[actions] Update GitHub Actions versions - 2026-08-20

[github-actions]

GitHub Actions Updates - 2026-08-20

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases.

📦 Actions Updated (full list)

Actions Updated

• docker/setup-buildx-action: v4.2.0 → v4.3.0
• github/stale-repos: v9.0.16 → v9.0.17

Summary

• Total actions updated: 2
• Update command: gh aw update
• Workflow lock files: Not included (will be regenerated on next compile)

Notes

• All action updates respect semantic versioning and maintain compatibility
• Actions are pinned to commit SHAs for security
• Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation

Testing

The updated actions will be automatically used in workflow compilations. No manual testing required.

---

This PR was automatically created by the Daily Workflow Updater workflow.

Generated by 🔧 Daily Workflow Updater · auto · 18.3 AIC · ⌖ 6.65 AIC · ⊞ 7.8K · ◷

• expires on Aug 20, 2026, 11:19 PM UTC-08:00

---

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 19.6 AIC · ⌖ 8.1 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

---

pr-sous-chef run https://github.com/github/gh-aw/actions/runs/32358285599> Generated by 👨‍🍳 PR Sous Chef · gpt54 · 5.47 AIC · ⌖ 8.32 AIC · ⊞ 9.3K · ◷

_{Comment /souschef to run again}

---

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 27.5 AIC · ⌖ 8.07 AIC · ⊞ 6.9K · ◷
_{Comment /souschef to run again}

[github-actions]

Automated agentic workflow PR updating GitHub Actions versions in actions-lock.json, respecting semantic versioning and pinning to commit SHAs. Flagged for a quick discussion only because it touches the dependency/action-pin manifest per policy — no action needed if this is the expected automated action-bump workflow.

Generated by ✅ Contribution Check · auto · 56.6 AIC · ⌖ 5.06 AIC · ⊞ 9.2K · ◷

[gh-aw-bot]

@copilot This PR looks ready for a maintainer-visible finish pass. Please refresh the branch if needed, verify checks and merge readiness on the current head, and use the pr-finisher skill to drive it to a maintainer-reviewable state.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 9.04 AIC · ⌖ 8.12 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

[gh-aw-bot]

@copilot Please do a maintainer-facing finish pass on this PR.

• Confirm the current head is still merge-ready for the latest branch state.
• Refresh the branch if GitHub offers one.
• Run the pr-finisher skill and leave a concise handoff comment with validation status and any remaining merge risks.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 19.6 AIC · ⌖ 8.1 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot This PR looks ready for a maintainer-visible finish pass. Please refresh the branch if needed, verify checks and merge readiness on the current head, and use the pr-finisher skill to drive ...

Finish pass completed in c9db898. The action-lock update and dependent generated artifacts are aligned; local validation completed.

[gh-aw-bot]

@copilot Please take another pass on this PR: refresh the branch if GitHub offers it, review any current CI status, and use the pr-finisher skill to move this toward merge readiness.

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 5.47 AIC · ⌖ 8.32 AIC · ⊞ 9.3K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please do a maintainer-facing finish pass on this PR.

• Confirm the current head is still merge-ready for the latest branch state....

Finish pass complete on c8daaadb36: updated workflow sources and regenerated locks pin docker/setup-buildx-action v4.3.0 and github/stale-repos v9.0.17. Local make fmt, make lint, make test-unit, make test, make recompile, and make agent-report-progress passed; no review threads remain. Merge risk: current CI runs are action_required with no jobs/logs, and CI on this agent-pushed head must be re-triggered by a maintainer; the PR also remains blocked pending required review.

[Copilot]

@copilot Please take another pass on this PR: refresh the branch if GitHub offers it, review any current CI status, and use the pr-finisher skill to move this toward merge readiness.

Generated by [...

Finish pass complete: the branch is current with main, has no review threads, and local make fmt, make lint, make test-unit, and make recompile passed. make test exposed a pre-existing concurrent-map-write failure in pkg/cli (TestCommandProviderInterface under parallel execution); the targeted test passes serially. CI runs for CWI, Stale Lock Files, and CGO are action_required with no jobs/logs, while the current Copilot run is in progress. The PR is open and not behind but remains blocked pending required review and a maintainer-triggered CI run on the current head.

[gh-aw-bot]

@copilot Please take another maintainer-facing pass on this PR.

• Refresh the branch if GitHub offers it.
• Re-check required checks and branch status on the latest head.
• Clear any remaining blocker keeping this PR out of merge-ready state.
• Run the pr-finisher skill before handing back.

Generated by PR Sous Chef: https://github.com/github/gh-aw/actions/runs/32362964689

Generated by 👨‍🍳 PR Sous Chef · gpt54 · 13.8 AIC · ⌖ 8.15 AIC · ⊞ 6.9K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please take another maintainer-facing pass on this PR.

• Refresh the branch if GitHub offers it....

Latest pass complete: bf5eef1228 is current with main, the working tree is clean, and no review threads remain. make test-unit and make recompile pass; PR Sous Chef run 32362964689 completed successfully (all 9 jobs). The only remaining merge blockers are external: CWI, Stale Lock Files, and CGO are action_required on this head with zero jobs/logs, the newest Copilot run is still processing, and GitHub reports the PR blocked pending required review. No repository change can clear those gates.