Update module github.com/cli/cli/v2 to v2.60.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/cli/cli/v2	v2.47.0 -> v2.60.1

---

Release Notes

cli/cli (github.com/cli/cli/v2)

v2.60.1: GitHub CLI 2.60.1

Compare Source

This is a small patch release to fix installing gh via go install which was broken with v2.60.0.

What's Changed

• Update testscript to use hard fork by @​williammartin in https://github.com/cli/cli/pull/9821

Full Changelog: cli/cli@v2.60.0...v2.60.1

v2.60.0: GitHub CLI 2.60.0

Compare Source

What's Changed

• Add ArchivedAt field by @​tsukasaI in https://github.com/cli/cli/pull/9790
• Include startedAt, completedAt in run steps data by @​andyfeller in https://github.com/cli/cli/pull/9774
• Adjust environment help for host and tokens by @​williammartin in https://github.com/cli/cli/pull/9809
• Add handling of empty titles for Issues and PRs by @​jtmcg in https://github.com/cli/cli/pull/9701
• LiveSigstoreVerifier.Verify should error if no attestations are present by @​phillmv in https://github.com/cli/cli/pull/9742
• gh at verify retries fetching attestations if it receives a 5xx by @​phillmv in https://github.com/cli/cli/pull/9797
• Prevent local extension installations with invalid names and conflicts with core commands and other extensions by @​BagToad in https://github.com/cli/cli/pull/9794
• Rewrite a sentence in CONTRIBUTING.md by @​muzimuzhi in https://github.com/cli/cli/pull/9772
• Use new GitHub preview terms in working-with-us.md by @​BagToad in https://github.com/cli/cli/pull/9800
• Use new GitHub previews terminology in attestation commands' help docs by @​BagToad in https://github.com/cli/cli/pull/9799
• Clarify in README that gh is supported on GitHub Enterprise Cloud by @​BagToad in https://github.com/cli/cli/pull/9805
• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6 by @​dependabot in https://github.com/cli/cli/pull/9752

Acceptance Test Changes

• Add acceptance tests for workflow, run, and cache commands by @​BagToad in https://github.com/cli/cli/pull/9766
• Add basic api acceptance tests by @​BagToad in https://github.com/cli/cli/pull/9770
• Add acceptance tests for release commands by @​BagToad in https://github.com/cli/cli/pull/9771
• Add acceptance tests for org and ssh-key commands by @​BagToad in https://github.com/cli/cli/pull/9812
• Add acceptance tests for gh auth commands by @​jtmcg in https://github.com/cli/cli/pull/9787
• Add acceptance tests for repo commands by @​jtmcg in https://github.com/cli/cli/pull/9783
• Add acceptance tests for search command by @​BagToad in https://github.com/cli/cli/pull/9786
• Add acceptance tests for variable commands by @​andyfeller in https://github.com/cli/cli/pull/978
• Add testscripts for gpg-key and label commands by @​williammartin in https://github.com/cli/cli/pull/9811
• Use forked testscript for token redaction by @​williammartin in https://github.com/cli/cli/pull/9804
• Add acceptance tests for secret commands by @​andyfeller in https://github.com/cli/cli/pull/9782
• Note token redaction in Acceptance test README by @​williammartin in https://github.com/cli/cli/pull/9813

New Contributors

• @​tsukasaI made their first contribution in https://github.com/cli/cli/pull/9790

Full Changelog: cli/cli@v2.59.0...v2.60.0

v2.59.0: GitHub CLI 2.59.0

Compare Source

What's Changed

• Allow community submitted design work by @​BagToad in https://github.com/cli/cli/pull/9683
• Improve SECURITY.md with expectations for privately reported vulnerabilities by @​BagToad in https://github.com/cli/cli/pull/9687
• Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS device by @​timrogers in https://github.com/cli/cli/pull/9650
• Print the login URL even when opening a browser by @​ulfjack in https://github.com/cli/cli/pull/7091
• configurable maxwidth for markdown WithWrap() by @​smemsh in https://github.com/cli/cli/pull/9626
• Handle errors when parsing hostname in auth flow by @​BagToad in https://github.com/cli/cli/pull/9729
• Add repo license list/view and repo gitignore list/view by @​BagToad in https://github.com/cli/cli/pull/9721
• Introduce testscript acceptance tests generally, and for the PR command specifically by @​williammartin in https://github.com/cli/cli/pull/9745
• Support GH_ACCEPTANCE_SCRIPT env var to target a single script by @​williammartin in https://github.com/cli/cli/pull/9756
• Ensure Acceptance defer failures are debuggable by @​williammartin in https://github.com/cli/cli/pull/9754
• Add acceptance task to makefile by @​williammartin in https://github.com/cli/cli/pull/9748
• Add Acceptance tests for issue command by @​williammartin in https://github.com/cli/cli/pull/9757
• Update IsEnterprise and IsTenancy for orthogonality using go-gh by @​jtmcg in https://github.com/cli/cli/pull/9755
• Supporting filtering on gist list by @​heaths in https://github.com/cli/cli/pull/9728

