fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/checkout	action	minor	v4.1.7 -> v4.2.2
actions/setup-go	action	minor	v5.0.2 -> v5.3.0
alpine	final	minor	3.20.2 -> 3.21.2
alpine	stage	minor	3.20.2 -> 3.21.2
cli/cli		minor	2.55.0 -> 2.66.0
codecov/codecov-action	action	minor	v4.5.0 -> v4.6.0
github.com/Masterminds/semver/v3	require	minor	v3.2.1 -> v3.3.1
github.com/go-vela/types	require	minor	v0.24.0 -> v0.26.0
github.com/hashicorp/go-getter	require	patch	v1.7.6 -> v1.7.8
github.com/spf13/afero	require	minor	v1.11.0 -> v1.12.0
github.com/urfave/cli/v2	require	patch	v2.27.4 -> v2.27.5
github/codeql-action	action	minor	v3.26.4 -> v3.28.8
reviewdog/action-golangci-lint	action	minor	v2.6.2 -> v2.7.0

---

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/setup-go (actions/setup-go)

v5.3.0

Compare Source

What's Changed

• Use the new cache service: upgrade @actions/cache to ^4.0.0 by @​Link- in https://github.com/actions/setup-go/pull/531
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/530
• Document update - permission section by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/533
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-go/pull/534

New Contributors

• @​Link- made their first contribution in https://github.com/actions/setup-go/pull/531

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in https://github.com/actions/setup-go/pull/496

New Contributors

• @​Shegox made their first contribution in https://github.com/actions/setup-go/pull/496

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-go/pull/500
• Upgrade IA Publish by @​Jcambass in https://github.com/actions/setup-go/pull/502
• Add architecture to cache key by @​Zxilly in https://github.com/actions/setup-go/pull/493
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Enhance workflows and Upgrade micromatch Dependency by @​priyagupta108 in https://github.com/actions/setup-go/pull/510

Bug Fixes

• Revise isGhes logic by @​jww3 in https://github.com/actions/setup-go/pull/511

New Contributors

• @​Zxilly made their first contribution in https://github.com/actions/setup-go/pull/493
• @​Jcambass made their first contribution in https://github.com/actions/setup-go/pull/500
• @​jww3 made their first contribution in https://github.com/actions/setup-go/pull/511
• @​priyagupta108 made their first contribution in https://github.com/actions/setup-go/pull/510

Full Changelog: actions/setup-go@v5...v5.1.0

cli/cli (cli/cli)

v2.66.0: GitHub CLI 2.66.0

Compare Source

gh pr view and gh pr status now respect common triangular workflow configurations

Previously, gh pr view and gh pr status would fail for pull request's (PR) open in triangular workflows. This was due to gh being unable to identify the PR's corresponding remote and branch refs on GitHub.

Now, gh pr view and gh pr status should successfully identify the PR's refs when the following common git configurations are used:

• branch.<branchName>.pushremote is set
• remote.pushDefault is set

Branch specific configuration, the former, supersedes repo specific configuration, the latter.

Additionally, if the @{push} revision syntax for git resolves for a branch, gh pr view and gh pr status should work regardless of additional config settings.

For more information, see

• https://github.com/cli/cli/issues/9363
• https://github.com/cli/cli/issues/9364
• https://github.com/cli/cli/issues/9365
• https://github.com/cli/cli/issues/9374

gh secret list, gh secret set, and gh secret delete now require repository selection when multiple git remotes are present

Previously, gh secret list, gh secret set, and gh secret delete would determine which remote to target for interacting with GitHub Actions secrets. Remotes marked as default using gh repo set-default or through other gh commands had higher priority when figuring out which repository to interact with. This could have unexpected outcomes when using gh secret commands with forked repositories as the upstream repository would generally be selected.

Now, gh secret commands require users to disambiguate which repository should be the target if multiple remotes are present and the -R, --repo flag is not provided.

For more information, see https://github.com/cli/cli/issues/4688

Extension update notices now notify once every 24 hours per extension and can be disabled

Previously, the GitHub CLI would notify users about newer versions every time an extension was executed. This did not match GitHub CLI notices, which only notified users once every 24 hours and could be disabled through an environment variable.

Now, extension update notices will behave similar to GitHub CLI notices. To disable extension update notices, set the GH_NO_EXTENSION_UPDATE_NOTIFIER environment variable.

