chore(deps): update dependency github-cli to v2.76.1 #295

renovate · 2023-11-06T06:45:21Z

This PR contains the following updates:

Package	Update	New value	References	Sourcegraph
github-cli	minor	2.76.1	source

Test plan: CI should pass with updated dependencies. No review required: this is an automated dependency update PR.

Release Notes

cli/cli (github-cli)

`v2.76.1`: GitHub CLI 2.76.1

Compare Source

`gh pr create` regression fix

This release fixes a regression introduced in v2.76.0 where organization teams were retrieved outside of intentional use cases. This caused problems for GitHub Enterprise Server users using the GitHub Actions automatic token that does not have access to organization teams.

For more information, see https://github.com/cli/cli/issues/11360

What's Changed

🐛 Fixes

Fix: gh pr create, only fetch teams when reviewers contain a team by @BagToad in https://github.com/cli/cli/pull/11361

📚 Docs & Chores

add tenancy aware for san matcher by @ejahnGithub in https://github.com/cli/cli/pull/11261
Run Lint and Tests on push to trunk branch by @andyfeller in https://github.com/cli/cli/pull/11325
update ownership of pkg/cmd/release/shared/ by @ejahnGithub in https://github.com/cli/cli/pull/11326
Automate spam issue detection by @babakks in https://github.com/cli/cli/pull/11316
Improve api --preview docs by @jsoref in https://github.com/cli/cli/pull/11274
Incorporate govulncheck into workflows by @andyfeller in https://github.com/cli/cli/pull/11332
chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1 by @dependabot[bot] inhttps://github.com/cli/cli/pull/112988
chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0 by @dependabot[bot] inhttps://github.com/cli/cli/pull/113077

Full Changelog: cli/cli@v2.76.0...v2.76.1

`v2.76.0`: GitHub CLI 2.76.0

Compare Source

Copilot Coding Agent Support

GitHub Copilot Pro+ and Copilot Enterprise subscribers can now assign issues to GitHub Copilot during issue creation using:

Command-line flag: gh issue create --assignee @copilot
Launching web browser: gh issue create --assignee @copilot --web
Or interactively selecting Copilot (AI) as assignee in gh issue create metadata

For more details, refer to the full changelog post for Copilot coding agent.

What's Changed

✨ Features

Assign Copilot during gh issue create by @andyfeller in https://github.com/cli/cli/pull/11279
Display immutable field in release view command by @bdehamer in https://github.com/cli/cli/pull/11251

🐛 Fixes

FIX: Do not fetch logs for skipped jobs by @babakks in https://github.com/cli/cli/pull/11312
Transform extension and filename qualifiers into path qualifier for web code search by @samcoe in https://github.com/cli/cli/pull/11211

📚 Docs & Chores

FIX: Workflow does not contain permissions by @BagToad in https://github.com/cli/cli/pull/11322
Add automated feature request response workflow by @BagToad in https://github.com/cli/cli/pull/11299

Full Changelog: cli/cli@v2.75.1...v2.76.0

`v2.75.1`: GitHub CLI 2.75.1

Compare Source

What's Changed

🐛 Fixes

Ensure hostnames are visible in CLI website by @andyfeller in https://github.com/cli/cli/pull/11295
Revert "Fix: gh pr create prioritize --title and --body over --fill when --web is present" by @andyfeller in https://github.com/cli/cli/pull/11300

📚 Docs & Chores

Ensure go directive is always .0 version in bump by @williammartin in https://github.com/cli/cli/pull/11259
Minor (1-word) documentation typo in generated ~/.config/gh/config.yml by @kurahaupo in https://github.com/cli/cli/pull/11246
Automate closing of stale issues by @babakks in https://github.com/cli/cli/pull/11268
Filter the third-party/ folder out of CodeQL results by @BagToad in https://github.com/cli/cli/pull/11278
Exclude third-party source from golangci-lint by @andyfeller in https://github.com/cli/cli/pull/11293

Dependencies

Bump Go to 1.24.5 by @github-actions[bot] inhttps://github.com/cli/cli/pull/112555
chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.3 to 0.5.0 by @dependabot[bot] inhttps://github.com/cli/cli/pull/112633
chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 by @dependabot[bot] inhttps://github.com/cli/cli/pull/112666
chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] inhttps://github.com/cli/cli/pull/112644
chore(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 by @dependabot[bot] inhttps://github.com/cli/cli/pull/112655
chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @dependabot[bot] inhttps://github.com/cli/cli/pull/112755

New Contributors

@kurahaupo made their first contribution in https://github.com/cli/cli/pull/11246
@github-actions[bot] made their first contribution inhttps://github.com/cli/cli/pull/112555

Full Changelog: cli/cli@v2.75.0...v2.75.1

`v2.75.0`: GitHub CLI 2.75.0

Compare Source

What's Changed

✨ Features

init release verify subcommands by @ejahnGithub in https://github.com/cli/cli/pull/11018
Embed Windows resources (VERSIONINFO) during build by @babakks in https://github.com/cli/cli/pull/11048
Support --no-repos-selected on gh secret set by @williammartin in https://github.com/cli/cli/pull/11217

