GitHub CLI 2.49.1

What's Changed

• Do not mutate headers when initialising tableprinter by @williammartin in #9033
• Document relationship between host and active account by @williammartin in #9032
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #9034
• Run attestation command set integration tests separately by @malancas in #9035
• Added support for jobs with long filenames by @shayn-orca in #8684
• Fix unused params across project by @williammartin in #9059
• Fix attestation verify source repository check bug by @malancas in #9053

New Contributors

• @shayn-orca made their first contribution in #8684

Full Changelog: v2.49.0...v2.49.1

GitHub CLI 2.49.0

Support for GitHub Artifact Attestations

v2.49.0 release introduces the attestation command set for downloading and verifying attestations about artifacts built in GitHub Actions! This is part of the larger Artifact Attestations initiative. An artifact attestation is a piece of cryptographically signed metadata that is generated as part of your artifact build process. These attestations bind artifacts to the details of the workflow run that produced them, and allow you to guarantee the integrity and provenance of any artifact built in GitHub Actions.

# Verify a local artifact
gh attestation verify artifact.bin -o <your org>

# Verify a local artifact against a local artifact attestation
gh attestation verify artifact.bin -b ./artifact-v0.0.1-bundle.json -o <your org>

# Verify an OCI image
gh attestation verify oci://ghcr.io/foo/bar:latest -o <your org>

# Download artifact attestations
gh attestation download artifact.bin -o <your org>

To get started, check out gh help attestation. You can also use the gh at <command> alias for short.

What's Changed

• Improve gh run rerun docs by @sochotnicky in #8969
• build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 by @dependabot in #8981
• Update sigstore-go dependency to v0.3.0 by @malancas in #8977
• gh attestation tuf-root-verify offline test fix by @malancas in #8975
• Update gh attestation verify output by @malancas in #8991
• build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2 by @dependabot in #8989
• Remove Hidden flag from gh attestation command by @malancas in #8998
• Add colon for gh secret set by @NeroBlackstone in #9004
• Improve errors when loading bundle locally fails by @williammartin in #8996
• Support offline mode for gh attestation verify by @steiza in #8997
• Add projectsV2 to JSON fields of gh repo commands by @babakks in #9007
• Support long URLs in gh repo clone by @babakks in #9008
• Fix issue with closing pager stream by @babakks in #9020
• proof of concept for flag-level disable auth check by @andyfeller in #9000
• Be more general with attestation host checks by @williammartin in #9019
• Add beta designation on attestation command set by @andyfeller in #9022
• Tweaked gh attestation help strings to generate nicer cli manual site. by @phillmv in #9025
• Update cli/go-gh to v2.9.0 by @andyfeller in #9023
• Document repo clone protocol behaviour by @williammartin in #9030

New Contributors

• @sochotnicky made their first contribution in #8969
• @NeroBlackstone made their first contribution in #9004
• @phillmv made their first contribution in #9025

Full Changelog: v2.48.0...v2.49.0

GitHub CLI 2.48.0

The Big Stuff

• Added support for --slurping JSON responses in gh api by @heaths in #8620
• Added --skip-ssh-key option to gh auth login command by @babakks in #8935
• Added numSelectedRepos to JSON output of gh secret list by @babakks in #8899
• Added support for multiple items in gh api nested array by @Ebonsignori in #8762
• Fixed panic when running gh repo rename by @babakks in #8906
• Fixed panic when parsing IPv6 remote URLs by @babakks in #8893
• Fixed gh pr lock/unlock not working when URL is passed by @t4kamura in #8837
• Fixed viewing run logs with filenames that the regex didn't handle @zdrve in #8882

The Rest

• Tidy go.mod by @matthewhughes934 in #8958
• Fix cache contention in Go CI jobs by @matthewhughes934 in #8957
• Fix go directive in go.mod by @matthewhughes934 in #8956
• Update install_linux.md by @richterdavid in #8950
• build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2 by @dependabot in #8925
• Add codeowners entry for the GitHub TUF root included in the attestation command set by @malancas in #8919
• Create stronger run log cache abstraction by @williammartin in #8931
• Remove naked returns from git ParseURL by @williammartin in #8929
• Fix api cache test by @williammartin in #8932
• Ensure run log cache creates cache dir if it doesn't exist by @williammartin in #8944
• Close zip file in run view tests by @williammartin in #8945
• Fix attestation cmd offline unit test failure by @malancas in #8933
• Add support to attestation command for more predicate types. by @steiza in #8949

New Contributors

• @babakks made their first contribution in #8906
• @t4kamura made their first contribution in #8837
• @zdrve made their first contribution in #8882
• @Ebonsignori made their first contribution in #8762
• @matthewhughes934 made their first contribution in #8958
• @richterdavid made their first contribution in #8950

Full Changelog: v2.47.0...v2.48.0

GitHub CLI 2.47.0

What's Changed

• Fix typo in auth switch help example by @ihommani in #8870
• Bump go-gh to 2.7.0 by @williammartin in #8884
• gh-attestation cmd integration by @malancas in #8698
• Upgrade to Go 1.22 by @yanskun in #8836
• Rely on go.mod go version in all workflows by @williammartin in #8911
• build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 by @dependabot in #8902
• build(deps): bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by @dependabot in #8903
• Fix segfault in error handling of gh repo rename by @satoqz in #8888
• build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1 by @dependabot in #8912
• build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 by @dependabot in #8913
• build(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 by @dependabot in #8914
• build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1 by @dependabot in #8923
• Bump glamour to v0.7.0 and go mod tidy by @williammartin in #8920

