GitHub CLI 2.76.2 Latest$$$@github-actions github-actions released this 2 days ago$$$ v2.76.2$$$ a2e23a2 $$$gh pr create regression fix$$$This release fixes a regression introduced in v2.76.1 where organization teams were not present in prompts for pull request reviewers. This caused problems in multiple commands:$$$$$$Interactive gh pr create could not select teams when adding pull request reviewers$$$Tab completions with gh pr create --reviewer flag did not present a list of organization teams$$$Tab completions with gh pr edit --add-reviewer flag did not present a list of organization teams$$$Tab completions with gh pr edit --remove-reviewer flag did not present a list of organization teams$$$For more information; see #11403$$$$$$Whats Changed$$$?? Fixes$$$Include org teams for PR reviewers by @andyfeller in #11407$$$?? Docs & Chores$$$Delete obsolete comment about gh-models not respecting API rate-limit by @babakks in #11398

Whats Changed$$$?? Fixes$$$Fix: gh pr create; only fetch teams when reviewers contain a team by @BagToad in #11361$$$?? Docs & Chores$$$add tenancy aware for san matcher by @ejahnGithub in #11261$$$Run Lint and Tests on push to trunk branch by @andyfeller in #11325$$$update ownership of pkg/cmd/release/shared/ by @ejahnGithub in #11326$$$Automate spam issue detection by @babakks in #11316$$$Improve api --preview docs by @jsoref in #11274$$$Incorporate govulncheck into workflows by @andyfeller in #11332$$$chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1 by @dependabot[bot] in #11298$$$chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0 by @dependabot[bot] in #11307

GitHub CLI 2.76.0$$$Copilot Coding Agent Support$$$GitHub Copilot Pro+ and Copilot Enterprise subscribers can now assign issues to GitHub Copilot during issue creation using:$$$$$$Command-line flag: gh issue create --assignee @copilot$$$Launching web browser: gh issue create --assignee @copilot --web$$$Or interactively selecting Copilot (AI) as assignee in gh issue create metadata$$$For more details; refer to the full changelog post for Copilot coding agent.$$$$$$Whats Changed$$$Features$$$Assign Copilot during gh issue create by @andyfeller in #11279$$$Display immutable field in release view command by @bdehamer in #11251$$$Fixes$$$FIX: Do not fetch logs for skipped jobs by @babakks in #11312$$$Transform extension and filename qualifiers into path qualifier for web code search by @samcoe in #11211$$$Docs & Chores$$$FIX: Workflow does not contain permissions by @BagToad in #11322$$$Add automated feature request response workflow by @BagToad in #11299

Whats Changed$$$?? Fixes$$$Ensure hostnames are visible in CLI website by @andyfeller in #11295$$$Revert Fix: gh pr create prioritize --title and --body over --fill when --web is present by @andyfeller in #11300$$$?? Docs & Chores$$$Ensure go directive is always .0 version in bump by @williammartin in #11259$$$Minor (1-word) documentation typo in generated ~/.config/gh/config.yml by @kurahaupo in #11246$$$Automate closing of stale issues by @babakks in #11268$$$Filter the third-party/ folder out of CodeQL results by @BagToad in #11278$$$Exclude third-party source from golangci-lint by @andyfeller in #11293$$$:dependabot: Dependencies$$$Bump Go to 1.24.5 by @github-actions[bot] in #11255$$$chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.3 to 0.5.0 by @dependabot[bot] in #11263$$$chore(deps): bump golang.org/x/term from 0.32.0 to 0.33.0 by @dependabot[bot] in #11266$$$chore(deps): bump golang.org/x/sync from 0.15.0 to 0.16.0 by @dependabot[bot] in #11264$$$chore(deps): bump golang.org/x/text from 0.26.0 to 0.27.0 by @dependabot[bot] in #11265$$$chore(deps): bump golang.org/x/crypto from 0.39.0 to 0.40.0 by @dependabot[bot] in #11275

Whats Changed$$$? Features$$$init release verify subcommands by @ejahnGithub in #11018$$$Embed Windows resources (VERSIONINFO) during build by @babakks in #11048$$$Support --no-repos-selected on gh secret set by @williammartin in #11217$$$?? Fixes$$$Fix: gh pr create prioritize --title and --body over --fill when --web is present by @dankrzeminski32 in #10547$$$fix: get token for active user instead of blank if possible by @anuraaga in #11038$$$Use Actions API to retrieve job run logs as a fallback mechanism by @babakks in #11172$$$Fix query object state mutation during pagination by @babakks in #11244$$$Handle HTTP 404 when deleting remote branch in pr merge by @babakks in #11234$$$?? Docs & Chores$$$chore: fix function name by @jinjingroad in #11149$$$chore: update Go version to 1.24 in devcontainer configuration and docs by @tMinamiii in #11158$$$Ensure lint workflow checks whether 3rd party license and code is up to date by @andyfeller in #11047$$$docs: install_linux.md: add Solus linux install instructions by @chax in #10823$$$Fix missing newline in install_linux.md by @BagToad in #11160$$$Ensure automation uses pinned go-licenses version by @andyfeller in #11161$$$Add workflow_dispatch support to PR Help Wanted check by @BagToad in #11179$$$Remove unused GH_TOKEN env variable from workflow by @BagToad in #11190$$$Add workflow to automate go version bumping by @williammartin in #11189$$$Fix inconsistent use of tabs and spaces by @Stefan-Heimersheim in #11194$$$Decouple arg parsing from PR finder by @babakks in #11192$$$docs: consistently use apt in installation instructions by @tklauser in #11216$$$Ensure bump go script has git user configured by @williammartin in #11229$$$Inject token into bump-go workflow by @williammartin in #11233$$$Reinstating Primer Style CLI content within cli/cli repository by @andyfeller in #11060$$$Add setup-go to bump-go workflow by @williammartin in #11237$$$Ensure GoReleaser does not break on Mac OS and Linux when skipping Windows .rsyso generation script by @andyfeller in #11257$$$:dependabot: Dependencies$$$Bump all dependencies except dev-tunnels by @williammartin in #11203$$$Update microsoft dev-tunnels to v0.1.13 by @williammartin in #11205$$$Consume dependabot minor versions for go modules by @williammartin in #11213