🐛 Fixes

Fix: gh pr create prioritize --title and --body over --fill when --web is present by @dankrzeminski32 in https://github.com/cli/cli/pull/10547
fix: get token for active user instead of blank if possible by @anuraaga in https://github.com/cli/cli/pull/11038
Use Actions API to retrieve job run logs as a fallback mechanism by @babakks in https://github.com/cli/cli/pull/11172
Fix query object state mutation during pagination by @babakks in https://github.com/cli/cli/pull/11244
Handle HTTP 404 when deleting remote branch in pr merge by @babakks in https://github.com/cli/cli/pull/11234

📚 Docs & Chores

chore: fix function name by @jinjingroad in https://github.com/cli/cli/pull/11149
chore: update Go version to 1.24 in devcontainer configuration and docs by @tMinamiii in https://github.com/cli/cli/pull/11158
Ensure lint workflow checks whether 3rd party license and code is up to date by @andyfeller in https://github.com/cli/cli/pull/11047
docs: install_linux.md: add Solus linux install instructions by @chax in https://github.com/cli/cli/pull/10823
Fix missing newline in install_linux.md by @BagToad in https://github.com/cli/cli/pull/11160
Ensure automation uses pinned go-licenses version by @andyfeller in https://github.com/cli/cli/pull/11161
Add workflow_dispatch support to PR Help Wanted check by @BagToad in https://github.com/cli/cli/pull/11179
Remove unused GH_TOKEN env variable from workflow by @BagToad in https://github.com/cli/cli/pull/11190
Add workflow to automate go version bumping by @williammartin in https://github.com/cli/cli/pull/11189
Fix inconsistent use of tabs and spaces by @Stefan-Heimersheim in https://github.com/cli/cli/pull/11194
Decouple arg parsing from PR finder by @babakks in https://github.com/cli/cli/pull/11192
docs: consistently use apt in installation instructions by @tklauser in https://github.com/cli/cli/pull/11216
Ensure bump go script has git user configured by @williammartin in https://github.com/cli/cli/pull/11229
Inject token into bump-go workflow by @williammartin in https://github.com/cli/cli/pull/11233
Reinstating Primer Style CLI content within cli/cli repository by @andyfeller in https://github.com/cli/cli/pull/11060
Add setup-go to bump-go workflow by @williammartin in https://github.com/cli/cli/pull/11237
Ensure GoReleaser does not break on Mac OS and Linux when skipping Windows .rsyso generation script by @andyfeller in https://github.com/cli/cli/pull/11257

Dependencies

Bump all dependencies except dev-tunnels by @williammartin in https://github.com/cli/cli/pull/11203
Update microsoft dev-tunnels to v0.1.13 by @williammartin in https://github.com/cli/cli/pull/11205
Consume dependabot minor versions for go modules by @williammartin in https://github.com/cli/cli/pull/11213

New Contributors

@jinjingroad made their first contribution in https://github.com/cli/cli/pull/11149
@tMinamiii made their first contribution in https://github.com/cli/cli/pull/11158
@chax made their first contribution in https://github.com/cli/cli/pull/10823
@dankrzeminski32 made their first contribution in https://github.com/cli/cli/pull/10547
@anuraaga made their first contribution in https://github.com/cli/cli/pull/11038
@Stefan-Heimersheim made their first contribution in https://github.com/cli/cli/pull/11194

Full Changelog: cli/cli@v2.74.2...v2.75.0

`v2.74.2`: GitHub CLI 2.74.2

Compare Source

What's Changed

🐛 Fixes

Fix assignees being dropped from gh pr edit by @BagToad in https://github.com/cli/cli/pull/11065
Add accurate context when run rerun fails by @leudz in https://github.com/cli/cli/pull/10774
Avoid requesting PR reviewer twice by @williammartin in https://github.com/cli/cli/pull/11099
Quote filenames suggested at the end of worklow run by @williammartin in https://github.com/cli/cli/pull/11134
Fix expected error output of TestRepo/repo-rename-transfer-ownership by @aconsuegra in https://github.com/cli/cli/pull/10888

📚 Docs & Chores

Add instructions for MidnightBSD installation by @laffer1 in https://github.com/cli/cli/pull/10699
docs: update install command for Debian by @MagneticNeedle in https://github.com/cli/cli/pull/10935
Fix step order for CodeQL workflow by @BagToad in https://github.com/cli/cli/pull/11145
Add workflow to check help wanted labelling by @williammartin in https://github.com/cli/cli/pull/11105
Quote workflow conditional by @williammartin in https://github.com/cli/cli/pull/11122
Fix script path for help-wanted check by @BagToad in https://github.com/cli/cli/pull/11125
Exclude 3rd party license compliance content from GHAS scanning by @andyfeller in https://github.com/cli/cli/pull/11127
Second fix for file not found in help-wanted check by @BagToad in https://github.com/cli/cli/pull/11128
Ensure gh executes in workflow check script by @williammartin in https://github.com/cli/cli/pull/11133
Improve help wanted check skipping logic by @BagToad in https://github.com/cli/cli/pull/11135