For more information, see https://github.com/cli/cli/issues/9925

What's Changed

✨ Features

• Draft for discussing testing around extension update checking behavior by @​andyfeller in https://github.com/cli/cli/pull/9985
• Make extension update check non-blocking by @​andyfeller in https://github.com/cli/cli/pull/10239
• Ensure extension update notices only notify once within 24 hours, provide ability to disable all extension update notices by @​andyfeller in https://github.com/cli/cli/pull/9934
• feat: make the extension upgrade fancier by @​nobe4 in https://github.com/cli/cli/pull/10194
• fix: padded display by @​nobe4 in https://github.com/cli/cli/pull/10216
• Update gh attestation attestation bundle fetching logic by @​malancas in https://github.com/cli/cli/pull/10185
• Require repo disambiguation for secret commands by @​williammartin in https://github.com/cli/cli/pull/10209
• show error message for rerun workflow older than a month ago by @​iamrajhans in https://github.com/cli/cli/pull/10227
• Update gh attestation verify table output by @​malancas in https://github.com/cli/cli/pull/10104
• Enable MSI building for Windows arm64 by @​dennisameling in https://github.com/cli/cli/pull/10297
• feat: Add support for creating autolink references by @​hoffm in https://github.com/cli/cli/pull/10180
• Find PRs using @{push} by @​Frederick888 in https://github.com/cli/cli/pull/9208
• feat: Add support for viewing autolink references by @​hoffm in https://github.com/cli/cli/pull/10324
• Update gh attestation bundle fetching logic by @​malancas in https://github.com/cli/cli/pull/10339

🐛 Fixes

• gh gist delete: prompt for gist id by @​danochoa in https://github.com/cli/cli/pull/10154
• Better handling for waiting for codespaces to become ready by @​cmbrose in https://github.com/cli/cli/pull/10198
• Fix: gh gist view and gh gist edit prompts with no TTY by @​mateusmarquezini in https://github.com/cli/cli/pull/10048
• Remove naked return values from ReadBranchConfig and prSelectorForCurrentBranch by @​jtmcg in https://github.com/cli/cli/pull/10197
• Add job to deployment workflow to validate the tag name for a given release by @​jtmcg in https://github.com/cli/cli/pull/10121
• [gh run list] Stop progress indicator on failure from --workflow flag by @​iamazeem in https://github.com/cli/cli/pull/10323
• Update deployment.yml by @​andyfeller in https://github.com/cli/cli/pull/10340

📚 Docs & Chores

• Add affected version heading to bug report issue form by @​BagToad in https://github.com/cli/cli/pull/10269
• chore: fix some comments by @​petercover in https://github.com/cli/cli/pull/10296
• Update triage.md to reflect FR experiment outcome by @​jtmcg in https://github.com/cli/cli/pull/10196
• Clear up --with-token fine grained PAT usage by @​williammartin in https://github.com/cli/cli/pull/10186
• Correct help documentation around template use in gh issue create by @​andyfeller in https://github.com/cli/cli/pull/10208
• chore: fix some function names in comment by @​zhuhaicity in https://github.com/cli/cli/pull/10225
• Tiny typo fix by @​robmorgan in https://github.com/cli/cli/pull/10265
• add install instructions for Manjaro Linux by @​AMS21 in https://github.com/cli/cli/pull/10236
• Update test to be compatible with latest Glamour v0.8.0 by @​ottok in https://github.com/cli/cli/pull/10151
• Add more gh attestation verify integration tests by @​malancas in https://github.com/cli/cli/pull/10102

Dependencies

• Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by @​dependabot in https://github.com/cli/cli/pull/10215
• Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3 by @​dependabot in https://github.com/cli/cli/pull/10214
• Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8 by @​dependabot in https://github.com/cli/cli/pull/10184
• Bump google.golang.org/protobuf from 1.36.2 to 1.36.3 by @​dependabot in https://github.com/cli/cli/pull/10250
• Bump golangci-linter and address failures to prepare for Go 1.24 strictness by @​mikelolasagasti in https://github.com/cli/cli/pull/10279
• Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3 by @​dependabot in https://github.com/cli/cli/pull/10257
• Bump actions/attest-build-provenance from 2.1.0 to 2.2.0 by @​dependabot in https://github.com/cli/cli/pull/10300
• Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @​dependabot in https://github.com/cli/cli/pull/10306
• Upgrade sigstore-go to v0.7.0: fixes #​10114 formatting issue by @​codysoyland in https://github.com/cli/cli/pull/10309
• Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1 by @​dependabot in https://github.com/cli/cli/pull/10319

