[docs] Update documentation for features from 2026-03-19

[github-actions]

Documentation Updates - 2026-03-19

This PR updates the documentation based on features merged in the last 24 hours.

Features Documented

• Inline JavaScript script handlers (safe-outputs.scripts) — from Add support for defined custom safe-output scripts #21582
• Guard policy repos defaults to "all" when omitted — from fix: default github.repos to all when omitted from guard policy #21718

📝 Detailed Changes & References

Changes Made

• Updated docs/src/content/docs/reference/custom-safe-outputs.md to document the new safe-outputs.scripts feature: inline JavaScript handlers that run in-process within the consolidated safe-outputs job, as an alternative to custom jobs (which create separate GitHub Actions jobs). Includes a reference table, example, script body context documentation, and a property reference.

• Updated docs/src/content/docs/reference/github-tools.md guard policy section: corrected the description of repos and min-integrity requirements. min-integrity can be specified alone; repos defaults to "all" when omitted (previously stated both were always required when either was specified).

Merged PRs Referenced

• Add support for defined custom safe-output scripts #21582 — Add support for defined custom safe-output scripts
• fix: default github.repos to all when omitted from guard policy #21718 — fix: default github.repos to all when omitted from guard policy

Notes

• Issue GHES: Create prerequisites guide and troubleshooting runbook for Copilot engine #20968 (GHES prerequisites guide) was found closed as "completed" — confirmed addressed in docs/src/content/docs/troubleshooting/common-issues.md lines 308–378 (GitHub Enterprise Server Issues section).
• Changes from Remove experimental warning for tools.github guard policy (repos/min-integrity) #21717 (remove experimental warning for guard policies), Deprecate needs.activation.outputs.* in workflow markdown; update all docs to use steps.sanitized.outputs.* #21682 (deprecate needs.activation.outputs.*), and Add chrome and deno ecosystem domain groups for headless Chrome/Puppeteer and Deno testing #21653 (chrome/deno ecosystems) were already included in their respective code commits and required no additional documentation updates.

Generated by Daily Documentation Updater · ◷

• expires on Mar 20, 2026, 4:28 AM UTC