GitHub Agentic Workflows Files

🌟 Release Highlights

This release focuses on workflow chaining and cross-repo improvements, adding powerful new composition primitives while shipping a broad round of bug fixes and quality improvements.

✨ What's New

• call-workflow safe output for workflow_call chaining (#20806) — Workflows can now emit a call-workflow safe output to chain into other workflows, enabling modular, reusable workflow pipelines.

• checkout: false support for agent jobs (#20844) — Disable automatic repository checkout in agent jobs when it's not needed, reducing startup time and improving security posture.

• preserve-branch-name for create-pull-request (#20788) — The create-pull-request safe output now supports a preserve-branch-name option, giving you control over branch naming in automated PR workflows.

• scope for skip-if-no-match / skip-if-match (#20803) — Activation filters now support a scope field for finer-grained control. github-token and github-app have also been promoted to top-level on: configuration, along with a new shared/activation-app.md shared workflow.

• Unrestricted discussion creation (#20845) — The announcement-capable category restriction for discussion creation has been removed, allowing agents to create discussions in any category.

🐛 Bug Fixes & Improvements

• Guard policy rendering fixed for repos="all" and repos="public" (#20764) — Guard policies now render correctly for broad repository scopes.

• Improved compiler error messages (#20755) — Compilation errors now include better hints, deduplication, position info, YAML translations, and schema hints — making it significantly easier to diagnose workflow issues.

• Cross-repo dispatch-workflow uses caller's GITHUB_REF (#20790) — Fixed an issue where cross-repo dispatched workflows were using the wrong ref, ensuring the caller's branch is preserved.

• Pagination bug in update-project resolved (#20778) — Field fetching was capped at 20 results; projects with more fields now work correctly.

• qmd MCP server startup fixed (#20840) — The qmd MCP server now registers collections before starting, resolving an empty tools list issue on first use.

• Relay activation checkout preserves callee workflow ref (#20714) — Caller-hosted relay workflows now correctly preserve the callee workflow ref and fix checkout behavior for cross-repo relays.

• GitHub App token fallback in workflow_call relays (#20825) — Fixed incorrect use of owner/repo slug (should be repo name only) in the GitHub App token fallback path.

📚 Documentation

• Updated reference documentation for the api-target engine field (#20765)
• Updated docs for new features shipped in this cycle (#20856, #20812)
• Added release process documentation to CONTRIBUTING.md (#20800)

For complete details, see CHANGELOG.

Generated by Release

What's Changed

• Fix guard-policy rendering for repos="all" and repos="public" by @Claude in https://github.com/github/gh-aw/pull/20764
• [docs] Update documentation for engine api-target field from 2026-03-13 by @github-actions[bot] in https://github.com/github/gh-aw/pull/20765
• refactor(cli): extract shared field-removal codemod factory to eliminate scaffold duplication by @Copilot in https://github.com/github/gh-aw/pull/20763
• fix: improve compiler error message quality (hints, dedup, position, YAML translations, schema hints) by @Copilot in https://github.com/github/gh-aw/pull/20755
• fix: preserve callee workflow ref in caller-hosted relay activation checkout and fix Checkout actions folder for cross-repo relays by @Copilot in https://github.com/github/gh-aw/pull/20714
• refactor: Semantic function clustering — move validation to proper files, remove wrappers, generify duplicate-ID checks by @Copilot in https://github.com/github/gh-aw/pull/20756
• Upgrade gh-aw-firewall default to v0.24.1 by @Copilot in https://github.com/github/gh-aw/pull/20767
• Move sync_actions instructions to push_tag so they appear before the environment gate by @Copilot in https://github.com/github/gh-aw/pull/20774
• Fix pagination bug in update-project field fetching (hard limit of 20) by @Copilot in https://github.com/github/gh-aw/pull/20778
• Use runtime ${{ github.action_ref }} for dev-mode "Checkout actions folder" step by @Copilot in https://github.com/github/gh-aw/pull/20775
• Add "action" mode for github/gh-aw-actions external actions repo by @Copilot in https://github.com/github/gh-aw/pull/20776
• Fix missing target-repo/allowed-repos in submit-pull-request-review schema by @Copilot in https://github.com/github/gh-aw/pull/20789
• fix: restore repository: github/gh-aw in dev mode checkout step by @Copilot in https://github.com/github/gh-aw/pull/20791
• fix: cross-repo dispatch-workflow uses caller's GITHUB_REF instead of target repo's ref by @Copilot in https://github.com/github/gh-aw/pull/20790
• docs: add release process to CONTRIBUTING.md by @Copilot in https://github.com/github/gh-aw/pull/20800
• fix: resolve 4 CLI help text consistency issues by @Copilot in https://github.com/github/gh-aw/pull/20805
• feat: add preserve-branch-name option to create-pull-request safe output by @Copilot in https://github.com/github/gh-aw/pull/20788
• Add shared MCP workflow for qmd-docs indexing by @Copilot in https://github.com/github/gh-aw/pull/20792
• [docs] Update documentation for features from 2026-03-13 by @github-actions[bot] in https://github.com/github/gh-aw/pull/20812
• fix: update TestGetActionPinsSorting expected count from 31 to 34 (#23057948566) by @Copilot in https://github.com/github/gh-aw/pull/20824
• [dead-code] chore: remove dead functions — 5 functions removed by @github-actions[bot] in https://github.com/github/gh-aw/pull/20835
• [file-diet] Refactor pkg/workflow/mcp_renderer.go (1053 lines) into focused modules by @Copilot in https://github.com/github/gh-aw/pull/20804
• feat: add scope to skip-if-no-match / skip-if-match; move github-token and github-app to top-level on:; add shared/activation-app.md by @Copilot in https://github.com/github/gh-aw/pull/20803
• fix: use repo name (not owner/repo slug) for GitHub App token fallback in workflow_call relays by @Copilot in https://github.com/github/gh-aw/pull/20825
• fix: ensure qmd MCP server registers collections before start to fix empty tools list by @Copilot in https://github.com/github/gh-aw/pull/20840
• [code-simplifier] refactor: simplify targetRepoName extraction in resolve_host_repo.cjs (#20825) by @github-actions[bot] in https://github.com/github/gh-aw/pull/20839
• feat: add call-workflow safe output for workflow_call chaining by @Copilot in https://github.com/github/gh-aw/pull/20806
• Remove announcement-capable category restriction for discussion creation by @Copilot in https://github.com/github/gh-aw/pull/20845
• [log] Add debug logging to 5 files across workflow, parser, and cli packages by @github-actions[bot] in https://github.com/github/gh-aw/pull/20850
• Add checkout: false support to disable agent job repository checkout by @Copilot in https://github.com/github/gh-aw/pull/20844
• chore(deps): bump undici from 6.23.0 to 6.24.0 in /actions/setup/js in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/github/gh-aw/pull/20853
• Configure smoke-agent workflow with GitHub guard policies for public repos by @Claude in https://github.com/github/gh-aw/pull/20830
• [docs] Update documentation for features from 2026-03-13 by @github-actions[bot] in https://github.com/github/gh-aw/pull/20856
• Update qmd-docs.md to use mcp-scripts instead of MCP server by @Copilot in https://github.com/github/gh-aw/pull/20847

Full Changelog: https://github.com/github/gh-aw/compare/v0.58.0...v0.58.1