Align Docker dependency updates with Dependabot, cloud agent setup, and push trigger alignment by Copilot · Pull Request #125 · udx/worker

Copilot · 2026-05-11T05:26:23Z

This PR aligns Docker dependency automation with Dependabot coverage and cloud-agent orchestration, while adding push-triggered updater execution without duplicating Docker build checks already handled by Docker Ops.

What changed

Re-checked workflow runs and Dependabot scope, confirming Dependabot currently covers only:
- Docker base image updates (/)
- GitHub Actions workflow updates (.github/workflows)
Refactored /home/runner/work/worker/worker/.github/workflows/docker-dependency-updater.yml to dynamically discover and update Dockerfile dependency classes not covered by Dependabot:
- apt version pins
- ARG-driven tool versions inferred from Dockerfile usage patterns
Consolidated scheduled Copilot session triggering into the same Docker dependency updater workflow.
Removed the separate scheduled-session workflow file.
Added push execution (scoped to Dockerfile/workflow changes) so updater logic can be exercised before approval/merge.
Kept pull request creation restricted to workflow_dispatch runs to avoid PR noise from push runs.
Updated push-run behavior to avoid duplicate Docker build execution in this workflow, since Docker builds are already performed by Docker Ops executions.
Re-ran workflow validation and security checks (including CodeQL scan for actions changes).

Validation

Workflow YAML parsing/validation completed successfully.
Automated review and CodeQL checks completed with no new findings.

Agent-Logs-Url: https://github.com/udx/worker/sessions/649d8f42-1f9a-4f3d-b578-82a2cdd553ef Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Agent-Logs-Url: https://github.com/udx/worker/sessions/aabddbcd-eaab-47af-a62c-44dbe2dbe4a7 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

…pdater Agent-Logs-Url: https://github.com/udx/worker/sessions/f9486bae-2271-40e5-8e4e-2857d070bda2 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Agent-Logs-Url: https://github.com/udx/worker/sessions/f9486bae-2271-40e5-8e4e-2857d070bda2 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

fqjony · 2026-05-11T05:43:16Z

@copilot lets test it on push to confirm before approve / merge

After upgrade docket ops should pass

Agent-Logs-Url: https://github.com/udx/worker/sessions/95c8f493-c524-4556-ba4f-b06e47c9efe9 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Copilot · 2026-05-11T05:45:14Z

@copilot lets test it on push to confirm before approve / merge

After upgrade docket ops should pass

Implemented in e067a50: this workflow now runs on push (for Dockerfile/workflow changes) to validate the dependency-upgrade path before merge, while PR creation stays limited to workflow_dispatch.

fqjony · 2026-05-11T05:47:53Z

@copilot docker build is performed with docker ops, see executions

Copilot

Pull request overview

Adds/updates GitHub Actions automation to complement Dependabot by handling Dockerfile-level dependency pins (apt package version pins + ARG-driven tool versions), and consolidates the scheduled “Copilot dependency upgrade session” trigger into the same workflow.

Changes:

Introduces a scheduled workflow job that opens (or reuses) a weekly “scheduled dependency upgrade session” issue for Copilot.
Adds a manual (workflow_dispatch) job that parses Dockerfile to update pinned apt package versions and ARG-based tool versions, then opens a PR.
Adds a separate “Copilot Setup Steps” workflow to install baseline tooling used during cloud agent sessions.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

File	Description
.github/workflows/docker-dependency-updater.yml	New scheduled + manual workflow to discover/update Dockerfile dependency pins and open an automated PR.
.github/workflows/copilot-setup-steps.yml	New workflow to bootstrap common CLI tooling (jq/make/yamllint) for Copilot/cloud agent sessions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

+              in_block && /&&/ { in_block=0 }
+              in_block {
+                gsub(/\\/, "", $0)
+                gsub(/^[[:space:]]+/, "", $0)
+                if ($0 ~ /^[[:alnum:].+-]+=/) {
+                  split($0, parts, "=")
+                  print parts[1]
+                }


+      - Dockerfile
+      - .github/workflows/docker-dependency-updater.yml
+  workflow_dispatch:
+
+permissions:


+              )"
+              if [ -n "${github_repo}" ]; then
+                latest_value="$(
+                  curl -fsSL "https://api.github.com/repos/${github_repo}/releases/latest" 2>/dev/null \


+          else
+            echo "changed=true" >> "${GITHUB_OUTPUT}"
+          fi


Agent-Logs-Url: https://github.com/udx/worker/sessions/c104d67e-557e-4222-88c9-f7e900957048 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Copilot · 2026-05-11T05:49:38Z

@copilot docker build is performed with docker ops, see executions

Updated in 3a2ac6e: removed duplicate Docker build execution from push runs in docker-dependency-updater.yml since Docker Ops already handles push-time Docker builds.

