Releases: cli/cli
GitHub CLI 2.54.0
What's Changed
- Remove redundant whitespace by @jessehouwing in #9334
- Remove attestation test that requires being online by @steiza in #9340
- Update documentation for gh api PATCH by @cmbuckley in #9352
- Clarify usage of template flags for PR and issue creation by @williammartin in #9354
- Expose json databaseId field for release commands by @williammartin in #9356
- Expose fullDatabaseId for PR json export by @williammartin in #9355
- Handle
--bare
clone targets by @hyperrealist in #9271 - Slightly clarify when CLI exits with code 4 by @williammartin in #9358
- Update sigstore-go in gh CLI to v0.5.1 by @steiza in #9366
- Exit with 1 on authentication issues by @Stausssi in #9240
- build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5 by @dependabot in #9372
- build(deps): bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in #9373
- Add
--remove-milestone
option toissue edit
andpr edit
by @babakks in #9344 - handle attest case insensitivity by @ejahnGithub in #9392
New Contributors
- @cmbuckley made their first contribution in #9352
- @hyperrealist made their first contribution in #9271
- @Stausssi made their first contribution in #9240
- @ejahnGithub made their first contribution in #9392
Full Changelog: v2.53.0...v2.54.0
GitHub CLI 2.53.0
What's Changed
- Add
--json
option tovariable get
command by @babakks in #9128 - Add GH_DEBUG to issue template by @TWiStErRob in #9167
- Fetch variable selected repo relationship when required by @williammartin in #9256
- build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7 by @dependabot in #9250
- Alternate gh attestation trusted-root subcommand by @steiza in #9206
- fix: indentation in 'gh release create --help' by @cchristous in #9296
- build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3 by @dependabot in #9305
- docs: Update documentation for
gh repo create
to clarify owner by @jessehouwing in #9309 - Fix panic when calling
gh pr view --json stateReason
by @williammartin in #9307 - Add
issue create --editor
by @notomo in #7193 - Add
pr update-branch
command by @babakks in #8953
New Contributors
- @TWiStErRob made their first contribution in #9167
- @cchristous made their first contribution in #9296
- @jessehouwing made their first contribution in #9309
- @notomo made their first contribution in #7193
Full Changelog: v2.52.0...v2.53.0
GitHub CLI 2.52.0
What's Changed
- feat: add
-a
flag togh run list
by @joshuajtward in #9162 - Attestation Verification - Buffer Fix by @Forrin in #9198
- build(deps): bump actions/attest-build-provenance from 1.2.0 to 1.3.2 by @dependabot in #9222
- build(deps): bump github.com/gorilla/websocket from 1.5.2 to 1.5.3 by @dependabot in #9211
- build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #9218
- build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #9217
- Remove
gh at verify
public beta note by @phillmv in #9243
New Contributors
- @joshuajtward made their first contribution in #9162
- @Forrin made their first contribution in #9198
Full Changelog: v2.51.0...v2.52.0
GitHub CLI 2.51.0
What's Changed
- Ensure signed RPMs have attestations by @andyfeller in #9143
- Add
signer-repo
andsigner-workflow
flags togh attestation verify
by @malancas in #9137 - Docs: Specify rpm repository to avoid conflicts with community repositories by @hbenali in #9151
- Replace
--json-result
flag with--format=json
in the attestation cmd by @phillmv in #9172 - Bump go-keyring to fix keepassxc prompt confirmation by @AlanD20 in #9179
- build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0 by @dependabot in #9169
- build(deps): bump goreleaser/goreleaser-action from 5 to 6 by @dependabot in #9175
- build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2 by @dependabot in #9192
- build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #9197
- watch - handle annotation errors gracefully by @wingleung in #9113
New Contributors
- @hbenali made their first contribution in #9151
- @AlanD20 made their first contribution in #9179