New Contributors

• @​ulfjack made their first contribution in https://github.com/cli/cli/pull/7091
• @​smemsh made their first contribution in https://github.com/cli/cli/pull/9626

Full Changelog: cli/cli@v2.58.0...v2.59.0

v2.58.0: GitHub CLI 2.58.0

Compare Source

What's Changed

• Better messaging for attestation verify custom issuer mismatch error by @​bdehamer in https://github.com/cli/cli/pull/9616
• Enhance gh repo create docs, fix random cmd link by @​andyfeller in https://github.com/cli/cli/pull/9630
• Add HasActiveToken method to AuthConfig to refactor auth check for attestation trusted-root command by @​BagToad in https://github.com/cli/cli/pull/9635
• Improve the suggested command for creating an issue when an extension doesn't have a binary for your platform by @​timrogers in https://github.com/cli/cli/pull/9608
• Disable auth check for attestation trusted-root command by @​bdehamer in https://github.com/cli/cli/pull/9610
• build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4 by @​dependabot in https://github.com/cli/cli/pull/9645
• Fix tenant-awareness for trusted-root command by @​bdehamer in https://github.com/cli/cli/pull/9638
• Replace "GitHub Enterprise Server" option with "other" in gh auth login prompting by @​jtmcg in https://github.com/cli/cli/pull/9642
• build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5 by @​dependabot in https://github.com/cli/cli/pull/9634
• Add dnf5 instructions to docs/install_linux.md by @​its-miroma in https://github.com/cli/cli/pull/9660
• build(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.0.0 to 2.0.1 by @​dependabot in https://github.com/cli/cli/pull/9688

New Contributors

• @​its-miroma made their first contribution in https://github.com/cli/cli/pull/9660

Full Changelog: cli/cli@v2.57.0...v2.58.0

v2.57.0: GitHub CLI 2.57.0

Compare Source

What's Changed

• Move non-integration tests to different test file by @​codysoyland in https://github.com/cli/cli/pull/9577
• Added tenancy aware attestation commands by @​kommendorkapten in https://github.com/cli/cli/pull/9542
• Added --active flag to the gh auth status command by @​velumuruganr in https://github.com/cli/cli/pull/9520
• build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2 by @​dependabot in https://github.com/cli/cli/pull/9601
• gh attestation verify test for custom OIDC issuers by @​bdehamer in https://github.com/cli/cli/pull/9595
• Suggest installing Rosetta when extension installation fails due to missing darwin-arm64 binary, but a darwin-amd64 binary is available by @​timrogers in https://github.com/cli/cli/pull/9599
• Update gh attestation verify bundle parsing and validation errors by @​malancas in https://github.com/cli/cli/pull/9564
• Suppress attestation verify output when no TTY present by @​bdehamer in https://github.com/cli/cli/pull/9612
• Use api subdomains for tenant hosts by @​williammartin in https://github.com/cli/cli/pull/9618

New Contributors

• @​kommendorkapten made their first contribution in https://github.com/cli/cli/pull/9542
• @​velumuruganr made their first contribution in https://github.com/cli/cli/pull/9520
• @​bdehamer made their first contribution in https://github.com/cli/cli/pull/9595
• @​timrogers made their first contribution in https://github.com/cli/cli/pull/9599

Full Changelog: cli/cli@v2.56.0...v2.57.0

v2.56.0: GitHub CLI 2.56.0

Compare Source

Important note about renewed GPG key

The Debian and RedHat releases have been signed with a new GPG key. If you are experiencing issues updating your .deb or .rpm packages, please read cli/cli#9569.

