From d0eea95196a64a600faeec95808a0ed591e8fff2 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 13 May 2026 09:35:00 +0000 Subject: [PATCH 1/3] Initial plan From dfd7dfa21d79e27bcb888524acabf67ef2ff16ae Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 13 May 2026 09:45:22 +0000 Subject: [PATCH 2/3] chore: outline plan for gh-aw dev runtime GH_TOKEN fix Agent-Logs-Url: https://github.com/github/gh-aw/sessions/5f3af0b2-40da-4770-9df8-19931eb1bc08 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com> --- actions/setup/js/push_signed_commits.cjs | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/actions/setup/js/push_signed_commits.cjs b/actions/setup/js/push_signed_commits.cjs index 4afd6d3d9df..4df9fffc332 100644 --- a/actions/setup/js/push_signed_commits.cjs +++ b/actions/setup/js/push_signed_commits.cjs @@ -399,10 +399,10 @@ async function pushSignedCommits({ githubClient, owner, repo, branch, baseRef, c if (err instanceof PushSignedCommitsUnsupportedShape) { throw new Error( `pushSignedCommits: refusing unsigned push for branch '${branch}': ${err.message}. ` + - `GitHub's createCommitOnBranch GraphQL mutation cannot represent merge commits, symlinks (mode 120000), ` + - `submodule entries (mode 160000), or executable bits (mode 100755). ` + - `Rewrite the commits to use only regular files (mode 100644) with no merge commits, ` + - `or set push-signed-commits: false if the repository does not require signed commits.`, + `GitHub's createCommitOnBranch GraphQL mutation cannot represent merge commits, symlinks (mode 120000), ` + + `submodule entries (mode 160000), or executable bits (mode 100755). ` + + `Rewrite the commits to use only regular files (mode 100644) with no merge commits, ` + + `or set push-signed-commits: false if the repository does not require signed commits.`, { cause: err } ); } From c06baa7bd36b9430b9589d1c930a53c774768dfc Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 13 May 2026 09:52:07 +0000 Subject: [PATCH 3/3] fix: add GH_TOKEN to dev gh-aw runtime setup step Agent-Logs-Url: https://github.com/github/gh-aw/sessions/5f3af0b2-40da-4770-9df8-19931eb1bc08 Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com> --- .github/workflows/copilot-token-audit.lock.yml | 2 ++ .github/workflows/copilot-token-optimizer.lock.yml | 2 ++ .github/workflows/static-analysis-report.lock.yml | 2 ++ actions/setup/js/push_signed_commits.cjs | 8 ++++---- pkg/workflow/runtime_gh_aw_test.go | 1 + pkg/workflow/runtime_step_generator.go | 2 ++ 6 files changed, 13 insertions(+), 4 deletions(-) diff --git a/.github/workflows/copilot-token-audit.lock.yml b/.github/workflows/copilot-token-audit.lock.yml index 3ea303d2c48..42090bfc8b4 100644 --- a/.github/workflows/copilot-token-audit.lock.yml +++ b/.github/workflows/copilot-token-audit.lock.yml @@ -438,6 +438,8 @@ jobs: gh extension remove gh-aw || true gh extension install . gh aw version + env: + GH_TOKEN: ${{ github.token }} - name: Setup Python uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 with: diff --git a/.github/workflows/copilot-token-optimizer.lock.yml b/.github/workflows/copilot-token-optimizer.lock.yml index 4a56e5bdb1d..95a6633f859 100644 --- a/.github/workflows/copilot-token-optimizer.lock.yml +++ b/.github/workflows/copilot-token-optimizer.lock.yml @@ -407,6 +407,8 @@ jobs: gh extension remove gh-aw || true gh extension install . gh aw version + env: + GH_TOKEN: ${{ github.token }} - name: Create gh-aw temp directory run: bash "${RUNNER_TEMP}/gh-aw/actions/create_gh_aw_tmp_dir.sh" - name: Configure gh CLI for GitHub Enterprise diff --git a/.github/workflows/static-analysis-report.lock.yml b/.github/workflows/static-analysis-report.lock.yml index 9569d6f1c1c..a97c4d1fc20 100644 --- a/.github/workflows/static-analysis-report.lock.yml +++ b/.github/workflows/static-analysis-report.lock.yml @@ -443,6 +443,8 @@ jobs: gh extension remove gh-aw || true gh extension install . gh aw version + env: + GH_TOKEN: ${{ github.token }} - name: Create gh-aw temp directory run: bash "${RUNNER_TEMP}/gh-aw/actions/create_gh_aw_tmp_dir.sh" - name: Configure gh CLI for GitHub Enterprise diff --git a/actions/setup/js/push_signed_commits.cjs b/actions/setup/js/push_signed_commits.cjs index 4df9fffc332..4afd6d3d9df 100644 --- a/actions/setup/js/push_signed_commits.cjs +++ b/actions/setup/js/push_signed_commits.cjs @@ -399,10 +399,10 @@ async function pushSignedCommits({ githubClient, owner, repo, branch, baseRef, c if (err instanceof PushSignedCommitsUnsupportedShape) { throw new Error( `pushSignedCommits: refusing unsigned push for branch '${branch}': ${err.message}. ` + - `GitHub's createCommitOnBranch GraphQL mutation cannot represent merge commits, symlinks (mode 120000), ` + - `submodule entries (mode 160000), or executable bits (mode 100755). ` + - `Rewrite the commits to use only regular files (mode 100644) with no merge commits, ` + - `or set push-signed-commits: false if the repository does not require signed commits.`, + `GitHub's createCommitOnBranch GraphQL mutation cannot represent merge commits, symlinks (mode 120000), ` + + `submodule entries (mode 160000), or executable bits (mode 100755). ` + + `Rewrite the commits to use only regular files (mode 100644) with no merge commits, ` + + `or set push-signed-commits: false if the repository does not require signed commits.`, { cause: err } ); } diff --git a/pkg/workflow/runtime_gh_aw_test.go b/pkg/workflow/runtime_gh_aw_test.go index c69413cb958..67f7a7f0c52 100644 --- a/pkg/workflow/runtime_gh_aw_test.go +++ b/pkg/workflow/runtime_gh_aw_test.go @@ -112,6 +112,7 @@ func TestGenerateRuntimeSetupSteps_GhAw_DevBuildsFromSource(t *testing.T) { assert.Contains(t, content, "gh extension remove gh-aw || true") assert.Contains(t, content, "gh extension install .") assert.Contains(t, content, "gh aw version") + assert.Contains(t, content, "GH_TOKEN: ${{ github.token }}") assert.NotContains(t, content, "github/gh-aw/actions/setup-cli@") } diff --git a/pkg/workflow/runtime_step_generator.go b/pkg/workflow/runtime_step_generator.go index c0a513c22c0..85323a11273 100644 --- a/pkg/workflow/runtime_step_generator.go +++ b/pkg/workflow/runtime_step_generator.go @@ -68,6 +68,8 @@ func generateSetupStep(req *RuntimeRequirement) GitHubActionStep { " gh extension remove gh-aw || true", " gh extension install .", " gh aw version", + " env:", + " GH_TOKEN: ${{ github.token }}", ) return step }