What's Changed

• Move non-integration tests to different test file by @codysoyland in #9577
• Added tenancy aware attestation commands by @kommendorkapten in #9542
• Added --active flag to the gh auth status command by @velumuruganr in #9520
• build(deps): bump github.com/sigstore/sigstore-go from 0.6.1 to 0.6.2 by @dependabot in #9601
• gh attestation verify test for custom OIDC issuers by @bdehamer in #9595
• Suggest installing Rosetta when extension installation fails due to missing darwin-arm64 binary, but a darwin-amd64 binary is available by @timrogers in #9599
• Update gh attestation verify bundle parsing and validation errors by @malancas in #9564
• Suppress attestation verify output when no TTY present by @bdehamer in #9612
• Use api subdomains for tenant hosts by @williammartin in #9618

New Contributors

• @kommendorkapten made their first contribution in #9542
• @velumuruganr made their first contribution in #9520
• @bdehamer made their first contribution in #9595
• @timrogers made their first contribution in #9599

Full Changelog: v2.56.0...v2.57.0

Important note about renewed GPG key

The Debian and RedHat releases have been signed with a new GPG key. If you are experiencing issues updating your .deb or .rpm packages, please read cli/cli#9569.

What's Changed

• Always print URL scheme to stdout by @heaths in #9471
• Quote repo names consistently in gh repo sync stdout by @muzimuzhi in #9491
• Fetch bundle from OCI registry for verify by @ejahnGithub in #9421
• Remove Internal from gh repo create prompt when owner is not an org by @jtmcg in #9465
• Drop surplus trailing space char in flag names in web by @muzimuzhi in #9495
• fix the trimming of log filenames for gh run view by @benebsiny in #9482
• "offline" verification using the bundle of attestations without any additional handling of the file by @aryanbhosale in #9523
• build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 by @dependabot in #9518
• Fix doc typo for repo sync by @muzimuzhi in #9509
• Correct the help message for -F by @Goooler in #9525
• chore: fix some function names by @crystalstall in #9555
• verify 2nd artifact without swapping order by @aryanbhosale in #9532
• gh attestation verify handles empty JSONL files by @malancas in #9541
• Enhance Linux installation docs to redirect users to GPG renewal issue, better troubleshooting support by @andyfeller in #9573
• Upgrade sigstore-go to v0.6.1 by @codysoyland in #9566
• Check for nil values to prevent nil dereference panic by @codysoyland in #9578
• build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3 by @dependabot in #9575

New Contributors

• @aryanbhosale made their first contribution in #9523
• @Goooler made their first contribution in #9525
• @crystalstall made their first contribution in #9555

Full Changelog: v2.55.0...v2.56.0

What's Changed

• Update gh variable get to use repo host by @andyfeller in #9411
• build(deps): bump actions/attest-build-provenance from 1.3.3 to 1.4.0 by @dependabot in #9400
• Unify use of tab indent in non-test source files by @muzimuzhi in #9407
• Add Acceptance Criteria requirement to triage.md for accepted issues by @jtmcg in #9435
• Improve Unix compliance gh repo set-default by @thecaffeinedev in #9431
• Document that gh run download downloads the latest artifact by default by @sato11 in #9412
• build(deps): bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in #9432
• Replace --project.* flags' name with title in docs by @jtmcg in #9443
• Wrap flags with backticks, continued by @muzimuzhi in #9444
• Improve gh release create --notes-from-tag behavior with multiline tag annotation by @babakks in #9385
• Add pr create --editor by @benebsiny in #9433
• build(deps): bump actions/attest-build-provenance from 1.4.0 to 1.4.1 by @dependabot in #9451
• Require Sigstore Bundle v0.2+ when verifying with gh attestation by @codysoyland in #9442
• build(deps): bump github.com/creack/pty from 1.1.21 to 1.1.23 by @dependabot in #9459
• Update Go and other extension workflow templates to reflect recent enhancements to cli/gh-extension-precompile by @BagToad in #9462
• Add note for external contributors to working-with-us.md by @BagToad in #9468
• Update attestation TUF root by @codysoyland in #9467
• Improve documentation for pr checks and exit codes by @thecaffeinedev in #9452
• cmd/pr/checks: Describe bucket and state JSON fields by @arunsathiya in #9439
• Add Flox as an installation option by @bryanhonof in #9396
• fix behavior for gh issue develop -b does-not-exist-on-remote by @benebsiny in #9477
• Update --project <number> flags in gh search to owner/number by @jtmcg in #9453

New Contributors

• @jtmcg made their first contribution in #9435
• @thecaffeinedev made their first contribution in #9431
• @sato11 made their first contribution in #9412
• @codysoyland made their first contribution in #9442
• @BagToad made their first contribution in #9462
• @bryanhonof made their first contribution in #9396

Full Changelog: v2.54.0...v2.55.0

What's Changed

• Remove redundant whitespace by @jessehouwing in #9334
• Remove attestation test that requires being online by @steiza in #9340
• Update documentation for gh api PATCH by @cmbuckley in #9352
• Clarify usage of template flags for PR and issue creation by @williammartin in #9354
• Expose json databaseId field for release commands by @williammartin in #9356
• Expose fullDatabaseId for PR json export by @williammartin in #9355
• Handle --bare clone targets by @hyperrealist in #9271
• Slightly clarify when CLI exits with code 4 by @williammartin in #9358
• Update sigstore-go in gh CLI to v0.5.1 by @steiza in #9366
• Exit with 1 on authentication issues by @Stausssi in #9240
• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5 by @dependabot in #9372
• build(deps): bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in #9373
• Add --remove-milestone option to issue edit and pr edit by @babakks in #9344
• handle attest case insensitivity by @ejahnGithub in #9392