What's Changed

• Always print URL scheme to stdout by @​heaths in https://github.com/cli/cli/pull/9471
• Quote repo names consistently in gh repo sync stdout by @​muzimuzhi in https://github.com/cli/cli/pull/9491
• Fetch bundle from OCI registry for verify by @​ejahnGithub in https://github.com/cli/cli/pull/9421
• Remove Internal from gh repo create prompt when owner is not an org by @​jtmcg in https://github.com/cli/cli/pull/9465
• Drop surplus trailing space char in flag names in web by @​muzimuzhi in https://github.com/cli/cli/pull/9495
• fix the trimming of log filenames for gh run view by @​benebsiny in https://github.com/cli/cli/pull/9482
• "offline" verification using the bundle of attestations without any additional handling of the file by @​aryanbhosale in https://github.com/cli/cli/pull/9523
• build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 by @​dependabot in https://github.com/cli/cli/pull/9518
• Fix doc typo for repo sync by @​muzimuzhi in https://github.com/cli/cli/pull/9509
• Correct the help message for -F by @​Goooler in https://github.com/cli/cli/pull/9525
• chore: fix some function names by @​crystalstall in https://github.com/cli/cli/pull/9555
• verify 2nd artifact without swapping order by @​aryanbhosale in https://github.com/cli/cli/pull/9532
• gh attestation verify handles empty JSONL files by @​malancas in https://github.com/cli/cli/pull/9541
• Enhance Linux installation docs to redirect users to GPG renewal issue, better troubleshooting support by @​andyfeller in https://github.com/cli/cli/pull/9573
• Upgrade sigstore-go to v0.6.1 by @​codysoyland in https://github.com/cli/cli/pull/9566
• Check for nil values to prevent nil dereference panic by @​codysoyland in https://github.com/cli/cli/pull/9578
• build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3 by @​dependabot in https://github.com/cli/cli/pull/9575

New Contributors

• @​aryanbhosale made their first contribution in https://github.com/cli/cli/pull/9523
• @​Goooler made their first contribution in https://github.com/cli/cli/pull/9525
• @​crystalstall made their first contribution in https://github.com/cli/cli/pull/9555

Full Changelog: cli/cli@v2.55.0...v2.56.0

v2.55.0: GitHub CLI 2.55.0

Compare Source

What's Changed

• Update gh variable get to use repo host by @​andyfeller in https://github.com/cli/cli/pull/9411
• build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0 by @​dependabot in https://github.com/cli/cli/pull/9400
• Unify use of tab indent in non-test source files by @​muzimuzhi in https://github.com/cli/cli/pull/9407
• Add Acceptance Criteria requirement to triage.md for accepted issues by @​jtmcg in https://github.com/cli/cli/pull/9435
• Improve Unix compliance gh repo set-default by @​thecaffeinedev in https://github.com/cli/cli/pull/9431
• Document that gh run download downloads the latest artifact by default by @​sato11 in https://github.com/cli/cli/pull/9412
• build(deps): bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @​dependabot in https://github.com/cli/cli/pull/9432
• Replace --project.* flags' name with title in docs by @​jtmcg in https://github.com/cli/cli/pull/9443
• Wrap flags with backticks, continued by @​muzimuzhi in https://github.com/cli/cli/pull/9444
• Improve gh release create --notes-from-tag behavior with multiline tag annotation by @​babakks in https://github.com/cli/cli/pull/9385
• Add pr create --editor by @​benebsiny in https://github.com/cli/cli/pull/9433
• build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1 by @​dependabot in https://github.com/cli/cli/pull/9451
• Require Sigstore Bundle v0.2+ when verifying with gh attestation by @​codysoyland in https://github.com/cli/cli/pull/9442
• build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 by @​dependabot in https://github.com/cli/cli/pull/9459
• Update Go and other extension workflow templates to reflect recent enhancements to cli/gh-extension-precompile by @​BagToad in https://github.com/cli/cli/pull/9462
• Add note for external contributors to working-with-us.md by @​BagToad in https://github.com/cli/cli/pull/9468
• Update attestation TUF root by @​codysoyland in https://github.com/cli/cli/pull/9467
• Improve documentation for pr checks and exit codes by @​thecaffeinedev in https://github.com/cli/cli/pull/9452
• cmd/pr/checks: Describe bucket and state JSON fields by @​arunsathiya in https://github.com/cli/cli/pull/9439
• Add Flox as an installation option by @​bryanhonof in https://github.com/cli/cli/pull/9396
• fix behavior for gh issue develop -b does-not-exist-on-remote by @​benebsiny in https://github.com/cli/cli/pull/9477
• Update --project <number> flags in gh search to owner/number by @​jtmcg in https://github.com/cli/cli/pull/9453

