openSUSE-SU-2026:21310-1

This update for gh fixes the following issues:

Changes in gh:

• Update to version 2.96.0:

  • Critical security fix: patched vulnerability in gh codespace jupyter that could allow command execution when connecting to malicious Codespaces
  • Merge commit from fork
  • Fix concurrent map writes in codespace port forwarding (#13313)
  • docs: fix broken install command and link/grammar errors (#13690)
  • Clarify --clone boolean flag behaviour in gh repo fork help (#13786)
  • docs: fix duplicated word in primer README (#13677)
  • fix(skills): honor --dir without agent prompt (#13766)
  • Support antigravity-cli and antigravity2.0 in gh skill (#13784)
  • chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • docs(search): reword raw qualifier examples
  • chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3
  • docs(search): simplify raw qualifier examples
  • docs(search): add examples for multiple qualifiers
  • chore(deps): bump actions/attest from 4.1.0 to 4.1.1
  • chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0
  • fix(cmdutil): honor DisableAuthCheck under repo-override parents
  • feat(release): allow download without authentication
  • fix(release): don't let a failed draft lookup mask a found release
  • Fix flaky TestHuhPrompterMultiSelectWithSearchPersistence on slow architectures (#13675)
  • Detect additional third-party coding agents (#13722)
  • Add security disclosure guidance to AGENTS.md (#13720)
  • chore(deps): bump actions/checkout from 6.0.3 to 7.0.0
  • chore(deps): bump github.com/microsoft/dev-tunnels from 0.1.19 to 0.1.27
  • ci: pin GitHub Actions to commit SHAs
  • chore(deps): bump github.com/google/go-containerregistry
  • Use int64 for GitHub database IDs (#13403)
  • docs: fix broken anchor link in release-process-deep-dive (#13688)
  • Cover all printSummary branches in a table test
  • fix(skills): install universal agent to ~/.agents/skills
  • fix: show checks summary when all checks were cancelled

• The following bugs are no longer present in this release (may have been fixed in previous releases): bsc#1234566, bsc#1235345, bsc#1237669, bsc#1239496, bsc#1241837, bsc#1243930, bsc#1251464, bsc#1251666, bsc#1253929, bsc#1258617, bsc#1260271, bsc#1262339, bsc#1262943, bsc#1265405, bsc#1265777, bsc#1266173, bsc#1266618, bsc#1266975, bsc#1267158, bsc#1269427

• Update to version 2.95.0:

  • feat(skills): list available skills when install runs non-interactively (#13548)
  • fix(skills): stage updates in a temp dir and swap in-place (#13449)
  • feat: add repo read-file and repo read-dir (#13580)
  • Bump Go in devcontainer
  • Make filtering by bot authors more discoverable (#13642)
  • chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0
  • chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0
  • chore(deps): bump charm.land/lipgloss/v2 from 2.0.3 to 2.0.4
  • chore(deps): bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.1
  • chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0
  • test(skill): fix test case name
  • test(skill): merge isolated test into table
  • Potential fix for pull request finding
  • docs(discussion): polish help docs
  • chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2
  • fix test
  • support custom CLAUDE_CONFIG_DIR in install

• Update to version 2.94.0:

  • Add gh discussion and Issues 2.0 reference to the gh skill, plus a README note (#13631)
  • fix(discussion comment): fix bug in requiring body/body-file in add/edit mode
  • chore(discussion/client): rename client files
  • test(acceptance): fix discussion comment acceptance tests
  • fix(discussion/shared): error on out-of-range discussion number in URL
  • fix(discussion view): print only requested items in non-tty output
  • docs(discussion list): clarify answered examples refer to Q&A discussions
  • fix(discussion view): show comments and replies in chronological order
  • refactor(discussion list): simplify no-results message and use success icon helper
  • fix(discussion view): use color scheme method for success icon
  • fix(discussion view): error when --comments is used with a comment argument
  • test(acceptance): use positional comment argument in discussion view test
  • refactor(discussion/client): take host instead of repo in GetComment
  • refactor(discussion view): replace --replies flag with positional comment argument
  • chore: fix formatting
  • test(acceptance): cover discussion comment URLs in comment and view tests
  • feat(discussion): support comment URLs in --replies and comment command
  • test(discussion comment): add non-tty delete flag validation test case
  • test(acceptance): add discussion comment acceptance test
  • refactor(acceptance): use discussion comment command instead of raw API calls
  • feat(discussion): add discussion comment command
  • feat(discussion/client): add comment manipulation methods
  • chore: apply formatting
  • chore(discussion): remove unused HttpClient field from create and edit
  • fix(discussion): remove redundant error wrapping on ListCategories
  • test(discussion list): rename TestNewCmdList2 to TestNewCmdList
  • Add terminal-mockup canvas extension for marketing screenshots (#13612)
  • fix(discussion): add missing repo flag override
  • test(discussion list): consolidate tests into table-driven format
  • docs(acceptance): add new jq2env and jq-assert functions
  • test(discussion): add acceptance tests for discussion commands
  • fix(discussion list): print "answered" instead of checkmark in non-tty mode
  • refactor(discussion/client): precheck discussions enabled via getRepositoryMeta
  • refactor(discussion): add Cursor field and ExportData to DiscussionListResult
  • feat(extension): alias uninstall to remove
  • chore(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1
  • chore(deps): bump charm.land/bubbletea/v2 from 2.0.6 to 2.0.7
  • docs(discussion view): improve long help text for clarity
  • fix(discussion): handle partial failure on create/update label mutations
  • Clean up deferred issue update helper (#13584)
  • Auto-install official extension stubs in CI (#13581)
  • chore(discussion/client): fix formatting
  • docs(discussion/client): add godoc to exported consts
  • refactor(discussion list): make pager call/error consistent with view command
  • refactor(discussion): extract command-level consts for enums
  • fix(discussion): various polish and small fixes
  • Merge pull request #13057 from cli/kw/issues-2.0
  • Bump Go to 1.26.4
  • chore(deps): bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15
  • address review comments
  • feat(discussion edit): add discussion edit command
  • feat(discussion create): add discussion create command
  • feat(discussion view): add discussion view command
  • feat(discussion list): add discussion list command
  • feat(discussion/shared): add shared utilities for discussion commands
  • feat(discussion/client): add discussion client package
  • Use github-copilot agent ID in skill list tests and help text
  • Rename hosts field and helpers to agentHosts in skill list
  • Stat SKILL.md before reading in skill list
  • Sanitize terminal control characters in skill list output
  • chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1
  • chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.9 to 2.13.10
  • address copilot comments, clarify text
  • address copilot comments
  • handle skills in skills/ folder when running list command, by marking them as published
  • address bagtoad's feedback
  • add --all flag to install all skills in a repo
  • fix warning message to make it clear
  • skip prompting for skills without metadata when running gh skill update --all
  • add logic to preview too
  • fix discovery support in nested dirs
  • fix test
  • fix tests
  • fix linting
  • add skill list command

• Update to version 2.93.0:

  • test(attestation): align integration tests with new external HTTP client
  • fix: use separate http client for non-github hosts
  • docs: note immutable releases starting v2.93.0
  • bump golang.org/x/net
  • Link to Accessibility category for community discussions instead of ACR (#13481)
  • Allow agents as application for secrets (#13421)
  • SHA pin first-party GitHub Actions
  • chore(deps): bump github/codeql-action from 4 to 4.35.5
  • Add 3 day dependabot cooldown period
  • chore(deps): bump github.com/google/go-containerregistry
  • Run govulncheck daily instead of weekly
  • Merge pull request #13486 from cli/tommy/update-x-crypto
  • Potential fix for pull request finding
  • Potential fix for pull request finding
  • Stop bumping homebrew on release
  • chore(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#13461)
  • Remove discussion workflow
  • Remove dependency on persistent token
  • Remove third-party license debris
  • chore(deps): bump github.com/theupdateframework/go-tuf/v2
  • docs: drop --repo gh-cli from dnf install lines
  • Assert digest prefix in release verify no-attestation tests
  • chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1
  • Derive digest algorithm from ref length in release verify commands
  • docs: fix duplicated "of" in release-process-deep-dive
  • chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0
  • Simplify bump-go.sh toolchain logic
  • Remove unnecessary null checks in jq output handling
  • Rewrite script to use go mod edit instead of grep/sed
  • Address code review comments
  • Improve version comparison to handle both X.Y.0 and X.Y.Z formats
  • Update bump-go.sh to handle missing toolchain directive
  • Initial plan
  • Update CODEOWNERS for skills directory ownership
  • chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0
  • chore(deps): bump golang.org/x/term from 0.42.0 to 0.43.0
  • fix(copilot): update test assertion to match updated error message
  • fix(copilot): provide full path to copilot binary on exec error
  • fix(copilot): hint to run copilot directly when exec fails
  • fix(telemetry): use CREATE_NO_WINDOW to prevent tzutil console flash on Windows
  • Fix triage-pull-requests skipping PRs that open as draft
  • chore(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0
  • Bump Go toolchain to 1.26.3
  • Fix skills acceptance tests
  • Add explicit build tags to platform-specific echo test files
  • Address review feedback on echo mode polling
  • Poll TTY echo mode instead of sleeping in password tests
  • Record accessibility state in telemetry
  • Bump copilot telemetry sampling to 100%
  • chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6
  • Remove numberFieldOnly API shortcut
  • Grammar fixes
  • Switch from actions/attest-build-provenance to actions/attest
  • Enable extended PR screening for external PRs
  • Fix flaky Password test by increasing echo mode setup timeout
  • Add missing //go:build integration tag to verify_integration_test.go
  • chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1
  • Apply patch from code review feedback.
  • Print gh auth refresh for 401 returns
  • Update installation commands for GitHub CLI

• Update to version 2.92.0:

  • Bump Go to 1.26.2
  • chore(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22
  • Update command.go
  • Add "Resource not accessible" to ProjectsV2IgnorableError
  • chore: fix zsh completion on debian
  • install_linux: correct typo in Homebrew copy
  • chore(deps): bump charm.land/bubbletea/v2 from 2.0.2 to 2.0.6
  • chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.8 to 2.13.9
  • Update acceptance/testdata/workflow/run-view-log-escape-sequences.txtar
  • Fix log terminal injection
  • fix(skills): include --allow-hidden-dirs in preview hint from install
  • Install skills flat by Name, not namespaced InstallName
  • feat(skills): add --allow-hidden-dirs flag to preview command
  • feat(skills): support GHEC with data residency hosts
  • Fix SetSampleRate not updating sample_rate dimension
  • fix: yaml.github-actions.security.run-shell-injection.run-shell-injection security vulnerability
  • Enable telemetry without env var
  • test(telemetry): assert ANSI escape chars for color codes
  • fix(telemetry): lower bias in sample bucket calc
  • feat(skills): detect re-published skills and offer upstream install
  • Log when there is no telemetry
  • Add telemetry command
  • Record official extension telemetry
  • fix(skills): prioritize DisplayName/Name over InstallName match
  • fix(skills): match skills by install name in preview command
  • use the right json field names for skills
  • fix totalCount guidance
  • docs(skills): note --template collisions and single-string search
  • backtick skill filename
  • docs(skills): drop hand-copied naming rules from gh-skill
  • use hyphen instead
  • docs(skills): add gh and gh-skill agent skills
  • feat(skills): support nested skills/ directories in discovery
  • fix(skills): make --fix and --dry-run mutually exclusive, suppress publish prompt
  • fix(skills): use canonical 'gh skill' not 'gh skills' alias
  • fix(skills): stop publish --fix from publishing
  • Include CI context in telemetry
  • refactor: decouple hidden-dir filtering from discovery layer
  • Add support for installation in multiple agent hosts in gh skills install (#13209)
  • Add skills specific telemetry
  • chore(deps): bump github.com/google/go-containerregistry
  • Do not send telemetry for aliases
  • Apply review feedback
  • Disable telemetry for GHES
  • remove misleading text
  • Add sampled command telemetry
  • Update publish_test.go
  • refactor: replace real git with run.CommandStubber in publish tests
  • fix: apply review feedback — nil HttpClient, local dedup type
  • Remove dispatch after install, install only
  • Rename official extension files and types to stubs
  • Replace em-dashes with regular dashes
  • Address PR review feedback
  • Add no em dash rule to AGENTS.md
  • Suggest and install official extensions via stub commands
  • Add @cli/code-reviewers to all CODEOWNERS rules
  • Add cli/skill-reviewers as CODEOWNERS for skills packages
  • style: fix gofmt alignment in publish tests
  • fix: update acceptance test to match current error message
  • fix: address post-merge review feedback for skills commands
  • refactor: remove redundant nil-client fallback in skills publish (#13168)
  • feat(skills): auto-push unpushed commits before publish
  • refactor: use shared discovery logic in publish command
  • fix(skill publish): remove misleading validate alias
  • docs(skill): improve help docs
  • fix skills names in examples
  • Disable auth check for gh extension install
  • Suggest and install official extensions for unknown commands
  • Update acceptance/testdata/skills/skills-search-noresults.txtar
  • URL-encode parentPath in skills discovery API call
  • Disable auth check for local-only skill flags
  • fix: address review feedback on namespace changes
  • chore: remove unused newTestGitClient function
  • fix: preserve namespace in skills search deduplication
  • fix: use target directory remotes in skills publish
  • fix: enforce size cap on first preview file, surface corrupted skills, fail on path traversal
  • fix: align relevanceScore comments with implementation and fix typo
  • chore(deps): bump charm.land/lipgloss/v2 from 2.0.2 to 2.0.3
  • chore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21
  • address review comments
  • clean up interface and fix a few bugs
  • cleanup frontmatter fields
  • add .agents/skills as default installation path for hosts that support it: cursor, codex, gemini CLI, github copilot, antigravity.
  • show loading spinner during installation, even for multi-file skills
  • use markdown renderer in preview when previewing multi-file skills
  • Expand test coverage and fix invariants/bugs
  • add core logic and improve test coverage
  • improve test coverage/cleanup
  • register initial skills commands
  • add skills command scaffold
  • docs: fix SHA512 checksum for GPG key
  • chore(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0
  • chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0
  • chore(deps): bump github.com/sigstore/timestamp-authority/v2
  • docs: add sha/md5 checksums of keyring files
  • chore(deps): bump github.com/google/go-containerregistry
  • chore(deps): bump github.com/sigstore/protobuf-specs from 0.5.0 to 0.5.1
  • chore: delete experimental script/debian-devel
  • chore(deps): bump charm.land/bubbles/v2 from 2.0.0 to 2.1.0
  • Document dependency CVE policy in SECURITY.md
  • docs: add manual PGP key verification commands
  • chore: re-add toolchain to go1.26.2
  • docs: polish wording around PGP keys
  • docs: include PGP key fingerprints
  • Fix infinite loop in 'gh release list --limit 0'
  • chore(deps): bump github.com/in-toto/attestation from 1.1.2 to 1.2.0
  • chore(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5
  • test(internal/authflow): assert user-agent header is not modified/added
  • replace github.com/golang/snappy with klauspost/compress/snappy
  • docs: require tests and linter pass before committing
  • fix(auth): preserve User-Agent in authflow getViewer
  • fix(api): propagate InvokingAgent in gh api HTTP client
  • chore(deps): bump github.com/yuin/goldmark from 1.7.16 to 1.8.2
  • chore(deps): bump advanced-security/filter-sarif from 1.0.1 to 1.1

