v0.61.2

🌟 Release Highlights

This release improves ecosystem domain coverage for broader language support, fixes critical expression evaluation bugs on workflow_dispatch, and enhances private repo compatibility — making agentic workflows more reliable across diverse repository configurations.

✨ What's New

• Chrome & Deno ecosystem domain groups — Workflows using headless Chrome/Puppeteer or Deno no longer hit blocked domain errors during build and test phases. New chrome and deno groups cover the required Google/gvt1 domains and Deno registries. (#21653)

• Memory limit passthrough — Set sandbox.memory in your workflow frontmatter to control per-workflow memory limits passed to the AWF sandbox. Previously this field was silently ignored; all workflows defaultly used AWF's default. (#21634)

• MCP gateway upgraded to v0.1.18 — All workflows have been recompiled against the latest gateway release. (#21660)

🐛 Bug Fixes & Improvements

• Fixed: expressions left unresolved on workflow_dispatch — $\{\{ steps.sanitized.outputs.text }} and similar expressions were rendered literally instead of resolving to an empty string when triggered via workflow_dispatch. (#21633)

• Fixed: asset URLs in private repos — raw.githubusercontent.com URLs fail silently for private repositories. Asset URLs now use the blob?raw=true format that works for both public and private repos. (#21646)

• Fixed: missing handler registry entries — assign_to_agent, upload_asset, and noop handlers were absent from the safe-outputs handler registry, causing silent failures. (#21623)

• Fixed: ecosystem domain gaps causing build-test failures — Domain allowlist gaps were identified as the top blocker in the March 2026 v6 build-test run, affecting 35+ repos across Kotlin, Groovy, Java, Scala, Zig, and PowerShell. All gaps have been patched. (#21635)

📚 Documentation

• New FAQ: Sparse checkout for large monorepos — Added guidance on using the sparse-checkout field under checkout: frontmatter to dramatically speed up workflow execution in large monorepos. (#21655)

🌍 Community Contributions

A huge thank you to the community members who reported issues that were resolved in this release:

• @Mossaka for Support sparse-checkout in compiled workflows for large monorepos (#21630)

---

For complete details, see CHANGELOG.

Generated by Release

---

What's Changed

• build(deps): bump h3 from 1.15.5 to 1.15.8 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in #21620
• Add missing handler registry entries for assign_to_agent, upload_asset, and noop by @Copilot in #21623
• fix: evaluateExpression resolves steps/needs to empty string on workflow_dispatch by @Copilot in #21633
• [log] log: add debug logging to filter/engine/permissions functions by @github-actions[bot] in #21650
• Add memory-limit passthrough from workflow frontmatter to AWF by @Copilot in #21634
• fix: capitalize "Assets" and "Agent" in workflow step names by @Copilot in #21636
• [cloclo] docs: add FAQ entry for sparse checkout in large monorepos by @github-actions[bot] in #21655
• Recompile workflows to sync lock files by @Copilot in #21652
• build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 in the go_modules group across 1 directory by @dependabot[bot] in #21654
• Add missing ecosystem domains to fix build-test v6 failures across 10 languages by @Copilot in #21635
• Add chrome and deno ecosystem domain groups for headless Chrome/Puppeteer and Deno testing by @Copilot in #21653
• chore: bump MCP gateway version to v0.1.18 by @lpcox in #21660
• Fix asset URLs to work with private repos by @Copilot in #21646
• chore: upgrade gh-aw-firewall from v0.24.2 to v0.24.3 by @Copilot in #21672

Full Changelog: v0.61.1...v0.61.2