fix: recompile agentic workflow lock files with gh-aw v0.68.3

[digitarald]

Problem

All 3 agentic workflows (CI Failure Doctor, Daily Doc Updater, Code Simplifier) have been failing with activationfailed since March 31 — 16 consecutive daily failures each.

Root cause: Dependabot was bumping github/gh-aw action SHAs inside the compiled .lock.yml files without recompiling them. This created a version mismatch — lock file metadata said compiler_version: v0.50.5 but action refs pointed to v0.65.2, causing the activation job to reject the workflow.

The gh-aw docs explicitly warn against this:

Do not merge these PRs. Action pins in compiled workflows should only be updated by running gh aw compile or gh aw update-actions.

Fix

1. Recompiled all 3 lock files with gh aw compile using gh-aw v0.68.3
2. Added Dependabot ignore rules (wildcard patterns github/gh-aw-actions/* and github/gh-aw/*) to prevent recurrence

Expected side effects of recompilation

These are inherent to upgrading from gh-aw v0.50.5 → v0.68.3:

• Cron schedules re-scattered: The compiler assigns new random times when schedule: daily is used in frontmatter. Code Simplifier: 12:17 → 10:36 UTC, Doc Updater: 23:31 → 11:45 UTC.
• Maintenance workflow expanded: agentics-maintenance.yml gains new workflow_dispatch operations (disable, enable, update, upgrade, safe_outputs, create_labels, clean_cache_memories, validate) and a workflow_call interface — all generated by the newer compiler.
• Action refs migrated: github/gh-aw/actions/setup → github/gh-aw-actions/setup (new action repo structure in v0.68.3), actions/github-script v8 → v9.

Affected workflows

Workflow	Failing since	Runs failed
Code Simplifier	Mar 31 (#32)	16
Daily Doc Updater	Mar 31 (#32)	15
CI Failure Doctor	Apr 13 (#63, #66)	2

Testing

Lock files compiled cleanly: ✓ Compiled 3 workflow(s): 0 error(s), 0 warning(s)

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Recompiles agentic workflow lock files with gh-aw v0.68.3 to resolve activation failures caused by mismatched compiler metadata/action pins, and adds rules to prevent Dependabot from updating gh-aw-related action pins in compiled lock files.

Changes:

• Recompiled agentic workflow .lock.yml files with updated gh-aw metadata and action pins (v0.68.3).
• Added Dependabot ignore rules to avoid updating gh-aw action pins directly.
• Updated the agentics maintenance workflow to the newer generated format and added maintenance operations via workflow_dispatch/workflow_call.

Show a summary per file

File	Description
.github/workflows/daily-doc-updater.lock.yml	Regenerated lock file with new gh-aw metadata, updated action pins, and updated workflow logic.
.github/workflows/code-simplifier.lock.yml	Regenerated lock file with new gh-aw metadata, updated action pins, and updated workflow logic.
.github/workflows/agentics-maintenance.yml	Updated generated maintenance workflow and added selectable maintenance operations.
.github/dependabot.yml	Adds ignore rules intended to stop Dependabot from updating gh-aw action pins in compiled lock files.
.github/aw/actions-lock.json	Adds lock entries for new gh-aw actions and actions/github-script@v9.

Copilot's findings

• Files reviewed: 5/6 changed files
• Comments generated: 5