Dependencies

Bump go to 1.24 by @williammartin in https://github.com/cli/cli/pull/11142
chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4 by @dependabot in https://github.com/cli/cli/pull/11066
chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3 by @dependabot in https://github.com/cli/cli/pull/11092
chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2 by @dependabot in https://github.com/cli/cli/pull/11033
chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @dependabot in https://github.com/cli/cli/pull/11107
chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2 by @dependabot in https://github.com/cli/cli/pull/11123
chore(deps): bump github.com/google/go-containerregistry from 0.20.3 to 0.20.6 by @dependabot in https://github.com/cli/cli/pull/11120
Bump golangci-lint to v2 by @williammartin in https://github.com/cli/cli/pull/11121

New Contributors

@MagneticNeedle made their first contribution in https://github.com/cli/cli/pull/10935
@laffer1 made their first contribution in https://github.com/cli/cli/pull/10699

Full Changelog: cli/cli@v2.74.1...v2.74.2

`v2.74.1`: GitHub CLI 2.74.1

Compare Source

What's Changed

Document support for @copilot in gh [pr|issue] edit --add-assignee and --remove-assignee by @timrogers in https://github.com/cli/cli/pull/11056
Fix pr edit when URL is provided by @williammartin in https://github.com/cli/cli/pull/11057
Fix const in PR finder tests by @babakks in https://github.com/cli/cli/pull/11091

Full Changelog: cli/cli@v2.74.0...v2.74.1

`v2.74.0`: GitHub CLI 2.74.0

Compare Source

Security

A security vulnerability has been identified in a core gh dependency, go-gh, where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing.

This issue is addressed in this gh release by updating go-gh to a fixed version.

For more information, see GHSA-g9f5-x53j-h563

What's changed

✨ Features

Add preview prompter command by @BagToad in https://github.com/cli/cli/pull/10745
[gh run watch] Support --compact flag by @iamazeem in https://github.com/cli/cli/pull/10629
Fix brew update notifications by @BagToad in https://github.com/cli/cli/pull/11024

🐛 Fixes

Revert "[gh config] Escape pipe symbol in Long desc for website manual" by @BagToad in https://github.com/cli/cli/pull/11004
Fix formatting in allowed values for gh config --help by @BagToad in https://github.com/cli/cli/pull/11003
fix: gh gist edit panic when no file in a gist by @phanen in https://github.com/cli/cli/pull/10627
Add retry logic when fetching TUF content in gh attestation commands by @malancas in https://github.com/cli/cli/pull/10943

📚 Docs & Chores

Update README.md by @irhdab in https://github.com/cli/cli/pull/11022
Add tests for RenderJobs and RenderJobsCompact by @babakks in https://github.com/cli/cli/pull/11013
Add example usage of --head option to pr list docs by @babakks in https://github.com/cli/cli/pull/10979
Mention pr create will print the created PR's URL by @babakks in https://github.com/cli/cli/pull/10980
Add Digest to ReleaseAsset struct by @bdehamer in https://github.com/cli/cli/pull/11030

Dependencies

Bump go-gh to v2.12.1 by @BagToad in https://github.com/cli/cli/pull/11043
chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9 by @dependabot in https://github.com/cli/cli/pull/10825
Update sigstore-go dependency to v1.0.0 by @malancas in https://github.com/cli/cli/pull/11028
chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2 by @dependabot in https://github.com/cli/cli/pull/10999
chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12 by @dependabot in https://github.com/cli/cli/pull/11032

New Contributors

@irhdab made their first contribution in https://github.com/cli/cli/pull/11022
@phanen made their first contribution in https://github.com/cli/cli/pull/10627

Full Changelog: cli/cli@v2.73.0...v2.74.0

`v2.73.0`: GitHub CLI 2.73.0

Compare Source

Copilot Coding Agent Support

You can now assign issues to GitHub Copilot directly from gh, just as you would assign them to a teammate. Use gh issue edit <number> --add-assignee @copilot to assign the GitHub Copilot coding agent, and Copilot will work in the background to understand the issue, propose a solution, and open a pull request when it's ready for your review. If you run gh issue edit interactively, Copilot (AI) will be displayed as a potential assignee. This feature is available for GitHub Copilot Pro+ and Copilot Enterprise subscribers. For more details, refer to the full changelog post for Copilot coding agent.