New Contributors

Big thank you to our many new and longtime contributors making this release happen!! ❤️ ✨

• @​zhuhaicity made their first contribution in https://github.com/cli/cli/pull/10225
• @​danochoa made their first contribution in https://github.com/cli/cli/pull/10154
• @​robmorgan made their first contribution in https://github.com/cli/cli/pull/10265
• @​iamrajhans made their first contribution in https://github.com/cli/cli/pull/10227
• @​AMS21 made their first contribution in https://github.com/cli/cli/pull/10236
• @​petercover made their first contribution in https://github.com/cli/cli/pull/10296
• @​ottok made their first contribution in https://github.com/cli/cli/pull/10151
• @​dennisameling made their first contribution in https://github.com/cli/cli/pull/10297
• @​iamazeem made their first contribution in https://github.com/cli/cli/pull/10323
• @​Frederick888 made their first contribution in https://github.com/cli/cli/pull/9208

Full Changelog: cli/cli@v2.65.0...v2.66.0

v2.65.0: GitHub CLI 2.65.0

Compare Source

What's Changed

• Document the base repo resolution functions by @​williammartin in https://github.com/cli/cli/pull/10110
• Update releasing.md by @​andyfeller in https://github.com/cli/cli/pull/10116
• Document how to set gh-merge-base by @​heaths in https://github.com/cli/cli/pull/10112
• Upgrade golang.org/x/net to v0.33.0 by @​jtmcg in https://github.com/cli/cli/pull/10135
• add pending status for workflow runs by @​dziamidchyk in https://github.com/cli/cli/pull/10143
• Remove release discussion posts and clean up related block in deployment yml by @​shauryatiwari1 in https://github.com/cli/cli/pull/10145
• docs(repo): make explicit which branch is used when creating a repo by @​nobe4 in https://github.com/cli/cli/pull/10163
• feat: Add support for listing autolink references by @​hoffm in https://github.com/cli/cli/pull/10124
• Add mention of classic token in gh auth login docs by @​jtmcg in https://github.com/cli/cli/pull/10164
• Feat: Allow setting security_and_analysis settings in gh repo edit by @​ChandranshuRao14 in https://github.com/cli/cli/pull/10139
• Upgrade generated workflows by @​jsoref in https://github.com/cli/cli/pull/10181
• Myriad fixes to provide clarity on determining tracking ref in PR create by @​williammartin in https://github.com/cli/cli/pull/10187
• Handle missing upstream configs for gh pr create by @​cmbrose in https://github.com/cli/cli/pull/10177
• fix(repo fork): add non-TTY output when fork is newly created by @​aryanbhosale in https://github.com/cli/cli/pull/10158
• Bump cli/go-gh for indirect security vulnerability by @​andyfeller in https://github.com/cli/cli/pull/10190

New Contributors

• @​dziamidchyk made their first contribution in https://github.com/cli/cli/pull/10143
• @​shauryatiwari1 made their first contribution in https://github.com/cli/cli/pull/10145
• @​hoffm made their first contribution in https://github.com/cli/cli/pull/10124
• @​ChandranshuRao14 made their first contribution in https://github.com/cli/cli/pull/10139