Whats Changed$$$?? Fixes$$$Fix assignees being dropped from gh pr edit by @BagToad in #11065$$$Add accurate context when run rerun fails by @leudz in #10774$$$Avoid requesting PR reviewer twice by @williammartin in #11099$$$Quote filenames suggested at the end of worklow run by @williammartin in #11134$$$Fix expected error output of TestRepo/repo-rename-transfer-ownership by @aconsuegra in #10888$$$?? Docs & Chores$$$Add instructions for MidnightBSD installation by @laffer1 in #10699$$$docs: update install command for Debian by @MagneticNeedle in #10935$$$Fix step order for CodeQL workflow by @BagToad in #11145$$$Add workflow to check help wanted labelling by @williammartin in #11105$$$Quote workflow conditional by @williammartin in #11122$$$Fix script path for help-wanted check by @BagToad in #11125$$$Exclude 3rd party license compliance content from GHAS scanning by @andyfeller in #11127$$$Second fix for file not found in help-wanted check by @BagToad in #11128$$$Ensure gh executes in workflow check script by @williammartin in #11133$$$Improve help wanted check skipping logic by @BagToad in #11135$$$:dependabot: Dependencies$$$Bump go to 1.24 by @williammartin in #11142$$$chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4 by @dependabot in #11066$$$chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3 by @dependabot in #11092$$$chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2 by @dependabot in #11033$$$chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @dependabot in #11107$$$chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2 by @dependabot in #11123$$$chore(deps): bump github.com/google/go-containerregistry from 0.20.3 to 0.20.6 by @dependabot in #11120$$$Bump golangci-lint to v2 by @williammartin in #11121

Whats Changed$$$?? Fixes$$$Fix assignees being dropped from gh pr edit by @BagToad in #11065$$$Add accurate context when run rerun fails by @leudz in #10774$$$Avoid requesting PR reviewer twice by @williammartin in #11099$$$Quote filenames suggested at the end of worklow run by @williammartin in #11134$$$Fix expected error output of TestRepo/repo-rename-transfer-ownership by @aconsuegra in #10888$$$?? Docs & Chores$$$Add instructions for MidnightBSD installation by @laffer1 in #10699$$$docs: update install command for Debian by @MagneticNeedle in #10935$$$Fix step order for CodeQL workflow by @BagToad in #11145$$$Add workflow to check help wanted labelling by @williammartin in #11105$$$Quote workflow conditional by @williammartin in #11122$$$Fix script path for help-wanted check by @BagToad in #11125$$$Exclude 3rd party license compliance content from GHAS scanning by @andyfeller in #11127$$$Second fix for file not found in help-wanted check by @BagToad in #11128$$$Ensure gh executes in workflow check script by @williammartin in #11133$$$Improve help wanted check skipping logic by @BagToad in #11135$$$:dependabot: Dependencies$$$Bump go to 1.24 by @williammartin in #11142$$$chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4 by @dependabot in #11066$$$chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3 by @dependabot in #11092$$$chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2 by @dependabot in #11033$$$chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by @dependabot in #11107$$$chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2 by @dependabot in #11123$$$chore(deps): bump github.com/google/go-containerregistry from 0.20.3 to 0.20.6 by @dependabot in #11120$$$Bump golangci-lint to v2 by @williammartin in #11121

Whats Changed$$$Document support for @copilot in gh [pr|issue] edit --add-assignee and --remove-assignee by @timrogers in #11056$$$Fix pr edit when URL is provided by @williammartin in #11057$$$Fix const in PR finder tests by @babakks in #11091

Whats Changed$$$Document support for @copilot in gh [pr|issue] edit --add-assignee and --remove-assignee by @timrogers in #11056$$$Fix pr edit when URL is provided by @williammartin in #11057$$$Fix const in PR finder tests by @babakks in #11091

Whats changed$$$? Features$$$Add preview prompter command by @BagToad in #10745$$$[gh run watch] Support --compact flag by @iamazeem in #10629$$$Fix brew update notifications by @BagToad in #11024$$$?? Fixes$$$Revert [gh config] Escape pipe symbol in Long desc for website manual by @BagToad in #11004$$$Fix formatting in allowed values for gh config --help by @BagToad in #11003$$$fix: gh gist edit panic when no file in a gist by @phanen in #10627$$$Add retry logic when fetching TUF content in gh attestation commands by @malancas in #10943$$$?? Docs & Chores$$$Update README.md by @irhdab in #11022$$$Add tests for RenderJobs and RenderJobsCompact by @babakks in #11013$$$Add example usage of --head option to pr list docs by @babakks in #10979$$$Mention pr create will print the created PRs URL by @babakks in #10980$$$Add Digest to ReleaseAsset struct by @bdehamer in #11030$$$:dependabot: Dependencies$$$Bump go-gh to v2.12.1 by @BagToad in #11043$$$chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9 by @dependabot in #10825$$$Update sigstore-go dependency to v1.0.0 by @malancas in #11028$$$chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2 by @dependabot in #10999$$$chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12 by @dependabot in #11032

Copilot Coding Agent Support$$$You can now assign issues to GitHub Copilot directly from gh; just as you would assign them to a teammate. Use gh issue edit <number> --add-assignee @copilot to assign the GitHub Copilot coding agent; and Copilot will work in the background to understand the issue; propose a solution; and open a pull request when its ready for your review. If you run gh issue edit interactively; Copilot (AI) will be displayed as a potential assignee. This feature is available for GitHub Copilot Pro+ and Copilot Enterprise subscribers. For more details; refer to the full changelog post for Copilot coding agent.$$$$$$Whats Changed$$$? Features$$$Copilot is assignable to issues and pull requests with issue edit and pr edit$$$gh issue edit: actors are assignable to issues$$$gh pr edit: Assign actors to pull requests$$$issue edit; pr edit: handle display names in interactive assignee editing$$$issue edit; pr edit: Support special non-interactive (flags) assignee name @copilot$$$[gh issue/pr comment] Add support for last comment delete for issues and PRs$$$[gh issue view] Expose closedByPullRequestsReferences JSON field$$$Accessible prompter always displays selection defaults in a format readable by a screen reader$$$?? Fixes$$$Fix StatusJSONResponse usage$$$Fix panic on gh pr view 0$$$Fix flakey test for accessible prompter$$$Fix accessible prompter flaky tests$$$Handle missing archive URLs on release download$$$Fix bug when removing all PR reviewers$$$?? Docs & Chores$$$Feature detect v1 projects on pr view$$$Feature detect v1 projects on non-interactive pr create$$$Feature detect v1 projects on web mode pr create$$$Feature detect v1 projects on interactive pr create$$$Feature detect v1 projects on pr edit$$$Move predicate type filtering in gh attestation verify$$$Improve assertion for disabled echo mode