New Contributors

• @​jtmcg made their first contribution in https://github.com/cli/cli/pull/9435
• @​thecaffeinedev made their first contribution in https://github.com/cli/cli/pull/9431
• @​sato11 made their first contribution in https://github.com/cli/cli/pull/9412
• @​codysoyland made their first contribution in https://github.com/cli/cli/pull/9442
• @​BagToad made their first contribution in https://github.com/cli/cli/pull/9462
• @​bryanhonof made their first contribution in https://github.com/cli/cli/pull/9396

Full Changelog: cli/cli@v2.54.0...v2.55.0

v2.54.0: GitHub CLI 2.54.0

Compare Source

What's Changed

• Remove redundant whitespace by @​jessehouwing in https://github.com/cli/cli/pull/9334
• Remove attestation test that requires being online by @​steiza in https://github.com/cli/cli/pull/9340
• Update documentation for gh api PATCH by @​cmbuckley in https://github.com/cli/cli/pull/9352
• Clarify usage of template flags for PR and issue creation by @​williammartin in https://github.com/cli/cli/pull/9354
• Expose json databaseId field for release commands by @​williammartin in https://github.com/cli/cli/pull/9356
• Expose fullDatabaseId for PR json export by @​williammartin in https://github.com/cli/cli/pull/9355
• Handle --bare clone targets by @​hyperrealist in https://github.com/cli/cli/pull/9271
• Slightly clarify when CLI exits with code 4 by @​williammartin in https://github.com/cli/cli/pull/9358
• Update sigstore-go in gh CLI to v0.5.1 by @​steiza in https://github.com/cli/cli/pull/9366
• Exit with 1 on authentication issues by @​Stausssi in https://github.com/cli/cli/pull/9240
• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5 by @​dependabot in https://github.com/cli/cli/pull/9372
• build(deps): bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @​dependabot in https://github.com/cli/cli/pull/9373
• Add --remove-milestone option to issue edit and pr edit by @​babakks in https://github.com/cli/cli/pull/9344
• handle attest case insensitivity by @​ejahnGithub in https://github.com/cli/cli/pull/9392

New Contributors

• @​cmbuckley made their first contribution in https://github.com/cli/cli/pull/9352
• @​hyperrealist made their first contribution in https://github.com/cli/cli/pull/9271
• @​Stausssi made their first contribution in https://github.com/cli/cli/pull/9240
• @​ejahnGithub made their first contribution in https://github.com/cli/cli/pull/9392

Full Changelog: cli/cli@v2.53.0...v2.54.0

v2.53.0: GitHub CLI 2.53.0

Compare Source

What's Changed

• Add --json option to variable get command by @​babakks in https://github.com/cli/cli/pull/9128
• Add GH_DEBUG to issue template by @​TWiStErRob in https://github.com/cli/cli/pull/9167
• Fetch variable selected repo relationship when required by @​williammartin in https://github.com/cli/cli/pull/9256
• build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7 by @​dependabot in https://github.com/cli/cli/pull/9250
• Alternate gh attestation trusted-root subcommand by @​steiza in https://github.com/cli/cli/pull/9206
• fix: indentation in 'gh release create --help' by @​cchristous in https://github.com/cli/cli/pull/9296
• build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3 by @​dependabot in https://github.com/cli/cli/pull/9305
• docs: Update documentation for gh repo create to clarify owner by @​jessehouwing in https://github.com/cli/cli/pull/9309
• Fix panic when calling gh pr view --json stateReason by @​williammartin in https://github.com/cli/cli/pull/9307
• Add issue create --editor by @​notomo in https://github.com/cli/cli/pull/7193
• Add pr update-branch command by @​babakks in https://github.com/cli/cli/pull/8953

New Contributors

• @​TWiStErRob made their first contribution in https://github.com/cli/cli/pull/9167
• @​cchristous made their first contribution in https://github.com/cli/cli/pull/9296
• @​jessehouwing made their first contribution in https://github.com/cli/cli/pull/9309
• @​notomo made their first contribution in https://github.com/cli/cli/pull/7193