• Update to version 2.89.0:

  • Ensure huh prompter cleans up
  • fix(huh prompter): remove unused fields and imports
  • go mod tidy
  • feat(huh prompter): clear search input after submitting query
  • refactor(huh prompter): custom Field for MultiSelectWithSearch
  • feat(huh prompter): add placeholder to search input
  • fix(huh prompter): use synchronized accessors to eliminate data race
  • fix(accessible prompter): update test expectations for huh v2
  • refactor(huh prompter): pipe-based test harness with full coverage
  • test(huh prompter): add table-driven tests for all prompt types
  • Upgrade to huh/v2 and fix selection persistence in MultiSelectWithSearch
  • Fix gofmt alignment for prompter-enabled fields in IOStreams
  • Use LayoutStack for huhPrompter MultiSelectWithSearch
  • Add experimental huh-only prompter gated by GH_EXPERIMENTAL_PROMPTER
  • Add nameWithOwner to necessary tests
  • fix(pr view): fetch nameWithOwner in headRepository GraphQL query
  • test(acceptance): remove run-download-traversal test
  • fix(acceptance): set git identity in testscript sandbox
  • internal/codespaces/portforwarder: define err in go func instead of use err defined in outer scope
  • chore(deps): bump github.com/zalando/go-keyring from 0.2.6 to 0.2.8
  • Update docs/triage.md
  • Update docs/triage.md
  • Align triage.md with unified triage process
  • Fix typo: remove extra space in README.md link
  • fix(survey): use useReviewerSearch consistently in prompt path
  • fix(pr create): wire up @copilot assignee replacement and [bot] suffix
  • refactor(survey): simplify ApiActorsSupported in RepoMetadataInput
  • docs(featuredetection): document GHES removal criteria for ApiActorsSupported
  • refactor(featuredetection): rename ActorIsAssignable to ApiActorsSupported
  • refactor(pr shared): consolidate ActorAssignees and ActorReviewers into ApiActorsSupported
  • refactor(pr shared): extract SpecialAssigneeReplacer for @me and Copilot expansion
  • chore(deps): bump github.com/google/go-containerregistry
  • Record agentic invocations in User-Agent header
  • Address review: table tests, godocs, code style
  • Add AGENTS.md optimized for AI agent token efficiency
  • docs: simplify flag text
  • docs(pr edit): improve command examples with grouped sections
  • docs: clarify that --add-reviewer can re-request reviews
  • feat(pr create, issue create): search-based assignee selection in MetadataSurvey
  • review: address code review feedback
  • refactor(issue edit): wire up search-based assignee selection
  • refactor(pr edit): remove actor accumulation hack from assignee search
  • refactor(pr edit, issue edit): use login-based assignee mutation for flag flows
  • fix(pr create): use login-based assignee mutation on github.com
  • chore(deps): bump microsoft/setup-msbuild from 2.0.0 to 3.0.0
  • chore(deps): bump mislav/bump-homebrew-formula-action from 3.6 to 4.1
  • Remove auto-labels from issue templates
  • fix(agent-task): resolve Copilot API URL dynamically (#12956)
  • chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3
  • chore(deps): bump azure/login from 2.3.0 to 3.0.0
  • fix: improve docs around IssueRepoInfo
  • test(issue transfer): update stub for IssueRepositoryInfo query
  • fix(issue transfer): use IssueRepoInfo to fetch minimal fields for issues
  • test(issue create): update stubs for IssueRepositoryInfo query
  • fix(issue create): use IssueRepoInfo to avoid requiring Contents:Read permission
  • test(api): add tests for GitHubRepo and IssueRepoInfo
  • refactor(api): add IssueRepoInfo for minimal issue repo queries

• Update to version 2.88.1:

  • Revert "fix: clarify scope error while creating issues for projects"
  • Revert "refactor: deduplicate scope error handling between api/client.go and project queries"
  • Switch deployment signing to OIDC authentication

• Update to version 2.88.0:

  • fix: add if guard to no-response job to prevent running on workflow_dispatch
  • Add pitch surfacing workflow (monthly + manual dispatch)
  • fix: address review feedback on squash merge commit message
  • fix: gofmt alignment in test struct literals
  • feat(repo): add --squash-merge-commit-message flag to gh repo edit
  • chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0
  • refactor: change extractFileName param from []byte to string
  • Update Go version requirement to 1.26+
  • Bump golangci-lint from v2.6.0 to v2.11.0 for Go 1.26 support
  • Bump Go from 1.25.7 to 1.26.1 to fix stdlib vulnerabilities
  • Address review comments: use actorDisplayName for Copilot author display
  • Show friendly display names in gh issue view
  • Add generic actorDisplayName for all actor display names
  • Show friendly Copilot (AI) name in gh pr view
  • fix: align example indentation with codebase convention
  • fix: address review feedback for --exclude flag
  • fix: share diffHeaderRegexp between changedFilesNames and extractFileName, fix gofmt
  • feat(pr diff): add --exclude flag to filter files from diff output
  • Fetch org teams via repository.owner inline fragment
  • chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2
  • Exclude PR author from reviewer candidates in SuggestedReviewerActors
  • Fix duplicate reviewers in gh pr edit by passing logins as defaults
  • Exclude current user from suggested reviewers in gh pr create
  • Replace @copilot with Copilot reviewer login in gh pr create
  • Add TODO requestReviewsByLoginCleanup on GHES ID-based reviewer path
  • Remove /slug team reviewer shorthand normalization
  • Add TODO requestReviewsByLoginCleanup on static reviewer MultiSelect
  • Check state.ActorReviewers in MetadataSurvey reviewer search gate
  • Label Copilot detection in SuggestedReviewerActorsForRepo as a hack
  • Add TODO requestReviewsByLoginCleanup in CreatePullRequest
  • refactor: deduplicate scope error handling between api/client.go and project queries
  • Fix extension install error message showing raw struct instead of owner/repo (#12836)
  • chore(deps): bump github.com/docker/cli
  • Remove StateReason feature detection for issue close
  • Remove unnecessary StateReasonDuplicate feature detection
  • docs: add examples to gh issue close help text (#12830)
  • Fix incorrect integer conversion from int to uint16 in port forwarder (#12831)
  • Combine issue feature detection into a single GraphQL query
  • feat(browse): add blame flag
  • Reword --no-upstream help doc
  • test(issue list): cover additional PR search qualifier variants
  • fix(issue list): reject pull request-only search qualifiers
  • chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0
  • chore(deps): bump github.com/gabriel-vasile/mimetype
  • chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1
  • chore(deps): bump actions/attest-build-provenance from 3.2.0 to 4.1.0
  • chore(deps): bump actions/download-artifact from 7 to 8
  • chore(deps): bump actions/upload-artifact from 6 to 7
  • Set COPILOT_GH env var when launching Copilot CLI
  • Simplify progress indicators in issue develop
  • Emit null for zero createdAt/updatedAt values
  • Address Copilot review feedback
  • Polish --json support for agent-task view
  • Polish --json support for agent-task list
  • Fix gofmt alignment in view_test.go
  • feat(pr): add changeType field to files JSON output
  • Add --duplicate-of flag and duplicate reason to gh issue close
  • Add --json support to gh agent-task view
  • Add --json support to gh agent-task list
  • fix(project/item-edit): preserve title/body when editing draft issue with partial flags
  • Add databaseId to assignees GraphQL fragment
  • fix(licenses): implement VCS-friendly embedding
  • chore(gitignore): ignore generated license files
  • Use pre-compiled regexp for matching Content-Type
  • chore(script/licenses): fix indentation
  • fix(script/licenses): generate licenses in separate dirs
  • Fix invalid ANSI SGR escape code in JSON and diff colorization
  • Add --no-upstream flag to gh repo clone
  • Clarify ReviewerCandidate relationship to AssignableActor
  • Move PR review queries from queries_pr.go to queries_pr_review.go
  • Use org/slug format in test fixtures and remove /slug normalization
  • Normalize /slug team shorthand to org/slug and fix docs
  • Include bot logins in login-based reviewer mutation guard
  • Skip reviewer metadata fetch when using search-based selection
  • Update test assertions to expect org/slug team format
  • Wire bot reviewer logins through CreatePullRequest
  • Partition bot reviewers separately for RequestReviewsByLogin
  • Preserve org/slug format for team reviewer slugs
  • Apply suggestion from @BagToad
  • Remove redundant comment
  • Don't swallow error from FD
  • Remove redundant comments
  • Fix issue develop repeated invocation with named branches
  • Fix redundant API call in gh issue view --comments (#12606)
  • Add toGitHubV4Strings helper to reduce code duplication
  • Address PR review comments
  • gh pr create: CCR and multiselectwithsearch
  • trigger rerun
  • test: TestGenerateScopeErrorForGQL and TestRequiredScopesFromServerMessage
  • fix: clarify scope error while creating issues for projects
  • fix: error when --remote flag used with repo argument
  • build: customizable install prefix

• Update to version 2.87.3:

  • Fix project mutation query variable usage

• Update to version 2.87.2:

  • chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0
  • fix(agent-task/capi): fix capi API version
  • Remove debris licenses

• Update to version 2.87.0:

  • Bundle licenses at release time (#12625)
  • Rename query for clarity
  • Remove pointer comments
  • Simplify error message
  • Remove DTO concept
  • Add --query flag to project item-list (#12696)
  • Clarify --clobber flag deletes assets before re-uploading
  • Add usage examples to gh gist edit command
  • Remove feedback issue template
  • Migrate PR triage workflows to shared workflows
  • Rename triage workflow to triage-discussion-label
  • Pass environment as input to shared triage workflow
  • Add missing environment and label check to triage workflow
  • Initial plan
  • fix(workflow run): bail out on feature detection error
  • refactor(featuredetection): remove temp in favour of early returns
  • docs(workflow run): improve help docs
  • docs(workflow run): add cleanup marker with explanation on future changes
  • fix(workflow run): apply url.PathEscape when compiling URL
  • refactor(workflow run): remove temp out
  • Add missing TODO comments for featuredetection if-statements
  • docs(featuredetection): fix typo in comment
  • test(featuredetection): fix test case name
  • test(workflow run): verify retrieval of workflow run details
  • feat(workflow run): retrieve workflow run if supported by the API
  • test(featuredetection): add tests for ActionsFeatures
  • fix(featuredetection): add ActionsFeatures to detect workflow dispatch features
  • pin REST API version to 2022-11-28
  • Migrate stale workflow to shared workflow
  • Respect --exit-status with --log and --log-failed
  • document fork default branch behavior
  • Migrate issue triage workflows to shared workflows
  • fork default branch only in pr create
  • update third party licenses
  • chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0
  • Add manual dispatch to bump-go workflow
  • bump go to 1.25.7
  • update third party licenses
  • chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0
  • update third party licenses
  • chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0
  • Add toGitHubV4Strings helper to reduce code duplication
  • Address PR review comments
  • update third party licenses
  • chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.4 to 2.13.7
  • Update third party licenses
  • chore(deps): bump github.com/theupdateframework/go-tuf/v2
  • Update third-party licenses
  • Clarify comment on reviewer API behavior
  • Clarify assignee/reviewer fetching behavior
  • Clarify EditableReviewers comment
  • Clarify Copilot assignee comment
  • Use unfiltered totalCount for reviewer 'more results' display
  • Include name in reviewer display for existing review requests
  • update Go 1.25.6
  • Implement cascading quota for reviewer suggestions
  • fix(pr edit): send empty slices to clear reviewers in replace mode
  • Fix return proper slug only for ReviewerTeam
  • Remove redundant comment
  • chore: update licenses
  • chore: bump cli/oauth to v1.2.2
  • Add CCR and reviewer MultiSelectWithSearch
  • chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0
  • Remove outdated comment in SuggestedAssignableActors
  • Apply suggestions from code review
  • Remove outdated TODO comments in survey.go
  • Remove redundant comment in editRun test
  • Return total assignee count in SuggestedAssignableActors
  • Add test for MultiSelectWithSearch error propagation
  • Add test for legacy assignee flow on GHES
  • Remove unused Viewer struct from SuggestedAssignableActors
  • Add comments to assigneeSearchFunc for clarity
  • Simplify variables map in SuggestedAssignableActors
  • Simplify suggested assignable actors
  • Fix linter and mock prompter signature
  • Apply suggestions from code review
  • Apply suggestions from code review
  • Clarify TODO comment for reviewer search function
  • Only support assignee searchfunc on GitHub.com
  • Update edit tests
  • Refactor MultiSelectWithSearch to use result struct
  • Add comment describing logger
  • Pass editable to assigneeSearchFunc and update metadata
  • Add dynamic assignee search to PR edit flow
  • MultiSelectWithSearch initial implementation
  • prshared: named prompt interface parameters
  • typo: dont to don't
  • chore(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.4.0
  • chore: update licenses
  • chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0
  • chore(deps): bump github.com/theupdateframework/go-tuf/v2
  • chore: update licenses
  • chore(deps): bump github.com/sigstore/sigstore from 1.10.0 to 1.10.4
  • docs: lint source.md
  • fix(pr/shared): improve ParseFullReference error message
  • Fix fmt.Errorf format argument in ParseFullReference
  • chore(deps): bump actions/upload-artifact from 5 to 6
  • chore(deps): bump actions/download-artifact from 6 to 7