Whats Changed$$$? Features$$$Introduce gh accessibility help topic highlighting GitHub CLI accessibility experiences$$$[gh pr view] Support closingIssuesReferences JSON field $$$?? Fixes$$$Fix expected error output of TestRepo/repo-set-default$$$Ensure accessible password and auth token prompters disable echo mode$$$Fix: Accessible multiselect prompt respects default selections$$$

GitHub CLI 2.71.2 Latest$$$$$$Whats Changed$$$Fix pr create when push.default tracking and no merge ref by @williammartin in #10863

GitHub CLI 2.70.0$$$Accessibility$$$This release contains dark shipped changes that are part of a larger GitHub CLI accessibility preview still under development. More information about these will be announced later this month including various channels to work with GitHub and GitHub CLI maintainers on shaping these experiences.$$$$$$Ensure table headers are thematically contrasting$$$#8292 is a long time issue where table headers were difficult to see in terminals with light background. Ahead of the aforementioned preview; v2.70.0 has shipped changes that improve the out-of-the-box experience based on terminal background detection.$$$$$$Whats Changed$$$? Features$$$Update go-gh and document available sprig funcs by @BagToad in #10680$$$Introducing experimental support for rendering markdown with customizable; accessible colors by @andyfeller @jtmcg in #10680$$$Ensure table datetime columns have thematic; customizable muted text by @andyfeller in #10709$$$Ensure table headers are thematically contrasting by @andyfeller in #10649$$$Introduce configuration setting for displaying issue and pull request labels in rich truecolor by @andyfeller in #10720$$$Ensure muted text is thematic and customizable by @andyfeller in #10737$$$[gh repo create] Show host name in repo creation prompts by @iamazeem in #10516$$$Introduce accessible prompter for screen readers (preview) by @BagToad in #10710$$$?? Fixes$$$run list: do not fail on organization/enterprise ruleset imposed workflows by @BagToad in #10660$$$Implement safeguard for gh alias delete test; prevent wiping out GitHub CLI configuration by @andyfeller in #10683$$$Pin third party actions to commit sha by @BagToad in #10731$$$Fallback to job run logs when step logs are missing by @babakks in #10740$$$[gh ext] Fix GitKind extension directory path by @iamazeem in #10609$$$Fix job log resolution to skip legacy logs in favour of normal/new ones by @babakks in #10769$$$?? Docs & Chores$$$./script/sign cleanup by @iamazeem in #10599$$$Fix typos in CONTRIBUTING.md by @rylwin in #10657$$$Improve gh at verify --help; document json output by @phillmv in #10685$$$Acceptance test issue/pr create/edit with project by @williammartin in #10707$$$Escape dots in regexp pattern in README.md by @babakks in #10742$$$Simplify cosign verification example by not using a regex. by @kommendorkapten in #10759$$$Document UNKNOWN STEP in run view by @williammartin in #10770$$$:dependabot: Dependencies$$$Update github.com/sigstore/sigstore-go to 0.7.1 and fix breaking function change by @malancas in #10749

GitHub CLI 2.69.0 Latest$$$$$$Whats Changed$$$Features$$$Commands that accept filepath arguments will do glob expansion for * characters; by @iamazeem in #10413$$$Bug Fixes$$$gh issue/pr comment --edit-last no longer creates a comment in non-interactive mode if there werent one. A new flag --create-if-none provides this behaviour; by @andyfeller in #10625$$$gh repo sync provides a more informative error for missing workflow permissions when the token is provided by a GitHub app; by @wata727 in #10574$$$gh api no longer tries to encode URLs incorrectly; by @williammartin in #10630$$$Other$$$Add cli-discuss-automation environment to triage.md by @jtmcg in #10552$$$chore: remove redundant word in comment by @kevincatty in #10586$$$Bump golang.org/x/net from 0.34.0 to 0.36.0 by @dependabot in #10593

GitHub CLI 2.67.0 Latest$$$Security$$$A bug in gh attestation verify may return an incorrect zero exit status when no matching attestations are found for the specified --predicate-type <value> or the default https://slsa.dev/provenance/v1 if not specified. This issue only arises if an artifact has an attestation with a predicate type different from the one provided in the command. As a result; users relying solely on these exit codes may mistakenly believe the attestation has been verified; despite the absence of an attestation with the specified predicate type and the tool printing a verification failure.$$$$$$Users are advised to update gh to version v2.67.0 as soon as possible.$$$$$$For more information; see GHSA-fgw4-v983-mgp8$$$$$$gh pr checkout now supports interactively selecting a pull request$$$Similar to commands like gh workflow run which prompts for a workflow to run; now gh pr checkout will prompt for a pull request to checkout. The list is currently limited to the most recent 10 pull requests in the repository.$$$$$$ 393797385-499b5dfb-3103-42b8-876a-3a2d4d7173c8.mov $$$Big thank you to @nilvng for implementing this ??$$$$$$Contributing guidelines updated$$$Weve updated our CONTRIBUTING.md guidelines to give more clarity around old help wanted issues.$$$$$$TLDR:$$$$$$Please directly mention @cli/code-reviewers when an issue you want to work on does not have clear Acceptance Criteria$$$Please only open pull requests for issues with both the help wanted label and clear Acceptance Criteria$$$Please avoid expanding pull request scope to include changes that are not described in the connected issues Acceptance Criteria$$$Note: Acceptance Criteria is posted as an issue comment by a core maintainer.$$$$$$See #10381 and #10395 for more information.$$$$$$? Have feedback on anything? Wed love to hear from you in a discussion post ??$$$$$$Whats Changed$$$? Features$$$feat: let user select pr to checkout by @nilvng in #9868$$$feat: Add support for deleting autolink references by @hoffm in #10362$$$[gh extensions install] Improve help text and error message by @iamazeem in #10333$$$Error when gh repo rename is used with a new repo name that contains an owner by @timrogers in #10364$$$Attestation bundle fetch improvements by @malancas in #10233$$$[gh project item-list] Add iterationId field in ProjectV2ItemFieldIterationValue by @iamazeem in #10329$$$?? Fixes$$$[gh api] Fix mutual exclusion messages of --slurp flag by @iamazeem in #10332$$$Exit with error if no matching predicate type exists by @kommendorkapten in #10421$$$Do not try to parse bodies for HEAD requests by @jsoref in #10388$$$[gh project item-edit] Fix number type by @iamazeem in #10374$$$[gh workflow run] Improve error handling for --ref flag by @iamazeem in #10328$$$[gh config] Escape pipe symbol in Long desc for website manual by @iamazeem in #10371$$$?? Docs & Chores$$$Fix logic error in contributing docs by @BagToad in #10395$$$Docs: Clarify guidelines for help wanted issues and pull requests by @BagToad in #10381$$$[gh pr status] Mention gh pr checks in the Long section by @iamazeem in #10389$$$[docs/releasing.md] Add basic info for homebrew update flow by @iamazeem in #10344$$$[gh issue/pr list] Improve help text by @iamazeem in #10335$$$Remove v1 project add to board automation from prauto workflow by @hoffm in #10331$$$Note: the following pair of PRs was reverted and never made into a release$$$[gh repo edit] Allow setting commit message defaults by @iamazeem in #10363$$$Revert [gh repo edit] Allow setting commit message defaults by @BagToad in #10372$$$:dependabot: Dependencies$$$Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot in #10379$$$Full Changelog: v2.66.1...v2.67.0

