Repository navigation
[aw] Crane failed #84
Copy link
Copy link
Open
Labels
Description
Workflow Failure
Workflow: Crane
Branch: main
Run: https://github.com/githubnext/apm/actions/runs/26247218124
🛡️ Protected Files: The code push was refused because the patch modifies protected files (package manifests, agent instruction files, or repository security configuration). This protection guards against unintended supply chain changes.
Blocked Operations:
push_to_pull_request_branch: Cannot push to pull request branch: patch modifies protected files (.github/workflows/agentics-maintenance.yml, .github/workflows-disabled/agentics-maintenance.yml, .github/workflows/auth-acceptance.yml, .github/workflows-disabled/auth-acceptance.yml, .github/workflows/build-release.yml, .github/workflows-disabled/build-release.yml, .github/workflows/ci-integration.yml, .github/workflows-disabled/ci-integration.yml, .github/workflows/ci-runtime.yml, .github/workflows-disabled/ci-runtime.yml, .github/workflows/ci.yml, .github/workflows-disabled/ci.yml, .github/workflows/cli-consistency-checker.lock.yml, .github/workflows-disabled/cli-consistency-checker.lock.yml, .github/workflows/cli-consistency-checker.md, .github/workflows-disabled/cli-consistency-checker.md, .github/workflows/codeql.yml, .github/workflows-disabled/codeql.yml, .github/workflows/daily-doc-updater.lock.yml, .github/workflows-disabled/daily-doc-updater.lock.yml, .github/workflows/daily-doc-updater.md, .github/workflows-disabled/daily-doc-updater.md, .github/workflows/daily-test-improver.lock.yml, .github/workflows-disabled/daily-test-improver.lock.yml, .github/workflows/daily-test-improver.md, .github/workflows-disabled/daily-test-improver.md, .github/workflows/devcontainer-feature-publish.yml, .github/workflows-disabled/devcontainer-feature-publish.yml, .github/workflows/devcontainer-feature-test.yml, .github/workflows-disabled/devcontainer-feature-test.yml, .github/workflows/docs-sync.lock.yml, .github/workflows-disabled/docs-sync.lock.yml, .github/workflows/docs-sync.md, .github/workflows-disabled/docs-sync.md, .github/workflows/docs.yml, .github/workflows-disabled/docs.yml, .github/workflows/merge-gate.yml, .github/workflows-disabled/merge-gate.yml, .github/workflows/notice-drift.yml, .github/workflows-disabled/notice-drift.yml, .github/workflows/pr-review-panel.lock.yml, .github/workflows-disabled/pr-review-panel.lock.yml, .github/workflows/pr-review-panel.md, .github/workflows-disabled/pr-review-panel.md, .github/workflows/project-sync.yml, .github/workflows-disabled/project-sync.yml, .github/workflows/triage-panel.lock.yml, .github/workflows-disabled/triage-panel.lock.yml, .github/workflows/triage-panel.md, .github/workflows-disabled/triage-panel.md, .github/workflows/verify-shared-apm-matrix.yml, .github/workflows-disabled/verify-shared-apm-matrix.yml). Add them to the allowed-files configuration field or set protected-files: fallback-to-issue to create a review issue instead.
⚙️ Configure protected-files: fallback-to-issue
safe-outputs:
push-to-pull-request-branch:
protected-files: fallback-to-issueAction Required
Assign this issue to an agent to debug and fix the issue.
Debug with any coding agent
Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):
Debug the agentic workflow failure using https://raw.githubusercontent.com/github/gh-aw/main/debug.md
The failed workflow run is at https://github.com/githubnext/apm/actions/runs/26247218124
Manually invoke the agent
Debug this workflow failure using your favorite Agent CLI and the agentic-workflows prompt.
- Start your agent
- Load the
agentic-workflowsprompt from.github/agents/agentic-workflows.agent.mdor https://github.com/github/gh-aw/blob/main/.github/agents/agentic-workflows.agent.md - Type
debug the agentic workflow crane failure in https://github.com/githubnext/apm/actions/runs/26247218124
Tip
Stop reporting this workflow as a failure
To stop a workflow from creating failure issues, set report-failure-as-issue: false in its frontmatter:
safe-outputs:
report-failure-as-issue: falseGenerated from Crane · ● 22.2M · ◷
- expires on May 28, 2026, 7:14 PM UTC
Reactions are currently unavailable
Activity
github-actions commentedon May 22, 2026
Agent job 26306616690 failed.