What's Changed

✨ Features

Copilot is assignable to issues and pull requests with issue edit and pr edit by @BagToad in https://github.com/cli/cli/pull/10992
- gh issue edit: actors are assignable to issues by @BagToad in https://github.com/cli/cli/pull/10960
- gh pr edit: Assign actors to pull requests by @BagToad in https://github.com/cli/cli/pull/10984
- issue edit, pr edit: handle display names in interactive assignee editing by @BagToad in https://github.com/cli/cli/pull/10990
- issue edit, pr edit: Support special non-interactive (flags) assignee name @copilot by @BagToad in https://github.com/cli/cli/pull/10991
[gh issue/pr comment] Add support for last comment delete for issues and PRs by @sinansonmez in https://github.com/cli/cli/pull/10596
[gh issue view] Expose closedByPullRequestsReferences JSON field by @iamazeem in https://github.com/cli/cli/pull/10941
Accessible prompter always displays selection defaults in a format readable by a screen reader by @BagToad in https://github.com/cli/cli/pull/10937

🐛 Fixes

Fix StatusJSONResponse usage by @babakks in https://github.com/cli/cli/pull/10810
Fix panic on gh pr view 0 by @nopcoder in https://github.com/cli/cli/pull/10729
Fix flakey test for accessible prompter by @BagToad in https://github.com/cli/cli/pull/10918
Fix accessible prompter flaky tests by @babakks in https://github.com/cli/cli/pull/10977
Handle missing archive URLs on release download by @williammartin in https://github.com/cli/cli/pull/10947
Fix bug when removing all PR reviewers by @babakks in https://github.com/cli/cli/pull/10975

📚 Docs & Chores

Feature detect v1 projects on pr view by @williammartin in https://github.com/cli/cli/pull/10821
Feature detect v1 projects on non-interactive pr create by @williammartin in https://github.com/cli/cli/pull/10909
Feature detect v1 projects on web mode pr create by @williammartin in https://github.com/cli/cli/pull/10911
Feature detect v1 projects on interactive pr create by @williammartin in https://github.com/cli/cli/pull/10915
Feature detect v1 projects on pr edit by @williammartin in https://github.com/cli/cli/pull/10942
Move predicate type filtering in gh attestation verify by @malancas in https://github.com/cli/cli/pull/10670
Improve assertion for disabled echo mode by @babakks in https://github.com/cli/cli/pull/10927

Dependencies

chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0 by @dependabot in https://github.com/cli/cli/pull/10886
chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7 by @dependabot in https://github.com/cli/cli/pull/10869

What's Changed

New Contributors

@sinansonmez made their first contribution in https://github.com/cli/cli/pull/10596
@nopcoder made their first contribution in https://github.com/cli/cli/pull/10729

Full Changelog: cli/cli@v2.72.0...v2.73.0

`v2.72.0`: GitHub CLI 2.72.0

Compare Source

Accessibility public preview

This release marks the public preview of several accessibility improvements to the GitHub CLI that have been under development over the past year in partnership with our friends at Charm including:

customizable and contrasting colors
non-interactive user input prompting
text-based spinners

These new experiences are captured in a new gh a11y help topic command, which goes into greater detail into the motivation behind each of them as well as opt-in configuration settings / environment variables.

We would like you to share your feedback and join us on this journey through one of GitHub Accessibility feedback channels! 🙌

What's Changed

✨ Features

Introduce gh accessibility help topic highlighting GitHub CLI accessibility experiences by @andyfeller in https://github.com/cli/cli/pull/10890
[gh pr view] Support closingIssuesReferences JSON field by @iamazeem in https://github.com/cli/cli/pull/10544

🐛 Fixes

Fix expected error output of TestRepo/repo-set-default by @aconsuegra in https://github.com/cli/cli/pull/10884
Ensure accessible password and auth token prompters disable echo mode by @andyfeller in https://github.com/cli/cli/pull/10885
Fix: Accessible multiselect prompt respects default selections by @BagToad in https://github.com/cli/cli/pull/10901

New Contributors

@aconsuegra made their first contribution in https://github.com/cli/cli/pull/10884

Full Changelog: cli/cli@v2.71.2...v2.72.0

`v2.71.2`: GitHub CLI 2.71.2

Compare Source

What's Changed

Fix pr create when push.default tracking and no merge ref by @williammartin in https://github.com/cli/cli/pull/10863

Full Changelog: cli/cli@v2.71.1...v2.71.2

`v2.71.1`: GitHub CLI 2.71.1

Compare Source

What's Changed

Fix pr create when branch name contains slashes by @williammartin in https://github.com/cli/cli/pull/10859

Full Changelog: cli/cli@v2.71.0...v2.71.1

`v2.71.0`: GitHub CLI 2.71.0

Compare Source

What's Changed

✨ Features

gh pr create: Support Git's @{push} revision syntax for determining head ref by @BagToad in https://github.com/cli/cli/pull/10513
Introduce option to opt-out of spinners by @BagToad in https://github.com/cli/cli/pull/10773
Update configuration support for accessible colors by @andyfeller in https://github.com/cli/cli/pull/10820
gh config: add config settings for accessible prompter and disabling spinner by @BagToad in https://github.com/cli/cli/pull/10846