GitHub CLI 2.66.1 Latest$$$Hotfix: gh pr view fails with provided URL$$$This addresses a regression in gh pr view was reported in #10352. This regression was due to a change in v2.66.0 that no longer allowed gh pr subcommands to execute properly outside of a git repo.$$$Whats Changed$$$Hotfix: gh pr view fails with provided URL by @jtmcg in #10354$$$Full Changelog: v2.66.0...v2.66.1

Whats Changed$$$Document the base repo resolution functions by @williammartin in #10110$$$Update releasing.md by @andyfeller in #10116$$$Document how to set gh-merge-base by @heaths in #10112$$$Upgrade golang.org/x/net to v0.33.0 by @jtmcg in #10135$$$add pending status for workflow runs by @dziamidchyk in #10143$$$Remove release discussion posts and clean up related block in deployment yml by @shauryatiwari1 in #10145$$$docs(repo): make explicit which branch is used when creating a repo by @nobe4 in #10163$$$feat: Add support for listing autolink references by @hoffm in #10124$$$Add mention of classic token in gh auth login docs by @jtmcg in #10164$$$Feat: Allow setting security_and_analysis settings in gh repo edit by @ChandranshuRao14 in #10139$$$Upgrade generated workflows by @jsoref in #10181$$$Myriad fixes to provide clarity on determining tracking ref in PR create by @williammartin in #10187$$$Handle missing upstream configs for gh pr create by @cmbrose in #10177$$$fix(repo fork): add non-TTY output when fork is newly created by @aryanbhosale in #10158$$$Bump cli/go-gh for indirect security vulnerability by @andyfeller in #10190

Whats Changed$$$docs: improve docs for browse command as of #5352 by @ankddev in #10025$$$Open PR against gh-merge-base by @heaths in #9712$$$Add integration tests for gh attestation verify when the bundle-from-oci flag is specified by @malancas in #10020$$$gh repo rename help text clarifies new repo name should not include owner by @BagToad in #10044$$$fix: list branches in square brackets in gh run and gh codespace by @uday-rana in #10043$$$Bump actions/attest-build-provenance from 1.4.4 to 2.1.0 by @dependabot in #10056$$$Bump golang.org/x/crypto from 0.29.0 to 0.31.0 by @dependabot in #10070$$$Improve documentation and error messaging for local extension installations without executables by @BagToad in #9933$$$docs: better document auth scopes by @ankddev in #10026$$$Sigstore verifier logic updates by @malancas in #9999$$$gh pr merge --delete-branch exits with error when merge requested via merge queue by @BagToad in #10074$$$sundry gh at inspect improvements by @phillmv in #9954$$$Support pr view for intra-org forks by @williammartin in #10078$$$Print policy information before verifying attestations by @malancas in #9891$$$Improve error handling in apt setup script by @jobegrabber in #10055$$$Use Windows compatible file name for downloaded attestations when running gh attestation download by @malancas in #10051$$$Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6 by @dependabot in #10094$$$Perform all gh attestation verify policy options configuration in the newEnforcementCriteria() function by @malancas in #10012

GitHub CLI 2.63.2 Latest$$$Whats Changed$$$Use consistent slice ordering in run download tests by @williammartin in #10006$$$Fix bug when fetching bundles from OCI registry by @malancas in #10019$$$Use safepaths for run download by @williammartin in #10009$$$Error for mutually exclusive json and watch flags by @andyfeller in #10016

GitHub CLI 2.63.1 Latest$$$@github-actions github-actions released this yesterday$$$ v2.63.1$$$ 1136764 $$$Whats Changed$$$Fix formatting in git/client_test.go comments for linter by @BagToad in #9969$$$Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7 by @dependabot in #9942$$$Clarify which commands correspond to which DNF version under Linux install instructions by @BagToad in #9976$$$When renaming an existing remote as part of remote creation in gh repo fork; log the change by @timrogers in #9983$$$Fix PR checkout panic when base repo is not in remotes by @williammartin in #9992$$$Security$$$A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through gh run download.$$$$$$For more information; see GHSA-2m9h-r57g-45pj$$$$$$Full Changelog: v2.63.0...v2.63.1

Whats Changed$$$Support bare repo creation by @williammartin in #9905$$$Refactor the getAttestations functions by @malancas in #9892$$$Added a section on manual verification of the relases. by @kommendorkapten in #9936$$$Adding option to return baseRefOid in pr view by @daliusd in #9938$$$Update verification results printing by @malancas in #9937$$$Fix some multiline command documentation to use heredoc strings by @BagToad in #9948$$$Print friendly error when release create fails due to missing workflow OAuth scope by @BagToad in #9791$$$Full Changelog: v2.62.0...v2.63.0$$$$$$Security$$$A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com.$$$$$$For more information; see https://github.com/cli/cli/security/advisories/GHSA-jwcm-9g39-pmcw

