fix: align firewall agent/api-proxy images to 0.25.6#3012
Merged
Conversation
The previous upgrade PR (#3007) bumped squid and --image-tag to 0.25.6 but left agent and api-proxy at 0.25.5. AWF uses --image-tag for all firewall containers, so it looks for api-proxy:0.25.6 which was never pre-pulled, causing: No such image: ghcr.io/github/gh-aw-firewall/api-proxy:0.25.6 This broke all workflows dispatched from main since the merge. Fixes #3011 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
Pull request overview
Aligns firewall container image tags across all compiled agentic workflow lock files so workflows pre-pull the agent and api-proxy images at 0.25.6, matching --image-tag/squid and preventing missing-image failures on main.
Changes:
- Bumped
ghcr.io/github/gh-aw-firewall/agentfrom0.25.5→0.25.6in workflow image pre-pull steps. - Bumped
ghcr.io/github/gh-aw-firewall/api-proxyfrom0.25.5→0.25.6in workflow image pre-pull steps. - Applied the updates consistently across all 31
.lock.ymlworkflow files (including the threat-detection image download steps).
Reviewed changes
Copilot reviewed 31 out of 31 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| .github/workflows/test-improver.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/test-coverage-improver.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/smoke-safeoutputs-reviews.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/smoke-safeoutputs-prs.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/smoke-safeoutputs-labels.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/smoke-safeoutputs-issues.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/smoke-safeoutputs-discussions.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/smoke-proxy-github-script.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/smoke-copilot.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/smoke-allowonly.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/semantic-function-refactor.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/rust-guard-improver.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/repo-assist.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/release.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/plan.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/nightly-workflow-compiler.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/nightly-schema-updater.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/nightly-docs-reconciler.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/mcp-gateway-log-analyzer.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/large-payload-tester.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/issue-monster.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/integrity-filtering-audit.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/guard-status-tracker.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/gpl-dependency-checker.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/go-logger.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/go-fan.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/github-mcp-guard-coverage-checker.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/ghcr-download-tracker.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/gateway-issue-dispatcher.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/duplicate-code-detector.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
| .github/workflows/daily-compliance-checker.lock.yml | Updates firewall agent/api-proxy pre-pulled image tags to 0.25.6. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
PR #3007 bumped
squidand--image-tagto0.25.6but leftagentandapi-proxyat0.25.5. AWF uses--image-tagfor all firewall containers, so it looks forapi-proxy:0.25.6which was never pre-pulled:This broke every workflow dispatched from main since the merge, including the Gateway Issue Dispatcher (#3011).
Fix
Bump
agentandapi-proxyfrom0.25.5→0.25.6across all 31 lock files, matchingsquidand--image-tag.Fixes #3011