• Update to version 2.86.0:

  • refactor: address review comments
  • Update contributing guidelines for clarity
  • test(copilot): fix windows asset URL
  • fix(cache delete): add unit tests and expand help doc
  • feat(cache delete): allow for delete all caches for a ref
  • Fix OS name in test archive filename to 'win32'
  • fix(copilot): replace windows with win32 to match asset names
  • fix(root): avoid command name collision when registering extensions
  • chore(root): register copilot command
  • feat: add copilot command
  • refactor(run download): extract zip extraction func into a separate package
  • fix: error when head and base refs are identical in pr create

• Update to version 2.85.0:

  • fix: simplify set-default remote parsing
  • Handle repo argument before remote name
  • chore: update licenses
  • chore(deps): bump github.com/yuin/goldmark from 1.7.13 to 1.7.16
  • chore: update licenses using go-licenses@v2
  • chore: install go-licenses@v2 in scripts
  • Update go-licenses for 1.25
  • chore: update licenses
  • chore: bump github.com/sigstore/sigstore-go to v1.1.4
  • chore: remove redundant comment
  • ci: enable noop linters
  • Add shell specification for temporary tag creation
  • ci: shorten run block
  • ci: improve step name
  • ci: tag per build job
  • Update Azure Code Signing endpoint URL
  • Update Azure Code Signing client to 1.0.95
  • Update actions/checkout to v6 in extension workflow templates
  • feat: allow git remote names in gh repo set-default
  • Add test to ensure null values are skipped
  • ci: disable create storage record for artifacts
  • chore(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0
  • chore: run go mod tidy
  • chore: update licenses
  • chore: upgrade github.com/cli/oauth to v1.2.1
  • fix: prevent panic when processing null project items
  • ci: fix binary artficat dirs used in macos job
  • ci: fix binary artifact dir paths used in Windows job
  • ci: upgrade to GoReleaser v2 CLI syntax for --skip
  • ci: limit deb/rpm packages to linux build
  • ci: replace archives.format with archives.formats array
  • ci: remove redundant archives.rlcp
  • ci: replace archives.builds with archives.ids
  • ci: quote 386 arch
  • ci: upgrade .goreleaser.yml to v2
  • ci: upgrade to GoReleaser v2
  • chore: update licenses
  • chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0
  • chore: update licenses
  • chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.2 to 2.13.4
  • chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0
  • chore: update licenses
  • chore: update licenses
  • chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2
  • chore: update licenses
  • chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0
  • chore: update licenses
  • chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0
  • chore: update licenses
  • chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0
  • Fix Debian CLI package link in installation guide
  • Add tests of browse --actions
  • Add gh browse --actions flag
  • chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.1 to 2.13.2

• Update to version 2.83.2:

  • Update licences
  • Bump dev-tunnels SDK 0.1.13 to 0.1.19
  • Bump Go to 1.25.5
  • Update licenses for go-containerregistry-0.20.7 bump
  • chore(deps): bump github.com/google/go-containerregistry
  • Update licenses for go-version-1.8.0 bump
  • chore(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0
  • Update licenses for tcell-2.13.1 bump
  • chore(deps): bump github.com/gdamore/tcell/v2 from 2.9.0 to 2.13.1
  • chore: make licenses
  • refactor: drop multierror in favor of std
  • Bump Go to 1.25.4
  • Update licenses for huh 0.8.0 bump
  • Fix accessible prompter tests with huh 0.8.0 upgrade
  • chore(deps): bump github.com/charmbracelet/huh from 0.7.0 to 0.8.0
  • Update licenses with grpc-1.76.0 bump
  • chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0
  • Update licenses for mimetype 1.4.11 bump
  • chore(deps): bump github.com/gabriel-vasile/mimetype
  • chore(deps): bump github.com/theupdateframework/go-tuf/v2
  • chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0
  • Update licenses for protobuf 1.36.10 bump
  • chore(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10
  • Error if go-licenses is not on the PATH
  • chore(deps): bump actions/checkout from 5 to 6
  • Update licenses for crypto-0.45.0 bump
  • chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0
  • Alphabetize Ubuntu section
  • Add Debian/Ubuntu to unofficial packages
  • Add PGP key rotation PoC (#12176)
  • refactor(pkg/search): rename KeywordsVerbatim to ImmutableKeywords
  • refactor(pkg/search): rewrite returns in a more verbose way
  • fix(pr/shared): delegate query compilation to search package
  • test(pkg/search): assert verbatim keywords are respected
  • fix(pkg/search): add KeywordsVerbatim field to Query type
  • Remove extra flag default from help usage
  • Refactor cfg out of CAPI Client

• Update to version 2.83.1:

  • chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0
  • Check user and teams nil state instead of length
  • Update third-party licenses and dependencies
  • Ensure empty arrays for reviewers in PR API calls
  • Update .github/workflows/lint.yml
  • Annotate go-licenses install with version tag
  • Integrate license checks back into lint workflow

• Bump go from 1.24 to 1.25

• Update to version 2.83.0:

  • chore(deps): bump github.com/cli/go-gh/v2 from 2.12.2 to 2.13.0
  • Apply suggestions from code review
  • Add note on govulncheck source mode for Go 1.25
  • docs(pkg/search): fix typo
  • docs(repo garden): improve func godoc
  • fix: ignore nilerr on intentionally swallowed error
  • fix: resolve nilerr issues
  • fix: resolve copyloopvar issues
  • fix: resolve gocritic issue
  • test(pkg/httpmock): ignore bodyclose on mock response value
  • refactor(repo garden): return pagination link instead of resp
  • fix: close resp body (bodyclose)
  • refactor: remove returned resp from api.EndpointNeedsScopes
  • refactor(pkg/search): remove passing resp for pagination
  • ci: enable basic linters
  • Update lint govulncheck to use source mode
  • chore: add workflow_dispatch to govulncheck triggers
  • Add example for --custom-agent usage
  • Update error messages in job creation tests
  • Update pkg/cmd/agent-task/capi/job.go
  • Add shorthand flag for custom-agent option
  • Fix: do not swallow job creation error
  • Clarify custom agent flag description
  • Add custom agent support to job creation
  • docs(release list): fix typo
  • docs(release list): reword comment
  • feat(release list): add isImmutable JSON field
  • fix(featuredetection): add ReleaseFeatures method
  • docs(api): add example for --input option
  • docs(api): mention use of @<path> and @- for --field
  • docs: update go version 1.25
  • refactor: replace backport with strings.CutSuffix
  • chore: exclude third-party from Golangci-lint formatting paths
  • chore: bump Go in devcontainer
  • chore: apply go fix to remove deprecated // +build tags
  • fix: --interval flags docs in gh pr checks
  • test(gist/edit): add tests for single file edit and interactive multi-file selection
  • Update Go toolchain version to 1.24.9
  • docs(run list): mention pr checks in help docs
  • ci: bump Golangci-lint to v2.6.0
  • chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0
  • chore(deps): bump golang.org/x/text from 0.29.0 to 0.30.0
  • test(gist): fix failing tests
  • fix(gist): prevent fetching full content for already edited files
  • fix(gist): only include files that have changed in request
  • fix(gist): fetch full content for truncated files during editing
  • ✅ (repo delete) remove comprehensive assertions on check stderr output
  • Fix typo in comment for gh issue develop branch checkout command
  • 💡 (gh repo delete) Add warning when --yes is ignored without a repository, Closes: #12033
  • chore(deps): bump github.com/rivo/tview
  • chore(deps): bump actions/download-artifact from 5 to 6
  • chore(deps): bump actions/upload-artifact from 4 to 5
  • Remove skipped tests
  • Make verifier choice more explicit
  • Return only basic pull request info when reverting a PR
  • chore(deps): bump mislav/bump-homebrew-formula-action from 3.4 to 3.6
  • chore(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0
  • test fixup
  • Update release verify commands to use sentinel value
  • Initial plan
  • Make PGI verifier initialization non-fatal to allow GitHub attestation verification
  • Initial plan
  • improve docstring for release-create
  • Bump Go to 1.25.3
  • Address remaining PR comments for revert implementation
  • Adjust PR revert based on new acceptance criteria
  • Return nil when err is nil
  • Fix revert unit tests by using renamed helper
  • feat: include revert PR info in message output
  • Undo autoformat changes
  • feat: implement pr revert
  • test(gist): add tests for handling truncated files in view command
  • test(gist): add tests for editing truncated gist files
  • test(gist): add tests for GetRawGistFile function
  • feat(gist): retrieve full content for truncated gist files
  • feat(gist): retrieve full content for truncated gist files
  • feat(gist): add GetRawGistFile function to retrieve raw gist content
  • feat(gist): add RawURL and Truncated fields to GistFile

• Update to version 2.82.1:

  • Add test for non-interactive projects v1 unsupported
  • Inject Detector mock in edit command tests
  • Pass ProjectsV1Support to FetchOptions functions
  • chore(deps): bump github.com/gabriel-vasile/mimetype
  • Update .github/workflows/govulncheck.yml
  • chore(deps): bump github/codeql-action from 3 to 4
  • chore(deps): Bump github.com/sigstore/sigstore-go from 1.1.0 to 1.1.3
  • chore(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0

• Update to version 2.82.0:

  • chore: run go mod tidy
  • refactor(auth refresh): use PlainHttpClient instead of zero http.Client
  • refactor(auth login): use PlainHttpClient for OAuth flow
  • refactor(authflow): receive HTTP client via args
  • fix(factory): add PlainHttpClient to factory
  • test(api): assert SkipDefaultHeaders is honoured
  • fix(api): expose SkipDefaultHeaders option
  • test(api): improve NewHTTPClient test assertions
  • Fix agentTaskCmd to use repoResolvingCmdFactory
  • Add new displaying message to test expectation
  • Fix --follow not killing the progress indicator
  • Apply suggestion from @babakks
  • Apply suggestion from @babakks
  • Fix argument order in httpStubs test functions
  • docs(cache delete): remove redundant comment
  • docs(cache delete): add godoc for deleteCacheByKey
  • Remove default empty slices in RemovePullRequestReviews
  • Fix typo in error message for required flags
  • Refactor reviewer partitioning in PR edit command
  • Escape repo owner and name in PR reviewer API paths
  • Remove unused ghIds function and githubv4 import
  • fix(cache): report correct deleted count for key and key+ref deletions
  • Refactor PR reviewer editing to use REST API and optimize team fetch

• Update to version 2.81.0:

  • test(auth status): correctly replace JSON-escaped paths
  • update the description
  • refactor: use strings.FieldsFuncSeq to reduce memory allocations
  • fix(pr checkout): add alias co
  • remove hidden value for release verify cmd
  • fix latest tag for relase verify asset
  • docs(auth status): explain --json will always exit with zero
  • fix(auth status): return JSON entries under hosts
  • fixup! examples
  • fix error missing in json output
  • examples
  • remove showToken from authEntry
  • address copilot comment on parameter order
  • add examples
  • simplify exporter usage
  • remove includeScope
  • do not mutate opts.ShowToken
  • move displayToken to String method
  • move flag validation to RunE
  • refactor without VisitAll
  • introduce AddJSONFlagsWithoutShorthand
  • fix show token when using json
  • fix exit code
  • revert showToken change
  • mutually exclusive flags
  • flag duplicate check
  • add ExpectCommandToSupportJSONFields
  • do not export authState
  • handle -t conflict
  • do not fetch scope if not necessary
  • json flags
  • auth state enum
  • Refactor entry to a single type
  • Fix missing assertions

