[Android Maintenance] Bump remaining native-github-asana-sync refs to v2.6.0

Task/Issue URL: https://app.asana.com/1/137249556945/project/488551667048375/task/1216542927950821
Tech Design URL (if applicable):

Description

Standardizes the remaining GitHub Action references on duckduckgo/native-github-asana-sync@v2.6.0.

PR #9195 bumped the nightly, E2E, privacy, release, and dependency-update workflows to v2.6.0, but left the PR/issue event workflows and two composite actions still pinned to older versions. This change finishes the job so the whole repo is consistent on v2.6.0:

• .github/actions/assign-release-task/action.yml (v2.3 → v2.6.0)
• .github/actions/maestro-cloud-asana-reporter/action.yml (v2.0 → v2.6.0, 2 refs)
• .github/workflows/action-pr-opened.yaml (v2.0 → v2.6.0, 3 refs)
• .github/workflows/action-pr-merged.yaml (v2.0 → v2.6.0)
• .github/workflows/action-issue-opened.yaml (v2.0 → v2.6.0)
• .github/workflows/action-agentic-maintenance-pr.yaml (v2.0 → v2.6.0, 2 refs)

v2.6.0 adds @-mention forwarding for pull_request_review, pull_request_review_comment, and issue_comment events, better error handling on task creation, and notify-release hardening. The PR/issue event workflows updated here are exactly the ones that benefit from the @-mention forwarding. The v2.0 release notes confirm no breaking changes to the external action interface, and all action names used in these files (get-asana-user-id, find-asana-task-id, add-asana-comment, notify-pr-merged, create-asana-issue-task, create-asana-task, add-task-asana-project) are unchanged through v2.6.0. This mirrors the v2.0 → v2.6.0 bumps already merged in #9195.

🤖 Android Maintenance Worker

Steps to test this PR

This change touches only GitHub Actions workflow/composite-action YAML under .github/. No Gradle module is affected, so spotlessApply / spotlessCheck / lint_check / unit tests are not applicable (they operate on Kotlin/Java/XML within modules, not workflow YAML). Each edit is a single version-string bump within an otherwise-valid YAML scalar, so structure is unchanged.

Verification

• Confirm the diff contains only native-github-asana-sync@vX → @v2.6.0 version bumps (no other changes)
• Confirm no remaining references to older versions: grep -rn "native-github-asana-sync@v2.0\|@v2.3\|@v2.5" .github/ returns nothing
• After merge, verify the affected event/release workflows continue to run and sync to Asana as before

UI changes

[!NOTE]

🔒 Integrity filter blocked 3 items

The following items were blocked because they don't meet the GitHub integrity level.

• #9090 list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #8860 list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".
• #8844 list_pull_requests: has lower integrity than agent requires. The agent cannot read data with integrity below "approved".

To allow these resources, lower min-integrity in your GitHub frontmatter:

tools:
  github:
    min-integrity: approved  # merged | approved | unapproved | none

Generated by Android Maintenance Worker · ◷

[!NOTE]
This was originally intended as a pull request, but the git push operation failed.

Workflow Run: View run details and download patch artifact

The patch file is available in the agent artifact in the workflow run linked above.

To create a pull request with the changes:

# Download the artifact from the workflow run
gh run download 29475016452 -n agent -D /tmp/agent-29475016452

# Create a new branch
git checkout -b feature/maintenance/asana-sync-v2.6.0-remaining-e0b5b82e8dd8d314

# Apply the patch (--3way handles cross-repo patches where files may already exist)
git am --3way /tmp/agent-29475016452/aw-feature-maintenance-asana-sync-v2.6.0-remaining.patch

# Push the branch to origin
git push origin feature/maintenance/asana-sync-v2.6.0-remaining-e0b5b82e8dd8d314

# Create the pull request
gh pr create --title '[Android Maintenance] Bump remaining native-github-asana-sync refs to v2.6.0' --base develop --head feature/maintenance/asana-sync-v2.6.0-remaining-e0b5b82e8dd8d314 --repo duckduckgo/Android

From 6ec01c02c8d28b41e87eae9eddd4e9211a52bc0b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Thu, 16 Jul 2026 05:56:33 +0000
Subject: [PATCH] Bump remaining native-github-asana-sync refs to v2.6.0

Standardize the remaining GitHub Action references on
duckduckgo/native-github-asana-sync@v2.6.0. PR #9195 bumped the
nightly, E2E, privacy, release, and dependency-update workflows but
left the PR/issue event workflows and composite actions on v2.0/v2.3.

v2.0 release notes confirm no breaking changes to the external action
interface; the action names used here are unchanged through v2.6.0.

Task/Issue URL: https://app.asana.com/1/137249556945/project/488551667048375/task/1216542927950821

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .github/actions/assign-release-task/action.yml          | 2 +-
 .github/actions/maestro-cloud-asana-reporter/action.yml | 4 ++--
 .github/workflows/action-agentic-maintenance-pr.yaml    | 4 ++--
 .github/workflows/action-issue-opened.yaml              | 2 +-
 .github/workflows/action-pr-merged.yaml                 | 2 +-
 .github/workflows/action-pr-opened.yaml                 | 6 +++---
 6 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/.github/actions/assign-release-task/action.yml b/.github/actions/assign-release-task/action.yml
index 3e8f6a4..dea11a8 100644
--- a/.github/actions/assign-release-task/action.yml
+++ b/.github/actions/assign-release-task/action.yml
@@ -24,7 +24,7 @@ runs:
   steps:
     - name: Find Asana User ID
       id: find-asana-user-id
-      uses: duckduckgo/native-github-asana-sync@v2.3
+      uses: duckduckgo/native-github-asana-sync@v2.6.0
       with:
         action: 'get-asana-user-id'
         github-username: ${{ github.actor }}
diff --git a/.github/actions/maestro-cloud-asana-reporter/action.yml b/.github/actions/maestro-cloud-asana-reporter/action.yml
index a3541be..48908ae 100644
--- a/.github/actions/mae
... (truncated)

Review the six named files under .github/actions/ and .github/workflows/, then search for native-github-asana-sync references. Update only the listed older version strings to v2.6.0, verify no older references remain with the provided grep command, and confirm the diff contains only these YAML version bumps.