- @wingleung made their first contribution in #9113
Full Changelog: v2.50.0...v2.51.0
GitHub CLI 2.50.0
What's Changed
- Refactor git credential flow code by @williammartin in #9089
- feat: add json output for
gh pr checks
by @nobe4 in #9079 - Rework first auth tests with new gitcredential abstractions by @williammartin in #9095
- list the various alias permutations for the command and subcommands, via '--help' and 'gh reference' by @gabemontero in #8824
- Removed tty message when checking for extension upgrades by @leevic31 in #9088
- Fix doc bug for gh run watch by @jasonodonnell in #9052
- feat: add support for stateReason in
gh pr view
by @nobe4 in #9080 - fix: rename the
Attempts
field toAttempt
; expose ingh run view
andgh run ls
by @cawfeecake in #8905 - Update regex in changedFilesNames to handle quoted paths by @anda3 in #9115
- Add a
gh variable get FOO
command by @arnested in #9106 - Add macOS pkg installer to deployment (#7554) by @paulober in #7555
- Add integration tests for
gh attestation verify
shared workflow use case by @malancas in #9107 - Add build provenance for gh CLI releases by @malancas in #9087
- build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4 by @dependabot in #9124
- Build completions during release on macos by @williammartin in #9136
- Clarify Mac OS Installer packages are unsigned by @andyfeller in #9140
New Contributors
- @gabemontero made their first contribution in #8824
- @jasonodonnell made their first contribution in #9052
- @anda3 made their first contribution in #9115
- @arnested made their first contribution in #9106
- @paulober made their first contribution in #7555
Full Changelog: v2.49.2...v2.50.0
GitHub CLI 2.49.2
What's Changed
- Improve
run list
doc with available--json
fields by @babakks in #8934 - Fix typos by @szepeviktor in #9068
- Move config interfaces into gh package by @williammartin in #9060
- Creating doc to capture Codespace usage guidance by @andyfeller in #9066
- Fix repo fork regression by @williammartin in #9063
- Add --latest=false to
gh release create
docs by @kuzdogan in #8987 - build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2 by @dependabot in #9075
New Contributors
- @szepeviktor made their first contribution in #9068
- @kuzdogan made their first contribution in #8987
Full Changelog: v2.49.1...v2.49.2
GitHub CLI 2.49.1
What's Changed
- Do not mutate headers when initialising tableprinter by @williammartin in #9033
- Document relationship between host and active account by @williammartin in #9032
- build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #9034
- Run
attestation
command set integration tests separately by @malancas in #9035 - Added support for jobs with long filenames by @shayn-orca in #8684
- Fix unused params across project by @williammartin in #9059
- Fix
attestation verify
source repository check bug by @malancas in #9053
New Contributors
- @shayn-orca made their first contribution in #8684
Full Changelog: v2.49.0...v2.49.1
GitHub CLI 2.49.0
Support for GitHub Artifact Attestations
v2.49.0
release introduces the attestation
command set for downloading and verifying attestations about artifacts built in GitHub Actions! This is part of the larger Artifact Attestations initiative. An artifact attestation is a piece of cryptographically signed metadata that is generated as part of your artifact build process. These attestations bind artifacts to the details of the workflow run that produced them, and allow you to guarantee the integrity and provenance of any artifact built in GitHub Actions.
# Verify a local artifact
gh attestation verify artifact.bin -o <your org>
# Verify a local artifact against a local artifact attestation
gh attestation verify artifact.bin -b ./artifact-v0.0.1-bundle.json -o <your org>
# Verify an OCI image
gh attestation verify oci:https://ghcr.io/foo/bar:latest -o <your org>
# Download artifact attestations
gh attestation download artifact.bin -o <your org>
To get started, check out gh help attestation. You can also use the gh at <command>
alias for short.