New Contributors

• @cmbuckley made their first contribution in #9352
• @hyperrealist made their first contribution in #9271
• @Stausssi made their first contribution in #9240
• @ejahnGithub made their first contribution in #9392

Full Changelog: v2.53.0...v2.54.0

What's Changed

• Add --json option to variable get command by @babakks in #9128
• Add GH_DEBUG to issue template by @TWiStErRob in #9167
• Fetch variable selected repo relationship when required by @williammartin in #9256
• build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.5 to 0.7.7 by @dependabot in #9250
• Alternate gh attestation trusted-root subcommand by @steiza in #9206
• fix: indentation in 'gh release create --help' by @cchristous in #9296
• build(deps): bump actions/attest-build-provenance from 1.3.2 to 1.3.3 by @dependabot in #9305
• docs: Update documentation for gh repo create to clarify owner by @jessehouwing in #9309
• Fix panic when calling gh pr view --json stateReason by @williammartin in #9307
• Add issue create --editor by @notomo in #7193
• Add pr update-branch command by @babakks in #8953

New Contributors

• @TWiStErRob made their first contribution in #9167
• @cchristous made their first contribution in #9296
• @jessehouwing made their first contribution in #9309
• @notomo made their first contribution in #7193

Full Changelog: v2.52.0...v2.53.0

What's Changed

• feat: add -a flag to gh run list by @joshuajtward in #9162
• Attestation Verification - Buffer Fix by @Forrin in #9198
• build(deps): bump actions/attest-build-provenance from 1.2.0 to 1.3.2 by @dependabot in #9222
• build(deps): bump github.com/gorilla/websocket from 1.5.2 to 1.5.3 by @dependabot in #9211
• build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #9218
• build(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in #9217
• Remove gh at verify public beta note by @phillmv in #9243

New Contributors

• @joshuajtward made their first contribution in #9162
• @Forrin made their first contribution in #9198

Full Changelog: v2.51.0...v2.52.0

What's Changed

• Ensure signed RPMs have attestations by @andyfeller in #9143
• Add signer-repo and signer-workflow flags to gh attestation verify by @malancas in #9137
• Docs: Specify rpm repository to avoid conflicts with community repositories by @hbenali in #9151
• Replace --json-result flag with --format=json in the attestation cmd by @phillmv in #9172
• Bump go-keyring to fix keepassxc prompt confirmation by @AlanD20 in #9179
• build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0 by @dependabot in #9169
• build(deps): bump goreleaser/goreleaser-action from 5 to 6 by @dependabot in #9175
• build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2 by @dependabot in #9192
• build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #9197
• watch - handle annotation errors gracefully by @wingleung in #9113

New Contributors

• @hbenali made their first contribution in #9151
• @AlanD20 made their first contribution in #9179
• @wingleung made their first contribution in #9113

Full Changelog: v2.50.0...v2.51.0

What's Changed

• Refactor git credential flow code by @williammartin in #9089
• feat: add json output for gh pr checks by @nobe4 in #9079
• Rework first auth tests with new gitcredential abstractions by @williammartin in #9095
• list the various alias permutations for the command and subcommands, via '--help' and 'gh reference' by @gabemontero in #8824
• Removed tty message when checking for extension upgrades by @leevic31 in #9088
• Fix doc bug for gh run watch by @jasonodonnell in #9052
• feat: add support for stateReason in gh pr view by @nobe4 in #9080
• fix: rename the Attempts field to Attempt; expose in gh run view and gh run ls by @cawfeecake in #8905
• Update regex in changedFilesNames to handle quoted paths by @anda3 in #9115
• Add a gh variable get FOO command by @arnested in #9106
• Add macOS pkg installer to deployment (#7554) by @paulober in #7555
• Add integration tests for gh attestation verify shared workflow use case by @malancas in #9107
• Add build provenance for gh CLI releases by @malancas in #9087
• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4 by @dependabot in #9124
• Build completions during release on macos by @williammartin in #9136
• Clarify Mac OS Installer packages are unsigned by @andyfeller in #9140

New Contributors

• @gabemontero made their first contribution in #8824
• @jasonodonnell made their first contribution in #9052
• @anda3 made their first contribution in #9115
• @arnested made their first contribution in #9106
• @paulober made their first contribution in #7555

Full Changelog: v2.49.2...v2.50.0

What's Changed

• Improve run list doc with available --json fields by @babakks in #8934
• Fix typos by @szepeviktor in #9068
• Move config interfaces into gh package by @williammartin in #9060
• Creating doc to capture Codespace usage guidance by @andyfeller in #9066
• Fix repo fork regression by @williammartin in #9063
• Add --latest=false to gh release create docs by @kuzdogan in #8987
• build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2 by @dependabot in #9075

New Contributors

• @szepeviktor made their first contribution in #9068
• @kuzdogan made their first contribution in #8987

Full Changelog: v2.49.1...v2.49.2

What's Changed

• Do not mutate headers when initialising tableprinter by @williammartin in #9033
• Document relationship between host and active account by @williammartin in #9032
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in #9034
• Run attestation command set integration tests separately by @malancas in #9035
• Added support for jobs with long filenames by @shayn-orca in #8684
• Fix unused params across project by @williammartin in #9059
• Fix attestation verify source repository check bug by @malancas in #9053

New Contributors

• @shayn-orca made their first contribution in #8684

Full Changelog: v2.49.0...v2.49.1