Whats Changed$$$Update monotonic verification logic and testing by @malancas in #9856$$$Check extension for latest version when executed by @andyfeller in #9866$$$Shorten extension release checking from 3s to 1s by @andyfeller in #9914$$$Mention GitHub CLI team on discussion issues by @andyfeller in #9920$$$Full Changelog: v2.61.0...v2.62.0$$$$$$Security$$$A security vulnerability has been identified in GitHub CLI that could allow remote code execution (RCE) when users connect to a malicious Codespace SSH server and use the gh codespace ssh or gh codespace logs commands.$$$$$$For more information; see GHSA-p2h2-3vg9-4p87

GitHub CLI 2.61.0 Latest$$$@github-actions github-actions released this last week$$$$$$Ensure users understand consequences before making repository visibility changes$$$In v2.61.0; gh repo edit command has been enhanced to inform users about consequences of changing visibility and ensure users are intentional before making irreversible changes:$$$$$$Interactive gh repo edit visibility change requires confirmation when changing from public; private; or internal$$$Non-interactive gh repo edit --visibility change requires new --accept-visibility-change-consequences flag to confirm$$$New content to inform users of consequences$$$Incorporate GitHub Docs content into help usage and interactive gh repo edit experience$$$Expanded help usage to call out most concerning consequences$$$Display repository star and watcher counts to understand impact before confirming$$$Whats Changed$$$Add acceptance test for project command by @jtmcg in #9816$$$Add comprehensive testscript for gh ruleset by @andyfeller in #9815$$$Add comprehensive testscript for gh ext commandset by @andyfeller in #9810$$$Require visibility confirmation in gh repo edit by @andyfeller in #9845$$$Clean up skipped online tests for gh attestation verify by @malancas in #9838$$$gh attestation verify should only verify provenance attestations by default by @malancas in #9825$$$Set dnf5 commands as default by @its-miroma in #9844$$$Fix verbiage for deleting workflow runs by @akx in #9876$$$Bump github.com/creack/pty from 1.1.23 to 1.1.24 by @dependabot in #9862$$$gh attestation verify policy enforcement refactor by @malancas in #9848$$$Simplify Sigstore verification result handling in gh attestation verify by @malancas in #9877$$$Print empty array for gh cache list when --json is provided by @williammartin in #9883$$$Bump actions/attest-build-provenance from 1.4.3 to 1.4.4 by @dependabot in #9884$$$Create the automatic key when specified with -i by @cmbrose in #9881$$$fix: gh pr create -w ignore template flag by @nilvng in #9863

GitHub CLI 2.60.1 Latest$$$@github-actions github-actions released this 3 days ago$$$ v2.60.1$$$ a381ca5 $$$This is a small patch release to fix installing gh via go install which was broken with v2.60.0.$$$$$$Whats Changed$$$Update testscript to use hard fork by @williammartin in #9821$$$Full Changelog: v2.60.0...v2.60.1

GitHub CLI 2.60.0 Latest$$$@github-actions github-actions released this 14 hours ago$$$ v2.60.0$$$ 44ee177 $$$Whats Changed$$$Add ArchivedAt field by @tsukasaI in #9790$$$Include startedAt; completedAt in run steps data by @andyfeller in #9774$$$Adjust environment help for host and tokens by @williammartin in #9809$$$Add handling of empty titles for Issues and PRs by @jtmcg in #9701$$$LiveSigstoreVerifier.Verify should error if no attestations are present by @phillmv in #9742$$$gh at verify retries fetching attestations if it receives a 5xx by @phillmv in #9797$$$Prevent local extension installations with invalid names and conflicts with core commands and other extensions by @BagToad in #9794$$$Rewrite a sentence in CONTRIBUTING.md by @muzimuzhi in #9772$$$Use new GitHub preview terms in working-with-us.md by @BagToad in #9800$$$Use new GitHub previews terminology in attestation commands help docs by @BagToad in #9799$$$Clarify in README that gh is supported on GitHub Enterprise Cloud by @BagToad in #9805$$$build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6 by @dependabot in #9752

Whats Changed$$$Allow community submitted design work by @BagToad in #9683$$$Improve SECURITY.md with expectations for privately reported vulnerabilities by @BagToad in #9687$$$Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS device by @timrogers in #9650$$$Print the login URL even when opening a browser by @ulfjack in #7091$$$configurable maxwidth for markdown WithWrap() by @smemsh in #9626$$$Handle errors when parsing hostname in auth flow by @BagToad in #9729$$$Add repo license list/view and repo gitignore list/view by @BagToad in #9721$$$Introduce testscript acceptance tests generally; and for the PR command specifically by @williammartin in #9745$$$Support GH_ACCEPTANCE_SCRIPT env var to target a single script by @williammartin in #9756$$$Ensure Acceptance defer failures are debuggable by @williammartin in #9754$$$Add acceptance task to makefile by @williammartin in #9748$$$Add Acceptance tests for issue command by @williammartin in #9757$$$Update IsEnterprise and IsTenancy for orthogonality using go-gh by @jtmcg in #9755$$$Supporting filtering on gist list by @heaths in #9728

Whats Changed$$$Better messaging for attestation verify custom issuer mismatch error by @bdehamer in #9616$$$Enhance gh repo create docs; fix random cmd link by @andyfeller in #9630$$$Add HasActiveToken method to AuthConfig to refactor auth check for attestation trusted-root command by @BagToad in #9635$$$Improve the suggested command for creating an issue when an extension doesnt have a binary for your platform by @timrogers in #9608$$$Disable auth check for attestation trusted-root command by @bdehamer in #9610$$$build(deps): bump github.com/henvic/httpretty from 0.1.3 to 0.1.4 by @dependabot in #9645$$$Fix tenant-awareness for trusted-root command by @bdehamer in #9638$$$Replace GitHub Enterprise Server option with other in gh auth login prompting by @jtmcg in #9642$$$build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.4 to 2.0.5 by @dependabot in #9634$$$Add dnf5 instructions to docs/install_linux.md by @its-miroma in #9660$$$build(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.0.0 to 2.0.1 by @dependabot in #9688$$$New Contributors

Whats Changed$$$Move non-integration tests to different test file by @codysoyland in #9577$$$Added tenancy aware attestation commands by @kommendorkapten in #9542$$$Added --active flag to the gh auth status command by @velumuruganr in #9520$$$build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2 by @dependabot in #9601$$$gh attestation verify test for custom OIDC issuers by @bdehamer in #9595$$$Suggest installing Rosetta when extension installation fails due to missing darwin-arm64 binary; but a darwin-amd64 binary is available by @timrogers in #9599$$$Update gh attestation verify bundle parsing and validation errors by @malancas in #9564$$$Suppress attestation verify output when no TTY present by @bdehamer in #9612$$$Use api subdomains for tenant hosts by @williammartin in #9618

