🤖 Upgrade workflows to gh-aw v0.82.15

[github-actions]

Caution

Protected files were modified in this change.
This pull request is in request_review mode and requires explicit human scrutiny before merge.

Protected files: .github/aw/actions-lock.json, .github/workflows/daily-compliance-checker.lock.yml, .github/workflows/duplicate-code-detector.lock.yml, .github/workflows/gateway-issue-dispatcher.lock.yml, .github/workflows/ghcr-download-tracker.lock.yml, .github/workflows/github-mcp-guard-coverage-checker.lock.yml, .github/workflows/go-fan.lock.yml, .github/workflows/go-logger.lock.yml, .github/workflows/gpl-dependency-checker.lock.yml, .github/workflows/guard-status-tracker.lock.yml, .github/workflows/integrity-filtering-audit.lock.yml, .github/workflows/issue-monster.lock.yml, .github/workflows/large-payload-tester.lock.yml, .github/workflows/mcp-gateway-log-analyzer.lock.yml, .github/workflows/nightly-docs-reconciler.lock.yml, .github/workflows/nightly-schema-updater.lock.yml, .github/workflows/nightly-workflow-compiler.lock.yml, .github/workflows/plan.lock.yml, .github/workflows/readonly-stress-default.lock.yml, .github/workflows/readonly-stress-gvisor.lock.yml, .github/workflows/readonly-stress-sbx.lock.yml, .github/workflows/release.lock.yml, .github/workflows/repo-assist.lock.yml, .github/workflows/rust-guard-improver.lock.yml, .github/workflows/semantic-function-refactor.lock.yml, .github/workflows/smoke-allowonly.lock.yml, .github/workflows/smoke-copilot.lock.yml, .github/workflows/smoke-long-session.lock.yml, .github/workflows/smoke-otel-tracing.lock.yml, .github/workflows/smoke-proxy-github-script.lock.yml, .github/workflows/smoke-safeoutputs-discussions.lock.yml, .github/workflows/smoke-safeoutputs-issues.lock.yml, .github/workflows/smoke-safeoutputs-labels.lock.yml, .github/workflows/smoke-safeoutputs-prs.lock.yml, .github/workflows/smoke-safeoutputs-reviews.lock.yml, .github/workflows/test-coverage-improver.lock.yml, .github/workflows/test-improver.lock.yml

🤖 Automated Workflow Upgrade

This PR upgrades all workflows to the latest gh-aw release, updating the github/gh-aw-actions/setup action SHA and compiler version references across all compiled workflow lock files.

Changes Summary

• Current gh-aw version: v0.82.14
• Latest gh-aw version: v0.82.15
• Workflows updated: 36 workflow(s)

Upgrade Process

1. ✅ Updated github/gh-aw-actions/setup and setup-cli SHA from b6d1443e (v0.82.14) to 511cb6dc (v0.82.15)
2. ✅ Updated compiler_version metadata in all lock files from v0.82.14 → v0.82.15
3. ✅ Updated GH_AW_VERSION, GH_AW_COMPILED_VERSION, GH_AW_INFO_CLI_VERSION env vars in all lock files
4. ✅ Updated .github/aw/actions-lock.json entries for setup and setup-cli

Key Changes in gh-aw v0.82.15

• fix(cli): Address 16 CLI consistency issues from 2026-07-20 audit
• Treat expression-backed engine.model as omitted when empty
• Remove 120s MCP bridge cap for logs calls to prevent partial daily audit datasets
• Scope PR review workflows with path-based trigger filters to reduce redundant API load
• MCP gateway startup: degrade on optional server failures, fail only on required/no-success cases
• Tiered validation: fast gate for intermediate saves, tests only on final push
• feat(models): model alias inventory update 2026-07-21

Full changelog: https://github.com/github/gh-aw/releases/tag/v0.82.15

Files Changed

Actions Lock:

• .github/aw/actions-lock.json

Compiled Workflow Lock Files (36): All .github/workflows/*.lock.yml files

---

This PR was automatically created by the nightly-workflow-compiler workflow.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• awmgmcpg
• releaseassets.githubusercontent.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "releaseassets.githubusercontent.com"

See Network Configuration for more information.