🐛 Fixes

Fix multi pages search for gh search by @leudz in https://github.com/cli/cli/pull/10767
Fix: project commands use shared progress indicator by @BagToad in https://github.com/cli/cli/pull/10817
Issue commands should parse args early by @williammartin in https://github.com/cli/cli/pull/10811
Feature detect v1 projects on issue view by @williammartin in https://github.com/cli/cli/pull/10813
Feature detect v1 projects on non web-mode issue create by @williammartin in https://github.com/cli/cli/pull/10815
Feature detect v1 projects on web mode issue create by @williammartin in https://github.com/cli/cli/pull/10818
Feature detect v1 projects on issue edit by @williammartin in https://github.com/cli/cli/pull/10819

📚 Docs & Chores

Refactor Sigstore verifier logic by @malancas in https://github.com/cli/cli/pull/10750

Dependencies

chore(deps): bump github.com/sigstore/sigstore-go from 0.7.1 to 0.7.2 by @dependabot in https://github.com/cli/cli/pull/10787
Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @dependabot in https://github.com/cli/cli/pull/10758

New Contributors

@leudz made their first contribution in https://github.com/cli/cli/pull/10767

Full Changelog: cli/cli@v2.70.0...v2.71.0

`v2.70.0`: GitHub CLI 2.70.0

Compare Source

Accessibility

This release contains dark shipped changes that are part of a larger GitHub CLI accessibility preview still under development. More information about these will be announced later this month including various channels to work with GitHub and GitHub CLI maintainers on shaping these experiences.

Ensure table headers are thematically contrasting

#8292 is a long time issue where table headers were difficult to see in terminals with light background. Ahead of the aforementioned preview, v2.70.0 has shipped changes that improve the out-of-the-box experience based on terminal background detection.

The following screenshots demonstrate the Mac Terminal using the Basic profile, which responds to user's appearance preferences:

Screenshot of gh repo list in light background terminal

Screenshot of gh repo list in dark background terminal

For more information including demos from various official distributions, see #10649.

What's Changed

✨ Features

Update go-gh and document available sprig funcs by @BagToad in https://github.com/cli/cli/pull/10680
Introducing experimental support for rendering markdown with customizable, accessible colors by @andyfeller @jtmcg in https://github.com/cli/cli/pull/10680
Ensure table datetime columns have thematic, customizable muted text by @andyfeller in https://github.com/cli/cli/pull/10709
Ensure table headers are thematically contrasting by @andyfeller in https://github.com/cli/cli/pull/10649
Introduce configuration setting for displaying issue and pull request labels in rich truecolor by @andyfeller in https://github.com/cli/cli/pull/10720
Ensure muted text is thematic and customizable by @andyfeller in https://github.com/cli/cli/pull/10737
[gh repo create] Show host name in repo creation prompts by @iamazeem in https://github.com/cli/cli/pull/10516
Introduce accessible prompter for screen readers (preview) by @BagToad in https://github.com/cli/cli/pull/10710

🐛 Fixes

run list: do not fail on organization/enterprise ruleset imposed workflows by @BagToad in https://github.com/cli/cli/pull/10660
Implement safeguard for gh alias delete test, prevent wiping out GitHub CLI configuration by @andyfeller in https://github.com/cli/cli/pull/10683
Pin third party actions to commit sha by @BagToad in https://github.com/cli/cli/pull/10731
Fallback to job run logs when step logs are missing by @babakks in https://github.com/cli/cli/pull/10740
[gh ext] Fix GitKind extension directory path by @iamazeem in https://github.com/cli/cli/pull/10609
Fix job log resolution to skip legacy logs in favour of normal/new ones by @babakks in https://github.com/cli/cli/pull/10769

📚 Docs & Chores

./script/sign cleanup by @iamazeem in https://github.com/cli/cli/pull/10599
Fix typos in CONTRIBUTING.md by @rylwin in https://github.com/cli/cli/pull/10657
Improve gh at verify --help, document json output by @phillmv in https://github.com/cli/cli/pull/10685
Acceptance test issue/pr create/edit with project by @williammartin in https://github.com/cli/cli/pull/10707
Escape dots in regexp pattern in README.md by @babakks in https://github.com/cli/cli/pull/10742
Simplify cosign verification example by not using a regex. by @kommendorkapten in https://github.com/cli/cli/pull/10759
Document UNKNOWN STEP in run view by @williammartin in https://github.com/cli/cli/pull/10770

Dependencies

Update github.com/sigstore/sigstore-go to 0.7.1 and fix breaking function change by @malancas in https://github.com/cli/cli/pull/10749

New Contributors

@rylwin made their first contribution in https://github.com/cli/cli/pull/10657

Full Changelog: cli/cli@v2.69.0...v2.70.0

`v2.69.0`: GitHub CLI 2.69.0

Compare Source

What's Changed

Features

Commands that accept filepath arguments will do glob expansion for * characters, by @iamazeem in https://github.com/cli/cli/pull/10413