• Packaging improvements:

  • Update to BuildRequires: golang(API) >= 1.24 matching go.mod

• Update to version 2.80.0:

  • chore: update third-party licenses
  • ci: pin release runner to Windows 2022
  • Add math package import to sessions.go
  • Add TODO for better integer handling in GetPullRequestDatabaseID
  • chore: update third-party licenses
  • update the test
  • Update pkg/cmd/attestation/api/client.go
  • add initiator_type for attestations
  • fix(agent-task/capi): return proper error message when resp is not a JSON
  • test(agent-task view): populate Session.Name in all test cases
  • fix(agent-task view): improve session overview
  • refactor(agent-task view): merge empty println calls with next
  • fix(agent-task view): re-fetch session to get all pieces of data
  • fix(agent-task/capi): remove fallback to viewer when user id is zero
  • test(agent-tassk/capi): update ListSessionsByResourceID tests
  • docs(agent-task/capi): add TODO note for dropping local ID generation
  • fix(agent-task/capi): fetch viewer when resource session user id is zero
  • fix(agent-task/capi): handle unpopulated resource session LastUpdatedAt
  • refactor(agent-task/capi): keep resource private
  • update agents resource route
  • fix(agent-task view): improve session error
  • fix(agent-task view): display session error
  • fix(agent-task/capi): add WorkflowRunID field to Session
  • refactor(agent-task/capi): remove unused slice
  • fix(agent-task/capi): add Error field to Session
  • fix(agent-task create): block empty problem statement arg
  • fix(agent-task create): use pager when following logs
  • fix(agent-task create): avoid prompting when problem statement is provided
  • fix(agent-task list): show capitalised session state
  • fix(agent-task/shared): fix session state value
  • docs(agent-task list): add "(preview)" note to cmd docs
  • chore(agent-task/shared): regenerate LogRenderer mock
  • test(agent-task/capi): assert session with zero resource ID are kept
  • fix(agent-task/capi): keep sessions with no resource attached
  • refactor(agent-task list): remove unused BaseRepo from ListOptions
  • docs(agent-task/capi): fix test case explanation
  • Fix session deduplication and add test for paging
  • Remove repo-scoped session listing and related code
  • docs(agent-task): use heredoc.Doc
  • docs(pr/shared): add a TODO on decoupling PR finder from IO
  • fix(agent-task view): display zero premium requests
  • fix(agent-task/shared): make capitalised status names consistent
  • Update pkg/cmd/agent-task/agent_task.go
  • Update pkg/cmd/agent-task/agent_task.go
  • Enhance agent-task command help and usage info
  • Refactor comments in stripDiffFormat function
  • Remove obsolete log-3 test data files
  • fix(agent-task view): omit session overview in log mode
  • fix(agent-task view): display premium requests used
  • fix(agent-task/capi): add PremiumRequests field to Session
  • fix(agent-task view): display session duration
  • fix(agent-task view): display completed sessions as "Ready for review"
  • fix(agent-task view): disable PR finder progress indicator
  • test(pr/shared): assert FindOptions.DisableProgress is respected
  • fix(pr/shared): add DisableProgress field to FindOptions
  • Refactor stripDiffFormat guard clause logic
  • Use filepath.Ext to detect file extension in markdown renderer
  • Improve log rendering error handling and test coverage
  • Prefix rendered shell commands with '$ ' in logs
  • Clarify comment on CRLF normalization in tests
  • Refactor generic tool call titles map to package scope
  • Add pager support to log output in printLogs
  • test(agent-task create): add test for --follow
  • docs(agent-task create): add example for --follow flag
  • feat(agent-task create): add --follow flag
  • refactor(agent-task create): extract session URL polling into a func
  • Add TODO for bash-related tool call details
  • Update comment for reasoning text formatting
  • Enable Bash session tool handling in log rendering
  • Rename testdata log files for clarity
  • Normalize line endings in log testdata files too
  • Fix line ending conversion in tests
  • Add note for updating testdata files in log tests
  • Make log tests OS-agnostic by normalizing line endings
  • Fix comment for GetSessionLogs method
  • Add and improve function documentation in log.go
  • Update log test expectation files
  • Rename renderToolCall to renderToolCallTitle
  • Rename relativePath to relativeFilePath in log rendering
  • Refactor markdown rendering helper function names
  • Improve log rendering and tool call handling
  • Refactor JSON content rendering in log entries
  • Various log rendering improvements
  • feat(agent-task view): add --log and --follow flags
  • feat(agent-task view): add --log and --follow flags
  • fix(agent-task/shared): add log renderer
  • feat(agent-task/capi): add GetSessionLogs method
  • Add error type assertion to createRun tests
  • Add test for non-interactive problem statement input
  • Update test to use edited task description
  • Remove unused stdin field from create command tests
  • Refactor create command tests and add base branch case
  • refactor(pr/shared): rename rest to tail
  • refactor(agent-task/shared): enhance symbol names
  • Update command examples for agent-task create
  • Refactor agent-task create to improve file input handling
  • fix(pr/shared): ensure ParseURL regexp is backward-compatible
  • refactor(agent-task/shared): extract uuid pattern
  • refactor(agent-task view): rename resourceID to prID
  • feat(agent-task view): support PR /agent-sessions/* URL as argument
  • fix(agent-task/shared): add ParsePullRequestAgentSessionURL
  • fix(pr/shared): add rest return value to ParseURL
  • docs(agent-task view): improve --help docs
  • refactor(agent-task create): assign Config at instantiation
  • fix(agent-task create): only prompt for problem statement if not provided
  • fix(agent-task view): stop progress indicator before opening browser
  • test(agent-task view): enhance naming and stubs
  • test(agent-task view): add --web mode tests
  • feat(agent-task view): add --web mode
  • refactor: move Copilot Agents home URL to capi
  • fix(agent-task/capi): also return PR URL from GetPullRequestDatabaseID
  • Still prompt for task desc with -F
  • Add interactive prompt for task description in agent-task create
  • Fix default value in session selection prompt
  • Show session name instead of ID in agent-task list
  • docs(agent-task view): explain test case rationale
  • docs(agent-task view): explain when condition is met
  • docs(agent-task/capi): remove redundant comment
  • test(agent-task/capi): fix test case args
  • fix(agent-task/capi): skip unpopulated resource ID when hydrating
  • docs(agent-task/shared): add godoc to SessionStateString
  • test(agent-task view): update tests
  • fix(agent-task view): use lower limit for fetching sessions
  • fix(agent-task view): use CapiClient.GetPullRequestDatabaseID
  • fix(agent-task/capi): add GetPullRequestDatabaseID to CapiClient interface
  • test(agent-task/capi): add tests for GetPullRequestDatabaseID
  • feat(agent-task/capi): add GetPullRequestDatabaseID method
  • test(agent-task/capi): add tests for GetSessionByResourceID
  • feat(agent-task view): support PR arg
  • fix(agent-task/shared): add SessionSymbol func
  • test(agent-task/shared): add test for IsSessionID
  • fix(agent-task/shared): add IsSessionID
  • test(pr/shared): add test for ParseFullReference
  • fix(pr/shared): add ParseFullReference func
  • feat(agent-task/capi): add ListSessionsByResourceID method to CapiClient interface
  • feat(agent-task/capi): add ListSessionsByResourceID
  • test(agent-task view): add tests for the view command
  • feat(agent-task view): add view command
  • test(agent-task list): remove unused stubs
  • feat(agent-task/capi): add GetSession method to CapiClient interface
  • test(agent-task/capi): add tests for GetSession
  • feat(agent-task/capi): add GetSession method
  • refactor(agent-task/capi): populate PRs IsDraft
  • refactor(agent-task/capi): hydrate user data
  • test(agent-task create): quote file paths to pass CI on Windows
  • refactor(agent-task list): simplify cmd initialisation
  • refactor(agent-task create): remove redundant if
  • test(agent-task create): use CapiClientMock
  • fix(agent-task create): simplify command initialisation
  • test(agent-task list): update TestNewCmdCreate
  • fix(agent-task create): allow no positional arg
  • test(agent-task list): apply test args anyway
  • test(agent-task list): use CapiClientMock
  • test(agent-task list): update TestNewCmdList
  • refactor(agent-task/capi): drop embedding of unexported struct
  • test(agent-task/capi): add CapiClientMock
  • test(agent-task/capi): add go:generate directive to gen mock
  • test(agent-task/capi): add tests for job-related methods
  • test(agent-task/capi): add tests for session-related methods
  • fix(agent-task/capi): handle non-JSON error response
  • fix(agent-task/capi): improve returned errs
  • refactor(agent-task/capi): improve pagination
  • refactor(agent-task list): use shared CapiClientFunc
  • fix(agent-task/shared): add CapiClientFunc helper
  • Improve agent-task create command help text
  • Refactor test case struct in create_test.go
  • Add base branch option to agent task creation
  • Support reading task description from stdin
  • Increase backoff timing for agent task creation
  • Add file input support to agent-task create command
  • Update error messages and test repo handling in agent-task create
  • Simplify error handling in CreateJob response
  • Simplify stdout assertion in createRun test
  • Improve job error handling and update tests
  • Use Job struct in request
  • Escape URL path parameters in GetJob request
  • Escape owner and repo in job creation URL
  • Escape URL path segments in agent session links
  • Remove nil check for job in agentSessionWebURL
  • Update test to expect 500 error response
  • Update error message in createRun test
  • Remove redundant 'error:' prefix from repo error
  • Update command usage for agent task creation
  • Update agent-task create command argument handling
  • Add agent task creation command and job API
  • Add pager support to agent-task list output
  • Replace panic with require.FailNow in test
  • Add test for web mode with repo flag in listRun
  • Add comment on web dashboard filtering limitation
  • Add test case for negative limit in list command
  • Return NoResultsError when no agent tasks found
  • Add comment explaining error handling in listRun
  • Simplify time calculation in listRun test
  • Simplify BaseRepo assignment in list command
  • Handle repo resolution errors gracefully in agent-task list
  • Add --web flag to agent-task list command
  • Show default limit in agent-task list flag help
  • Add limit flag to agent-task list command
  • Add repo-scoped agent session listing support
  • Refactor session state color logic to shared package
  • Optimize session pull request hydration logic
  • Refactor error handling in generatePullRequestNodeID
  • Update API query name for session PR fetch
  • Refactor variable names in ListSessionsForViewer
  • Remove commented-out fields from sessionPullRequest
  • Refactor agent-task list command client initialization
  • Refactor session filtering in listRun function
  • Fix import alias for shared package in agent-task list
  • Add agent task listing command and CAPI client
  • Refactor agent task tests into table-driven format
  • Refactor test to use require.Empty assertion
  • Show help on agent-task command execution
  • Add agent-task command with OAuth token validation

• Update to version 2.79.0:

  • fix(featuredetection): remove redundant AdvancedIssueSearchWebInIssuesTab field
  • docs(featuredetection): remove unknown dates
  • docs(search prs): mention advanced issue search syntax support
  • docs(search issues): mention advanced issue search syntax support
  • docs(pr list): mention advanced issue search syntax support
  • docs(issue list): mention advanced issue search syntax support
  • refactor(search): rename Query.String to StandardSearchString
  • test(search): improve test cases
  • chore(deps): bump actions/stale from 9 to 10
  • chore(deps): bump actions/setup-go from 5 to 6
  • Bump sigstore/rekor to v1.4.1
  • Remove mention of public preview in trustedroot.go
  • docs(featuredetection): add godoc for min GHES version for advanced issue search
  • docs(issue pr): fix incorrect formatting
  • docs(issue list): fix incorrect formatting
  • docs: add cleanup/future TODO marks for advanced issue search changes
  • docs(pr list): explain use of advanced issue search syntax
  • docs(issue list): explain use of advanced issue search syntax
  • test(issue/pr list): assert integration with advanced issue search
  • test(pr shared): assert ListURLWithQuery works with advanced search syntax
  • refactor(issue/pr list): support advanced issue search
  • docs(search): improve Searcher.URL method docs
  • docs(search prs): mention advanced issue search takeover
  • docs(search issues): mention advanced issue search takeover
  • docs(search): improve docs for Query.String and Query.AdvancedIssueSearchString methods
  • refactor(search): improve special qualifier grouping
  • test(search): test advanced search support
  • fix(search): use advanced issue search when available
  • refactor: improve mock feature detector names
  • refactor(search): sort qualifiers in query
  • test(search): provide feature detection dependency
  • fix(search): add feature detection dependency
  • test(search): explain why is: and in: qualifiers used in test case
  • fix(search): sort qualifiers in advacned issue search syntax
  • test(search): add tests for AdvancedIssueSearchString method
  • fix(search): add AdvancedIssueSearchString method
  • test(featuredetection): add tests for advanced issue search detection
  • fix(featuredetection): add feature detection for advanced issue search
  • test(cache delete): combine test cases for invalid/non-existent refs
  • test(cache delete): replace HTTP 204 with 200 to match API behaviour
  • docs(cache delete): explain different API responses
  • test(cache delete): add test case for key arg and --all
  • refactor(cache delete): simplify error handling
  • refactor(cache delete): simplify condition
  • fix(cache): validate --ref flag usage with cache ID
  • fix(cache): prevent using --ref flag with cache ID
  • refactor(cache): extract cache ID parsing logic
  • fix(cache): update error message for missing cache key with --ref flag
  • chore(cache): improve help text for --ref flag in cache deletion
  • test(cache): add tests for --ref flag in cache deletion
  • feat(cache): add support for --ref flag in cache deletion
  • refactor: use slices.Equal to simplify code (#11364)
  • feat: gh auth Automatically copy one-time OAuth code to clipboard (#11518)
  • docs(release create): difference --generate-notes and --notes-from-tag (#11534)