Copilot AI and others added 9 commits May 11, 2026 05:15

Add scheduled Docker dependency updater workflow

757c7ae

Agent-Logs-Url: https://github.com/udx/worker/sessions/649d8f42-1f9a-4f3d-b578-82a2cdd553ef Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Polish docker dependency updater workflow lint

45ced20

Agent-Logs-Url: https://github.com/udx/worker/sessions/649d8f42-1f9a-4f3d-b578-82a2cdd553ef Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Harden docker dependency updater version checks

1321b13

Agent-Logs-Url: https://github.com/udx/worker/sessions/649d8f42-1f9a-4f3d-b578-82a2cdd553ef Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Fix AWS CLI URL substitution in updater workflow

f26957b

Agent-Logs-Url: https://github.com/udx/worker/sessions/649d8f42-1f9a-4f3d-b578-82a2cdd553ef Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Make AWS CLI update source and pinning safer

b7f4081

Agent-Logs-Url: https://github.com/udx/worker/sessions/649d8f42-1f9a-4f3d-b578-82a2cdd553ef Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Add weekly Docker dependency updater workflow with automated PR creation

f5face6

Agent-Logs-Url: https://github.com/udx/worker/sessions/649d8f42-1f9a-4f3d-b578-82a2cdd553ef Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Switch dependency updater to cloud-agent aligned apt scope

1b00ead

Agent-Logs-Url: https://github.com/udx/worker/sessions/aabddbcd-eaab-47af-a62c-44dbe2dbe4a7 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Address workflow review findings for updater setup

46efc16

Agent-Logs-Url: https://github.com/udx/worker/sessions/aabddbcd-eaab-47af-a62c-44dbe2dbe4a7 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Refine apt replacement regex and validation tag

b0939ef

Agent-Logs-Url: https://github.com/udx/worker/sessions/aabddbcd-eaab-47af-a62c-44dbe2dbe4a7 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Copilot AI assigned Copilot and fqjony May 11, 2026

github-advanced-security AI found potential problems May 11, 2026

View reviewed changes

Comment thread .github/workflows/docker-dependency-updater.yml Fixed

Copilot created this pull request from a session on behalf of fqjony May 11, 2026 05:27 View session

Copilot finished work on behalf of fqjony May 11, 2026 05:27

Copilot AI requested a review from fqjony May 11, 2026 05:27

Copilot started work on behalf of fqjony May 11, 2026 05:31 View session

Add scheduled Copilot session trigger and dynamic Docker dependency u…

9047ff6

…pdater Agent-Logs-Url: https://github.com/udx/worker/sessions/f9486bae-2271-40e5-8e4e-2857d070bda2 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

github-advanced-security AI found potential problems May 11, 2026

View reviewed changes

Comment thread .github/workflows/docker-dependency-updater.yml

Consolidate scheduled copilot trigger into docker updater workflow

fe0d80e

Agent-Logs-Url: https://github.com/udx/worker/sessions/f9486bae-2271-40e5-8e4e-2857d070bda2 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Copilot stopped work on behalf of fqjony due to an error May 11, 2026 05:36
The session was cancelled by the user.

Copilot started work on behalf of fqjony May 11, 2026 05:37 View session

Copilot finished work on behalf of fqjony May 11, 2026 05:39

Copilot started work on behalf of fqjony May 11, 2026 05:43 View session

fqjony marked this pull request as ready for review May 11, 2026 05:44

Copilot AI review requested due to automatic review settings May 11, 2026 05:44

Copilot started reviewing on behalf of fqjony May 11, 2026 05:44 View session

ci: run docker dependency updater validation on push

e067a50

Agent-Logs-Url: https://github.com/udx/worker/sessions/95c8f493-c524-4556-ba4f-b06e47c9efe9 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Copilot AI changed the title ~~Align Docker dependency updates with Dependabot and cloud agent setup~~ Align Docker dependency updates with Dependabot, cloud agent setup, and push validation May 11, 2026

Copilot finished work on behalf of fqjony May 11, 2026 05:46

Copilot started work on behalf of fqjony May 11, 2026 05:48 View session

Copilot AI reviewed May 11, 2026

View reviewed changes

ci: avoid duplicate docker build in updater push runs

3a2ac6e

Agent-Logs-Url: https://github.com/udx/worker/sessions/c104d67e-557e-4222-88c9-f7e900957048 Co-authored-by: fqjony <12067297+fqjony@users.noreply.github.com>

Copilot AI changed the title ~~Align Docker dependency updates with Dependabot, cloud agent setup, and push validation~~ Align Docker dependency updates with Dependabot, cloud agent setup, and push trigger alignment May 11, 2026

Copilot finished work on behalf of fqjony May 11, 2026 05:50

fqjony added enhancement New feature or request dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code docker Pull requests that update docker code labels May 11, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Align Docker dependency updates with Dependabot, cloud agent setup, and push trigger alignment#125

Align Docker dependency updates with Dependabot, cloud agent setup, and push trigger alignment#125
Copilot wants to merge 13 commits into
latestfrom
copilot/add-docker-dependency-updater-workflow

Copilot AI commented May 11, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

fqjony commented May 11, 2026

Uh oh!

Copilot AI commented May 11, 2026

Uh oh!

fqjony commented May 11, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI commented May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

Copilot AI commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What changed

Validation

Uh oh!

Uh oh!

Uh oh!

fqjony commented May 11, 2026

Uh oh!

Copilot AI commented May 11, 2026

Uh oh!

fqjony commented May 11, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI commented May 11, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Copilot AI commented May 11, 2026 •

edited

Loading