Bug Fixes

gh issue/pr comment --edit-last no longer creates a comment in non-interactive mode if there weren't one. A new flag --create-if-none provides this behaviour, by @andyfeller in https://github.com/cli/cli/pull/10625
gh repo sync provides a more informative error for missing workflow permissions when the token is provided by a GitHub app, by @wata727 in https://github.com/cli/cli/pull/10574
gh api no longer tries to encode URLs incorrectly, by @williammartin in https://github.com/cli/cli/pull/10630

Other

Add cli-discuss-automation environment to triage.md by @jtmcg in https://github.com/cli/cli/pull/10552
chore: remove redundant word in comment by @kevincatty in https://github.com/cli/cli/pull/10586
Bump golang.org/x/net from 0.34.0 to 0.36.0 by @dependabot in https://github.com/cli/cli/pull/10593

New Contributors

@kevincatty made their first contribution in https://github.com/cli/cli/pull/10586
@wata727 made their first contribution in https://github.com/cli/cli/pull/10574

Full Changelog: cli/cli@v2.68.1...v2.69.0

`v2.68.1`: GitHub CLI 2.68.1

Compare Source

What's Changed

Fix secret command panic when base repo is determined via cwd by @williammartin in https://github.com/cli/cli/pull/10549

Full Changelog: cli/cli@v2.68.0...v2.68.1

`v2.68.0`: GitHub CLI 2.68.0

Compare Source

What's Changed

✨ Features

[gh repo view] Improve error message for forked repo by @iamazeem in https://github.com/cli/cli/pull/10334
Add signer-digest, source-ref, and source-digest options for gh attestation verify by @malancas in https://github.com/cli/cli/pull/10308
[gh pr checkout] Add --no-tags option to git fetch commands in checkout by @latzskim in https://github.com/cli/cli/pull/10479
[gh issue/pr comment] Add --create-if-none and prompts to create a comment if no comment already exists by @latzskim in https://github.com/cli/cli/pull/10427
[gh cache delete --all] Add --succeed-on-no-caches flag to return exit code 0 by @iamazeem in https://github.com/cli/cli/pull/10327
[gh release create] Fail when there are no new commits since the last release by @iamazeem in https://github.com/cli/cli/pull/10398
update default upstream when forking repo during PR creation by @daviddl9 in https://github.com/cli/cli/pull/10458

🐛 Fixes

Refactor GetLocalAttestations and clean up custom registry transport by @malancas in https://github.com/cli/cli/pull/10382
Check GH_REPO too in addition to --repo for disambiguation by @williammartin in https://github.com/cli/cli/pull/10539
- (Fixes gh secret subcommands not working outside of a repository)
Fix unhandled panic in FindWorkflow and add tests by @jtmcg in https://github.com/cli/cli/pull/10521
Fix checkout when URL arg is from fork and cwd is upstream by @williammartin in https://github.com/cli/cli/pull/10512
[gh api] Escape package name (URL encoding) for packages endpoint by @iamazeem in https://github.com/cli/cli/pull/10384
Fix remoteResolver caching issue by @iamazeem in https://github.com/cli/cli/pull/10456
Fix gh project item-edit to allow --number 0 as a valid value by @aryanbhosale in https://github.com/cli/cli/pull/10417
Add mutex to fix race in attestation test client by @codysoyland in https://github.com/cli/cli/pull/10439
Base64 decode GPG passphrase in deployment workflow by @BagToad in https://github.com/cli/cli/pull/10546

📚 Docs & Chores

Deep Dive Document Release Process by @williammartin in https://github.com/cli/cli/pull/10503
Inconsistent format of examples in help text by @iamazeem in https://github.com/cli/cli/pull/10508
Inconsistent format of description of flags (starting with lowercase letter) by @iamazeem in https://github.com/cli/cli/pull/10507
Update Go version to 1.23 in CONTRIBUTING.md by @williammartin in https://github.com/cli/cli/pull/10504
Fix minor auth login help typo by @williammartin in https://github.com/cli/cli/pull/10501
docs: document how to revoke gh OAuth tokens in auth logout's help by @BagToad in https://github.com/cli/cli/pull/10490
chore: update codespaces Go version by @BagToad in https://github.com/cli/cli/pull/10491
Allow injection of TUFMetadataDir in tests by @williammartin in https://github.com/cli/cli/pull/10478
refactor: use a more straightforward return value by @beforetech in https://github.com/cli/cli/pull/10489
Use subtests in attestation verification integration tests by @williammartin in https://github.com/cli/cli/pull/10463
Fix typo in README by @iamazeem in https://github.com/cli/cli/pull/10445
Update usage to lower-kebab-case by @iamazeem in https://github.com/cli/cli/pull/10447
Standardize URLs by @iamazeem in https://github.com/cli/cli/pull/10429
Remove trailing whitespace by @iamazeem in https://github.com/cli/cli/pull/10430

Dependencies

Bump actions/attest-build-provenance from 2.2.0 to 2.2.2 by @dependabot in https://github.com/cli/cli/pull/10518
Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in https://github.com/cli/cli/pull/10499
Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by @dependabot in https://github.com/cli/cli/pull/10338

`v2.67.0`: GitHub CLI 2.67.0

Compare Source

Security

A bug in gh attestation verify may return an incorrect zero exit status when no matching attestations are found for the specified --predicate-type <value> or the default https://slsa.dev/provenance/v1 if not specified. This issue only arises if an artifact has an attestation with a predicate type different from the one provided in the command. As a result, users relying solely on these exit codes may mistakenly believe the attestation has been verified, despite the absence of an attestation with the specified predicate type and the tool printing a verification failure.