What's Changed
- Improve gh run rerun docs by @sochotnicky in #8969
- build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 by @dependabot in #8981
- Update
sigstore-go
dependency to v0.3.0 by @malancas in #8977 gh attestation tuf-root-verify
offline test fix by @malancas in #8975- Update
gh attestation verify
output by @malancas in #8991 - build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2 by @dependabot in #8989
- Remove
Hidden
flag fromgh attestation
command by @malancas in #8998 - Add colon for
gh secret set
by @NeroBlackstone in #9004 - Improve errors when loading bundle locally fails by @williammartin in #8996
- Support offline mode for
gh attestation verify
by @steiza in #8997 - Add
projectsV2
to JSON fields ofgh repo
commands by @babakks in #9007 - Support long URLs in
gh repo clone
by @babakks in #9008 - Fix issue with closing pager stream by @babakks in #9020
- proof of concept for flag-level disable auth check by @andyfeller in #9000
- Be more general with attestation host checks by @williammartin in #9019
- Add beta designation on attestation command set by @andyfeller in #9022
- Tweaked gh attestation help strings to generate nicer cli manual site. by @phillmv in #9025
- Update cli/go-gh to v2.9.0 by @andyfeller in #9023
- Document repo clone protocol behaviour by @williammartin in #9030
New Contributors
- @sochotnicky made their first contribution in #8969
- @NeroBlackstone made their first contribution in #9004
- @phillmv made their first contribution in #9025
Full Changelog: v2.48.0...v2.49.0
GitHub CLI 2.48.0
The Big Stuff
- Added support for
--slurp
ing JSON responses ingh api
by @heaths in #8620 - Added
--skip-ssh-key
option togh auth login
command by @babakks in #8935 - Added
numSelectedRepos
to JSON output ofgh secret list
by @babakks in #8899 - Added support for multiple items in
gh api
nested array by @Ebonsignori in #8762 - Fixed panic when running
gh repo rename
by @babakks in #8906 - Fixed panic when parsing IPv6 remote URLs by @babakks in #8893
- Fixed
gh pr lock/unlock
not working when URL is passed by @t4kamura in #8837 - Fixed viewing run logs with filenames that the regex didn't handle @zdrve in #8882
The Rest
- Tidy
go.mod
by @matthewhughes934 in #8958 - Fix cache contention in Go CI jobs by @matthewhughes934 in #8957
- Fix
go
directive ingo.mod
by @matthewhughes934 in #8956 - Update install_linux.md by @richterdavid in #8950
- build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2 by @dependabot in #8925
- Add codeowners entry for the GitHub TUF root included in the
attestation
command set by @malancas in #8919 - Create stronger run log cache abstraction by @williammartin in #8931
- Remove naked returns from git ParseURL by @williammartin in #8929
- Fix api cache test by @williammartin in #8932
- Ensure run log cache creates cache dir if it doesn't exist by @williammartin in #8944
- Close zip file in run view tests by @williammartin in #8945
- Fix
attestation
cmd offline unit test failure by @malancas in #8933 - Add support to
attestation
command for more predicate types. by @steiza in #8949
New Contributors
- @babakks made their first contribution in #8906
- @t4kamura made their first contribution in #8837
- @zdrve made their first contribution in #8882
- @Ebonsignori made their first contribution in #8762
- @matthewhughes934 made their first contribution in #8958
- @richterdavid made their first contribution in #8950
Full Changelog: v2.47.0...v2.48.0
GitHub CLI 2.47.0
What's Changed
- Fix typo in auth switch help example by @ihommani in #8870
- Bump go-gh to 2.7.0 by @williammartin in #8884
- gh-attestation cmd integration by @malancas in #8698
- Upgrade to Go 1.22 by @yanskun in #8836
- Rely on go.mod go version in all workflows by @williammartin in #8911
- build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 by @dependabot in #8902
- build(deps): bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in #8903
- Fix segfault in error handling of
gh repo rename
by @satoqz in #8888 - build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @dependabot in #8912
- build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 by @dependabot in #8913
- build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #8914
- build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1 by @dependabot in #8923
- Bump glamour to v0.7.0 and go mod tidy by @williammartin in #8920
New Contributors
- @ihommani made their first contribution in #8870
- @malancas made their first contribution in #8698
- @satoqz made their first contribution in #8888
Full Changelog: v2.46.0...v2.47.0