build(deps): bump the actions group across 1 directory with 3 updates

[dependabot]

Bumps the actions group with 3 updates in the / directory: dorny/paths-filter, github/codeql-action and github/gh-aw.

Updates dorny/paths-filter from 4.0.2 to 4.0.3

Release notes

Sourced from dorny/paths-filter's releases.

v4.0.3

What's Changed

• Update Outputs in readme to account for the 'every' predicate-quantifier by @​hintron in dorny/paths-filter#247
• fix: scope base-ignored warning to API path by @​saschabratton in dorny/paths-filter#319
• docs: add contents permission to PR example by @​134130 in dorny/paths-filter#248
• feat: add 'some-with-excludes' predicate quantifier by @​arxeiss in dorny/paths-filter#322
• Document safe handling of file list outputs in workflows by @​dorny in dorny/paths-filter#326

Security

• Escape multi-line filenames in list-files shell and csv output] by @​ken-matsui and @​tjswlsgg in https://github.com/advisories/GHSA-7hc6-8hq5-9q2m

New Contributors

• @​hintron made their first contribution in dorny/paths-filter#247
• @​134130 made their first contribution in dorny/paths-filter#248
• @​arxeiss made their first contribution in dorny/paths-filter#322

Full Changelog: dorny/paths-filter@v4...v4.0.3

Changelog

Sourced from dorny/paths-filter's changelog.

Changelog

v4.0.3

• Document safe handling of file list outputs in workflows
• Escape multi-line filenames in list-files shell and csv output
• Add 'some-with-excludes' predicate quantifier
• Add contents permission to PR example
• Scope base-ignored warning to API path
• Update outputs in readme to account for the 'every' predicate-quantifier

v4.0.2

• Work around git dubious ownership errors in container jobs
• Use rev-parse instead of branch --show-current for older git compat
• Fix warning message

v4.0.1

• Support merge queue

v4.0.0

• Update action runtime to node24

v3.0.4

• Escape multi-line filenames in list-files shell and csv output

v3.0.3

• Add missing predicate-quantifier

v3.0.2

• Add config parameter for predicate quantifier

v3.0.1

• Compare base and ref when token is empty

v3.0.0

• Update to Node.js 20
• Update all dependencies

v2.11.1

• Update @​actions/core to v1.10.0 - Fixes warning about deprecated set-output
• Document need for pull-requests: read permission
• Updating to actions/checkout@v3

v2.11.0

• Set list-files input parameter as not required
• Update Node.js
• Fix incorrect handling of Unicode characters in exec()
• Use Octokit pagination
• Updates real world links

v2.10.2

... (truncated)

Commits

• ceb8a2b Update CHANGELOG.md for v4.0.3 and v3.0.4 (#327)
• ef09b88 Document safe handling of file list outputs in workflows (#326)
• 44adc5b Merge commit from fork
• 4711b7a feat: add 'some-with-excludes' predicate quantifier (#322)
• 93c889f fix: escape multi-line filenames in list-files shell and csv output
• b41dfa9 docs: add contents permission to PR example (#248)
• 9af6e5a fix: scope base-ignored warning to API path (#319)
• cae9006 docs: update outputs in readme to account for the 'every' predicate-quantifie...
• See full diff in compare view

Updates github/codeql-action from 4.37.3 to 4.37.6

Release notes

Sourced from github/codeql-action's releases.

v4.37.6

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

v4.37.5

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

v4.37.4

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

Changelog

Sourced from github/codeql-action's changelog.

4.37.6 - 04 Aug 2026

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #4070

4.37.5 - 03 Aug 2026

• Fixed a bug where a network error while streaming the download of the CodeQL bundle could terminate the init Action instead of falling back to downloading the bundle before extracting it. #4061

4.37.4 - 29 Jul 2026

• This version of the CodeQL Action adds support for the tools input for the codeql-action/init step to be specified using a github-codeql-tools repository property. This feature will gradually be rolled out following the release of this version. Once rolled out, this allows for the CodeQL CLI version that is used in GitHub-managed workflows, such as Default Setup, to be set to a custom value. For example, customers who run into issues with rate limits when a new CodeQL CLI version is released can set the value to toolcache to always use the CodeQL CLI version that is available in the runner toolcache. For Advanced Setup workflows, the value provided for tools in the workflow definition always takes precedence unless the value of the repository property starts with !. #4037
• Update default CodeQL bundle version to 2.26.2. #4051

Commits

• 5595cca Merge pull request #4071 from github/update-v4.37.6-6a9359a1b
• ec9c757 Add change note for PR 4070
• 45c8742 Update changelog for v4.37.6
• 6a9359a Merge pull request #4070 from github/mbg/remote-address/change-file-default
• 065cdc0 Change DEFAULT_CONFIG_FILE_NAME
• f99dd5a Merge pull request #4066 from github/dependabot/npm_and_yarn/js-yaml-5.2.2
• 1804b21 Merge pull request #4068 from github/mergeback/v4.37.5-to-main-d1ba80a1
• 3020a2f Rebuild
• 93c3a5a Update changelog and version after v4.37.5
• d1ba80a Merge pull request #4067 from github/update-v4.37.5-1cd4d01d5
• Additional commits viewable in compare view

Updates github/gh-aw from 0.83.4 to 0.86.2

Release notes

Sourced from github/gh-aw's releases.

v0.86.2

🌟 Release Highlights

This release focuses on hardening the sandbox and MCP gateway, smoothing out safe-output and threat-detection reliability, and shipping a steady stream of security and quality fixes across the compiler and CLI.

✨ What's New

• Docker sandbox (docker-sbx) rollout continues — the sandboxed execution environment now runs for a larger share of agentic workflows, with fixes for pre-flight step naming, gVisor false positives, and Docker Hub secret handling (#51264, #51294, #51341, #51439, #51949). See the sandbox reference.
• Agent runtime tracking — sandbox.agent.runtime is now stored in aw_info.json, and gh aw logs/gh aw audit gained a --runtime filter for easier debugging across engines (#51465, #52076). See agent runtimes.
• MCP gateway hardening — explicit mount policy allowlisting for the safeoutputs backend server, plus a bump to gh-aw-mcpg v0.4.9 and github-mcp-server v1.9.0 (#51870, #51828).
• Skills frontmatter flexibility — non-SHA refs are now allowed in skills frontmatter and pinned automatically at compile time, and an explicit end-marker syntax was added for inline skills/sub-agents (#51455, #51446).
• Threat detection improvements — inline threat detection for Code Scanning Fixer, rendered detection logs with group/mask macros, and gh-aw's own <system> prompt block is no longer flagged as prompt injection (#51277, #51255, #51818). See threat detection.

🐛 Bug Fixes & Improvements

• Fixed silent failures in the Copilot session data fetcher and in gh aw mcp inspect pagination (#51195, #51193).
• Fixed Claude harness retrying invalid-JSON body errors with --continue instead of starting a fresh run (#51793).
• Fixed a CGO/CJS workflow cache key collision that caused widespread job failures (#51342).
• Fixed recurring gh-aw-firewall digest-pin loss on default firewall version bumps (#51423).
• Fixed Windows MCP server timeouts by propagating context through GitHub CLI subprocess calls (#51426).
• Fixed retry handling and denials in the Contribution Check proxy (#51631).
• Added support for HEAD-only bundles when pushing to pull request branches (#51833).
• Fixed safe-output run summary classification so entries are always linked and correctly attributed (#51484, #51478).

📚 Documentation

• Documented the --runtime flag for gh aw logs/gh aw audit, agent runtime selection/troubleshooting, and clarified Claude engine selection in automated bootstrap (#52076, #51427, #52099).
• Improved overall documentation discoverability and trimmed troubleshooting guides (#52065, #51251).

🔧 Internal

A large batch of custom-linter hardening, dependency bumps, test-parallelization, and dependency vulnerability remediations (container image pinning, ip-address patch, deprecated MCP container replacements) round out this release — thanks to the automated maintenance workflows keeping the codebase clean and secure.> Generated by 🚀 Release · auto · 20.7 AIC · ⊞ 11.3K

---

What's Changed

• Add GitHub CLI fallback guidance to Daily Team Evolution Insights workflow prompt by @​pelikhan with @​Copilot in github/gh-aw#51192
• Bump Claude Code, OpenAI Codex, and Pi CLI pinned versions by @​pelikhan with @​Copilot in github/gh-aw#51194
• Fix silent conversation-transcript fetch failures in Copilot session data fetcher by @​pelikhan with @​Copilot in github/gh-aw#51195
• fix(threat-detection): stop uploading detection.log for external gh-aw-detection path by @​davidslater in github/gh-aw#51233
• Harden safe-output field validation by @​pelikhan in github/gh-aw#51133
• [docs] Self-healing documentation fixes from issue analysis - 2026-08-07 by @​github-actions[bot] in github/gh-aw#51235
• [docs] docs: unbloat troubleshooting common issues by @​github-actions[bot] in github/gh-aw#51251
• feat: enable docker-sbx sandbox for ~50% of agentic workflows by @​pelikhan with @​Copilot in github/gh-aw#51264
• Refactor safe-outputs handler assembly by @​pelikhan with @​Copilot in github/gh-aw#51229
• Refactor engine secret validation wrappers by @​pelikhan with @​Copilot in github/gh-aw#51216
• Fix silent pagination truncation in gh aw mcp inspect, dedupe connect logic by @​pelikhan with @​Copilot in github/gh-aw#51193
• Revert sbx to 10% of agentic workflows, set gvisor to 10% by @​pelikhan with @​Copilot in github/gh-aw#51294
• feat(threat-detection): render detection.log in detection job with group/mask macros by @​pelikhan with @​Copilot in github/gh-aw#51255
• [log] Add debug logging to guard-policy, arc-dind, and validation helpers by @​github-actions[bot] in github/gh-aw#51298
• Increase post-result watchdog default to 120s and add frontmatter timeout override by @​pelikhan with @​Copilot in github/gh-aw#51292
• Handle discarded filepath.Glob errors in CLI by @​pelikhan with @​Copilot in github/gh-aw#51296

... (truncated)

Commits

• 48e5fa3 Clarify Claude engine selection in automated bootstrap (#52099)
• 9699516 Fix inverted strict: mode documentation in frontmatter reference (#52100)
• fa5e232 Improve GitHub Agentic Workflows documentation discoverability (#52065)
• 85f9048 Normalize report formatting in video-analyzer, plan, and centralization-drill...
• 1dd49c6 Suppress benign workflow exfiltration findings (#52083)
• c636d5f docs: document --runtime flag for gh aw logs and gh aw audit (#52076)
• 62647ef Harden scanner/relaunch exec trust boundaries and argument validation (#52032)
• 9922b2f Harden remote workflow import fallbacks to prevent cross-host downgrade to pu...
• 81a1321 Remediate dynamic regexp pattern findings (#51941)
• 485f970 [aw] Reduce Daily PR review tool-denial failures in Copilot SDK runs (#52060)
• Additional commits viewable in compare view

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
1 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates GitHub Actions workflow dependencies to newer versions, mainly for CLI setup and CodeQL scanning.

Changes:

• Bumped github/gh-aw/actions/setup-cli in the Copilot setup workflow.
• Bumped github/codeql-action/* steps to a newer patch release.
• Updated the pinned commit SHA for dorny/paths-filter in CI.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
.github/workflows/copilot-setup-steps.yml	Updates the gh-aw setup action version used during workflow setup.
.github/workflows/codeql.yml	Updates CodeQL action versions for init/autobuild/analyze steps.
.github/workflows/ci.yml	Updates the pinned dorny/paths-filter commit used in CI.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 3 out of 3 changed files in this pull request and generated no new comments.

Suppressed comments (4)

.github/workflows/copilot-setup-steps.yml:24

• This action is referenced by a mutable tag (v0.86.2). For supply-chain hardening, consider pinning uses: to a full commit SHA (optionally retaining the tag as a comment) so the workflow is not affected if the tag is moved.

        uses: github/gh-aw/actions/setup-cli@v0.86.2

.github/workflows/codeql.yml:44

• These CodeQL steps are pinned to a mutable tag. To reduce the risk of tag retargeting, pin each uses: reference to the corresponding commit SHA (and optionally keep the human-readable version in a comment).

        uses: github/codeql-action/init@v4.37.6

.github/workflows/codeql.yml:57

• These CodeQL steps are pinned to a mutable tag. To reduce the risk of tag retargeting, pin each uses: reference to the corresponding commit SHA (and optionally keep the human-readable version in a comment).

        uses: github/codeql-action/autobuild@v4.37.6

.github/workflows/codeql.yml:70

• These CodeQL steps are pinned to a mutable tag. To reduce the risk of tag retargeting, pin each uses: reference to the corresponding commit SHA (and optionally keep the human-readable version in a comment).

        uses: github/codeql-action/analyze@v4.37.6