Full Changelog: cli/cli@v2.64.0...v2.65.0

v2.64.0: GitHub CLI 2.64.0

Compare Source

What's Changed

• docs: improve docs for browse command as of #​5352 by @​ankddev in https://github.com/cli/cli/pull/10025
• Open PR against gh-merge-base by @​heaths in https://github.com/cli/cli/pull/9712
• Add integration tests for gh attestation verify when the bundle-from-oci flag is specified by @​malancas in https://github.com/cli/cli/pull/10020
• gh repo rename help text clarifies new repo name should not include owner by @​BagToad in https://github.com/cli/cli/pull/10044
• fix: list branches in square brackets in gh run and gh codespace by @​uday-rana in https://github.com/cli/cli/pull/10043
• Bump actions/attest-build-provenance from 1.4.4 to 2.1.0 by @​dependabot in https://github.com/cli/cli/pull/10056
• Bump golang.org/x/crypto from 0.29.0 to 0.31.0 by @​dependabot in https://github.com/cli/cli/pull/10070
• Improve documentation and error messaging for local extension installations without executables by @​BagToad in https://github.com/cli/cli/pull/9933
• docs: better document auth scopes by @​ankddev in https://github.com/cli/cli/pull/10026
• Sigstore verifier logic updates by @​malancas in https://github.com/cli/cli/pull/9999
• gh pr merge --delete-branch exits with error when merge requested via merge queue by @​BagToad in https://github.com/cli/cli/pull/10074
• sundry gh at inspect improvements by @​phillmv in https://github.com/cli/cli/pull/9954
• Support pr view for intra-org forks by @​williammartin in https://github.com/cli/cli/pull/10078
• Print policy information before verifying attestations by @​malancas in https://github.com/cli/cli/pull/9891
• Improve error handling in apt setup script by @​jobegrabber in https://github.com/cli/cli/pull/10055
• Use Windows compatible file name for downloaded attestations when running gh attestation download by @​malancas in https://github.com/cli/cli/pull/10051
• Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6 by @​dependabot in https://github.com/cli/cli/pull/10094
• Perform all gh attestation verify policy options configuration in the newEnforcementCriteria() function by @​malancas in https://github.com/cli/cli/pull/10012

New Contributors

• @​ankddev made their first contribution in https://github.com/cli/cli/pull/10025
• @​uday-rana made their first contribution in https://github.com/cli/cli/pull/10043
• @​jobegrabber made their first contribution in https://github.com/cli/cli/pull/10055

Full Changelog: cli/cli@v2.63.2...v2.64.0

v2.63.2: GitHub CLI 2.63.2

Compare Source

What's Changed

• Use consistent slice ordering in run download tests by @​williammartin in https://github.com/cli/cli/pull/10006
• Fix bug when fetching bundles from OCI registry by @​malancas in https://github.com/cli/cli/pull/10019
• Use safepaths for run download by @​williammartin in https://github.com/cli/cli/pull/10009
• Error for mutually exclusive json and watch flags by @​andyfeller in https://github.com/cli/cli/pull/10016

Full Changelog: cli/cli@v2.63.1...v2.63.2

v2.63.1: GitHub CLI 2.63.1

Compare Source

What's Changed

• Fix formatting in git/client_test.go comments for linter by @​BagToad in https://github.com/cli/cli/pull/9969
• Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7 by @​dependabot in https://github.com/cli/cli/pull/9942
• Clarify which commands correspond to which DNF version under Linux install instructions by @​BagToad in https://github.com/cli/cli/pull/9976
• When renaming an existing remote as part of remote creation in gh repo fork, log the change by @​timrogers in https://github.com/cli/cli/pull/9983
• Fix PR checkout panic when base repo is not in remotes by @​williammartin in https://github.com/cli/cli/pull/9992

Security

• A security vulnerability has been identified in GitHub CLI that could create or overwrite files in unintended directories when users download a malicious GitHub Actions workflow artifact through gh run download.

  For more information, see GHSA-2m9h-r57g-45pj

Full Changelog: cli/cli@v2.63.0...v2.63.1

v2.63.0: GitHub CLI 2.63.0

Compare Source

What's Changed

• Support bare repo creation by @​williammartin in https://github.com/cli/cli/pull/9905
• Refactor the getAttestations functions by @​malancas in https://github.com/cli/cli/pull/9892
• Added a section on manual verification of the relases. by @​kommendorkapten in https://github.com/cli/cli/pull/9936
• Adding option to return baseRefOid in pr view by @​daliusd in https://github.com/cli/cli/pull/9938
• Update verification results printing by @​malancas in https://github.com/cli/cli/pull/9937
• Fix some multiline command documentation to use heredoc strings by @​BagToad in https://github.com/cli/cli/pull/9948
• Print friendly error when release create fails due to missing workflow OAuth scope by @​BagToad in https://github.com/cli/cli/pull/9791

Full Changelog: cli/cli@v2.62.0...v2.63.0

Security

• A security vulnerability has been identified in the GitHub CLI that could leak authentication tokens when cloning repositories containing git submodules hosted outside of GitHub.com and ghe.com.

  For more information, see GHSA-jwcm-9g39-pmcw

New Contributors

• @​daliusd made their first contribution in https://github.com/cli/cli/pull/9938

v2.62.0: GitHub CLI 2.62.0

Compare Source

What's Changed

• Update monotonic verification logic and testing by @​malancas in https://github.com/cli/cli/pull/9856
• Check extension for latest version when executed by @​andyfeller in https://github.com/cli/cli/pull/9866
• Shorten extension release checking from 3s to 1s by @​andyfeller in https://github.com/cli/cli/pull/9914
• Mention GitHub CLI team on discussion issues by @​andyfeller in https://github.com/cli/cli/pull/9920

Full Changelog: cli/cli@v2.61.0...v2.62.0

Security

• A security vulnerability has been identified in GitHub CLI that could allow remote code execution (RCE) when users connect to a malicious Codespace SSH server and use the gh codespace ssh or gh codespace logs commands.

  For more information, see GHSA-p2h2-3vg9-4p87

GitHub CLI notifies users about latest extension upgrades

Similar to the notification of latest gh releases, the v2.62.0 version of GitHub CLI will notify users about latest extension upgrades when the extension is used:

$ gh ado2gh
...

A new release of ado2gh is available: 1.7.0 → 1.8.0
To upgrade, run: gh extension upgrade ado2gh --force
https://github.com/github/gh-ado2gh

Why does this matter?

This removes a common pain point of extension authors as they have had to reverse engineer and implement a similar mechanism within their extensions directly.

With this quality of life improvement, there are 2 big benefits:

1. Extension authors will hopefully see increased adoption of newer releases while having lower bar to maintaining their extensions.
2. GitHub CLI users will have greater awareness of new features, bug fixes, and security fixes to the extensions used.

What do you need to do?

Extension authors should review their extensions and consider removing any custom logic previously implemented to notify users of new releases.

v2.61.0: GitHub CLI 2.61.0

Compare Source

Ensure users understand consequences before making repository visibility changes

In v2.61.0, gh repo edit command has been enhanced to inform users about consequences of changing visibility and ensure users are intentional before making irreversible changes:

1. Interactive gh repo edit visibility change requires confirmation when changing from public, private, or internal
2. Non-interactive gh repo edit --visibility change requires new --accept-visibility-change-consequences flag to confirm
3. New content to inform users of consequences
   • Incorporate GitHub Docs content into help usage and interactive gh repo edit experience
   • Expanded help usage to call out most concerning consequences
   • Display repository star and watcher counts to understand impact before confirming

What's Changed

• Add acceptance test for project command by @​jtmcg in https://github.com/cli/cli/pull/9816
• Add comprehensive testscript for gh ruleset by @​andyfeller in https://github.com/cli/cli/pull/9815
• Add comprehensive testscript for gh ext commandset by @​andyfeller in https://github.com/cli/cli/pull/9810
• Require visibility confirmation in gh repo edit by @​andyfeller in https://github.com/cli/cli/pull/9845
• Clean up skipped online tests for gh attestation verify by @​malancas in https://github.com/cli/cli/pull/9838
• gh attestation verify should only verify provenance attestations by default by @​malancas in https://github.com/cli/cli/pull/9825
• Set dnf5 commands as default by @​its-miroma in https://github.com/cli/cli/pull/9844
• Fix verbiage for deleting workflow runs by @​akx in https://github.com/cli/cli/pull/9876
• Bump github.com/creack/pty from 1.1.23 to 1.1.24 by @​dependabot in https://github.com/cli/cli/pull/9862
• gh attestation verify policy enforcement refactor by @​malancas in https://github.com/cli/cli/pull/9848
• Simplify Sigstore verification result handling in gh attestation verify by @​malancas in https://github.com/cli/cli/pull/9877
• Print empty array for gh cache list when --json is provided by @​williammartin in https://github.com/cli/cli/pull/9883
• Bump actions/attest-build-provenance from 1.4.3 to 1.4.4 by @​dependabot in https://github.com/cli/cli/pull/9884
• Create the automatic key when specified with -i by @​cmbrose in https://github.com/cli/cli/pull/9881
• fix: gh pr create -w ignore template flag by @​nilvng in https://github.com/cli/cli/pull/9863

New Contributors

• @​akx made their first contribution in https://github.com/cli/cli/pull/9876
• @​nilvng made their first contribution in https://github.com/cli/cli/pull/9863

Full Changelog: cli/cli@v2.60.1...v2.61.0

v2.60.1: GitHub CLI 2.60.1

Compare Source

This is a small patch release to fix installing gh via go install which was broken with v2.60.0.

What's Changed

• Update testscript to use hard fork by @​williammartin in https://github.com/cli/cli/pull/9821

Full Changelog: cli/cli@v2.60.0...v2.60.1

v2.60.0: GitHub CLI 2.60.0

Compare Source

What's Changed

• Add ArchivedAt field by @​tsukasaI in https://github.com/cli/cli/pull/9790
• Include startedAt, completedAt in run steps data by @​andyfeller in https://github.com/cli/cli/pull/9774
• Adjust environment help for host and tokens by @​williammartin in https://github.com/cli/cli/pull/9809
• Add handling of empty titles for Issues and PRs by @​jtmcg in https://github.com/cli/cli/pull/9701
• LiveSigstoreVerifier.Verify should error if no attestations are present by @​phillmv in https://github.com/cli/cli/pull/9742
• gh at verify retries fetching attestations if it receives a 5xx by @​phillmv in https://github.com/cli/cli/pull/9797
• Prevent local extension installations with invalid names and conflicts with core commands and other extensions by @​BagToad in https://github.com/cli/cli/pull/9794
• Rewrite a sentence in CONTRIBUTING.md by @​muzimuzhi in https://github.com/cli/cli/pull/9772
• Use new GitHub preview terms in working-with-us.md by @​BagToad in https://github.com/cli/cli/pull/9800
• Use new GitHub previews terminology in attestation commands' help docs by @​BagToad in https://github.com/cli/cli/pull/9799
• Clarify in README that gh is supported on GitHub Enterprise Cloud by @​BagToad in https://github.com/cli/cli/pull/9805
• build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6 by @​dependabot in https://github.com/cli/cli/pull/9752

Acceptance Test Changes

• Add acceptance tests for workflow, run, and cache commands by @​BagToad in https://github.com/cli/cli/pull/9766
• Add basic api acceptance tests by @​BagToad in https://github.com/cli/cli/pull/9770
• Add acceptance tests for release commands by @​BagToad in https://github.com/cli/cli/pull/9771
• Add acceptance tests for org and ssh-key commands by @​BagToad in https://github.com/cli/cli/pull/9812
• Add acceptance tests for gh auth commands by @​jtmcg in https://github.com/cli/cli/pull/9787
• Add acceptance tests for repo commands by @​jtmcg in https://github.com/cli/cli/pull/9783
• Add acceptance tests for search command by @​BagToad in https://github.com/cli/cli/pull/9786
• Add acceptance tests for variable commands by @​andyfeller in https://github.com/cli/cli/pull/978
• Add testscripts for gpg-key and label commands by @​williammartin in https://github.com/cli/cli/pull/9811
• Use forked testscript for token redaction by @​williammartin in https://github.com/cli/cli/pull/9804
• Add acceptance tests for secret commands by @​andyfeller in https://github.com/cli/cli/pull/9782
• Note token redaction in Acceptance test README by @​williammartin in https://github.com/cli/cli/pull/9813

New Contributors

• @​tsukasaI made their first contribution in https://github.com/cli/cli/pull/9790

Full Changelog: cli/cli@v2.59.0...v2.60.0

v2.59.0: GitHub CLI 2.59.0

Compare Source

What's Changed

• Allow community submitted design work by @​BagToad in https://github.com/cli/cli/pull/9683
• Improve SECURITY.md with expectations for privately reported vulnerabilities by @​BagToad in https://github.com/cli/cli/pull/9687
• Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS device by @​timrogers in https://github.com/cli/cli/pull/9650
• Print the login URL even when opening a browser by @​ulfjack in https://github.com/cli/cli/pull/7091
• configurable maxwidth for markdown WithWrap() by [@​smemsh](https://redir

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 10 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.0 -> 1.23.5
cloud.google.com/go	v0.110.10 -> v0.116.0
cloud.google.com/go/compute/metadata	v0.2.3 -> v0.6.0
github.com/cpuguy83/go-md2man/v2	v2.0.4 -> v2.0.5
golang.org/x/crypto	v0.21.0 -> v0.32.0
golang.org/x/net	v0.23.0 -> v0.34.0
golang.org/x/oauth2	v0.15.0 -> v0.25.0
golang.org/x/sync	v0.5.0 -> v0.10.0
golang.org/x/sys	v0.18.0 -> v0.29.0
golang.org/x/text	v0.14.0 -> v0.21.0
golang.org/x/time	v0.5.0 -> v0.8.0