Skip to content

v0.58.1

Latest

Choose a tag to compare

@github-actions github-actions released this 13 Mar 22:05
· 15 commits to main since this release
fa061e8

🌟 Release Highlights

This release focuses on workflow chaining and cross-repo improvements, adding powerful new composition primitives while shipping a broad round of bug fixes and quality improvements.

✨ What's New

  • call-workflow safe output for workflow_call chaining (#20806) β€” Workflows can now emit a call-workflow safe output to chain into other workflows, enabling modular, reusable workflow pipelines.

  • checkout: false support for agent jobs (#20844) β€” Disable automatic repository checkout in agent jobs when it's not needed, reducing startup time and improving security posture.

  • preserve-branch-name for create-pull-request (#20788) β€” The create-pull-request safe output now supports a preserve-branch-name option, giving you control over branch naming in automated PR workflows.

  • scope for skip-if-no-match / skip-if-match (#20803) β€” Activation filters now support a scope field for finer-grained control. github-token and github-app have also been promoted to top-level on: configuration, along with a new shared/activation-app.md shared workflow.

  • Unrestricted discussion creation (#20845) β€” The announcement-capable category restriction for discussion creation has been removed, allowing agents to create discussions in any category.

πŸ› Bug Fixes & Improvements

  • Guard policy rendering fixed for repos="all" and repos="public" (#20764) β€” Guard policies now render correctly for broad repository scopes.

  • Improved compiler error messages (#20755) β€” Compilation errors now include better hints, deduplication, position info, YAML translations, and schema hints β€” making it significantly easier to diagnose workflow issues.

  • Cross-repo dispatch-workflow uses caller's GITHUB_REF (#20790) β€” Fixed an issue where cross-repo dispatched workflows were using the wrong ref, ensuring the caller's branch is preserved.

  • Pagination bug in update-project resolved (#20778) β€” Field fetching was capped at 20 results; projects with more fields now work correctly.

  • qmd MCP server startup fixed (#20840) β€” The qmd MCP server now registers collections before starting, resolving an empty tools list issue on first use.

  • Relay activation checkout preserves callee workflow ref (#20714) β€” Caller-hosted relay workflows now correctly preserve the callee workflow ref and fix checkout behavior for cross-repo relays.

  • GitHub App token fallback in workflow_call relays (#20825) β€” Fixed incorrect use of owner/repo slug (should be repo name only) in the GitHub App token fallback path.

πŸ“š Documentation

  • Updated reference documentation for the api-target engine field (#20765)
  • Updated docs for new features shipped in this cycle (#20856, #20812)
  • Added release process documentation to CONTRIBUTING.md (#20800)

For complete details, see CHANGELOG.

Generated by Release


What's Changed

  • Fix guard-policy rendering for repos="all" and repos="public" by @claude in #20764
  • [docs] Update documentation for engine api-target field from 2026-03-13 by @github-actions[bot] in #20765
  • refactor(cli): extract shared field-removal codemod factory to eliminate scaffold duplication by @Copilot in #20763
  • fix: improve compiler error message quality (hints, dedup, position, YAML translations, schema hints) by @Copilot in #20755
  • fix: preserve callee workflow ref in caller-hosted relay activation checkout and fix Checkout actions folder for cross-repo relays by @Copilot in #20714
  • refactor: Semantic function clustering β€” move validation to proper files, remove wrappers, generify duplicate-ID checks by @Copilot in #20756
  • Upgrade gh-aw-firewall default to v0.24.1 by @Copilot in #20767
  • Move sync_actions instructions to push_tag so they appear before the environment gate by @Copilot in #20774
  • Fix pagination bug in update-project field fetching (hard limit of 20) by @Copilot in #20778
  • Use runtime ${{ github.action_ref }} for dev-mode "Checkout actions folder" step by @Copilot in #20775
  • Add "action" mode for github/gh-aw-actions external actions repo by @Copilot in #20776
  • Fix missing target-repo/allowed-repos in submit-pull-request-review schema by @Copilot in #20789
  • fix: restore repository: github/gh-aw in dev mode checkout step by @Copilot in #20791
  • fix: cross-repo dispatch-workflow uses caller's GITHUB_REF instead of target repo's ref by @Copilot in #20790
  • docs: add release process to CONTRIBUTING.md by @Copilot in #20800
  • fix: resolve 4 CLI help text consistency issues by @Copilot in #20805
  • feat: add preserve-branch-name option to create-pull-request safe output by @Copilot in #20788
  • Add shared MCP workflow for qmd-docs indexing by @Copilot in #20792
  • [docs] Update documentation for features from 2026-03-13 by @github-actions[bot] in #20812
  • fix: update TestGetActionPinsSorting expected count from 31 to 34 (#23057948566) by @Copilot in #20824
  • [dead-code] chore: remove dead functions β€” 5 functions removed by @github-actions[bot] in #20835
  • [file-diet] Refactor pkg/workflow/mcp_renderer.go (1053 lines) into focused modules by @Copilot in #20804
  • feat: add scope to skip-if-no-match / skip-if-match; move github-token and github-app to top-level on:; add shared/activation-app.md by @Copilot in #20803
  • fix: use repo name (not owner/repo slug) for GitHub App token fallback in workflow_call relays by @Copilot in #20825
  • fix: ensure qmd MCP server registers collections before start to fix empty tools list by @Copilot in #20840
  • [code-simplifier] refactor: simplify targetRepoName extraction in resolve_host_repo.cjs (#20825) by @github-actions[bot] in #20839
  • feat: add call-workflow safe output for workflow_call chaining by @Copilot in #20806
  • Remove announcement-capable category restriction for discussion creation by @Copilot in #20845
  • [log] Add debug logging to 5 files across workflow, parser, and cli packages by @github-actions[bot] in #20850
  • Add checkout: false support to disable agent job repository checkout by @Copilot in #20844
  • chore(deps): bump undici from 6.23.0 to 6.24.0 in /actions/setup/js in the npm_and_yarn group across 1 directory by @dependabot[bot] in #20853
  • Configure smoke-agent workflow with GitHub guard policies for public repos by @claude in #20830
  • [docs] Update documentation for features from 2026-03-13 by @github-actions[bot] in #20856
  • Update qmd-docs.md to use mcp-scripts instead of MCP server by @Copilot in #20847

Full Changelog: v0.58.0...v0.58.1