From 111aa96fb96c49dc6f2e95a19596669e09efd72f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 09:32:26 +0000 Subject: [PATCH 1/2] ci: bump the actions-all group across 1 directory with 2 updates Bumps the actions-all group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [actions/setup-python](https://github.com/actions/setup-python). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `actions/setup-python` from 6 to 7 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all ... Signed-off-by: dependabot[bot] --- .github/workflows/build.yaml | 4 ++-- .github/workflows/claude-implement.yaml | 2 +- .github/workflows/claude-review.yaml | 2 +- .github/workflows/codeql.yaml | 2 +- .github/workflows/release.yaml | 4 ++-- .github/workflows/test.yaml | 4 ++-- 6 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 971230b..4dc9a1a 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -14,9 +14,9 @@ jobs: package: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Python 3.12 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: "3.12" - name: Install build dependencies diff --git a/.github/workflows/claude-implement.yaml b/.github/workflows/claude-implement.yaml index 4257f1d..6362990 100644 --- a/.github/workflows/claude-implement.yaml +++ b/.github/workflows/claude-implement.yaml @@ -25,7 +25,7 @@ jobs: contains(github.event.comment.body, '@claude') runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: ref: dev-claude fetch-depth: 0 diff --git a/.github/workflows/claude-review.yaml b/.github/workflows/claude-review.yaml index 92a1069..a19bb57 100644 --- a/.github/workflows/claude-review.yaml +++ b/.github/workflows/claude-review.yaml @@ -25,7 +25,7 @@ jobs: contains(github.event.comment.body, '@claude') runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - uses: anthropics/claude-code-action@v1 diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index d24c6de..932b7f6 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -27,7 +27,7 @@ jobs: security-events: write steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Initialize CodeQL uses: github/codeql-action/init@v4 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 0473e17..33797f0 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -15,11 +15,11 @@ jobs: permissions: id-token: write # IMPORTANT: this permission is mandatory for trusted publishing steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: filter: blob:none fetch-depth: 0 - - uses: actions/setup-python@v6 + - uses: actions/setup-python@v7 with: python-version: "3.x" cache: "pip" diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 2d025ae..e0516a1 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -41,7 +41,7 @@ jobs: PYTHON: ${{ matrix.python }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Free up disk space run: | @@ -52,7 +52,7 @@ jobs: sudo rm -rf /usr/local/lib/android - name: Set up Python ${{ matrix.python }} - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python }} From 8915e7f1d09f7d896e53514ade8b3123cf26d6ad Mon Sep 17 00:00:00 2001 From: "pre-commit-ci[bot]" <66853113+pre-commit-ci[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 09:32:53 +0000 Subject: [PATCH 2/2] [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci --- docs/agentic_workflow_research.md | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/docs/agentic_workflow_research.md b/docs/agentic_workflow_research.md index b3408c4..92d6044 100644 --- a/docs/agentic_workflow_research.md +++ b/docs/agentic_workflow_research.md @@ -184,14 +184,15 @@ The audit discussion feeds into `/plan` → sub-issues → `@claude` implements. **What**: Set up a Cowork scheduled task that does similar work to the gh-aw audit, then compare the two approaches. **Differences**: -| Aspect | gh-aw | Cowork Scheduled Task | -|--------|-------|-----------------------| -| Runs where | GitHub Actions (cloud) | Local (Cowork must be open) | -| Security | 5-layer guardrails, read-only token | Full local access | -| Output | GitHub Discussions/Issues | Chat notification in Cowork | -| Data access | Repo only (sandboxed) | Full local filesystem | -| Scheduling | Cron via Actions | Cron via Cowork app | -| Cost | GitHub Actions minutes + LLM tokens | Subscription credit pool | + +| Aspect | gh-aw | Cowork Scheduled Task | +| ----------- | ----------------------------------- | --------------------------- | +| Runs where | GitHub Actions (cloud) | Local (Cowork must be open) | +| Security | 5-layer guardrails, read-only token | Full local access | +| Output | GitHub Discussions/Issues | Chat notification in Cowork | +| Data access | Repo only (sandboxed) | Full local filesystem | +| Scheduling | Cron via Actions | Cron via Cowork app | +| Cost | GitHub Actions minutes + LLM tokens | Subscription credit pool | **Verdict**: gh-aw for anything that should run reliably regardless of whether your laptop is open. Cowork tasks for things that need local context (your `.venv`, local data files, GPU) or personal briefings.