• Update to version 2.78.0:

  • Add --force flag to gh run cancel (#11513)
  • Update third-party license versions (#11557)
  • chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)
  • Merge pull request #11536 from cli/copilot/fix-11535
  • chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2
  • Update pkg/cmd/release/verify/verify.go
  • Update pkg/cmd/release/verify-asset/verify_asset.go
  • Hidden trusted root flag for release verify
  • Update Go dependencies to latest versions
  • chore(deps): bump actions/checkout from 4 to 5
  • udpate the test
  • replace /git/refs/tags/ to /git/ref/tags/
  • Update feature_detection.go
  • Update PR tests for v2 projects
  • Base changes for PR project items
  • Update gh issue view to show v2 projects
  • PR feedback from @bagtoad
  • Update v1 project detection logic
  • Update govulncheck workflow to scan source code
  • add test for FetchRefSHA
  • Apply suggestion from @Copilot
  • Update docs/install_windows.md
  • Consolidate repo profile, fix headings
  • chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  • chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13
  • Update docs on contributing new install methods
  • markdown lint fixes
  • Formatting
  • Initial installation doc refactor
  • Pushing empty commit to run CI
  • Bump Go to 1.24.6
  • Fix linter
  • Update pkg/cmd/search/search.go
  • chore(deps): bump actions/download-artifact from 4 to 5
  • Update docs/triage.md
  • Update docs/triage.md
  • Update issue triage guidelines and label usage
  • fix error for ErrReleaseNotFound when fetching ref
  • Apply suggestion from @Copilot
  • Update .github/workflows/scripts/spam-detection/process-issue.sh
  • docs(search): move search syntax note to gh search --help
  • Update spam detection to comment on and close issue
  • Update permissions and events for workflow
  • ci: use help wanted label link in comment
  • ci: anchor regexp for help wanted label
  • Improve spam detection evals (#11419)
  • v1 project feature detection spike using version
  • docs(help): rename search-syntax help topic
  • docs(search): add reference to gh help search
  • Add help topic for search syntax in gh commands
  • docs(search): add note for exclusion search syntax
  • Regenerate third-party licenses on trunk pushes
  • chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7

• Update to version 2.76.2:

  • Refactor tab completion test
  • Test gh pr create --reviewer tab completion
  • Include org teams for PR reviewers
  • docs(ci): delete obsolete comment

• Update to version 2.76.1:

  • Updated third-party license compliance content
  • Add tests for reviewer team handling in PR creation
  • Refactor and improve RepoMetadata teams test
  • Refactor error assertion in Test_RepoMetadataTeams
  • FIX: conditionally fetching team reviewers
  • Add TeamReviewers flag to RepoMetadataInput
  • Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh
  • Use gh go templating for user prompt
  • Update eval script comments
  • Remove unnecessary file for heredoc
  • First pass to optimize and improve
  • Limit permissions of govulncheck workflow
  • Incorporate govulncheck into workflows
  • update ownership of pkg/cmd/release/shared/
  • Run Lint and Tests on push to trunk branch
  • ci: echo spam detection result
  • ci: add models: read permission
  • ci: correct sed usage to remove Markdown front matter
  • docs: fix typo in script docs
  • ci: fix potentially confusing typo in system prompt
  • ci: use issue.html_url instead of issue.url
  • ci: remove unused env vars
  • ci: add spam issue detection workflow
  • ci: add spam issue detection scripts
  • chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0
  • chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1
  • Improve api --preview docs
  • add tenancy aware for san matcher

• Update to version 2.76.0:

  • Copilot Pro+ / Enterprise subscribers can now assign issues to Copilot during issue creation
  • Display immutable field in release view command
  • Do not fetch logs for skipped jobs
  • Transform extension and filename qualifiers into path qualifier for web code search

• Update to version 2.75.0:

  • Quote Windows rsyso script global hook
  • test(search): verify URL returns quoted query
  • test(search): test pagination with multi-word quoted queries
  • fix(search): fix mutating query state fields
  • Add setup-go to bump-go
  • Update contribution design link
  • test(pr merge): always assert stderr
  • test(pr merge): verify deleteRemoteBranch behaviour when API returns error
  • fix(pr merge): ignore 404 as error when deleting remote branch
  • Ensure go mod tidy is run in bump-go
  • Inject token into bump-go workflow
  • Reformat gh run view help
  • docs(run view): explain restrictions of fallback API calls
  • test(run view): delete unused ZIP archive
  • refactor(run view): remove Log field from DTO types
  • test(run view): update tests
  • refactor(run view): use API as fallback to fetch job logs
  • test: add BinaryResponse helper function
  • Ensure bump go script has git user configured
  • Support --no-repos-selected on secret set
  • docs: consistently use apt in installation instructions
  • Consume dependabot minor versions for go modules
  • test: add test for ParseURL
  • Update microsoft dev-tunnels to v0.1.13
  • Bump all dependencies except dev-tunnels
  • Fix inconsistent use of tabs and spaces
  • docs: explain PR URL parsing reason
  • test: improve test case to highlight host name override
  • test: remove references to AssignedActorsUsed field
  • test: verify providing a URL arg affects the base repo
  • refactor: select PR fields based on detected features
  • test: remove tests verifying assigne-related behaviour
  • fix: remove assignee-related intervention
  • fix: remove AssignedActorsUsed field
  • Add workflow to automate go version bumping
  • fix: expose ParseURL as a public func
  • Remove unused GH_TOKEN env variable from workflow
  • Add workflow_dispatch support to PR Help Wanted check (#11179)
  • chore: improve error message when versioninfo.json is not found
  • Fix: gh pr create prioritize --title and --body over --fill when --web is present (#10547)
  • chore: create .syso libs only on Windows
  • chore: delete script/winres.json
  • chore: add versioninfo.template.json
  • refactor: switch to github.com/josephspurrier/goversioninfo
  • chore: exclude generated .syso files from git repo
  • Ensure automation uses pinned go-licenses version
  • Fix missing newline in install_linux.md
  • Apply suggestions from code review
  • Update missed Go 1.23 references
  • chore: update Go version to 1.24 in devcontainer configuration
  • Use make for license generation and checks
  • Use temp directory for license checks
  • Update 3rd party licenses
  • Restored original test setup, clarified
  • Enhance Activetoken prioritize test
  • improve the description for gh release verify cmd
  • chore: fix function name
  • Push up
  • Use active token stubbing on auth config
  • refactor to simplify implementation
  • Primer formatting
  • Fix spacing
  • Add missing files
  • Rename READMEs
  • Initial restore of Primer CLI docs
  • use standardize color roles logic for the logging
  • moved to shared lib
  • moved to shared lib
  • update the artifact and bundle for testing
  • empty commit
  • clean the code
  • revert the workflow
  • debug windows env
  • debug windows env
  • debug windows env
  • chore: fix variable name casing
  • Avoid analyzing 3rd party license content with CodeQL
  • chore: ensure output path is a directory
  • clean the path
  • clean the path
  • Update 3rd party license information
  • Adopt license compliance scripts into workflows, docs
  • clean the path
  • improve test
  • fix test
  • add unit test
  • chore: prepare Windows resources .syso files before build
  • chore: add script to create Windows resources
  • Cleanup
  • fix: get token for active user instead of blank if possible
  • remove filepath test
  • update Sprintf
  • removed unused file
  • added the unit test
  • add json format
  • change verify-asset logic
  • minor fix
  • clean up the code
  • update the lng
  • wip
  • remove comment
  • wip
  • init
  • docs: install_linux.md: add Solus linux install instructions

• Update to version 2.74.2:

  • Update docs/install_linux.md
  • Fix step order for CodeQL workflow
  • docs: update install command for Debian
  • chore(deps): bump github.com/google/go-containerregistry
  • Use t.Chdir in tests
  • Bump to Go 1.24
  • Merge pull request #11121 from cli/11101-use-golangci-lint-version-2
  • Apply suggestion from @Copilot
  • Improve help wanted check skipping logic
  • Ensure gh executes in workflow check script
  • Fix repo checkout in help-wanted check
  • Fixes #11126
  • Fix script path for help-wanted check
  • Quote filenames suggested at the end of worklow run
  • chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2
  • Quote workflow conditional
  • Add workflow to check help wanted labelling (#11105)
  • chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0
  • Add accurate context when run rerun fails (#10774)
  • Avoid requesting PR reviewer twice
  • chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3
  • chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4
  • test(pr): Add tests for actor assignees
  • Fix test, remove partial standalone test
  • Iterate on pr edit problems with existing assignees
  • chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
  • Fix expected error output of TestRepo/repo-rename-transfer-ownership
  • Add instructions for MidnightBSD installation

• Update to version 2.74.1:

  • test: fix test data const
  • Document support for @copilot in gh [pr|issue] edit --add-assignee and --remove-assignee (#11056)
  • Fix pr edit when URL is provided

• Update to version 2.74.0:

  • Update go-gh to v2.12.1
  • fixup release asset digest tests
  • remove nolint comment for release header
  • Update pkg/cmd/release/view/view.go
  • chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2
  • chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12
  • fix: gh gist edit panic when no file in a gist (#10627)
  • docs(pr list): mention --head does not support <owner>:<branch> syntax
  • add Digest to ReleaseAsset struct
  • doc(update): improve comments on updaterEnabled
  • Refactor build tag logic
  • replace deprecated func
  • replace deprecated type
  • update sigstore-go to v1
  • feat(update): add updateable build tag for update notifications
  • Update README.md
  • test(run): add tests for RenderJobs and RenderJobsCompact
  • Add --compact flag to run watch (#10629)
  • test: improve test case naming
  • chore: run go mod tidy
  • test: ensure proper usage of pipes in docs
  • Revert "[gh config] Escape pipe symbol in Long desc for website manual"
  • doc(pr): format allowed values and defaults in help
  • Mention created PR's URL will be printed upon success
  • Add example usage of --head option
  • doc(preview): add long description
  • fix(prompter): print to iostreams stdout
  • fix(prompter): update prompter create for changes in trunk
  • fix(preview): remove needless newlines
  • import sigstore-go at a more recent commit
  • use constructor
  • include http client in verifier setup
  • add missing http client field in sigstoreConfig
  • simplify test
  • alphabetize fields
  • move live inspect test to integration test file
  • fetch http client from factory
  • set custom fetcher in options
  • pass http client for use with tuf
  • get the latest go-tuf release
  • get latest go-tuf version
  • create fetcher with custom http client and retry options
  • chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9
  • feat(preview): enforce fixed order for prompts
  • feat(preview): add preview prompter command

• Fixing boo#1237669 - CVE-2025-27144 - Go JOSE's Parsing Vulnerable to Denial of Service

• Do not skip the TestAccessiblePrompter tests

• Update to version 2.73.0:

  • refactor(api): inline struct definitions in RepoAssignableActors
  • refactor(api): change CopilotActorLogin to constant
  • fix(editable): include DefaultLogins in EditableAssignees clone
  • doc(params): incorrect func name in comment
  • refactor(api): use constant for Copilot login
  • doc(issue/pr edit): clarify @copilot usage
  • doc(issue/pr edit): doc @copilot assignee
  • test(params): enhance Copilot replacer tests for edge cases
  • fix(params): remove needless err return
  • doc(editable): remove needless comment
  • test(editable): prompts use assignee display names
  • fix(pr edit): clarify error messages for assignee actors and users
  • doc(pr edit): condense comment for reviewer/user filtering
  • test(pr edit): fix typo in test name
  • refactor(pr edit): move httpclient initialization
  • feat(issue/pr edit): support @copilot in assignee flags
  • doc(pr edit): Add comments describing the use of DefaultLogins
  • fix(issues): fix non-interactive assignee matching to logins&IDs
  • fix(pr edit): remove merge conflict artifact, extra detector
  • feat(pr edit): fetch assignable actors
  • feat(pr edit): fetch assigned actors
  • fix(api): correct var name capitalization
  • refactor(api): remove needless parenthesis
  • fix(api): correct var name capitalization
  • refactor(api): remove needless parenthesis
  • doc(api): code comment typo
  • feat(editable): update assigned actors to use display names
  • feat(pr edit): fetch assignable actors
  • feat(pr edit): fetch assigned actors
  • doc(issue edit): clarify synchronous handling of assignees
  • feat(issue edit): replacing actor assignee is done synchronously with updateIssue
  • doc(api): remove needless comment
  • refactor(api): rename assignable user types and methods
  • fix(issue edit): revert rename of ActorAssignees
  • fix(issue edit): use double quotes for assignedActors
  • refactor(issue edit): add assignedActors to lookupFields
  • refactor(issue edit): rename loop variable for clarity
  • refactor(issue edit): rename AssignedActors to ActorAssignees
  • Increase beforePasswordSendTimeout to 100 us (#10977)
  • Update test case for removing all reviewers
  • doc(repo queries): clarify reviewer actor fetching logic
  • doc(issue): comment why assignable actors disabled
  • refactor(issue edit): improve actor type handling
  • Add test to verify removing all reviewers
  • fix bug when removing all PR reviwers
  • fix(issue edit): resolve race condition in actor assignment
  • chore(issue edit): comments cleanup
  • feat(issue edit): support assigning actors to issues
  • feat(issue edit): fetch assignable actors
  • feat(issue edit): fetch currently assigned actors
  • Improve assertion for disabled echo mode (#10927)
  • fix(a11y prompter): remove invalid defaults
  • Release download handles missing archive URLs
  • Fix release download test http stubbing
  • feat(fd): add ActorIsAssignable to IssueFeatures
  • Feature detect v1 projects on pr edit
  • Add closedByPullRequestsReferences JSON field to issue view (#10941)
  • fix(a11y prompter): confirm prompt default is readable
  • fix(a11y prompter): multi select defaults are readable
  • doc(prompter): remove TODO about default value panic
  • fix(a11y prompter): select prompt default value is readable
  • refactor(a11yprompter): shared method for prompt defaults
  • fix(a11y prompter): Select prompt respects defaults
  • fix(a11y prompter): input prompt default value is readable
  • test(prompter): add timeout before password input
  • Feature detect v1 projects for preview URL
  • Feature detect v1 projects on interactive pr create
  • Feature detect v1 projects on web mode pr create
  • Feature detect v1 projects on non-interactive pr create
  • Cleanup run command stubbed finders in tests
  • Fix StatusJSONResponse usage (#10810)
  • Feature detect v1 projects on pr view
  • Add --delete-last option to pr comment and issue comment (#10596)
  • Apply code review changes
  • chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0
  • chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7
  • Update the test code to align with latest changes
  • test pr number 0
  • handle find pr number 0
  • restore deleted file
  • move filterAttestations function
  • getAttestations unit tests
  • add test for predicate type filtering
  • add missing nil struct checks and udpate error messages
  • add check for nil api client
  • clean up test fixtures
  • reduce test duplication
  • comment
  • restructure api client methods
  • simplify client methods
  • remove duplicate predicate filtering code
  • create single fetch by digest client method
  • dedpulicate if else logic
  • pass params object to api client methods
  • move local and oci registry attestation filtering
  • reorganize getAttestations func to check for remote gh api fetching first
  • pass predicate type to get attestation api methods