Full Changelog: cli/cli@v2.52.0...v2.53.0

v2.52.0: GitHub CLI 2.52.0

Compare Source

What's Changed

• feat: add -a flag to gh run list by @​joshuajtward in https://github.com/cli/cli/pull/9162
• Attestation Verification - Buffer Fix by @​Forrin in https://github.com/cli/cli/pull/9198
• build(deps): bump actions/attest-build-provenance from 1.2.0 to 1.3.2 by @​dependabot in https://github.com/cli/cli/pull/9222
• build(deps): bump github.com/gorilla/websocket from 1.5.2 to 1.5.3 by @​dependabot in https://github.com/cli/cli/pull/9211
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @​dependabot in https://github.com/cli/cli/pull/9218
• build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @​dependabot in https://github.com/cli/cli/pull/9217
• Remove gh at verify public beta note by @​phillmv in https://github.com/cli/cli/pull/9243

New Contributors

• @​joshuajtward made their first contribution in https://github.com/cli/cli/pull/9162
• @​Forrin made their first contribution in https://github.com/cli/cli/pull/9198

Full Changelog: cli/cli@v2.51.0...v2.52.0

v2.51.0: GitHub CLI 2.51.0

Compare Source

What's Changed

• Ensure signed RPMs have attestations by @​andyfeller in https://github.com/cli/cli/pull/9143
• Add signer-repo and signer-workflow flags to gh attestation verify by @​malancas in https://github.com/cli/cli/pull/9137
• Docs: Specify rpm repository to avoid conflicts with community repositories by @​hbenali in https://github.com/cli/cli/pull/9151
• Replace --json-result flag with --format=json in the attestation cmd by @​phillmv in https://github.com/cli/cli/pull/9172
• Bump go-keyring to fix keepassxc prompt confirmation by @​AlanD20 in https://github.com/cli/cli/pull/9179
• build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0 by @​dependabot in https://github.com/cli/cli/pull/9169
• build(deps): bump goreleaser/goreleaser-action from 5 to 6 by @​dependabot in https://github.com/cli/cli/pull/9175
• build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2 by @​dependabot in https://github.com/cli/cli/pull/9192
• build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @​dependabot in https://github.com/cli/cli/pull/9197
• watch - handle annotation errors gracefully by @​wingleung in https://github.com/cli/cli/pull/9113

New Contributors

• @​hbenali made their first contribution in https://github.com/cli/cli/pull/9151
• @​AlanD20 made their first contribution in https://github.com/cli/cli/pull/9179
• @​wingleung made their first contribution in https://github.com/cli/cli/pull/9113

Full Changelog: cli/cli@v2.50.0...v2.51.0

v2.50.0: GitHub CLI 2.50.0

Compare Source

What's Changed

• Refactor git credential flow code by @​williammartin in https://github.com/cli/cli/pull/9089
• feat: add json output for gh pr checks by @​nobe4 in https://github.com/cli/cli/pull/9079
• Rework first auth tests with new gitcredential abstractions by @​williammartin in https://github.com/cli/cli/pull/9095
• list the various alias permutations for the command and subcommands, via '--help' and 'gh reference' by @​gabemontero in https://github.com/cli/cli/pull/8824
• Removed tty message when checking for extension upgrades by @​leevic31 in https://github.com/cli/cli/pull/9088
• Fix doc bug for gh run watch by @​jasonodonnell in https://github.com/cli/cli/pull/9052
• feat: add support for stateReason in gh pr view by @​nobe4 in https://github.com/cli/cli/pull/9080
• fix: rename the Attempts field to Attempt; expose in gh run view and gh run ls by @​cawfeecake in https://github.com/cli/cli/pull/8905
• Update regex in changedFilesNames to handle quoted paths by @​anda3 in https://github.com/cli/cli/pull/9115
• Add a gh variable get FOO command by @​arnested in https://github.com/cli/cli/pull/9106
• Add macOS pkg installer to deployment (#​7554) by @​paulober in https://github.com/cli/cli/pull/7555
• Add integration tests for gh attestation verify shared workflow use case by @​malancas in https://github.com/cli/cli/pull/9107
• Add build provenance for gh CLI releases by @​malancas in https://github.com/cli/cli/pull/9087
• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4 by @​dependabot in https://github.com/cli/cli/pull/9124
• Build completions during release on macos by @​williammartin in https://github.com/cli/cli/pull/9136
• Clarify Mac OS Installer packages are unsigned by @​andyfeller in https://github.com/cli/cli/pull/9140

