fix: normalize version strings in blocked versions check

Use case-insensitive normalization to ensure v1.0.0 and 1.0.0 are treated
as the same version in blocked versions comparison. Update tests accordingly.

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/59710bfc-6f7b-4d62-ae00-03f2f989ad07

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot

actions/setup/js/check_version_updates.cjs

@@ -18,6 +18,17 @@ const https = require("https");
 
 const CONFIG_URL = "https://raw.githubusercontent.com/github/gh-aw/main/config.json";
 
+/**
+ * Normalize a version string by stripping the leading "v" prefix if present.
+ * This ensures "v1.0.0" and "1.0.0" are treated as equivalent.
+ *
+ * @param {string} version
+ * @returns {string}
+ */
+function normalizeVersion(version) {
+  return version.startsWith("v") ? version.slice(1) : version;
+}
+
 /**
  * Parse a semver-like version string into an array of numeric parts.
  * Strips a leading "v" if present.
@@ -114,8 +125,9 @@ async function main() {
   const blockedVersions = Array.isArray(config.blockedVersions) ? config.blockedVersions : [];
   const minimumVersion = typeof config.minimumVersion === "string" ? config.minimumVersion : "";
 
-  // Check blocked versions
-  if (blockedVersions.includes(compiledVersion)) {
+  // Check blocked versions (normalize both sides to ignore leading "v" prefix)
+  const normalizedCompiled = normalizeVersion(compiledVersion);
+  if (blockedVersions.some(v => normalizeVersion(v) === normalizedCompiled)) {
     core.summary
       .addRaw("### ❌ Blocked compile-agentic version\n\n")
       .addRaw(`The compile-agentic version \`${compiledVersion}\` is **blocked** and cannot be used to run workflows.\n\n`)

actions/setup/js/check_version_updates.test.cjs

@@ -170,12 +170,20 @@ describe("check_version_updates", () => {
     expect(mockCore.setFailed).not.toHaveBeenCalled();
   });
 
-  it("should handle version strings without leading 'v'", async () => {
+  it("should block version when config uses version without 'v' prefix", async () => {
     process.env.GH_AW_COMPILED_VERSION = "v1.0.0";
     mockHttpsSuccess(JSON.stringify({ blockedVersions: ["1.0.0"], minimumVersion: "" }));
-    // "v1.0.0" is NOT in ["1.0.0"] because includes() uses exact string match
+    // "v1.0.0" should be blocked by "1.0.0" after normalization
     await checkVersionUpdates.main();
-    expect(mockCore.setFailed).not.toHaveBeenCalled();
+    expect(mockCore.setFailed).toHaveBeenCalledWith(expect.stringContaining("Blocked compile-agentic version"));
+  });
+
+  it("should block version regardless of 'v' prefix in compiled version", async () => {
+    process.env.GH_AW_COMPILED_VERSION = "1.0.0";
+    mockHttpsSuccess(JSON.stringify({ blockedVersions: ["v1.0.0"], minimumVersion: "" }));
+    // "1.0.0" should be blocked by "v1.0.0" after normalization
+    await checkVersionUpdates.main();
+    expect(mockCore.setFailed).toHaveBeenCalledWith(expect.stringContaining("Blocked compile-agentic version"));
   });
 
   it("should fail when version is blocked with exact string match", async () => {