Users are advised to update gh to version v2.67.0 as soon as possible.

For more information, see GHSA-fgw4-v983-mgp8

`gh pr checkout` now supports interactively selecting a pull request

Similar to commands like gh workflow run which prompts for a workflow to run, now gh pr checkout will prompt for a pull request to checkout. The list is currently limited to the most recent 10 pull requests in the repository.

393797385-499b5dfb-3103-42b8-876a-3a2d4d7173c8.mov

Big thank you to @nilvng for implementing this 🙌

Contributing guidelines updated

We've updated our CONTRIBUTING.md guidelines to give more clarity around old help wanted issues.

TLDR:

Please directly mention `@cl

Configuration

📅 Schedule: Branch creation - "on the 1st through 7th day of the month" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the bot label Nov 6, 2023

renovate bot force-pushed the renovate/github-cli-2.x branch from 66250db to 33f7fa4 Compare November 14, 2023 12:03

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.38.0~~ chore(deps): update dependency github-cli to v2.39.0 Nov 14, 2023

renovate bot force-pushed the renovate/github-cli-2.x branch from 33f7fa4 to 88de467 Compare November 14, 2023 17:11

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.39.0~~ chore(deps): update dependency github-cli to v2.39.1 Nov 14, 2023

renovate bot force-pushed the renovate/github-cli-2.x branch from 88de467 to 61888e3 Compare November 27, 2023 19:10

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.39.1~~ chore(deps): update dependency github-cli to v2.39.2 Nov 27, 2023

renovate bot force-pushed the renovate/github-cli-2.x branch from 61888e3 to cbd3339 Compare December 7, 2023 15:33

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.39.2~~ chore(deps): update dependency github-cli to v2.40.0 Dec 7, 2023

renovate bot force-pushed the renovate/github-cli-2.x branch from cbd3339 to 314e2ce Compare December 13, 2023 15:26

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.40.0~~ chore(deps): update dependency github-cli to v2.40.1 Dec 13, 2023

renovate bot force-pushed the renovate/github-cli-2.x branch from 314e2ce to 39b8eac Compare January 8, 2024 17:37

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.40.1~~ chore(deps): update dependency github-cli to v2.41.0 Jan 8, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from 39b8eac to 221ce63 Compare January 11, 2024 15:14

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.41.0~~ chore(deps): update dependency github-cli to v2.42.0 Jan 11, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from 221ce63 to cc9ffe8 Compare January 16, 2024 22:12

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.42.0~~ chore(deps): update dependency github-cli to v2.42.1 Jan 16, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from cc9ffe8 to 582d78a Compare January 31, 2024 16:10

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.42.1~~ chore(deps): update dependency github-cli to v2.43.0 Jan 31, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from 582d78a to 234a679 Compare January 31, 2024 21:45

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.43.0~~ chore(deps): update dependency github-cli to v2.43.1 Jan 31, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from 234a679 to df8fca2 Compare February 15, 2024 15:49

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.43.1~~ chore(deps): update dependency github-cli to v2.44.0 Feb 15, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from df8fca2 to 2393821 Compare February 16, 2024 19:36

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.44.0~~ chore(deps): update dependency github-cli to v2.44.1 Feb 16, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from 2393821 to cccee72 Compare March 4, 2024 21:15

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.44.1~~ chore(deps): update dependency github-cli to v2.45.0 Mar 4, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from cccee72 to e58d581 Compare March 20, 2024 19:28

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.45.0~~ chore(deps): update dependency github-cli to v2.46.0 Mar 20, 2024

renovate bot force-pushed the renovate/github-cli-2.x branch from e58d581 to 7b630ea Compare April 3, 2024 19:41

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.66.1~~ chore(deps): update dependency github-cli to v2.67.0 Feb 11, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from 203d780 to 300f499 Compare March 5, 2025 20:31

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.67.0~~ chore(deps): update dependency github-cli to v2.68.0 Mar 5, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from 300f499 to bb29e9f Compare March 6, 2025 13:24

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.68.0~~ chore(deps): update dependency github-cli to v2.68.1 Mar 6, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from bb29e9f to 0cd395c Compare March 19, 2025 18:25

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.68.1~~ chore(deps): update dependency github-cli to v2.69.0 Mar 19, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from 0cd395c to fdb2de1 Compare April 15, 2025 13:32

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.69.0~~ chore(deps): update dependency github-cli to v2.70.0 Apr 15, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from fdb2de1 to b4617f1 Compare April 27, 2025 03:35