New Contributors

• @​gabemontero made their first contribution in https://github.com/cli/cli/pull/8824
• @​jasonodonnell made their first contribution in https://github.com/cli/cli/pull/9052
• @​anda3 made their first contribution in https://github.com/cli/cli/pull/9115
• @​arnested made their first contribution in https://github.com/cli/cli/pull/9106
• @​paulober made their first contribution in https://github.com/cli/cli/pull/7555

Full Changelog: cli/cli@v2.49.2...v2.50.0

v2.49.2: GitHub CLI 2.49.2

Compare Source

What's Changed

• Improve run list doc with available --json fields by @​babakks in https://github.com/cli/cli/pull/8934
• Fix typos by @​szepeviktor in https://github.com/cli/cli/pull/9068
• Move config interfaces into gh package by @​williammartin in https://github.com/cli/cli/pull/9060
• Creating doc to capture Codespace usage guidance by @​andyfeller in https://github.com/cli/cli/pull/9066
• Fix repo fork regression by @​williammartin in https://github.com/cli/cli/pull/9063
• Add --latest=false to gh release create docs by @​kuzdogan in https://github.com/cli/cli/pull/8987
• build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2 by @​dependabot in https://github.com/cli/cli/pull/9075

New Contributors

• @​szepeviktor made their first contribution in https://github.com/cli/cli/pull/9068
• @​kuzdogan made their first contribution in https://github.com/cli/cli/pull/8987

Full Changelog: cli/cli@v2.49.1...v2.49.2

v2.49.1: GitHub CLI 2.49.1

Compare Source

What's Changed

• Do not mutate headers when initialising tableprinter by @​williammartin in https://github.com/cli/cli/pull/9033
• Document relationship between host and active account by @​williammartin in https://github.com/cli/cli/pull/9032
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @​dependabot in https://github.com/cli/cli/pull/9034
• Run attestation command set integration tests separately by @​malancas in https://github.com/cli/cli/pull/9035
• Added support for jobs with long filenames by @​shayn-orca in https://github.com/cli/cli/pull/8684
• Fix unused params across project by @​williammartin in https://github.com/cli/cli/pull/9059
• Fix attestation verify source repository check bug by @​malancas in https://github.com/cli/cli/pull/9053

New Contributors

• @​shayn-orca made their first contribution in https://github.com/cli/cli/pull/8684

Full Changelog: cli/cli@v2.49.0...v2.49.1

v2.49.0: GitHub CLI 2.49.0

Compare Source

Support for GitHub Artifact Attestations

v2.49.0 release introduces the attestation command set for downloading and verifying attestations about artifacts built in GitHub Actions! This is part of the larger Artifact Attestations initiative. An artifact attestation is a piece of cryptographically signed metadata that is generated as part of your artifact build process. These attestations bind artifacts to the details of the workflow run that produced them, and allow you to guarantee the integrity and provenance of any artifact built in GitHub Actions.

### Verify a local artifact
gh attestation verify artifact.bin -o <your org>

### Verify a local artifact against a local artifact attestation
gh attestation verify artifact.bin -b ./artifact-v0.0.1-bundle.json -o <your org>

### Verify an OCI image
gh attestation verify oci://ghcr.io/foo/bar:latest -o <your org>

### Download artifact attestations
gh attestation download artifact.bin -o <your org>

To get started, check out gh help attestation. You can also use the gh at <command> alias for short.

What's Changed

• Improve gh run rerun docs by @​sochotnicky in https://github.com/cli/cli/pull/8969
• build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 by @​dependabot in https://github.com/cli/cli/pull/8981
• Update sigstore-go dependency to v0.3.0 by @​malancas in https://github.com/cli/cli/pull/8977
• gh attestation tuf-root-verify offline test fix by @​malancas in https://github.com/cli/cli/pull/8975
• Update gh attestation verify output by @​malancas in https://github.com/cli/cli/pull/8991
• build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2 by @​dependabot in https://github.com/cli/cli/pull/8989
• Remove Hidden flag from gh attestation command by @​malancas in https://github.com/cli/cli/pull/8998
• Add colon for gh secret set by @​NeroBlackstone in https://github.com/cli/cli/pull/9004
• Improve errors when loading bundle locally fails by @​williammartin in https://github.com/cli/cli/pull/8996
• Support offline mode for gh attestation verify by @​steiza in https://github.com/cli/cli/pull/8997
• Add projectsV2 to JSON fields of gh repo commands by @​babakks in https://github.com/cli/cli/pull/9007
• Support long URLs in gh repo clone by @​babakks in https://github.com/cli/cli/pull/9008
• Fix issue with closing pager stream by @​babakks in https://github.com/cli/cli/pull/9020
• proof of concept for flag-level disable auth check by @​andyfeller in https://github.com/cli/cli/pull/9000
• Be more general with attestation host checks by @​williammartin in https://github.com/cli/cli/pull/9019
• Add beta designation on attestation command set by @​andyfeller in https://github.com/cli/cli/pull/9022
• Tweaked gh attestation help strings to generate nicer cli manual site. by @​phillmv in https://github.com/cli/cli/pull/9025
• Update cli/go-gh to v2.9.0 by @​andyfeller in https://github.com/cli/cli/pull/9023
• Document repo clone protocol behaviour by @​williammartin in https://github.com/cli/cli/pull/9030

