🌟 Release Highlights

This release delivers broad GitHub Enterprise Server (GHES) improvements, making setup and tooling smoother for enterprise users, alongside critical reliability fixes for safe-outputs and several quality-of-life enhancements.

✨ What's New

• GitHub Enterprise Server auto-detection — The audit and add-wizard commands now automatically detect GHES environments and configure themselves accordingly, reducing manual setup friction. GITHUB_HOST is also passed to the GitHub MCP server to enable enterprise-aware API calls. (#20971, #20973, #20944, #20878)

• excluded-files for PR creation — The create-pull-request and push-to-pull-request-branch tools now support an excluded-files field, giving workflows fine-grained control over which files are included in pull requests. (#20935)

• Richer create_pull_request_review_comment schema — The pull_request_number and repo fields are now available in the safe-outputs tool, enabling cross-repo PR review comments. (#20963)

• Clearer run command errors — Missing workflow inputs now produce descriptive, actionable error messages instead of silent failures. (#20951)

🐛 Bug Fixes & Improvements

• Safe-outputs now reliably capture items — Fixed a bug where safe-output-items.jsonl was always empty and SafeItemsCount always reported 0, causing workflows to silently produce no outputs. (#20899)

• Safe-outputs MCP server stability — Disabled HTTP server timeouts that caused idle connection drops during long agent runs, preventing workflows from incorrectly reporting success with no outputs. (#20901)

• close_pull_request tool restored — The tool was missing from config.json despite being defined in the handler, preventing agents from closing PRs even when explicitly configured to do so. (#20897)

• gh aw upgrade drift fix — Corrected a bug where upgrade left a stale with: version: field out of sync with its uses: comment after version changes. (#20895)

• GHES: add-wizard PR creation fixed — The --create-pull-request flag now works correctly on GitHub Enterprise Server repositories. (#20898)

• Suppressed spurious wildcard fetch warning — Public repositories no longer show an irrelevant warning about wildcard branch fetching. (#20955)

• Security: cross-repo dispatch validation — Added allowlist validation to dispatch_workflow to prevent unauthorized cross-repository workflow dispatches. (#20970)

📚 Documentation

Automated documentation self-healing resolved three community-reported issues: improved staged-mode docs, fixed broken CONTRIBUTING.md anchors, and expanded APM guidance in the dependencies: reference.

🌍 Community Contributions

A huge thank you to the community members who reported issues resolved in this release:

• @dsyme for Staged mode support needs better docs (#20241)
• @bmerkle for invalid html anchor used in error message: CONTRIBUTING.md#prerequisites (#20646)
• @danielmeppiel for The dependencies: documentation undersells APM and lacks guidance for users (#20663)

For complete details, see CHANGELOG.

Generated by Release

What's Changed

• Update gh-aw-mcpg version to v0.1.15 by @claude in #20862
• Add gh CLI configuration for GitHub Enterprise support by @claude in #20878
• [instructions] Sync github-agentic-workflows.md with v0.58.1 by @github-actions[bot] in #20876
• [dead-code] chore: remove dead functions — 5 functions removed by @Copilot in #20871
• [docs] docs: condense tools.md Registry Field section and trim Related Documentation by @github-actions[bot] in #20879
• fix: close_pull_request missing from config.json despite being in handler config by @Copilot in #20897
• Fix add-wizard/add --create-pull-request failing on GitHub Enterprise Server repos by @Copilot in #20898
• fix: correct stale with: version: when uses: comment and version drifted before upgrade by @Copilot in #20895
• fix: safe-output-items.jsonl always empty and SafeItemsCount always 0 by @Copilot in #20899
• [jsweep] Clean add_comment.cjs by @github-actions[bot] in #20900
• fix: disable HTTP server timeouts in safe-outputs MCP server to prevent idle connection drops by @Copilot in #20901
• [docs] Update documentation for GHES improvements from 2026-03-14 by @github-actions[bot] in #20906
• docs: require GitHub Copilot coding agent to always create a pull request by @Copilot in #20933
• refactor: rename runActionlintOnFile to runActionlintOnFiles by @Copilot in #20941
• fix(gemini): move error files into /tmp/gh-aw/ before artifact bundling by @Copilot in #20938
• refactor: extract shared project config parsing helpers to eliminate duplication by @Copilot in #20939
• feat: pass GITHUB_HOST to GitHub MCP server for enterprise support by @Copilot in #20944
• feat: improve run command error output for missing workflow inputs by @Copilot in #20951
• fix: update tests and golden files for GITHUB_HOST in GitHub MCP server config by @Copilot in #20956
• Add excluded-files field to create-pull-request and push-to-pull-request-branch by @Copilot in #20935
• improve test quality in pkg/parser/schedule_parser_test.go by @Copilot in #20969
• [safeoutputs] Add pull_request_number and repo fields to create_pull_request_review_comment tool schema by @Copilot in #20963
• [refactor] Semantic Function Clustering: Outlier Functions in agentic_engine.go and js.go by @Copilot in #20972
• fix(sec-005): add cross-repo allowlist validation to dispatch_workflow and exempt resolve_host_repo by @Copilot in #20970
• [docs] Self-healing documentation fixes from issue analysis - 2026-03-14 by @github-actions[bot] in #20980
• GHES: Add auto-detection helper functions for wizard configuration by @claude in #20971
• Add GHES auto-detection to audit and add-wizard commands by @claude in #20973
• Fix health smoke-copilot CI: use lock file name for gh run list API calls by @Copilot in #20979
• Suppress wildcard fetch warning for public repos by @Copilot in #20955
• [log] Add dedicated debug loggers to 5 pkg files for improved traceability by @github-actions[bot] in #20984

Full Changelog: v0.58.1...v0.58.2