GitHub CLI 2.56.0 Latest$$$@github-actions github-actions released this 16 hours ago$$$ v2.56.0$$$ a3f9d85 $$$Important note about renewed GPG key$$$The Debian and RedHat releases have been signed with a new GPG key. If you are experiencing issues updating your .deb or .rpm packages; please read cli/cli#9569.$$$$$$Whats Changed$$$Always print URL scheme to stdout by @heaths in #9471$$$Quote repo names consistently in gh repo sync stdout by @muzimuzhi in #9491$$$Fetch bundle from OCI registry for verify by @ejahnGithub in #9421$$$Remove Internal from gh repo create prompt when owner is not an org by @jtmcg in #9465$$$Drop surplus trailing space char in flag names in web by @muzimuzhi in #9495$$$fix the trimming of log filenames for gh run view by @benebsiny in #9482$$$offline verification using the bundle of attestations without any additional handling of the file by @aryanbhosale in #9523$$$build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 by @dependabot in #9518$$$Fix doc typo for repo sync by @muzimuzhi in #9509$$$Correct the help message for -F by @Goooler in #9525$$$chore: fix some function names by @crystalstall in #9555$$$verify 2nd artifact without swapping order by @aryanbhosale in #9532$$$gh attestation verify handles empty JSONL files by @malancas in #9541$$$Enhance Linux installation docs to redirect users to GPG renewal issue; better troubleshooting support by @andyfeller in #9573$$$Upgrade sigstore-go to v0.6.1 by @codysoyland in #9566$$$Check for nil values to prevent nil dereference panic by @codysoyland in #9578$$$build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3 by @dependabot in #9575

Whats Changed$$$Update gh variable get to use repo host by @andyfeller in #9411$$$build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0 by @dependabot in #9400$$$Unify use of tab indent in non-test source files by @muzimuzhi in #9407$$$Add Acceptance Criteria requirement to triage.md for accepted issues by @jtmcg in #9435$$$Improve Unix compliance gh repo set-default by @thecaffeinedev in #9431$$$Document that gh run download downloads the latest artifact by default by @sato11 in #9412$$$build(deps): bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in #9432$$$Replace --project.* flags name with title in docs by @jtmcg in #9443$$$Wrap flags with backticks; continued by @muzimuzhi in #9444$$$Improve gh release create --notes-from-tag behavior with multiline tag annotation by @babakks in #9385$$$Add pr create --editor by @benebsiny in #9433$$$build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1 by @dependabot in #9451$$$Require Sigstore Bundle v0.2+ when verifying with gh attestation by @codysoyland in #9442$$$build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 by @dependabot in #9459$$$Update Go and other extension workflow templates to reflect recent enhancements to cli/gh-extension-precompile by @BagToad in #9462$$$Add note for external contributors to working-with-us.md by @BagToad in #9468$$$Update attestation TUF root by @codysoyland in #9467$$$Improve documentation for pr checks and exit codes by @thecaffeinedev in #9452$$$cmd/pr/checks: Describe bucket and state JSON fields by @arunsathiya in #9439$$$Add Flox as an installation option by @bryanhonof in #9396$$$fix behavior for gh issue develop -b does-not-exist-on-remote by @benebsiny in #9477$$$Update --project <number> flags in gh search to owner/number by @jtmcg in #9453

Whats Changed$$$Remove redundant whitespace by @jessehouwing in #9334$$$Remove attestation test that requires being online by @steiza in #9340$$$Update documentation for gh api PATCH by @cmbuckley in #9352$$$Clarify usage of template flags for PR and issue creation by @williammartin in #9354$$$Expose json databaseId field for release commands by @williammartin in #9356$$$Expose fullDatabaseId for PR json export by @williammartin in #9355$$$Handle --bare clone targets by @hyperrealist in #9271$$$Slightly clarify when CLI exits with code 4 by @williammartin in #9358$$$Update sigstore-go in gh CLI to v0.5.1 by @steiza in #9366$$$Exit with 1 on authentication issues by @Stausssi in #9240$$$build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5 by @dependabot in #9372$$$build(deps): bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in #9373$$$Add --remove-milestone option to issue edit and pr edit by @babakks in #9344$$$handle attest case insensitivity by @ejahnGithub in #9392

Whats Changed$$$Add --json option to variable get command by @babakks in #9128$$$Add GH_DEBUG to issue template by @TWiStErRob in #9167$$$Fetch variable selected repo relationship when required by @williammartin in #9256$$$build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7 by @dependabot in #9250$$$Alternate gh attestation trusted-root subcommand by @steiza in #9206$$$fix: indentation in gh release create --help by @cchristous in #9296$$$build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3 by @dependabot in #9305$$$docs: Update documentation for gh repo create to clarify owner by @jessehouwing in #9309$$$Fix panic when calling gh pr view --json stateReason by @williammartin in #9307$$$Add issue create --editor by @notomo in #7193$$$Add pr update-branch command by @babakks in #8953$$$New Contributors$$$@TWiStErRob made their first contribution in #9167$$$@cchristous made their first contribution in #9296$$$@jessehouwing made their first contribution in #9309$$$@notomo made their first contribution in #7193$$$Full Changelog: v2.52.0...v2.53.0

GitHub CLI 2.52.0 Latest$$$$$$Whats Changed$$$feat: add -a flag to gh run list by @joshuajtward in #9162$$$Attestation Verification - Buffer Fix by @Forrin in #9198$$$build(deps): bump actions/attest-build-provenance from 1.2.0 to 1.3.2 by @dependabot in #9222$$$build(deps): bump github.com/gorilla/websocket from 1.5.2 to 1.5.3 by @dependabot in #9211$$$build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #9218$$$build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #9217$$$Remove gh at verify public beta note by @phillmv in #9243