New Contributors

• @ihommani made their first contribution in #8870
• @malancas made their first contribution in #8698
• @satoqz made their first contribution in #8888

Full Changelog: v2.46.0...v2.47.0

GitHub CLI 2.46.0

What's Changed

• Draft issue IDs are included in project item-list output by @yasunori0418 in #8754
• New --dry-run option for pr create by @v1v in #8376
• Bump go-keyring to fix race condition by @williammartin in #8833
• PR numbers are prefixed with owner/repo for context by @nobe4 in #8778
• Extra word removed in codespaces code comments by @cuinix in #8795
• Clarified description of the -u, --user option for gh auth token by @gregsmi in #8797
• Fixed formatting for the description of release upload by @malor in #8834
• Clarified the usage of auth status to list all authenticated accounts by @jsoref in #8838
• Document auth switch behavior for two or more accounts by @williammartin in #8839
• Document run watch and view not supporting fine grained PATs by @williammartin in #8843
• build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0 by @dependabot in #8811
• build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4 by @dependabot in #8844

New Contributors

• @cuinix made their first contribution in #8795
• @gregsmi made their first contribution in #8797
• @nobe4 made their first contribution in #8778
• @malor made their first contribution in #8834
• @yasunori0418 made their first contribution in #8754

Full Changelog: v2.45.0...v2.46.0

GitHub CLI 2.45.0

What's Changed

• Resolve go compiler regression by @williammartin in #8716
• bug: fixed the msg returned for patching a repo variable by @dean-tate in #8715
• Fix regression around commas in commit titles during pr create by @williammartin in #8768
• feat: Add ref option to gh cache list by @toshimaru in #8711
• Make comments in the default config file more informative by @bartekpacia in #8756
• Link Project to Repository or Team Command by @benebsiny in #8595
• Clarify helptext for search prs regarding archived repos by @stuart-leitch in #8738
• Simplify install command for Debian & Ubuntu by @hongquan in #8693
• Support project view --web with TTY by @harveysanders in #8773
• Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN by @andyfeller in #8787

New Contributors

• @dean-tate made their first contribution in #8715
• @bartekpacia made their first contribution in #8756
• @stuart-leitch made their first contribution in #8738
• @hongquan made their first contribution in #8693

Full Changelog: v2.44.1...v2.45.0

GitHub CLI 2.44.1

What's Changed

• Fix PR create regression around title and body when there is only one commit by @williammartin in #8707

Full Changelog: v2.44.0...v2.44.1

GitHub CLI 2.44.0

What's Changed

• Feature: added Order flag for release list command by @leevic31 in #8632
• autofill with body by @guerinoni in #8423
• Add default values to web manual and man pages by @zsloane in #8395
• build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648
• Documentation for built-in aliases by @Rebeccasun31 in #8367
• Add more detail to fork failure message by @chrisroat in #8614
• feat: Add cache key option to gh cache list by @toshimaru in #8667

New Contributors

• @zsloane made their first contribution in #8395
• @Rebeccasun31 made their first contribution in #8367
• @chrisroat made their first contribution in #8614
• @toshimaru made their first contribution in #8667

Full Changelog: v2.43.1...v2.44.0

GitHub CLI 2.43.1

What's Changed

• Fix label create regression in v2.43.0 by @williammartin in #8653

Full Changelog: v2.43.0...v2.43.1

GitHub CLI 2.43.0

Special note

With this release, the GitHub CLI team sees @samcoe off to new adventures beyond GitHub! 😿 Sam has been an amazing maintainer and colleague who has helped so many people adopt gh while trying to connect with the community regarding its needs. There will forever be a Sam-shaped hole no one can fill but hope he continues to be a part wherever his whirlwind journey takes him! ❤️

What's Changed

• Remove project JSON formatting objects by @heaths in #8541
• build(deps): bump actions/upload-artifact from 3 to 4 by @dependabot in #8467
• build(deps): bump actions/download-artifact from 3 to 4 by @dependabot in #8466
• Add option --json for gh variable list by @w1mvy in #8516
• Add --json export flag for release list by @v1v in #8474
• 📝 (search/repos) add usage tips for --archived=false by @shion1305 in #8391
• fix: Prevent nil dereference in pr view. by @octo in #8566
• Fix some typos raised by codespell by @fpistm in #8589
• Add force flag to setup-git command by @rajhawaldar in #8552
• build(deps): bump actions/cache from 3 to 4 by @dependabot in #8594
• Feature: output URL for newly created repo by @leevic31 in #8574
• Update Arch repo to [extra] by @Xeonacid in #8607
• build(deps): bump microsoft/setup-msbuild from 1.3.1 to 1.3.2 by @dependabot in #8629
• fix(pr create): clarify refspec to push to correct branch in the event of a conflicting tag by @arunsathiya in #8618
• Send activity signals during non-interactive codespace SSH command by @dmgardiner25 in #8639
• Upgrade cli/go-gh to v2.5.0 for home-manager fix by @andyfeller in #8647

New Contributors

• @w1mvy made their first contribution in #8516
• @v1v made their first contribution in #8474
• @octo made their first contribution in #8566
• @fpistm made their first contribution in #8589
• @leevic31 made their first contribution in #8574
• @Xeonacid made their first contribution in #8607

Full Changelog: v2.42.1...v2.43.0