[Repo Assist] ci: bundle GitHub Actions updates (github-script v9, cache v5)

[github-actions]

🤖 This is an automated PR from Repo Assist.

This bundles two pending Dependabot PRs into a single change to reduce review noise. Maintainers can close #1450 and #1451 after merging this PR.

Changes

1. actions/github-script v8 → v9 (refs Dependabot PR #1450)

File: .github/workflows/advanced-on-demand.yml

Upgrades all four uses: actions/github-script@v8 steps to @v9. The v9 release adds a getOctokit factory function and upgrades @actions/github to v9 (ESM-only).

Breaking change handled: require('@actions/github') no longer works in v9. The scripts in this workflow don't use that pattern — they only use the injected github context object.

API style update: Also migrates from the deprecated flat API (github.issues.createComment, github.pulls.get) to the namespaced REST API (github.rest.issues.createComment, github.rest.pulls.get). Both work in v9, but the github.rest.* style is idiomatic for the v9 client.

2. actions/cache v4 → v5 (refs Dependabot PR #1451)

File: .github/workflows/ci.yml

Upgrades uses: actions/cache@v4 to @v5. v5 runs on the Node.js 24 runtime and requires Actions Runner ≥ 2.327.1. GitHub-hosted runners (ubuntu-latest) meet this requirement.

Not included

• Dependabot PR Bump actions/upload-artifact from 7.0.0 to 7.0.1 #1452 (actions/upload-artifact 7.0.0 → 7.0.1) targets only repo-assist.lock.yml, which is a managed lock file — updating it here is out of scope.

Test Status

These are CI configuration changes only — no Python code was modified. The workflow logic is unchanged; only action versions and Octokit API call style are updated. The repository tests (poe test) pass unchanged.

---

Warning

Protected Files — Push Permission Denied

This was originally intended as a pull request, but the patch modifies protected files. A human must create the pull request manually.

Protected files

• .github/workflows/advanced-on-demand.yml

• .github/workflows/ci.yml

The push was rejected because GitHub Actions does not have workflows permission to push these changes, and is never allowed to make such changes, or other authorization being used does not have this permission.

Create the pull request manually

# Download the patch from the workflow run
gh run download 24486623340 -n agent -D /tmp/agent-24486623340

# Create a new branch
git checkout -b repo-assist/eng-bundle-actions-updates-20260416-80ddc1126ee4f057 main

# Apply the patch (--3way handles cross-repo patches)
git am --3way /tmp/agent-24486623340/aw-repo-assist-eng-bundle-actions-updates-20260416.patch

# Push the branch and create the pull request
git push origin repo-assist/eng-bundle-actions-updates-20260416-80ddc1126ee4f057
gh pr create --title '[Repo Assist] ci: bundle GitHub Actions updates (github-script v9, cache v5)' --base main --head repo-assist/eng-bundle-actions-updates-20260416-80ddc1126ee4f057 --repo py-why/dowhy

Generated by 🌈 Repo Assist, see workflow run. Learn more.

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@11c9a2c442e519ff2b427bf58679f5a525353f76