[PRESERVE — DO NOT MERGE] fix/node24-actions-and-daily-summary: 9 rescued commits, triaged

.github/labeler.yml

@@ -0,0 +1,39 @@
+core:
+  - changed-files:
+    - any-glob-to-any-file: 'core/**'
+
+agents:
+  - changed-files:
+    - any-glob-to-any-file: 'agents/**'
+
+autopilot:
+  - changed-files:
+    - any-glob-to-any-file: 'autopilot/**'
+
+overseer-findings:
+  - changed-files:
+    - any-glob-to-any-file: 'overseer/**'
+
+ci/cd:
+  - changed-files:
+    - any-glob-to-any-file: '.github/**'
+
+testing:
+  - changed-files:
+    - any-glob-to-any-file: 'tests/**'
+
+documentation:
+  - changed-files:
+    - any-glob-to-any-file: 'docs/**'
+    - any-glob-to-any-file: '*.md'
+
+maintenance:
+  - changed-files:
+    - any-glob-to-any-file: 'scripts/**'
+    - any-glob-to-any-file: '.github/scripts/**'
+
+dependencies:
+  - changed-files:
+    - any-glob-to-any-file: 'requirements*.txt'
+    - any-glob-to-any-file: 'pyproject.toml'
+    - any-glob-to-any-file: 'setup.py'

.github/scripts/deployment-automation.sh

@@ -98,7 +98,7 @@ echo "1) Self-hosted (Local installation)"
 echo "2) Docker (Containerized deployment)"
 echo "3) Kubernetes (K8s cluster deployment)"
 echo "4) Cloud Platform (AWS/GCP/Azure)"
-read -p "Enter choice [1-4]: " DEPLOY_MODE
+read -r -p "Enter choice [1-4]: " DEPLOY_MODE
 
 case $DEPLOY_MODE in
     1)
@@ -119,6 +119,7 @@ case $DEPLOY_MODE in
         # Create virtual environment
         info "Setting up Python virtual environment..."
         python3 -m venv venv
+        # shellcheck source=/dev/null
         source venv/bin/activate
         success "Virtual environment created"
 
@@ -193,7 +194,7 @@ case $DEPLOY_MODE in
         docker run -d \
             --name autonomous-github-agent \
             --env-file .env \
-            -v $(pwd)/.github:/app/.github \
+            -v "$(pwd)/.github":/app/.github \
             -p 8080:8080 \
             autonomous-github-agent:latest
 
@@ -225,9 +226,9 @@ case $DEPLOY_MODE in
 
         # Create secrets
         info "Setting up secrets..."
-        read -p "Enter GitHub Token: " GITHUB_TOKEN
+        read -r -p "Enter GitHub Token: " GITHUB_TOKEN
         kubectl create secret generic github-credentials \
-            --from-literal=token=$GITHUB_TOKEN \
+            --from-literal=token="$GITHUB_TOKEN" \
             -n autonomous-agent || true
 
         # Apply manifests
@@ -247,7 +248,7 @@ case $DEPLOY_MODE in
         echo "1) AWS (ECS/EKS)"
         echo "2) Google Cloud (Cloud Run/GKE)"
         echo "3) Azure (Container Instances/AKS)"
-        read -p "Enter choice [1-3]: " CLOUD_CHOICE
+        read -r -p "Enter choice [1-3]: " CLOUD_CHOICE
 
         case $CLOUD_CHOICE in
             1)

.github/workflows/agent_dispatcher.yml

@@ -79,11 +79,11 @@ jobs:
     needs: route
     if: needs.route.outputs.should_risk_score == 'true' && github.event_name == 'pull_request'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
           cache: pip
@@ -192,7 +192,7 @@ jobs:
     steps:
       - name: Label PR by changed paths
         if: github.event_name == 'pull_request'
-        uses: actions/labeler@v5
+        uses: actions/labeler@v6
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}
           sync-labels: false

.github/workflows/ai_agent_workflow.yml

@@ -30,15 +30,15 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
 
       - name: Cache dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cache/pip
@@ -60,22 +60,22 @@ jobs:
 
       - name: Upload coverage
         if: matrix.python-version == '3.11'
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           file: ./coverage.xml
           fail_ci_if_error: false
 
   code-quality:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
       - name: Cache dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cache/pip
           key: ${{ runner.os }}-pip-quality-${{ hashFiles('requirements.txt') }}
@@ -96,14 +96,14 @@ jobs:
     if: github.event_name == 'push' || !github.event.pull_request.draft
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
       - name: Cache dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cache/pip
           key: ${{ runner.os }}-pip-${{ hashFiles('requirements.txt') }}
@@ -128,7 +128,7 @@ jobs:
         run: python .github/scripts/docgen.py
 
       - name: Upload artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: agent-outputs

.github/workflows/branch_protection.yml

@@ -21,10 +21,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.12'
           cache: 'pip'

.github/workflows/code-quality-optimized.yml

@@ -36,18 +36,18 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 1  # Shallow clone for speed
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ env.PYTHON_VERSION }}
           cache: 'pip'
 
       - name: Cache pip dependencies
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.cache/pip
@@ -79,7 +79,7 @@ jobs:
         continue-on-error: true
 
       - name: Upload analysis results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: analysis-results
@@ -90,7 +90,7 @@ jobs:
 
       - name: Comment PR with results
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const fs = require('fs');
@@ -138,10 +138,10 @@ jobs:
         python-version: ['3.10', '3.11', '3.12']
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
           cache: 'pip'
@@ -175,7 +175,7 @@ jobs:
 
       - name: Upload coverage reports
         if: matrix.python-version == '3.11'
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           file: ./coverage.xml
           flags: unittests
@@ -184,7 +184,7 @@ jobs:
 
       - name: Upload HTML coverage report
         if: matrix.python-version == '3.11'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: coverage-report
           path: htmlcov/
@@ -197,10 +197,10 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ env.PYTHON_VERSION }}
           cache: 'pip'
@@ -234,15 +234,15 @@ jobs:
           "
 
       - name: Upload Bandit results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         if: always()
         with:
           name: bandit-security-report
           path: bandit-report.json
 
       - name: Create security issue if critical vulnerabilities found
         if: failure() && steps.check_critical.outcome == 'failure'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const fs = require('fs');
@@ -281,10 +281,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ env.PYTHON_VERSION }}
           cache: 'pip'
@@ -305,7 +305,7 @@ jobs:
 
       - name: Comment on PR with complexity changes
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const fs = require('fs');
@@ -321,7 +321,7 @@ jobs:
             }
 
       - name: Upload complexity reports
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: complexity-reports
           path: |
@@ -336,10 +336,10 @@ jobs:
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Download all artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
 
       - name: Generate health dashboard
         run: |

.github/workflows/dry_run_gate.yml

@@ -38,9 +38,9 @@ jobs:
       plan_summary: ${{ steps.plan.outputs.summary }}
       risk_level: ${{ steps.plan.outputs.risk_level }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
           cache: pip
@@ -171,9 +171,9 @@ jobs:
       needs.check-approval.outputs.approved == 'true'
     environment: production  # requires environment protection rules if configured
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: "3.11"
           cache: pip