Generated by Nightly Workflow Upgrader · 223.1 AIC · ⊞ 5.1K · ◷

• expires on Jul 28, 2026, 4:22 PM UTC

---

Note

This was originally intended as a pull request, but the git push operation failed.

Original error: pushSignedCommits: refusing unsigned push for branch 'aw/upgrade-workflows-v0.82.15-c4b996bd34e378b0': Signed-commit payload violates file-protection policy (request_review): .github/aw/actions-lock.json, .github/workflows/daily-compliance-checker.lock.yml, .github/workflows/duplicate-code-detector.lock.yml, .github/workflows/gateway-issue-dispatcher.lock.yml, .github/workflows/ghcr-download-tracker.lock.yml, .github/workflows/github-mcp-guard-coverage-checker.lock.yml, .github/workflows/go-fan.lock.yml, .github/workflows/go-logger.lock.yml, .github/workflows/gpl-dependency-checker.lock.yml, .github/workflows/guard-status-tracker.lock.yml, .github/workflows/integrity-filtering-audit.lock.yml, .github/workflows/issue-monster.lock.yml, .github/workflows/large-payload-tester.lock.yml, .github/workflows/mcp-gateway-log-analyzer.lock.yml, .github/workflows/nightly-docs-reconciler.lock.yml, .github/workflows/nightly-schema-updater.lock.yml, .github/workflows/nightly-workflow-compiler.lock.yml, .github/workflows/plan.lock.yml, .github/workflows/readonly-stress-default.lock.yml, .github/workflows/readonly-stress-gvisor.lock.yml, .github/workflows/readonly-stress-sbx.lock.yml, .github/workflows/release.lock.yml, .github/workflows/repo-assist.lock.yml, .github/workflows/rust-guard-improver.lock.yml, .github/workflows/semantic-function-refactor.lock.yml, .github/workflows/smoke-allowonly.lock.yml, .github/workflows/smoke-copilot.lock.yml, .github/workflows/smoke-long-session.lock.yml, .github/workflows/smoke-otel-tracing.lock.yml, .github/workflows/smoke-proxy-github-script.lock.yml, .github/workflows/smoke-safeoutputs-discussions.lock.yml, .github/workflows/smoke-safeoutputs-issues.lock.yml, .github/workflows/smoke-safeoutputs-labels.lock.yml, .github/workflows/smoke-safeoutputs-prs.lock.yml, .github/workflows/smoke-safeoutputs-reviews.lock.yml, .github/workflows/test-coverage-improver.lock.yml, .github/workflows/test-improver.lock.yml

Workflow Run: View run details and download bundle artifact

The bundle file is available in the agent artifact in the workflow run linked above.

To create a pull request with the changes:

# Download the artifact from the workflow run
gh run download 29847199219 -n agent -D /tmp/agent-29847199219

# Fetch the bundle into a temporary ref, then update the local branch
git fetch /tmp/agent-29847199219/aw-aw-upgrade-workflows-v0.82.15.bundle refs/heads/aw/upgrade-workflows-v0.82.15:refs/bundles/create-pr-aw-upgrade-workflows-v0-82-15-c4b996bd34e378b0-ad6fc7d7
git update-ref refs/heads/aw/upgrade-workflows-v0.82.15-c4b996bd34e378b0 refs/bundles/create-pr-aw-upgrade-workflows-v0-82-15-c4b996bd34e378b0-ad6fc7d7
git checkout aw/upgrade-workflows-v0.82.15-c4b996bd34e378b0
# Ensure the working tree matches the updated branch
git reset --hard
# Remove the temporary bundle ref
git update-ref -d refs/bundles/create-pr-aw-upgrade-workflows-v0-82-15-c4b996bd34e378b0-ad6fc7d7

# Push the branch to origin
git push origin aw/upgrade-workflows-v0.82.15-c4b996bd34e378b0

# Create the pull request
gh pr create --title '🤖 Upgrade workflows to gh-aw v0.82.15' --base main --head aw/upgrade-workflows-v0.82.15-c4b996bd34e378b0 --repo github/gh-aw-mcpg