🛡️ Protected Files: The code push was refused because the patch modifies protected files (package manifests, agent instruction files, or repository security configuration). This protection guards against unintended supply chain changes.
Blocked Operations:
push_to_pull_request_branch: Cannot push to pull request branch: patch modifies protected files (go.mod, go.sum). Add them to the allowed-files configuration field or set protected-files: fallback-to-issue to create a review issue instead.⚙️ Configure
protected-files: fallback-to-issuegithub-actions commentedon May 23, 2026
Agent job 26340613011 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 24, 2026
Agent job 26348453368 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 24, 2026
Agent job 26355204919 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 24, 2026
Agent job 26361633185 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 24, 2026
Agent job 26369710084 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 25, 2026
Agent job 26378433587 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 25, 2026
Agent job 26390073893 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 25, 2026
Agent job 26403293723 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 25, 2026
Agent job 26415404015 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 26, 2026
Agent job 26426849045 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 26, 2026
Agent job 26439097480 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilegithub-actions commentedon May 26, 2026
Agent job 26450820784 failed.
🔒 Lock File Out of Sync: The workflow could not start because its compiled lock file no longer matches the source markdown.
This means the workflow's
.mdfile was edited butgh aw compilewas not run afterwards to regenerate the corresponding.lock.ymlfile. The agent is prevented from running against a stale configuration to avoid unexpected behaviour.To fix, recompile the workflow:
Then commit and push the updated
.lock.ymlfile.More ways to recompile
Using the gh-aw MCP server (if configured):
{ "tool": "compile", "arguments": { "validate": true } }Recompile all workflows at once:
Verify the result:
How to investigate the mismatch
The workflow run logs contain a verbose debug pass that shows exactly what was hashed. Search the Check workflow lock file step logs for lines starting with
[hash-debug]to see:This makes it easy to spot accidental whitespace changes, encoding differences, or import path drift.
This mismatch can also happen on a fresh install (even without any manual edits) if
gh aw add <path>@<ref>could not resolve the ref to an exact commit SHA during installation. In that case, rerun the add command with an exact SHA (or retry when API/rate-limit conditions recover), then recompile:How to disable this check
Set
stale-check: falsein theon:section of your workflow frontmatter:After editing, recompile the workflow:
gh aw compilemrjf commentedon May 26, 2026
@Coilot
gh aw compile
apm compile
fix this
198 remaining items
github-actions commentedon Jun 27, 2026
Agent job 28290025574 failed.
Code Push Errors:
push_to_pull_request_branch: Failed to push changes: pushSignedCommits: refusing unsigned push for branch 'crane/crane-migration-python-to-go-full-apm-cli-rewrite': merge commit detected. GitHub's createCommitOnBranch GraphQL mutation cannot represent merge commits, symlinks (mode 120000), submodule entries (mode 160000), or executable bits (mode 100755). Rewrite the commits to use only regular files (mode 100644) with no merge commits, or set signed-commits: false if the repository does not require signed commits.github-actions commentedon Jun 27, 2026
Agent job 28291358356 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Jun 27, 2026
Agent job 28292317669 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Jun 27, 2026
Agent job 28293495165 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Jun 27, 2026
Agent job 28294344303 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Jun 27, 2026
Agent job 28296433386 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Jun 27, 2026
Agent job 28297318792 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Aug 17, 2026
Agent job 32037027394 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Aug 17, 2026
Agent job 32037961544 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Aug 17, 2026
Agent job 32039257802 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Aug 17, 2026
Agent job 32041312785 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Aug 17, 2026
Agent job 32044319599 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Sep 1, 2026
Agent job 33461800246 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Sep 23, 2026
Agent job 35889470262 failed.
copilotengine terminated unexpectedly.Last agent output:
github-actions commentedon Oct 10, 2026
Agent job 38038475043 failed.
copilotengine terminated unexpectedly.Last agent output: