| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| sbom.cdx.json | 2026-03-15 | 3.1 MB | |
| sbom.spdx.json | 2026-03-15 | 5.3 MB | |
| windows-amd64.exe | 2026-03-15 | 23.7 MB | |
| windows-arm64.exe | 2026-03-15 | 21.7 MB | |
| gh-aw-wasm-v0.58.3.tar.gz | 2026-03-15 | 4.5 MB | |
| linux-386 | 2026-03-15 | 22.3 MB | |
| linux-amd64 | 2026-03-15 | 23.1 MB | |
| linux-arm | 2026-03-15 | 22.1 MB | |
| linux-arm64 | 2026-03-15 | 21.4 MB | |
| freebsd-amd64 | 2026-03-15 | 23.0 MB | |
| freebsd-arm64 | 2026-03-15 | 21.2 MB | |
| android-arm64 | 2026-03-15 | 23.3 MB | |
| checksums.txt | 2026-03-15 | 1.0 kB | |
| darwin-amd64 | 2026-03-15 | 23.5 MB | |
| darwin-arm64 | 2026-03-15 | 21.9 MB | |
| freebsd-386 | 2026-03-15 | 22.1 MB | |
| README.md | 2026-03-15 | 4.7 kB | |
| v0.58.3 source code.tar.gz | 2026-03-15 | 238.6 MB | |
| v0.58.3 source code.zip | 2026-03-15 | 240.6 MB | |
| Totals: 19 Items | 761.5 MB | 0 | |
π Release Highlights
This release focuses on security hardening, GHES compatibility, and developer experience improvements β with better MCP write protection, a new Copilot pre-flight diagnostic for enterprise environments, and a noticeably improved run details summary.
β¨ What's New
-
MCP Write-Sink Guard Policy β All non-GitHub MCP servers configured via the gateway now enforce a write-sink guard policy, preventing unintended writes through third-party MCP tools. This improves the security posture of workflows using custom MCP integrations. (#21005)
-
Copilot Pre-flight Diagnostic for GHES β A new pre-flight check helps diagnose Copilot configuration issues in GitHub Enterprise Server environments before a workflow run fails, saving time when debugging enterprise setups. (#20975)
-
Action Pins Mode with
gh-aw-actionsv0 β Theaction-tagstep now uses action pins mode, enabling stable and auditable action references viagh-aw-actionsat thev0tag. (#20991) -
Enhanced Run Details Step Summary β Workflow run summaries now render as structured bullet points, display the
gh-awversion, and include fullaw_infooutput for easier post-run inspection. (#20989)
β‘ Performance
- Faster Workflow Name Extraction β
extractWorkflowNameFromFileno longer performs an unnecessary full YAML parse, reducing overhead when processing large workflow collections. (#21012)
π Bug Fixes & Improvements
- GHES Host Leakage Prevention β The "Install GitHub Copilot CLI" step now explicitly emits
GH_HOST: github.com, preventing GHES host values from leaking into the Copilot CLI installation context. (#20992) - Workflow Call Artifact Downloads Fixed β Artifact prefix handling in the conclusion job and script step downloads now works correctly in
workflow_callcontexts. (#21011) - TypeScript Type Error Fixed β Resolved a type error in
json_object_to_markdown.cjsthat could cause runtime failures in certain output scenarios. (#21010) - Go Firewall Rule for Shared Workflows β The
shared/go-make.mdshared workflow now includesgoin its firewall allowed set, enabling Go toolchain downloads during builds. (#21014)
π Documentation
- Accessibility: Live Search Results β The docs site search now announces results to screen readers via
aria-live, improving accessibility for keyboard and assistive technology users. (#21019)
For complete details, see CHANGELOG.
Generated by Release
What's Changed
- Optimize qmd-docs workflows: explicitly instruct models to use qmd-query for doc search by @Copilot in https://github.com/github/gh-aw/pull/20987
- Add Copilot pre-flight diagnostic for GHES environments by @Claude in https://github.com/github/gh-aw/pull/20975
- Improve run details step summary: bullet points, aw version, and full aw_info rendering by @Copilot in https://github.com/github/gh-aw/pull/20989
- feat: update action-tag to use action pins mode (gh-aw-actions) with v0 by @Copilot in https://github.com/github/gh-aw/pull/20991
- fix: emit GH_HOST: github.com on Install GitHub Copilot CLI step to prevent GHES host leakage by @Copilot in https://github.com/github/gh-aw/pull/20992
- [instructions] Sync github-agentic-workflows.md with v0.40.1 by @github-actions[bot] in https://github.com/github/gh-aw/pull/21001
- [docs] docs: condense CentralRepoOps intro and remove duplicate cross-repo notes by @github-actions[bot] in https://github.com/github/gh-aw/pull/21003
- feat: add write-sink guard policy to all non-GitHub MCP servers configured by gateway by @Copilot in https://github.com/github/gh-aw/pull/21005
- Add
gofirewall allowed set toshared/go-make.mdby @Copilot in https://github.com/github/gh-aw/pull/21014 - perf: optimize
extractWorkflowNameFromFileby eliminating unnecessary YAML parse by @Copilot in https://github.com/github/gh-aw/pull/21012 - fix: use artifact prefix in conclusion job and script step downloads for workflow_call context by @Copilot in https://github.com/github/gh-aw/pull/21011
- Remove copilot-preflight script and associated step generation by @Copilot in https://github.com/github/gh-aw/pull/21016
- docs: add aria-live enhancement for search results accessibility (#issue) by @Copilot in https://github.com/github/gh-aw/pull/21019
Full Changelog: https://github.com/github/gh-aw/compare/v0.58.2...v0.58.3