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.70.0~~ chore(deps): update dependency github-cli to v2.71.2 Apr 27, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from b4617f1 to cb9b8ef Compare April 30, 2025 21:33

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.71.2~~ chore(deps): update dependency github-cli to v2.72.0 Apr 30, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from cb9b8ef to ad6a158 Compare May 19, 2025 18:58

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.72.0~~ chore(deps): update dependency github-cli to v2.73.0 May 19, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from ad6a158 to 81d998e Compare May 30, 2025 03:37

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.73.0~~ chore(deps): update dependency github-cli to v2.74.0 May 30, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from 81d998e to 5478eaa Compare June 10, 2025 18:10

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.74.0~~ chore(deps): update dependency github-cli to v2.74.1 Jun 10, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from 5478eaa to 7fa64e8 Compare June 18, 2025 18:50

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.74.1~~ chore(deps): update dependency github-cli to v2.74.2 Jun 18, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from 7fa64e8 to 496b489 Compare July 9, 2025 14:51

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.74.2~~ chore(deps): update dependency github-cli to v2.75.0 Jul 9, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from 496b489 to 9da9fa9 Compare July 15, 2025 00:55

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.75.0~~ chore(deps): update dependency github-cli to v2.75.1 Jul 15, 2025

renovate bot force-pushed the renovate/github-cli-2.x branch from 9da9fa9 to ddfea6c Compare July 18, 2025 00:16

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.75.1~~ chore(deps): update dependency github-cli to v2.76.0 Jul 18, 2025

chore(deps): update dependency github-cli to v2.76.1

c21d6fe

renovate bot force-pushed the renovate/github-cli-2.x branch from ddfea6c to c21d6fe Compare July 24, 2025 01:46

renovate bot changed the title ~~chore(deps): update dependency github-cli to v2.76.0~~ chore(deps): update dependency github-cli to v2.76.1 Jul 24, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update dependency github-cli to v2.76.1 #295

chore(deps): update dependency github-cli to v2.76.1 #295

Uh oh!

renovate bot commented Nov 6, 2023 •

edited

Loading

Uh oh!

Uh oh!

chore(deps): update dependency github-cli to v2.76.1 #295

Are you sure you want to change the base?

chore(deps): update dependency github-cli to v2.76.1 #295

Uh oh!

Conversation

renovate bot commented Nov 6, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.76.1: GitHub CLI 2.76.1

gh pr create regression fix

What's Changed

🐛 Fixes

📚 Docs & Chores

v2.76.0: GitHub CLI 2.76.0

Copilot Coding Agent Support

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

v2.75.1: GitHub CLI 2.75.1

What's Changed

🐛 Fixes

📚 Docs & Chores

Dependencies

New Contributors

v2.75.0: GitHub CLI 2.75.0

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

Dependencies

New Contributors

v2.74.2: GitHub CLI 2.74.2

What's Changed

🐛 Fixes

📚 Docs & Chores

Dependencies

New Contributors

v2.74.1: GitHub CLI 2.74.1

What's Changed

v2.74.0: GitHub CLI 2.74.0

Security

What's changed

✨ Features

🐛 Fixes

📚 Docs & Chores

Dependencies

New Contributors

v2.73.0: GitHub CLI 2.73.0

Copilot Coding Agent Support

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

Dependencies

What's Changed

New Contributors

v2.72.0: GitHub CLI 2.72.0

Accessibility public preview

What's Changed

✨ Features

🐛 Fixes

New Contributors

v2.71.2: GitHub CLI 2.71.2

What's Changed

v2.71.1: GitHub CLI 2.71.1

What's Changed

v2.71.0: GitHub CLI 2.71.0

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

Dependencies

New Contributors

v2.70.0: GitHub CLI 2.70.0

Accessibility

Ensure table headers are thematically contrasting

What's Changed

✨ Features

🐛 Fixes

renovate bot commented Nov 6, 2023 •

edited

Loading

`v2.76.1`: GitHub CLI 2.76.1

`gh pr create` regression fix

`v2.76.0`: GitHub CLI 2.76.0

`v2.75.1`: GitHub CLI 2.75.1

`v2.75.0`: GitHub CLI 2.75.0

`v2.74.2`: GitHub CLI 2.74.2

`v2.74.1`: GitHub CLI 2.74.1

`v2.74.0`: GitHub CLI 2.74.0

`v2.73.0`: GitHub CLI 2.73.0

`v2.72.0`: GitHub CLI 2.72.0

`v2.71.2`: GitHub CLI 2.71.2

`v2.71.1`: GitHub CLI 2.71.1

`v2.71.0`: GitHub CLI 2.71.0

`v2.70.0`: GitHub CLI 2.70.0

`v2.69.0`: GitHub CLI 2.69.0

`v2.68.1`: GitHub CLI 2.68.1

`v2.68.0`: GitHub CLI 2.68.0

`v2.67.0`: GitHub CLI 2.67.0

`gh pr checkout` now supports interactively selecting a pull request