• Fix the package tests:

  • Ignore TestNewInspectCmd https://github.com/cli/cli/issues/10926
    • Ignore TestAccessiblePrompter https://github.com/cli/cli/issues/10916

• Update to version 2.72.0:

  • Introduce gh accessibility help topic highlighting GitHub CLI accessibility experiences
  • [gh pr view] Support closingIssuesReferences JSON field
  • Fix expected error output of TestRepo/repo-set-default
  • Ensure accessible password and auth token prompters disable echo mode
  • Fix: Accessible multiselect prompt respects default selections

• Update to version 2.71.2:

  • Fix pr create when push.default tracking and no merge ref

• Update to version 2.71.1:

  • Fix pr create when branch name contains slashes

• Update to version 2.71.0:

  • gh pr create: Support Git's @{push} revision syntax for determining head ref
  • Introduce option to opt-out of spinners
  • Update configuration support for accessible colors
  • gh config: add config settings for accessible prompter and disabling spinner
  • Fix multi pages search for gh search
  • Fix: project commands use shared progress indicator
  • Issue commands should parse args early
  • Feature detect v1 projects on issue view and edit
  • Feature detect v1 projects on web and non web-mode issue create
  • Refactor Sigstore verifier logic
  • bump deps

• Update to version 2.70.0:

  • Explain job log resolution reason
  • Document UNKNOWN STEP in run view
  • Add $ anchor to log file regexps
  • Test normal job run log is preferred over legacy one
  • Prefer normal job run log file over legacy one
  • Explain when a negative number prefix appears
  • Improve explanation for missing step logs
  • Explain the UNKNWON STEP placeholder
  • Replace UNKNOWN with UNKNOWN STEP in job run log
  • Explain why step logs are preferred
  • test(prompter): fix invalid comment
  • test(prompter): fix race condition
  • Ensure markdown confirm prompt shows editor name
  • fix(prompter): remove needless default value assignment
  • test(prompter): doc how accessible prompter tests work
  • test(prompter): describe why echo is editorcmd
  • test(prompter): use *testing.T instead
  • Add missing gc.AssertExpectations calls
  • Add tests for IsPinned method
  • Simplify cosign verification example by not using a regex.
  • chore: go mod tidy
  • fix(prompter): pass io to huh and refactor tests
  • fix(prompter): update huh and fix tests
  • refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter
  • doc(prompter env): accessible prompter includes braille reader
  • chore: go mod tidy
  • Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1
  • Update pkg/cmd/run/shared/presentation.go
  • Apply suggestions from code review
  • Test for explicit config disable of label colors
  • Use truthy value for GH_COLOR_LABELS
  • test(prompter): re-add skipped test for accessible confirm default
  • doc(help): label GH_ACCESSIBLE_PROMPTER as preview
  • fix(prompter): rename GH_ACCESSIBLE_PROMPTER
  • refactor(prompter): explicit return values
  • doc(prompter): remove senseless comment
  • refactor(prompter): remove unused variable
  • test(prompter): timeout for tests is 1s
  • fix(prompter): use os.lookupenv for accessible prompter
  • test(prompter): remove needless NO_COLOR set
  • test: use example.com in tests
  • doc: comment typos and formatting
  • test(prompter): add basic survey prompter test
  • test(prompter): fix race conditions
  • doc(envs): speech synthesis prompter
  • Escape dots in regexp pattern in example command
  • Verify fallback to job run logs when step logs are missing
  • Verify job run logs attached in attachRunLog test
  • Update run_log.zip fixture
  • Fallback to print entire job run log if step logs are missing
  • Add Log to Job data structure
  • Add jobLogFilenameRegexp function
  • Extract job name sanitization as a separate function
  • Deprecate ColorScheme.Gray for ColorScheme.Muted
  • ci: pin third party actions to commit sha
  • doc(prompter): clarify comments
  • refactor(prompter): less magic strings
  • fix(prompter): remove impossible condition
  • fix(prompter): notes about Confirm default
  • fix(prompter): input returns default when blank
  • test(prompter): more tests for bad input
  • Refactor ColorScheme initializer
  • Add label color env var to help topic, unused fix
  • refactor(prompter): rename env var for speech synthesizer friendly prompter
  • docs(prompter): doc prompter interface
  • fix(linter): linter errors
  • test(prompter): move to external package
  • test(prompter): skip vt10x tests on Windows
  • Fix comment language
  • Introduce color_labels support, update commands
  • test(prompter): remove needless variable declaration
  • tests(prompter): rename huhprompter
  • test(prompter): replace assert with require
  • fix(prompter): rename huhprompter
  • test(prompter): go-expect based prompter tests
  • feat(prompter): include no as false-y value
  • test(prompter): remove t.parallel calls
  • fix(md prompter): accessible prompt allows blank
  • feat(md prompter): md prompt respects blankAllowed
  • feat(prompter): add accessible prompter support
  • Remove deprecated note on gray color functions
  • Regenerate mocks
  • Remove configuration setting vestage
  • Remove out of scope configuration setting change
  • Implement tests for muted logic, standardize reset
  • Remove out of scope changes, update list commands
  • Accessible color config boilerplate, colors update
  • Acceptance test issue/pr create/edit with project
  • Update pkg/cmd/attestation/verify/verify.go
  • test(release view): fix indentation
  • doc(formatting): add line breaks for readability
  • Renaming tabl eheader variables for maintainability
  • doc(formatting): update sprig func descriptions
  • test(many): fix whitespace in tests expectations
  • updated test
  • added minor caveat
  • Tweaked language a bit, improved error message.
  • Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.
  • doc(run shared): clarify 404 handling
  • Fixes #10590
  • docs: add Sprig library functions to help topics
  • chore: update go-gh to v2.12.0
  • Implement and fix tests for table headers
  • test(run list): update rulesets test name
  • doc(run list): add enterprise ruleset notes
  • refactor(tests): update test name for org workflows
  • docs(run list): doc runs without workflow names
  • fix(run list): do not fail on org workflows
  • Fix typos in CONTRIBUTING.md
  • Underline table headers if colors enabled but no theme
  • Ensure table headers are thematically contrasting
  • [gh ext] Fix GitKind extension directory path
  • More cleanup
  • ./script/sign cleanup
  • Add initial test
  • Show host name in repo creation prompts

• Update to version 2.69.0:

  • Curly bracket wrapping acceptance tests
  • Refactor commentable logic
  • Clean up pr/issue comment test names
  • Bring issue/PR comment tests up to par, correct
  • Revert "Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name"
  • Initial pass fixing gh issue and gh pr comment
  • Bump golang.org/x/net from 0.34.0 to 0.36.0
  • chore: remove redundant word in comment
  • Make missing workflow regexp aware of GitHub App
  • Change issueauto and prauto actions to use the cli-automation env
  • Add environment to prauto and issueauto workflows
  • Add cli-discuss-automation environment to triage.md
  • Separate partitioning from globbing in cmdutil/args package and consumers (#3)
  • Add exclude callback function
  • Add tests for - and label args
  • Remove slicing
  • Support globbing for all platforms
  • Add testing to GlobWindowsPaths (#2)
  • Fix gh gist create for multiple filenames and glob patterns
  • [gh release create/upload] Expand glob patterns on Windows

• Update to version 2.68.1:

  • Fix secret command panic when base repo from cwd
  • Fix(ci): base64 decode GPG passphrase
  • Update pkg/cmd/attestation/verification/attestation.go
  • Update pkg/cmd/attestation/verification/attestation.go
  • Fix acceptance test descriptions
  • Fix gh secret disambiguity test
  • Expand gh secret acceptance tests
  • Expand gh secret base repo tests
  • [gh secret] Check GH_REPO too in addition to --repo for disambiguation
  • Deep Dive Document Release Process (#10503)
  • Fix unhandled panic in FindWorkflow and add tests
  • Bump actions/attest-build-provenance from 2.2.0 to 2.2.2
  • Fix checkout when URL arg is from fork and cwd is upstream
  • Update project help text; fix unlink usage
  • Inconsistent format of examples in help text
  • Inconsistent format of description of flags (starting with lowercase letter) (#10507)
  • Update Go version to 1.23 in CONTRIBUTING.md
  • Fix minor auth login help typo
  • Add docs; rename function name
  • Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  • docs: OAuth doc link moves to newline
  • fix expected test output
  • undo regex changes
  • remove signer-ref option
  • chore: update go version in devcontainer
  • docs: warn about process revoking all tokens
  • docs: document how to revoke gh OAuth tokens
  • refactor: use a more straightforward return value
  • Test pr checkout force on different branch
  • [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic
  • Allow injection of TUFMetadataDir in tests
  • Refactor remote resolver caching tests
  • Fix remoteResolver caching issue
  • Address pr comments
  • Add test for item-edit --number 0
  • Support setting project item number to 0
  • Wrap error
  • Rename flag to --fail-on-no-commits
  • Update tests
  • Fix non-TTY case
  • Suggestions to enhance upstream default handling
  • Use API REST Client
  • Use subtests in attestation verification integration tests
  • update default upstream when forking repo
  • Update usage to lower-kebab-case
  • Fix typo in README
  • Add missing <> in gh auth login docs
  • Add mutex to fix race in attestation test client
  • Update tests
  • Remove trailing whitespace
  • Standardize URLs
  • [gh issue/pr comment] Create a comment if no comment already
  • Update tests
  • Address review comments
  • Align no default repo message with other uses
  • [gh release create] Fail when there are no new commits since the most recent release
  • Use API without shorthand flag
  • Update tests
  • [gh api] Escape package name (URL encoding) for packages endpoint
  • remove custom transport
  • var naming
  • dedup local bundle err handling
  • Update tests
  • Add test cases for succeed on no cache and api errors for --all (#1)
  • Remove short (abbreviated) flag support
  • Address PR review comments
  • add checks to cert extensions func
  • fix option ordering
  • fix issues causing tests to fail
  • add signer and source ref, commit options
  • Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  • [gh repo view] Improve error message for forked repo
  • [gh cache delete --all] Add --succeed-on-no-caches flag to return exit code 0
  • set new options in enforcement criteria
  • reorder fields
  • add new signing options

• Update to version 2.67.0:

