[actions] Update GitHub 操作 versions - 2026-08-29

[github-actions]

GitHub 操作 Updates - 2026-08-29

This PR updates GitHub 操作 versions in .github/aw/actions-lock.json to their latest compatible releases.

📦 操作 Updated (full list)

操作 Updated

• anchore/sbom-action: v0.24.0 → v0.24.2
• github/codeql-action/upload-sarif: v4.37.8 → v4.37.9

Summary

• Total actions updated: 2
• Update command: gh aw update
• Workflow lock files: Not included (will be regenerated on next compile)

Notes

• All action updates respect semantic versioning and maintain compatibility
• 操作 are pinned to commit SHAs for security
• Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation

Testing

The updated actions will be automatically used in workflow compilations. No manual testing required.

---

This PR was automatically created by the Daily Workflow Updater workflow.

Generated by 🔧 Daily Workflow Updater · copilot · auto · 18.1 AIC · ⌖ 7.5 AIC · ⊞ 8K · ◷

• expires on Aug 29, 2026, 11:05 PM UTC-08:00

---

Run: https://github.com/github/gh-aw/actions/runs/33240946228

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 24.1 AIC · ⌖ 8.63 AIC · ⊞ 8.8K · ◷
_{Comment /souschef to run again}

---

Automated branch refresh attempt from PR Sous Chef run https://github.com/github/gh-aw/actions/runs/33246602890.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 10.4 AIC · ⌖ 8.7 AIC · ⊞ 8.8K · ◷
_{Comment /souschef to run again}

[gh-aw-bot]

@copilot Please refresh this dependency update PR for forward progress. Re-run the pr-finisher skill, update the branch if needed, and hand back once checks are ready for maintainer review.

Generated by 👨🍳 PR Sous Chef
_{Comment /souschef to run again}

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 24.1 AIC · ⌖ 8.63 AIC · ⊞ 8.8K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please refresh this dependency update PR for forward progress. Re-run the pr-finisher skill, update the branch if needed, and hand back once checks are ready for maintainer review.

Gener...

Refreshed the PR in 99f8b88. The cumulative diff is scoped to .github/aw/actions-lock.json; formatting, lint, recompilation, integration tests, and the final impacted validation gate pass. CI runs are awaiting approval before jobs can start.

[gh-aw-bot]

@copilot Please refresh this PR for forward progress. Re-run the pr-finisher skill, address any remaining review feedback, and update the branch if needed.

Run: https://github.com/github/gh-aw/actions/runs/33246602890

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 10.4 AIC · ⌖ 8.7 AIC · ⊞ 8.8K · ◷
_{Comment /souschef to run again}

[Copilot]

@copilot Please refresh this PR for forward progress. Re-run the pr-finisher skill, address any remaining review feedback, and update the branch if needed.

Run: https://github.com/github/gh-aw/acti...

Refreshed in a57b00b (with scope cleanup in f516978). The branch is current with main, has no unresolved review threads, and the cumulative diff is limited to .github/aw/actions-lock.json. Formatting, lint, full Go tests, compilation of all 297 workflows, and the final validation gate pass; CI still requires maintainer approval/re-trigger.

[gh-aw-bot]

@copilot Please refresh this PR for forward progress. Re-run the pr-finisher skill, update the branch if needed, and hand back once checks are ready for maintainer review.

Run: https://github.com/github/gh-aw/actions/runs/33251251524

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See 网络 Configuration for more information.

Generated by 👨‍🍳 PR Sous Chef · pi · gpt54 · 41.3 AIC · ⌖ 8.7 AIC · ⊞ 8.8K · ◷
_{Comment /souschef to run again}