Whats Changed$$$Ensure signed RPMs have attestations by @andyfeller in #9143$$$Add signer-repo and signer-workflow flags to gh attestation verify by @malancas in #9137$$$Docs: Specify rpm repository to avoid conflicts with community repositories by @hbenali in #9151$$$Replace --json-result flag with --format=json in the attestation cmd by @phillmv in #9172$$$Bump go-keyring to fix keepassxc prompt confirmation by @AlanD20 in #9179$$$build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0 by @dependabot in #9169$$$build(deps): bump goreleaser/goreleaser-action from 5 to 6 by @dependabot in #9175$$$build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2 by @dependabot in #9192$$$build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #9197$$$watch - handle annotation errors gracefully by @wingleung in #9113

Whats Changed$$$Refactor git credential flow code by @williammartin in #9089$$$feat: add json output for gh pr checks by @nobe4 in #9079$$$Rework first auth tests with new gitcredential abstractions by @williammartin in #9095$$$list the various alias permutations for the command and subcommands; via --help and gh reference by @gabemontero in #8824$$$Removed tty message when checking for extension upgrades by @leevic31 in #9088$$$Fix doc bug for gh run watch by @jasonodonnell in #9052$$$feat: add support for stateReason in gh pr view by @nobe4 in #9080$$$fix: rename the Attempts field to Attempt; expose in gh run view and gh run ls by @cawfeecake in #8905$$$Update regex in changedFilesNames to handle quoted paths by @anda3 in #9115$$$Add a gh variable get FOO command by @arnested in #9106$$$Add macOS pkg installer to deployment (#7554) by @paulober in #7555$$$Add integration tests for gh attestation verify shared workflow use case by @malancas in #9107$$$Add build provenance for gh CLI releases by @malancas in #9087$$$build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4 by @dependabot in #9124$$$Build completions during release on macos by @williammartin in #9136$$$Clarify Mac OS Installer packages are unsigned by @andyfeller in #9140

Whats Changed$$$Improve run list doc with available --json fields by @babakks in #8934$$$Fix typos by @szepeviktor in #9068$$$Move config interfaces into gh package by @williammartin in #9060$$$Creating doc to capture Codespace usage guidance by @andyfeller in #9066$$$Fix repo fork regression by @williammartin in #9063$$$Add --latest=false to gh release create docs by @kuzdogan in #8987$$$build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2 by @dependabot in #9075

GitHub CLI 2.49.1 Latest$$$$$$ v2.49.1$$$ c9e8fd6 $$$Whats Changed$$$Do not mutate headers when initialising tableprinter by @williammartin in #9033$$$Document relationship between host and active account by @williammartin in #9032$$$build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #9034$$$Run attestation command set integration tests separately by @malancas in #9035$$$Added support for jobs with long filenames by @shayn-orca in #8684$$$Fix unused params across project by @williammartin in #9059$$$Fix attestation verify source repository check bug by @malancas in #9053

GitHub CLI 2.49.0 Latest$$$@github-actions github-actions released this last week$$$ v2.49.0$$$ f2d6a8e $$$Support for GitHub Artifact Attestations$$$v2.49.0 release introduces the attestation command set for downloading and verifying attestations about artifacts built in GitHub Actions! This is part of the larger Artifact Attestations initiative. An artifact attestation is a piece of cryptographically signed metadata that is generated as part of your artifact build process. These attestations bind artifacts to the details of the workflow run that produced them; and allow you to guarantee the integrity and provenance of any artifact built in GitHub Actions.$$$$$$# Verify a local artifact$$$gh attestation verify artifact.bin -o <your org>$$$$$$# Verify a local artifact against a local artifact attestation$$$gh attestation verify artifact.bin -b ./artifact-v0.0.1-bundle.json -o <your org>$$$$$$# Verify an OCI image$$$gh attestation verify oci://ghcr.io/foo/bar:latest -o <your org>$$$$$$# Download artifact attestations$$$gh attestation download artifact.bin -o <your org>$$$To get started; check out gh help attestation. You can also use the gh at <command> alias for short.$$$$$$Whats Changed$$$Improve gh run rerun docs by @sochotnicky in #8969$$$build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 by @dependabot in #8981$$$Update sigstore-go dependency to v0.3.0 by @malancas in #8977$$$gh attestation tuf-root-verify offline test fix by @malancas in #8975$$$Update gh attestation verify output by @malancas in #8991$$$build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2 by @dependabot in #8989$$$Remove Hidden flag from gh attestation command by @malancas in #8998$$$Add colon for gh secret set by @NeroBlackstone in #9004$$$Improve errors when loading bundle locally fails by @williammartin in #8996$$$Support offline mode for gh attestation verify by @steiza in #8997$$$Add projectsV2 to JSON fields of gh repo commands by @babakks in #9007$$$Support long URLs in gh repo clone by @babakks in #9008$$$Fix issue with closing pager stream by @babakks in #9020$$$proof of concept for flag-level disable auth check by @andyfeller in #9000$$$Be more general with attestation host checks by @williammartin in #9019$$$Add beta designation on attestation command set by @andyfeller in #9022$$$Tweaked gh attestation help strings to generate nicer cli manual site. by @phillmv in #9025$$$Update cli/go-gh to v2.9.0 by @andyfeller in #9023$$$Document repo clone protocol behaviour by @williammartin in #9030

GitHub CLI 2.48.0 Latest$$$@github-actions github-actions released this last week$$$ v2.48.0$$$ fd4f2c9 $$$The Big Stuff$$$Added support for --slurping JSON responses in gh api by @heaths in #8620$$$Added --skip-ssh-key option to gh auth login command by @babakks in #8935$$$Added numSelectedRepos to JSON output of gh secret list by @babakks in #8899$$$Added support for multiple items in gh api nested array by @Ebonsignori in #8762$$$Fixed panic when running gh repo rename by @babakks in #8906$$$Fixed panic when parsing IPv6 remote URLs by @babakks in #8893$$$Fixed gh pr lock/unlock not working when URL is passed by @t4kamura in #8837$$$Fixed viewing run logs with filenames that the regex didnt handle @zdrve in #8882$$$The Rest$$$Tidy go.mod by @matthewhughes934 in #8958$$$Fix cache contention in Go CI jobs by @matthewhughes934 in #8957$$$Fix go directive in go.mod by @matthewhughes934 in #8956$$$Update install_linux.md by @richterdavid in #8950$$$build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2 by @dependabot in #8925$$$Add codeowners entry for the GitHub TUF root included in the attestation command set by @malancas in #8919$$$Create stronger run log cache abstraction by @williammartin in #8931$$$Remove naked returns from git ParseURL by @williammartin in #8929$$$Fix api cache test by @williammartin in #8932$$$Ensure run log cache creates cache dir if it doesnt exist by @williammartin in #8944$$$Close zip file in run view tests by @williammartin in #8945$$$Fix attestation cmd offline unit test failure by @malancas in #8933$$$Add support to attestation command for more predicate types. by @steiza in #8949$$$New Contributors$$$@babakks made their first contribution in #8906$$$@t4kamura made their first contribution in #8837$$$@zdrve made their first contribution in #8882$$$@Ebonsignori made their first contribution in #8762$$$@matthewhughes934 made their first contribution in #8958$$$@richterdavid made their first contribution in #8950