  • Exit with error if no matching predicate type exists
  • Fix logic error in contributing docs
  • Improve http error test cases
  • Handle non-TTY behavior
  • Do not try to parse bodies for HEAD requests
  • Update pkg/cmd/pr/status/status.go
  • Collapse related instructions
  • Remove redundant instructions
  • Update language
  • [gh pr status] Mention gh pr checks in the Long section
  • Update release doc content
  • Doc: Clarify guidelines for help wanted issues and prs
  • Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  • Update tests
  • [gh project item-edit] Fix number type
  • Address review comments
  • Address review comments
  • Revert breaking change
  • Revert "[gh repo edit] Allow setting commit message defaults"
  • Use HTML numeric code instead of escaping with slash
  • [gh config] Escape pipe symbol in Long desc for website manual
  • Ensure item iteration field is populated in tests
  • Drop accidental help text change
  • Error when gh repo rename is used with a new repo name that contains an owner
  • [gh repo edit] Allow setting commit title defaults
  • Rename staggler
  • Formatting
  • AuoLink -> Autolink
  • Use http constants
  • refac and some spacing in output
  • More consistency
  • whitespace
  • clean up
  • Autolink delete http tests
  • Revert change to deps
  • Autolink delete tests
  • Initial working implementation
  • remove duplicated Prompter type
  • revert isEqualSet to private
  • Revert color changes
  • [docs/releasing.md] Add basic info for homebrew update flow
  • consolidate tests around getBundle func when possible
  • change permanent backoff error condition
  • Remove unused env var, PRID
  • dont retry when parsing fails
  • Update test
  • [gh issue/pr list] Improve help text
  • [gh extensions install] Improve help text and error message
  • [gh api] Fix mutual exclusion messages of --slurp flag
  • Remove v1 project 'add to board' automation from prauto workflow
  • [gh project item-list] Add iterationId field in ProjectV2ItemFieldIterationValue
  • [gh workflow run] Improve error handling for --ref flag
  • update tests
  • add missing return statement
  • method update
  • update no attestations found err
  • remove old tests
  • drop unneeded methods
  • deduplicate get attestation code
  • fix tests
  • update testing
  • chore: remove unused file
  • feat: integrate new PRLister into pr list command
  • issue #2329: create shared PRLister
  • fix: tab format may break checkout prompts
  • issue #2329: handle empty list of PR
  • issue #2329: include PR status in the prompt's options
  • issue #2329: fix prompt header getting duplicated
  • issue #2329: simplify the UI of the prompt
  • issue #2329: update the prompt's format
  • issue #2329: fix unit tests
  • issue cli#2329: Fix linter
  • issue cli#2329: fix unsufficent properties required for PR checkout
  • issue #2329: move Interactive check to RunE
  • fix: update the copy
  • issue #2329: return error when not running interactively
  • issue #2329: fix missing stub
  • issue #2329: improve UI/UX
  • issue #2329: add happy path unit test
  • issue #2329: fix the linting issue
  • issue #2329: fix the unit tests issue - ensure its backward compatible
  • feat: let user select pr to checkout

• Update to version 2.66.1:

  • Address PR comments
  • Remove unused ErrNoGitRepository error
  • Handle error from ParsePRRefs when the selector is provided
  • Add comment to status recognizing when we require a repo
  • Refactor finder to work with URL selectors
  • Add tests for using the pr Finder outside of repo
  • Update deployment.yml
  • update tests to account for logic flip
  • flip bundle fetching logic
  • Update formatting for autolink output
  • Rename PRRefs to PullRequestRefs and PR comment cleanup
  • Remove redundant error check
  • Keeping autolink IDs the same in all test cases
  • Expand test case
  • Remove unused test field
  • Remove unused test field
  • Use defer instead
  • Error case test for viewRun
  • Autolink view HTTP tests
  • Shorten description
  • Updates following renaming domain to shared
  • Partial testing for view
  • Initial, working implementation
  • Stop progress indicator on failure (gh run list --workflow)
  • Cleaned up some naming and comments
  • Minor refactoring autolink create help and logic
  • Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1
  • Cleanup comment
  • Fix pr create tests
  • Fix breaking changes from sigstore-go v0.7.0 upgrade
  • go mod tidy
  • Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue
  • Refactor pr status to use the ParsePRRefs helper on the Finder
  • Moved remote.pushDefault out of ReadBranchConfig and into finder
  • Remove @{push} from branch config
  • Add PushDefault method to git client
  • WIP: push default defaults to simple
  • Error if push revision doesn't match a remote
  • Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  • Refactor finder.Find and replace parseCurrentBranch with parsePRRefs
  • Bump actions/attest-build-provenance from 2.1.0 to 2.2.0
  • remove bolding from bullet point output
  • Update test to be compatible with latest Glamour v0.8.0
  • reorder policy enforcement criteria print out
  • bold bullet point list header text
  • Enable MSI building for Windows arm64
  • chore: fix some comments
  • Bump go module version to 1.23
  • Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3
  • Remove unncessary printf usage
  • Bump golang ci lint to work with go 1.24
  • Fix: Ensure constant format strings in fmt and printf calls
  • Change back to exponential backoff
  • Linter
  • Better handling for codespace state polling
  • Add affected version to bug report form
  • fix: tiny typo fix
  • Fix: accidental whitespace in gist edit
  • Fix: gist edit test name
  • Fix: gist edit/view tests var name consistency
  • Fix: Gist edit tests for interactivity
  • Add small wait to extension update tests
  • Refactor test based on PR feedback
  • fixup! Add comments and a bit of code cleanup
  • Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch
  • Add comments and a bit of code cleanup
  • skip check
  • add tty check
  • formatting
  • delete unused function
  • drop unused handler method
  • print attestation output info as bullet points instead of table
  • Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  • Fix typo in secret base repo selection comment
  • Change wording on secret repo prompt
  • Print informative message before prompting for secret repo
  • Secret base repo prompting should not use resolved remote
  • Move secret base repo prompting earlier
  • Add acceptance test for secrets remote disambiguation
  • Remove validated TODO and add review warning
  • Rename secret BaseRepo func
  • Use smarter base repo funcs for secret commands
  • Move secret repo validation into secrets subpackage
  • Always prompt on secret set when multiple remotes
  • Update setdefault test
  • Update docs for set-default
  • Prompt for secret commands
  • Add tests for secret commands
  • Add remote check to secret commands
  • Add missing git stubs to tests
  • Add tests for deleteGist
  • Make extension update check non-blocking
  • Update pkg/cmd/attestation/verify/verify.go
  • add install instructions for Manjaro Linux
  • Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8
  • #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable
  • Rename domain pkg to shared
  • #10042: Applied code review suggestions to view_test.go
  • show error message for rerun workflow older than a month ago
  • Enhance help docs on ext upgrade notices
  • fix tests
  • fix tests
  • gist delete - check no gists
  • removed unnecessary space
  • Update pkg/cmd/gist/edit/edit.go
  • chore: fix some function names in comment
  • drop description from prompts, fix tests
  • Expand docs on cleaning extension update dir
  • Simplifying cleanExtensionUpdateDir logic
  • Separate logic for checking updates
  • Capture greater detail on updaterEnabled
  • Restore old error functionality of prSelectorForCurrentBranch
  • Change error handling on ReadBranchConfig to respect git Exit Codes
  • fix: add back colon that I removed
  • fix: actually read how MaxFunc work and simplify the code
  • fix: padded display
  • Collapse dryrun checks in ext bin upgrade
  • Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14
  • Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3
  • gist delete - use in confirmation and success info
  • Rename test user in tests
  • Change pr number in test
  • Surface and handle error from ReadBranchConfig in parseCurrentBranch
  • Directly stub headBranchConfig in Test_tryDetermineTrackingRef
  • Refactor error handling in ReadBranchConfig to avoid panic
  • Refine error handling of ReadBranchConfig
  • Add test for empty BranchConfig in prSelectorForCurrentBranch
  • #10042 removed unnecessary field
  • Correct help documentation around template use in gh issue create
  • #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected
  • Comment exported functions
  • fix gist description in tests
  • gist delete prompt with gist description
  • Remove shadowed errors from prSelectorForCurrentBranch and cover with tests
  • Added tests to cover prSelectorForCurrentBranch for confidence in refactor
  • Refactor prSelectorForCurrentBranch and tests
  • Add missing test for RemoteURL in parseBranchConfig
  • update table column headers
  • Change ReadBranchConfig error message in gh pr create
  • Remove private readBranchConfig method and remove parseBranchConfig from Client
  • update test fixtures to include buildConfigURI
  • add check for invalid attestation
  • tentative updates for acceptance criteria - pending confirmation re description in prompt
  • PR review edits
  • Refactor Test_readGitBranchConfig for easier parsing
  • update tests to use new function name
  • Update pkg/cmd/attestation/api/client.go
  • Update pkg/cmd/attestation/api/client.go
  • Remove named return values from prSelectorForCurrentBranch
  • Refactor ReadBranchConfig for test coverage of newly returned erros
  • Remove named returns from ReadBranchConfig and surface errors
  • remove old comment
  • remove commented out code
  • comment
  • undo more name chanages
  • undo other name change
  • remove spaces
  • undo name change for now
  • more mock http client cleanup
  • Update triage.md to reflect FR experiment outcome
  • simplify mock http client
  • use mock to assert number of http calls
  • add http client test constructors
  • setup testing struct for test cases
  • feat: make the extension upgrade fancier
  • Fix up intra-org fork test setup
  • Add renamed acceptance tests
  • Reflect coverage for view and status subcommands
  • Expand with gh pr status
  • Add base gh pr view acceptance tests for changes
  • Find push remote using branch..pushRemote and remote.pushDefault
  • Only find PRs w/ branch..merge if push.default = upstream/tracking
  • Find PRs using @{push}
  • add mutex for test field
  • add test case for bundle url fetch failure
  • add tests for bundle url fetch and fallback
  • fetch bundles in parallel
  • return fetch attestations err directly
  • provide additional logging and fallback
  • Update pkg/cmd/auth/login/login.go
  • Clear up --with-token fine grained PAT usage
  • Fix typos
  • feat: Add support for creating autolink references
  • cleanup
  • gist delete prompt for confirmation
  • undo extra move
  • rearrange struct vals for consistency
  • add gist delete tests for blank gist id
  • gh gist delete: prompt for gist id
  • Escape '.' in version validation regex in deployment workflow
  • Add job to deployment workflow to validate the tag name for a given release
  • update verify output table
  • simplify func params
  • add more verification integration tests
  • fix failing tests
  • add mock http client
  • update error messages
  • var naming
  • go mod tidy
  • add httpClient field to LiveClient struct
  • remove unused method
  • fetch bundles with sas url
  • Fix failig local extension tests
  • Implement remaining PR feedback
  • Implement partial feedback before trunk update
  • Add build constraint for non-Windows systems
  • Add build constraint for non-Windows systems
  • Refactor local installation manager test by OS
  • #10042 fixed test
  • fixing gh gist view prompts with no TTY
  • Remove unnecessary Extension.FullName()
  • Expand update tests for local extensions
  • Test whether extension update should be checked
  • Remove Extension.FullName() from interface
  • Enhance extension manager and tests
  • Initial extension update check testing
  • Refactor extension command testing
  • Bring extension update check in line with gh check
  • initial pass at fetching bundles with sas urls

• Update to version 2.65.0:

  • Bump cli/go-gh for indirect security vulnerability
  • Panic mustParseTrackingRef if format is incorrect
  • Move trackingRef into pr create package
  • Make tryDetermineTrackingRef tests more respective of reality
  • Rework tryDetermineTrackingRef tests
  • Avoid pointer return from determineTrackingBranch
  • Doc determineTrackingBranch
  • Don't use pointer for determineTrackingBranch branchConfig
  • Panic if tracking ref can't be reconstructed
  • Document and rework pr create tracking branch lookup
  • Upgrade generated workflows
  • Fixed test for stdout in non-tty use case of repo fork
  • Fix test
  • Alternative: remove LocalBranch from BranchConfig
  • Set LocalBranch even if the git config fails
  • Add test for permissions check for security and analysis edits (#1)
  • print repo url to stdout
  • Update pkg/cmd/auth/login/login.go
  • Move mention of classic token to correct line
  • Separate type decrarations
  • Add mention of classic token in gh auth login docs
  • Update pkg/cmd/repo/create/create.go
  • docs(repo): make explicit which branch is used when creating a repo
  • fix(repo fork): add non-TTY output when fork is newly created
  • Move api call to editRun
  • Complete get -> list renaming
  • Better error testing for autolink TestListRun
  • Decode instead of unmarshal
  • Use 'list' instead of 'get' for autolink list type and method
  • Remove NewAutolinkClient
  • Break out autolink list json fields test
  • PR nits
  • Refactor autolink subcommands into their own packages
  • Whitespace
  • Refactor out early return in test code
  • Add testing for AutoLinkGetter
  • Refactor autolink list and test to use http interface for simpler testing
  • Apply PR comment changes
  • Introduce repo autolinks list commands
  • Remove release discussion posts and clean up related block in deployment yml
  • Extract logic into helper function
  • add pending status for workflow runs
  • Feat: Allow setting security_and_analysis settings in gh repo edit
  • Upgrade golang.org/x/net to v0.33.0
  • Document SmartBaseRepoFunc
  • Document BaseRepoFunc
  • Update releasing.md
  • Document how to set gh-merge-base

• Update to version 2.64.0:

