[automated] Merge branch 'main' => 'feature/net11-scouting'

.devcontainer/devcontainer.json

@@ -31,5 +31,5 @@
         "FSHARPCORE_USE_PACKAGE": "false",
         "PATH": "${localWorkspaceFolder}/.dotnet:${containerEnv:PATH}"
     },
-    "postCreateCommand": [ "bash", "-c", "eng/common/dotnet.sh && cp -r .dotnet/sdk/* /usr/share/dotnet/sdk && cp -r .dotnet/shared/Microsoft.NETCore.App/* /usr/share/dotnet/shared/Microsoft.NETCore.App" ]
+    "postCreateCommand": [ "bash", "-c", "eng/common/dotnet.sh", "build", "FSharp.Compiler.Service.sln" ]
 }

.github/aw/actions-lock.json

@@ -5,10 +5,10 @@
       "version": "v8",
       "sha": "ed597411d8f924073f98dfc5c65a23a2325f34cd"
     },
-    "github/gh-aw-actions/setup@v0.67.4": {
+    "github/gh-aw-actions/setup@v0.68.3": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.67.4",
-      "sha": "9d6ae06250fc0ec536a0e5f35de313b35bad7246"
+      "version": "v0.68.3",
+      "sha": "ba90f2186d7ad780ec640f364005fa24e797b360"
     },
     "github/gh-aw/actions/setup@v0.67.2": {
       "repo": "github/gh-aw/actions/setup",

.github/workflows/aw-auto-update.md

@@ -14,6 +14,8 @@ permissions: read-all
 network:
   allowed:
   - defaults
+  - go
+  - github
 
 checkout:
   ref: main
@@ -25,6 +27,8 @@ tools:
   bash: true
 
 safe-outputs:
+  noop:
+    report-as-issue: false
   create-pull-request:
     draft: false
     title-prefix: "[Auto Update] "
@@ -43,19 +47,22 @@ You are a maintenance bot that keeps the repository's agentic workflow infrastru
 
 ## Task
 
-1. **Upgrade**: Run `gh aw upgrade` to update the gh-aw CLI version and apply any codemods.
-2. **Compile**: Run `gh aw compile` to recompile all workflows and verify 0 errors.
+Run these steps in order and stop as soon as one tells you to exit:
+
+1. **Upgrade**: Run `gh aw upgrade` to update the gh-aw CLI version and apply any codemods. If the command fails, report the error and exit immediately.
+2. **Compile**: Run `gh aw compile` to recompile all workflows. If the command reports errors, report them and exit immediately.
 3. **Check for changes**: Run `git diff` to see if anything changed.
-4. **If no changes**: Report "Already up to date" and exit.
+4. **If no changes**: Report "Already up to date" and exit immediately. Do not search for PRs, do not run any other commands.
 5. **If changes exist**:
    - Check if an open PR titled `[Auto Update] Agentic workflows` already exists (search open PRs).
    - If a PR exists, push the changes to its branch (`agentics/auto-update-gh-aw`) to update it. Leave a brief comment noting what changed (e.g. "Updated gh-aw-actions/setup from vX to vY").
    - If no PR exists, create a new PR from branch `agentics/auto-update-gh-aw` to `main` with title `[Auto Update] Agentic workflows` and a body summarizing the changes.
 
 ## Rules
 
+- Only run `gh aw upgrade` and `gh aw compile`. Do **not** run `go` commands, `npm` commands, or any other package manager or build tool. Do **not** attempt to fix dependency resolution errors or edit generated files (go.mod, go.sum, package.json, etc.) manually.
 - Only commit changes to files managed by `gh aw`: `.github/workflows/`, `.github/aw/`, `.github/agents/`.
 - Use a single commit with message: `Update agentic workflows via gh aw upgrade`.
 - The branch name must always be `agentics/auto-update-gh-aw`.
-- If `gh aw compile` reports errors, do **not** create or update a PR. Instead, report the errors and exit.
+- If `gh aw upgrade` or `gh aw compile` fails, report the error output and exit. Do **not** try to fix the failure.
 - Be concise in PR descriptions and comments.

.github/workflows/regression-pr-shepherd.md

@@ -19,6 +19,8 @@ network:
   - dotnet
 
 safe-outputs:
+  noop:
+    report-as-issue: false
   add-comment:
     max: 5
     target: "*"