/run-2 /tmp/go-build2518567657/b101/vet-ifaceassert k/gh-aw/gh-aw/node_modules/.bin/-nilfunc (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/3/artifacts
  • Triggering command: /usr/bin/gh gh run download 3 --dir test-logs/run-3 /tmp/go-build2518567657/b095/vetmain k/gh-aw/gh-aw/actions/node_modul-lang=go1.25 (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/4/artifacts
  • Triggering command: /usr/bin/gh gh run download 4 --dir test-logs/run-4 -buildtags k/gh-aw/gh-aw/actions/setup/node-lang=go1.25 -errorsas -ifaceassert -nilfunc /opt/hostedtoolcache/go/1.25.0/x-dwarf=false ache�� -bool -buildtags tnet/tools/bash rkflow/js/**/*.jgit -ifaceassert erignore sh (http block)
• https://api.github.com/repos/github/gh-aw/actions/runs/5/artifacts
  • Triggering command: /usr/bin/gh gh run download 5 --dir test-logs/run-5 -buildtags x_amd64/compile -errorsas -ifaceassert -nilfunc x_amd64/compile ache�� -bool -buildtags 64/bin/git rkflow/js/**/*.jgit -ifaceassert erignore git (http block)
• https://api.github.com/repos/github/gh-aw/actions/workflows
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --local .cfg 64/pkg/tool/linux_amd64/vet (http block)
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 100 (http block)
  • Triggering command: /usr/bin/gh gh run list --json databaseId,number,url,status,conclusion,workflowName,createdAt,startedAt,updatedAt,event,headBranch,headSha,displayTitle --workflow nonexistent-workflow-12345 --limit 6 (http block)
• https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.9.9-test
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.9.9-test --jq .object.sha --show-toplevel x_amd64/vet /usr/bin/git -unreachable=falgit /tmp/go-build251rev-parse _.a git rev-�� --show-toplevel /opt/hostedtoolcache/go/1.25.0/xremote.origin.url /usr/bin/git te '../../../**/node -buildtags bin/bash git (http block)
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.9.9-test --jq .object.sha -c=4 -nolocalimports -importcfg /tmp/go-build3637986663/b130/importcfg -pack /home/REDACTED/go/pkg/mod/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e/caps.go /home/REDACTED/go/pkg/mod/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e/capvals.go rev-�� --show-toplevel ache/go/1.25.0/x64/pkg/tool/linux_amd64/link /usr/bin/git submodules | hea/opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/compile --others p/bin/bash git (http block)
• https://api.github.com/repos/github/gh-aw/git/ref/tags/v1.0.0
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v1.0.0 --jq .object.sha te 'scripts/**/*@{u} /tmp/go-build2518567657/b222/vetmain de/node/bin/git (http block)
• https://api.github.com/repos/nonexistent/action/git/ref/tags/v999.999.999
  • Triggering command: /usr/bin/gh gh api /repos/nonexistent/action/git/ref/tags/v999.999.999 --jq .object.sha te 'scripts/**/*.js' --ignore-pa-s /tmp/go-build2518567657/b226/vet-w /opt/hostedtoolcache/go/1.25.0/x-buildmode=exe (http block)
• https://api.github.com/repos/nonexistent/repo/actions/runs/12345
  • Triggering command: /usr/bin/gh gh run view 12345 --repo nonexistent/repo --json status,conclusion (http block)
• https://api.github.com/repos/owner/repo/actions/workflows
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo ode_modules/.bin/node (http block)
  • Triggering command: /usr/bin/gh gh workflow list --json name,state,path --repo owner/repo node (http block)
• https://api.github.com/repos/owner/repo/contents/file.md
  • Triggering command: /tmp/go-build1960647803/b368/cli.test /tmp/go-build1960647803/b368/cli.test -test.testlogfile=/tmp/go-build1960647803/b368/testlog.txt -test.paniconexit0 -test.v=true -test.parallel=4 -test.timeout=10m0s -test.run=^Test -test.short=true pull.rebase (http block)
• https://api.github.com/repos/test-owner/test-repo/actions/secrets
  • Triggering command: /usr/bin/gh gh api /repos/test-owner/test-repo/actions/secrets --jq .secrets[].name --local .cfg 64/pkg/tool/linux_amd64/vet (http block)
• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login get .cfg 64/pkg/tool/linux_amd64/vet user.email om> (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login get .cfg 64/pkg/tool/linux_amd64/vet user.email (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Add gh-aw version in frontmatter metadata for release builds

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.