[DanWahlin]

Why

Since October 26, every agentic workflow run has failed at Execute GitHub Copilot CLI with:

Error: Cannot find module '/gh-aw/actions/copilot_driver.cjs'

ubuntu-latest moved from Ubuntu 24.04 to Ubuntu 26.04, which uses sudo-rs. Our lock files were compiled with gh-aw v0.68.1. They start the agent firewall with sudo -E, and sudo-rs does not pass RUNNER_TEMP through, so the driver path became /gh-aw/.... This is github/gh-aw#72489, which gh-aw v1.0.1 fixes (github/gh-aw#72409).

Affected runs:

• Course Updater: October 26 and November 2. No course-update PRs were created.
• Traffic Updater: October 26 and November 2. The traffic data for October 19 to November 1 is missing, and GitHub keeps only 14 days of traffic data.
• Translation Polisher: every pull request run today.

What changed

• Recompiled course-updater, traffic-updater, and translation-polisher with gh-aw v1.0.1 (AWF v0.29.0). The lock files keep today's Dependabot action updates.
• course-updater.md: v1.0.1 rejects the Copilot web-fetch tool in this mode, so the workflow now reads changelog.md with gh api (the release checks already used gh). I removed the --allow-url engine flag because only web-fetch used it.
• translation-polisher.md: renamed the deprecated labels to required-labels.
• .gitattributes and .github/aw/actions-lock.json were updated by gh aw compile. The compiler no longer adds merge=ours for lock files.

gh aw compile --validate --actionlint: 3 workflows compiled, 0 warnings, no actionlint issues.

After merging

Run Traffic Updater manually (workflow_dispatch) soon. The October 19–25 traffic data will no longer be available from the GitHub API after November 8.

[Copilot]

🟡 Changes recommended

The workflow’s gh api changelog read cannot run in the compiled sandbox because it lacks both GitHub CLI credentials and network access to api.github.com.

1 open issue

• Use GitHub MCP tools for sandbox changelog reads · New

What changed in this PR

Updates the course repository’s agentic maintenance workflows to gh-aw v1.0.1 to address Copilot CLI startup failures on newer Ubuntu runners.

Changes:

• Regenerates Course Updater with updated runtime dependencies and rootless firewall execution.
• Replaces Course Updater’s web-fetch instructions with gh api and migrates Translation Polisher to required-labels.
• Updates the workflow setup action pin and generated-file attributes.

File	Description
.github/​workflows/​translation-polisher.md	Renames the deprecated label requirement setting.
.github/​workflows/​course-updater.md	Switches changelog retrieval to gh api and removes unused web-fetch configuration.
.github/​workflows/​course-updater.lock.yml	Regenerates execution, security, and reporting steps with gh-aw v1.0.1.
.github/​aw/​actions-lock.json	Pins the gh-aw setup action to v1.0.1.
.gitattributes	Retains generated-file marking while removing merge=ours for workflow locks.

_{Review effort: Max (auto)}