GitHub CLI 2.46.0 Latest$$$Whats Changed$$$Draft issue IDs are included in project item-list output by @yasunori0418 in #8754$$$New --dry-run option for pr create by @v1v in #8376$$$Bump go-keyring to fix race condition by @williammartin in #8833$$$PR numbers are prefixed with owner/repo for context by @nobe4 in #8778$$$Extra word removed in codespaces code comments by @cuinix in #8795$$$Clarified description of the -u; --user option for gh auth token by @gregsmi in #8797$$$Fixed formatting for the description of release upload by @malor in #8834$$$Clarified the usage of auth status to list all authenticated accounts by @jsoref in #8838$$$Document auth switch behavior for two or more accounts by @williammartin in #8839$$$Document run watch and view not supporting fine grained PATs by @williammartin in #8843$$$build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0 by @dependabot in #8811$$$build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4 by @dependabot in #8844$$$New Contributors$$$@cuinix made their first contribution in #8795$$$@gregsmi made their first contribution in #8797$$$@nobe4 made their first contribution in #8778$$$@malor made their first contribution in #8834$$$@yasunori0418 made their first contribution in #8754

GitHub CLI 2.43.1 Latest$$$Whats Changed$$$Fix label create regression in v2.43.0 by @williammartin in #8653

GitHub CLI 2.40.1 Latest$$$Whats Changed$$$Removed repository requirement language from by @mateusmarquezini in #8432$$$Bumped actions/setup-go from 4 to 5 by @dependabot in #8428$$$Fixed run exported jobs error for completedAt by @andyfeller in #8447$$$Updated multi-account migration error msg by @samcoe in #8448$$$Removed redundant error on migration failure by @williammartin in #8449$$$Other Things$$$Create HSM testing workflow by @andyfeller in #8421$$$Fix release script to invoke HSM goreleaser config by @andyfeller in #8450$$$Fix flaky tests coupled to relative dates by @williammartin in #8454$$$Full Changelog: v2.40.0...v2.40.1

GitHub CLI 2.38.0 Latest$$$Highlights$$$extension install no longer errors unhelpfully if the extension is already installed by @Delta456 in #8211$$$All tables now have headers by @heaths in #8157$$$project commands have a clearer error message when no owner can be resolved by @ffalor in #8235$$$workflow run now presents a select for choice workflow input types by @adarshjhaa100 in #8180$$$codespace create no longer polls for additional codespace permissions unnecessarily by @dmgardiner25 in #8267$$$go install now works with the removal of our crypto fork by @samcoe in #8204$$$Everything Else$$$Additional testing for config by @williammartin in #8213$$$Bumped cpuguy83/go-md2man from 2.0.1 to 2.0.3 by @mikelolasagasti in #8209$$$Bumped mattn/go-isatty from 0.0.19 to 0.0.20 by @dependabot in #8205$$$Bumped google.golang.org/grpc from 1.53.0 to 1.56.3 by @dependabot in #8251$$$Bumped creack/pty from 1.1.18 to 1.1.20 by @dependabot in #8265$$$Provide default config to bumped go-gh by @samcoe in #8244

Whats New$$$api: Add --verbose flag by @JunNishimura in #7826$$$config clear-cache: New command to clear the cli cache by @ffalor in #7693$$$workflow list: Add --json; --jq and --template flags by @rajhawaldar in #7902$$$project mark-template: New command to control project template options by @mntlty in #7916 #7923$$$Whats Changed$$$docs: Fix Nix/NixOS install docs by @junaga in #7891$$$repo rename: Properly rename remote for GHES hosts by @samcoe in #7890$$$pr checks: Return different exit code for PENDING vs FAILED by @rajhawaldar in #7866$$$repo create: Execute clone when readme option is enabled by @shion1305 in #7837$$$repo create: Allow --disable-wiki flag with --template flag by @utouto97 in #7886$$$auth status: Reword token invalid message by @kousikmitra in #7906$$$status: Show status even if a comment 404s by @rwe in #7873$$$run view: Fetch all run jobs by @harveysanders in #7879$$$Use go-gh prompter package by @samcoe in #7896$$$Add formula-path to homebrew-bump step by @williammartin in #7930$$$build(deps): bump actions/checkout from 3 to 4 by @dependabot in #7937

Whats Changed$$$Delete local branch more often when merging PR by @armandgrillet in #7709$$$Do not allow issue and pr templates to be symlinks by @samcoe in #7756$$$release create: Trim spaces on tag name by @harveysanders in #7759$$$Use filepath.Base to sanitize path for archive downloads by @samcoe in #7805$$$Codespaces: Use the host name from the logged in server for commands by @jkeech in #7795$$$Update CONTRIBUTING.md by @andyfeller in #7812$$$Allow --org parameter in lieu of a repo context for rulesets; add current_user_can_bypass to rs view by @vaindil in #7747$$$add missing ls aliases to list subcommands by @cawfeecake in #7818$$$port repo edit prompts by @vilmibm in #7816$$$add clobber flag to alias set by @JunNishimura in #7787$$$Remove GHE handling for workflow by @jamietanna in #7841$$$Upgrade to Go 1.21 by @samcoe in #7843$$$switch to prompter in workflow commands by @vilmibm in #7847$$$update more prompts by @vilmibm in #7850$$$switch to prompter in pr shared code by @vilmibm in #7859$$$THE FINAL PROMPTDOWN by @vilmibm in #7860$$$codespace: Handle HTTP request retry interruption by @azrsh in #7846$$$New Contributors$$$@armandgrillet made their first contribution in #7709$$$@harveysanders made their first contribution in #7759$$$@andyfeller made their first contribution in #7812$$$@JunNishimura made their first contribution in #7787$$$@jamietanna made their first contribution in #7841$$$@azrsh made their first contribution in #7846