Skip to content

Bump github/gh-aw from 0.74.8 to 0.76.1 in the github-actions group across 1 directory#236

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-15bc9d0186
Open

Bump github/gh-aw from 0.74.8 to 0.76.1 in the github-actions group across 1 directory#236
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-15bc9d0186

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 28, 2026

Bumps the github-actions group with 1 update in the / directory: github/gh-aw.

Updates github/gh-aw from 0.74.8 to 0.76.1

Release notes

Sourced from github/gh-aw's releases.

v0.76.1

🌟 Release Highlights

This release brings a new replay command for timeline log visualization, inline skill support, improved safe-outputs reliability, and Codex model updates.

✨ What's New

  • replay command — Render and stream unified timeline logs directly in your terminal for faster post-run analysis (#34835)
  • Inline skill extraction/runtime — Define and run skills inline within workflows, mirroring the inline sub-agent syntax for a more consistent authoring experience (#34874)
  • Codex default model updated to gpt-5.4 — Workflows using Codex now use the latest model by default; lockfiles have been regenerated (#34804)
  • tracker-id frontmatter documented — The tracker-id field is now fully documented in the reference, making it easier to correlate workflow runs with external tracking systems (#34799)

🐛 Bug Fixes & Improvements

  • safe-outputs push_to_pull_request_branch — Documented as append-only and now auto-linearizes merge commits before a signed push, preventing push failures on branches with merge history (#34834)
  • Codex threat-detection — Response-event logs from Codex are now correctly parsed in threat-detection result processing (#34850)
  • Step name alignment stabilized — Direct manifest reads are now permitted and agent guidance tightened to prevent step name drift (#34873)
  • Reduced duplicate frontmatter scanningParseWorkflow no longer scans frontmatter twice, improving compilation performance (#34819)
  • Build & test reliability — Integration-tagged builds and CGO fuzz jobs now correctly share test helpers, eliminating spurious CI failures (#34841, #34816)

For complete details, see CHANGELOG.

Generated by 🚀 Release · sonnet46 838.6K


What's Changed

Full Changelog: github/gh-aw@v0.76.0...v0.76.1

... (truncated)

Commits
  • 58d1bed Add inline skill extraction/runtime support mirroring inline sub-agents (#34874)
  • ccf77c4 jsweep: clean add_comment.cjs (#34866)
  • cc2e15f Stabilize Step Name Alignment by permitting direct manifest reads and tighten...
  • 1aa3c80 refactor: reuse gatewayTimestampToTime in agentEntryToTimelineEvent (#34864)
  • acaccd7 feat: add replay command for rendering unified timeline logs (#34835)
  • 796f583 fix(safe-outputs): document push_to_pull_request_branch as append-only; auto-...
  • 56207e9 Handle Codex response-event logs in threat-detection result parsing (#34850)
  • 88fa3ba Route Antigravity AWF target through Gemini provider key (#34839)
  • c948db9 [community] Update community contributions in README (#34846)
  • cdbeed6 chore(spec): daily threat spec optimizer 2026-05-26 — bump to 1.0.12 (#34845)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels May 28, 2026
Bumps the github-actions group with 1 update in the / directory: [github/gh-aw](https://github.com/github/gh-aw).


Updates `github/gh-aw` from 0.74.8 to 0.76.1
- [Release notes](https://github.com/github/gh-aw/releases)
- [Changelog](https://github.com/github/gh-aw/blob/main/CHANGELOG.md)
- [Commits](github/gh-aw@0feed75...58d1bed)

---
updated-dependencies:
- dependency-name: github/gh-aw
  dependency-version: 0.76.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump github/gh-aw from 0.74.8 to 0.76.1 in the github-actions group Bump github/gh-aw from 0.74.8 to 0.76.1 in the github-actions group across 1 directory May 28, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/github-actions-15bc9d0186 branch from 63c5ec2 to b2ca2d3 Compare May 28, 2026 23:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants