GitHub Agentic Workflows Files

🌟 Release Highlights

This release focuses on cross-repository and fork reliability, delivering a wave of targeted bug fixes that make gh-aw more robust in complex multi-repo and private-repo scenarios, alongside new platform support and improved tooling.

✨ What's New

• Android arm64 support — Workflows can now run on android-arm64 architecture, expanding platform coverage for mobile-native CI environments. (#18609)
• Fork support reference page — New documentation covering how to use gh-aw in forked repositories, including checkout behavior and token configuration. (Learn more)
• Improved gh aw add-wizard resilience — The wizard now skips secrets configuration when the user lacks write access (#18490), preserves existing files and shows recovery instructions on commit failure (#18489), and no longer corrupts frontmatter when the engine is a block mapping (#18486).
• Better fallback instructions on PR failure — When pull request creation fails, agents now receive clearer guidance to open an issue instead. (#18536)

🐛 Bug Fixes & Improvements

• shell(dotnet) no longer blocked — Workflows listing shell(dotnet) in allowed tools no longer hit a spurious "denied" error requiring the env dotnet workaround. (#18612)
• Fork PR checkout fixed — pull_request events in forked repositories now correctly use gh pr checkout instead of failing to resolve the branch. (#18591)
• Private repo PR branch access — In private repositories, workflows triggered by PR comments can now correctly access the PR branch. (#18578)
• Cross-repo base branch resolution — Base branch detection is now accurate for cross-repository PRs and PR comment events. (#18614, #18581)
• Cross-repo audit log download — gh run download now correctly passes owner/repo for cross-repo audits. (#18603)
• safe_outputs checkout for pull_request_review events — Checkout no longer fails when a workflow is triggered by a pull request review. (#18552)
• Duplicate env vars eliminated — When an imported workflow and the main workflow reference the same repository variable, env vars are now deduplicated in the interpolation step. (#18548)
• allowed-domains propagated to safe outputs — Allowlisted domains are now correctly passed through to the Process Safe Outputs step, preventing unintended URL redaction. (#18538)
• "Copilot is not a user" error fixed — compute_text.cjs no longer fails when processing PRs created by GitHub Apps. (#18592)

📚 Documentation

• New Fork Support reference page covering fork workflows end-to-end.
• Improved Cross-Repository Operations reference with checkout: guidance. (#18553)
• Pre-filled PAT creation link added to COPILOT_GITHUB_TOKEN docs to streamline initial setup. (#18594)

🌍 Community Contributions

A huge thank you to the community members who reported issues resolved in this release:

• @BrandonLewis for Add support for the android-arm64 architecture (#18263)
• @ViktorHofer for shell(dotnet) tool denied despite being in allowed tools (#18340)
• @dsyme for PR branch not accessible in private repo comment events (#18574)

For complete details, see CHANGELOG.

Generated by Release

What's Changed

• [WIP] Migrate 50% of agentic workflows to use copilot-requests feature by @Copilot in https://github.com/github/gh-aw/pull/18531
• docs: Add fork support reference page by @Copilot in https://github.com/github/gh-aw/pull/18537
• Fix: propagate allowed-domains to the Process Safe Outputs step by @Copilot in https://github.com/github/gh-aw/pull/18538
• fix: deduplicate env vars in interpolation step when import and main workflow share a variable by @Copilot in https://github.com/github/gh-aw/pull/18548
• Improve reference docs for cross-repo operations and checkout: by @dsyme in https://github.com/github/gh-aw/pull/18553
• [WIP] Rename title prefixes from '[agentics]' and '[agentic-workflows]' to '[aw]' by @Copilot in https://github.com/github/gh-aw/pull/18550
• Fix safe_outputs checkout failure for pull_request_review events by @Copilot in https://github.com/github/gh-aw/pull/18552
• DDUw: add open-issue cross-referencing, stale schema drift detection, and example validation by @Copilot in https://github.com/github/gh-aw/pull/18555
• [log] Add debug logging to workflow compiler and stringutil packages by @github-actions[bot] in https://github.com/github/gh-aw/pull/18564
• Fix add-wizard corrupting frontmatter when engine is a block mapping by @Copilot in https://github.com/github/gh-aw/pull/18486
• fix(add-wizard): skip secrets configuration when user lacks write access by @Copilot in https://github.com/github/gh-aw/pull/18490
• Improve fallback issue instructions when PR creation fails by @Copilot in https://github.com/github/gh-aw/pull/18536
• fix(add-wizard): preserve files and show recovery instructions on commit failure by @Copilot in https://github.com/github/gh-aw/pull/18489
• Fix https://github.com/github/gh-aw/issues/18574 by @dsyme in https://github.com/github/gh-aw/pull/18578
• [instructions] Sync github-agentic-workflows.md with v0.40.1 by @github-actions[bot] in https://github.com/github/gh-aw/pull/18583
• [docs] docs: unbloat GitHub Actions Primer guide by @github-actions[bot] in https://github.com/github/gh-aw/pull/18584
• [docs] Consolidate developer specifications - fix 42 code fence regressions (v3.2) by @github-actions[bot] in https://github.com/github/gh-aw/pull/18586
• Get correct base branch for pull request comments by @dsyme in https://github.com/github/gh-aw/pull/18581
• Add pre-filled PAT creation link for COPILOT_GITHUB_TOKEN to docs by @eaftan in https://github.com/github/gh-aw/pull/18594
• Fix "Copilot is not a user" error in compute_text.cjs for app-created PRs by @Copilot in https://github.com/github/gh-aw/pull/18592
• fix: use gh pr checkout for fork PRs in pull_request events by @Copilot in https://github.com/github/gh-aw/pull/18591
• Fix shell(dotnet) denied despite being in allowed tools by @Mossaka in https://github.com/github/gh-aw/pull/18612
• Add android-arm64 architecture support by @Mossaka in https://github.com/github/gh-aw/pull/18609
• Improve base branch resolution for cross-repo PRs by @dsyme in https://github.com/github/gh-aw/pull/18614
• chore(deps): bump fast-xml-parser from 5.3.6 to 5.4.1 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/github/gh-aw/pull/18580
• chore(deps): bump minimatch from 9.0.6 to 9.0.9 in /.github/workflows in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/github/gh-aw/pull/18579
• fix: pass owner/repo to gh run download for cross-repo audit by @Copilot in https://github.com/github/gh-aw/pull/18603
• fix(ci): guard golangci-lint download against silent HTTP failures by @Copilot in https://github.com/github/gh-aw/pull/18619
• fix: add missing repo_helpers.cjs and glob_pattern_helpers.cjs to safe-outputs file list by @Copilot in https://github.com/github/gh-aw/pull/18620
• Update report.md: recommend safe-outputs filtering for mentions and backlinks by @Copilot in https://github.com/github/gh-aw/pull/18623

Full Changelog: https://github.com/github/gh-aw/compare/v0.50.5...v0.50.6