New Contributors

• @​sochotnicky made their first contribution in https://github.com/cli/cli/pull/8969
• @​NeroBlackstone made their first contribution in https://github.com/cli/cli/pull/9004
• @​phillmv made their first contribution in https://github.com/cli/cli/pull/9025

Full Changelog: cli/cli@v2.48.0...v2.49.0

v2.48.0: GitHub CLI 2.48.0

Compare Source

The Big Stuff

• Added support for --slurping JSON responses in gh api by @​heaths in https://github.com/cli/cli/pull/8620
• Added --skip-ssh-key option to gh auth login command by @​babakks in https://github.com/cli/cli/pull/8935
• Added numSelectedRepos to JSON output of gh secret list by @​babakks in https://github.com/cli/cli/pull/8899
• Added support for multiple items in gh api nested array by @​Ebonsignori in https://github.com/cli/cli/pull/8762
• Fixed panic when running gh repo rename by @​babakks in https://github.com/cli/cli/pull/8906
• Fixed panic when parsing IPv6 remote URLs by @​babakks in https://github.com/cli/cli/pull/8893
• Fixed gh pr lock/unlock not working when URL is passed by @​t4kamura in https://github.com/cli/cli/pull/8837
• Fixed viewing run logs with filenames that the regex didn't handle @​zdrve in https://github.com/cli/cli/pull/8882

The Rest

• Tidy go.mod by @​matthewhughes934 in https://github.com/cli/cli/pull/8958
• Fix cache contention in Go CI jobs by @​matthewhughes934 in https://github.com/cli/cli/pull/8957
• Fix go directive in go.mod by @​matthewhughes934 in https://github.com/cli/cli/pull/8956
• Update install_linux.md by @​richterdavid in https://github.com/cli/cli/pull/8950
• build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2 by @​dependabot in https://github.com/cli/cli/pull/8925
• Add codeowners entry for the GitHub TUF root included in the attestation command set by @​malancas in https://github.com/cli/cli/pull/8919
• Create stronger run log cache abstraction by @​williammartin in https://github.com/cli/cli/pull/8931
• Remove naked returns from git ParseURL by @​williammartin in https://github.com/cli/cli/pull/8929
• Fix api cache test by @​williammartin in https://github.com/cli/cli/pull/8932
• Ensure run log cache creates cache dir if it doesn't exist by @​williammartin in https://github.com/cli/cli/pull/8944
• Close zip file in run view tests by @​williammartin in https://github.com/cli/cli/pull/8945
• Fix attestation cmd offline unit test failure by @​malancas in https://github.com/cli/cli/pull/8933
• Add support to attestation command for more predicate types. by @​steiza in https://github.com/cli/cli/pull/8949

New Contributors

• @​babakks made their first contribution in https://github.com/cli/cli/pull/8906
• @​t4kamura made their first contribution in https://github.com/cli/cli/pull/8837
• @​zdrve made their first contribution in [https://github.com/Anchor the log filename to the start cli/cli#8882](https://redirect.githu

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.22.1 -> 1.23.2
github.com/charmbracelet/lipgloss	v0.10.0 -> v0.10.1-0.20240413172830-d0be07ea6b9c
golang.org/x/term	v0.19.0 -> v0.25.0
golang.org/x/crypto	v0.21.0 -> v0.28.0
golang.org/x/net	v0.22.0 -> v0.30.0
golang.org/x/sync	v0.6.0 -> v0.8.0
golang.org/x/sys	v0.19.0 -> v0.26.0
golang.org/x/text	v0.14.0 -> v0.19.0