  • add test for different SAN and SourceRepositoryURI values
  • add test for signerRepo and tenant
  • add some more fields to test that san, sanregex are set properly
  • Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6
  • update san and sanregex configuration for readability
  • reduce duplication when creating policy content
  • tweak output of build policy info
  • Name conditionals in PR finder
  • Support pr view for intra-org forks
  • Return err instead of silentError in merge queue check
  • linting pointed out this var is no longer used
  • Removed fun, but inaccessible ASCII header
  • further tweaks to the long description
  • Exit on pr merge with -d and merge queue
  • Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations
  • Update pkg/cmd/attestation/inspect/inspect.go
  • Update gh auth commands to point to GitHub Docs
  • Reformat ext install long
  • Mention Windows quirk in ext install help text
  • Fix error mishandling in local ext install
  • Assert on err msg directly in ext install tests
  • Clarify hosts in ext install help text
  • Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  • Removed now redundant file
  • minor tweak to language
  • go mod tidy
  • Deleted no-longer-used code.
  • deleted now-invalid tests, added a tiny patina of new testing.
  • Tightened up docs, deleted dead code, improved printing
  • fix file name creation on windows
  • wording
  • hard code expected digest
  • fix download test
  • use bash shell with integration tests
  • simplify var creation
  • update integration test scripts
  • fix: list branches in square brackets in gh codespace
  • try nesting scripts
  • run all tests in a single script
  • windows for loop syntax
  • use replaceAll
  • update expected file path on windows
  • run integration tests with windows specific syntax
  • run all attestation cmd integration tests automatically
  • Bump actions/attest-build-provenance from 1.4.4 to 2.1.0
  • Improve error handling in apt setup script
  • use different file name for attestation files on windows
  • test(gh run): assert branch names are enclosed in square brackets
  • docs: enhance help text and prompt for rename command
  • Revert "Confirm auto-detected base branch"
  • Confirm auto-detected base branch
  • Merge changes from #10004
  • Set gh-merge-base from issue develop
  • Open PR against gh-merge-base
  • Refactor extension executable error handling
  • fix: list branches in square brackets in gh run view (#10038)
  • docs: update description of command
  • style: reformat files
  • docs: update sentence case
  • use github owned oci image
  • docs: add mention of scopes help topic in auth refresh command help
  • docs: add mention of scopes help topic in auth login command help
  • docs: add help topic for auth scopes
  • docs: improve help for browse command
  • docs: improve docs for browse command as of #5352
  • fix package reference
  • add gh attestation verify integration test for oci bundles
  • add integration test for bundle-from-oci option
  • update tests
  • update tests
  • move content of veriy policy options function into enforcement criteria
  • comment
  • try switch statement
  • remove duplicate err checking
  • get bundle issuer in another func
  • more logic updating to remove nesting
  • inverse logic for less nesting
  • remove unneeded nesting
  • wip, linting, getting tests to pass
  • wording
  • var naming
  • drop table view
  • order policy info so relevant info is printed next to each other
  • Update pkg/cmd/attestation/verification/policy.go
  • Update pkg/cmd/attestation/verification/policy.go
  • Update pkg/cmd/attestation/verification/policy.go
  • wip: added new printSummaryInspection
  • Improve error handling for missing executable
  • experiment with table output
  • Assert stderr is empty in manager_test.go
  • Update error message wording
  • Change: exit zero, still print warning to stderr
  • wording
  • Improve docs on installing extensions
  • Update language for missing extension executable
  • Update test comments about Windows behavior
  • wording
  • wording
  • wording
  • add newlines for additional policy info
  • Document requirements for local extensions
  • Warn when installing local ext with no executable
  • wording
  • formatting
  • print policy information before verifying
  • add initial policy info method
  • more wip poking around, now with table printing
  • wip, gh at inspect will check the signature on the bundle
  • wip: inspect now prints various bundle fields in a nice json

• Update to version 2.63.2:

  • include alg with digest when fetching bundles from OCI
  • Error for mutually exclusive json and watch flags
  • Use safepaths for run download
  • Use consistent slice ordering in run download tests
  • Consolidate logic for isolating artifacts
  • Fix PR checkout panic when base repo is not in remotes
  • When renaming an existing remote in gh repo fork, log the change
  • Improve DNF version clarity in install steps
  • Fix formatting in client_test.go comments for linter
  • Expand logic and tests to handle edge cases
  • Refactor download testing, simpler file descends
  • Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7
  • Improve test names so there is no repetition
  • Second attempt to address exploit

• Update to version 2.63.0:

  • Bump cli/go-gh for codespace fix
  • Update git/client_test.go
  • Update git/client_test.go
  • Update git/client_test.go
  • Add checkout test that uses ssh git remote url
  • Rename backwards compatible credentials pattern
  • Fix CredentialPattern doc typos
  • Remove TODOs
  • Fix typos and add tests for CredentialPatternFrom* functions
  • Add SSH remote todo
  • General cleanup and docs
  • Allow repo sync fetch to use insecure credentials pattern
  • Allow client fetch to use insecure credentials pattern
  • Allow client push to use insecure credential pattern
  • Allow client pull to use insecure credential pattern
  • Allow opt-in to insecure pattern
  • Support secure credential pattern
  • Refactor error handling for missing "workflow" scope in createRelease
  • ScopesResponder wraps StatusScopesResponder
  • Refactor workflow scope checking
  • pr feedback
  • pr feedback
  • Update pkg/cmd/attestation/verify/attestation_integration_test.go
  • Apply suggestions from code review
  • Refactor command documentation to use heredoc
  • pr feedback
  • remove unused test file
  • undo change
  • add more testing testing fixtures
  • update test with new test bundle
  • naming
  • update test
  • update test
  • Fix README.md code block formatting
  • clean up
  • wrap sigstore and cert ext verification into a single function
  • Adding option to return baseRefOid in pr view
  • verify cert extensions function should return filtered result list
  • pr feedback
  • Update pkg/cmd/attestation/download/download.go
  • fix function param calls
  • Update pkg/cmd/attestation/verification/extensions.go
  • Formatting fix
  • Updated formatting to be more clear
  • Updated markdown syntax for a note.
  • Added a section on manual verification of the relases.
  • Handle missing "workflow" scope in createRelease
  • Modify push prompt on repo create when bare
  • Doc push behaviour for bare repo create
  • Push --mirror on bare repo create
  • Add acceptance test for bare repo create
  • Doc isLocalRepo and git.Client IsLocalRepo differences
  • Use errWithExitCode interface in repo create isLocalRepo
  • Backfill repo creation failure tests
  • Support bare repo creation
  • use logger println method
  • simplify verifyCertExtensions
  • rename type
  • refactor fetch attestations funcs

• Update to version 2.62.0

  • CVE-2024-52308: remote code execution (RCE) when users connect to a malicious Codespace SSH server and use the gh codespace ssh or gh codespace logs commands (boo#1233387, GHSA-p2h2-3vg9-4p87)
  • Check extension for latest version when executed
  • Shorten extension release checking from 3s to 1s

• includes changes from 2.61.0:

  • Enhance gh repo edit command to inform users about consequences of changing visibility and ensure users are intentional before making irreversible changes

• Update to version 2.60.1:

  • Update testscript to use hard fork
  • Note token redaction in Acceptance test README
  • Refactor gpg-key delete to align with ssh-key delete
  • Add acceptance tests for org command
  • Adjust environment help for host and tokens (#9809)
  • Add SSH Key Acceptance test
  • Add Acceptance test for label command
  • Add acceptance test for gpg-key
  • Update go-internal to redact more token types in Acceptance tests
  • Address PR feedback
  • Clarify gh is available for GitHub Enterprise Cloud
  • Remove comment from gh auth logout
  • Add acceptance tests for auth-setup-git and formattedStringToEnv helper func
  • Use forked testscript for token redaction
  • Use new GitHub preview terms in working-with-us.md
  • Use new GitHub previews terminology in attestation
  • Test json flags for repo view and list
  • Clean up auth-login-logout acceptance test with native functionality
  • Add --token flag to gh auth login to accept a PAT as a flag
  • Setup acceptance testing for auth and tests for auth-token and auth-status
  • Update variable testscripts based on secret
  • Check extOwner for no value instead
  • Fix tests for invalid extension name
  • Refactor to remove code duplication
  • Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.
  • Minor tweaks, added backoff to getTrustDomain
  • added test for verifying we do 3 retries when fetching attestations.
  • Fix single quote not expanding vars
  • Added constant backoff retry to getAttestations.
  • Address @williammartin PR feedback
  • wip: added test that fails in the absence of a backoff.
  • add validation for local ext install
  • feat: add ArchivedAt field to Repository struct
  • Refactor gh secret testscript
  • Wrap true in '' in repo-fork-sync
  • Rename acceptance test directory from repos to repo
  • Remove unnecessary flags from repo-delete testscript
  • Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with
  • Wrap boolean strings in '' so it is clear they are strings
  • Remove unnecessary gh auth setup-git steps
  • Cleanup some inconsistencies and improve collapse some functionality
  • Add acceptance tests for repo deploy-key add/list/delete
  • Add acceptance tests for repo-fork and repo-sync
  • Add acceptance test for repo-set-default
  • Add acceptance test for repo-edit
  • Add acceptance tests for repo-list and repo-rename
  • Acceptance testing for repo-archive and repo-unarchive
  • Add acceptance test for repo-clone
  • Added acceptance test for repo-delete
  • Added test function for repos and repo-create test
  • Implement acceptance tests for search commands
  • Remove . from test case for TestTitleSurvey
  • Clean up Title Survey empty title message code
  • Add missing test to trigger acceptance tests
  • Add acceptance tests for gh variable
  • Minor polish / consistency
  • Fix typo in custom command doc
  • Refactor env2upper, env2lower; add docs
  • Update secret note about potential failure
  • Add testscripts for gh secret, helper cmds
  • Remove stdout assertion from release
  • Rename test files
  • Add acceptance tests for release commands
  • Implement basic API acceptance test
  • Remove unnecesary mkdir from download Acceptance test
  • Remove empty stdout checks
  • Adjust sleeps to echos in Acceptance workflows
  • Use regex assert for enable disable workflow Acceptance test
  • Watch for run to end for cancel Acceptance test
  • Include startedAt, completedAt in run steps data
  • Rewrite a sentence in CONTRIBUTING.md
  • Add filtered content output to docs
  • sleep 10s before checking for workflow run
  • Update run-rerun.txtar
  • Create cache-list-delete.txtar
  • Create run-view.txtar
  • Create run-rerun.txtar
  • Create run-download.txtar
  • Create run-delete.txtar
  • Remove IsTenancy and relevant tests from gists as they are unsupported
  • Remove unnecessary code branches
  • Add ghe.com to tests describing ghec data residency
  • Remove comment
  • auth: Removed redundant ghauth.IsTenancy(host) check
  • Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname
  • Upgrade go-gh version to 2.11.0
  • Add test coverage to places where IsEnterprise incorrectly covers Tenancy
  • Fix issue creation with metadata regex
  • Create run-cancel.txtar
  • Create workflow-run.txtar
  • Create workflow-view.txtar
  • implement workflow enable/disable acceptance test
  • implement base workflow list acceptance test
  • Add comment to acceptance make target
  • Resolve PR feedback
  • Acceptance test issue command
  • Support GH_ACCEPTANCE_SCRIPT
  • Ensure Acceptance defer failures are debuggable
  • Add acceptance task to makefile
  • build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6
  • Ensure pr create with metadata has assignment
  • Document sharedCmds func in acceptance tests
  • Correct testscript description in Acceptance readme
  • Add link to testscript pkg documentation
  • Add VSCode extension links to Acceptance README
  • Fix GH_HOST / GH_ACCEPTANCE_HOST misuse
  • Acceptance test PR list
  • Support skipping Acceptance test cleanup
  • Acceptance test PR creation with metadata
  • Suggest using legacy PAT for acceptance tests
  • Add host recommendation to Acceptance test docs
  • Don't append remaining text if more matches
  • Highlight matches in table and content
  • Split all newlines, and output no-color to non-TTY
  • Print filtered gists similar to code search
  • Show progress when filtering
  • Simplify description
  • Disallow use of --include-content without --filter
  • Improve help docs
  • Refactor filtering into existing gist list
  • Improve performance
  • Add gist search command
  • Fix api tests after function signature changes
  • Return nil instead of empty objects when err
  • Fix license list and view tests
  • Validate required env vars not-empty for Acceptance tests
  • Add go to test instructions in Acceptance README
  • Apply suggestions from code review
  • Error if acceptance tests are targeting github or cli orgs
  • Add codecoverage to Acceptance README
  • Isolate acceptance env vars
  • Add Writing Tests section to Acceptance README
  • Add Debug and Authoring sections to Acceptance README
  • Acceptance test PR comment
  • Acceptance test PR merge and rebase
  • Note syntax highlighting support for txtar files
  • Refactor acceptance test environment handling
  • Add initial acceptance test README
  • Use txtar extension for testscripts
  • Support targeting other hosts in acceptance tests
  • Use stdout2env in PR acceptance tests
  • Acceptance test PR checkout
  • Add pr view test script
  • Initial testscript introduction
  • While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.
  • Add examples for creating .gitignore files
  • Update help for license view
  • Refactor http error handling
  • implement --web flag for license view
  • Fix license view help doc, add LICENSE.md example
  • Update help and fix heredoc indentation
  • Add SPDX ID to license list output
  • Fix ExactArgs invocation
  • Add Long for license list indicating limitations
  • Update function names
  • Reverse repo/shared package name change
  • If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.
  • Bump cli/oauth to 1.1.1
  • Add test coverage for TitleSurvey change
  • Fix failing test for pr and issue create
  • Make the X in the error message red and print with io writer
  • Handle errors from parsing hostname in auth flow
  • Apply suggestions from code review
  • Refactor tests and add new tests
  • Move API calls to queries_repo.go
  • Allow user to override markdown wrap width via $GH_MDWIDTH from environment
  • Add handling of empty titles for Issues and PRs
  • Print the login URL even when opening a browser
  • Apply suggestions from code review
  • Update SECURITY.md
  • Fix typo and wordsmithing
  • fix typo
  • Remove trailing space from heading
  • Revise wording
  • Update docs to allow community submitted designs
  • Implement license view
  • Implement gitignore view
  • implement gitignore list
  • Update license table headings and tests
  • Fix ListLicenseTemplates doc
  • fix output capitalization
  • Cleanup rendering and tests
  • Remove json output option
  • Divide shared repo package and add queries tests
  • First pass at implementing gh repo license list
  • Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine