[actions] Update GitHub Actions versions - 2026-09-10

[github-actions]

GitHub Actions Updates - 2026-09-10

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases.

📦 Actions Updated (full list)

Actions Updated

• actions/setup-java: v6.0.0 → v6.0.1
• github/codeql-action/upload-sarif: v4.37.9 → v4.38.0

Summary

• Total actions updated: 2
• Update command: gh aw update --verbose
• Workflow lock files: Not included (will be regenerated on next compile)

Notes

• All action updates respect semantic versioning and maintain compatibility
• Actions are pinned to commit SHAs for security
• Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation
• Two entries (actions/gh-drives-preview/checkout, actions/gh-drives-preview/commit) could not be checked (no releases/tags found for that repo) and were left unchanged
• The update run also queued changes to daily-multi-device-docs-tester.md and mattpocock-skills-reviewer.md (skill/plugin ref refreshes) and their .lock.yml files; these were intentionally excluded from this PR per workflow scope (actions-lock.json only) and reset before commit

Testing

The updated actions will be automatically used in workflow compilations. No manual testing required.

---

This PR was automatically created by the Daily Workflow Updater workflow.

Generated by 🔧 Daily Workflow Updater · copilot · auto · 22.4 AIC · ⌖ 9 AIC · ⊞ 8.2K · ◷

• expires on Sep 10, 2026, 11:08 PM UTC-08:00

---

Run: https://github.com/github/gh-aw/actions/runs/34452437946

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 6.47 AIC · ⌖ 6.9 AIC · ⊞ 8.9K · ◷
_{Comment /souschef to run again}

---

Run: https://github.com/github/gh-aw/actions/runs/34467468242

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 18.5 AIC · ⌖ 7.01 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

---

Run: https://github.com/github/gh-aw/actions/runs/34471560799

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 6.79 AIC · ⌖ 7 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

[gh-aw-bot]

@copilot This PR looks ready for forward progress. Please refresh the branch if needed, run the pr-finisher skill, and complete any remaining validation before handing back to a maintainer.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 6.47 AIC · ⌖ 6.9 AIC · ⊞ 8.9K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot This PR looks ready for forward progress. Please refresh the branch if needed, run the pr-finisher skill, and complete any remaining validation before handing back to a maintainer.

[!WAR...

Completed local validation and restored the intended one-file PR scope in 5e8c9e4. The branch matches its base and has no review threads; required CI is action-required because cloud-agent pushes do not trigger workflows, so a maintainer must re-trigger it.

[gh-aw-bot]

@copilot The branch appears up to date and there are no active review threads. Please run the pr-finisher skill, confirm the required validation/checks for 5e8c9e4 are complete, and hand back to a maintainer if nothing else is needed.

Run: https://github.com/github/gh-aw/actions/runs/34467468242

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 18.5 AIC · ⌖ 7.01 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot The branch appears up to date and there are no active review threads. Please run the pr-finisher skill, confirm the required validation/checks for 5e8c9e4 are complete, and hand back to a...

Confirmed the final branch remains scoped to .github/aw/actions-lock.json; make fmt, make lint, make test-unit, make test, make recompile, and make agent-report-progress pass. There are no review threads. The current head is a513111; required CI must be re-triggered by a maintainer because cloud-agent pushes do not start workflow runs.

[gh-aw-bot]

@copilot The PR appears ready for finishing, but CI still needs maintainer attention. Please run the pr-finisher skill, confirm the required validation/checks for head a5131110c3189ec60b2b5418bd03736b047ccf44, and hand back to a maintainer once complete.

Notes:

• Branch refresh was requested via PR update.
• make fmt could not complete in this environment because checkout hit a promisor-remote access failure, so no formatter push was made.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 6.79 AIC · ⌖ 7 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}