What's Changed
✨ Features
- [gh repo view] Improve error message for forked repo by @iamazeem in #10334
- Add signer-digest, source-ref, and source-digest options for
gh attestation verify
by @malancas in #10308 - [gh pr checkout] Add --no-tags option to git fetch commands in checkout by @latzskim in #10479
- [
gh issue/pr comment
] Add--create-if-none
and prompts to create a comment if no comment already exists by @latzskim in #10427 - [gh cache delete --all] Add
--succeed-on-no-caches
flag to return exit code 0 by @iamazeem in #10327 - [gh release create] Fail when there are no new commits since the last release by @iamazeem in #10398
- update default upstream when forking repo during PR creation by @daviddl9 in #10458
🐛 Fixes
- Refactor
GetLocalAttestations
and clean up custom registry transport by @malancas in #10382 - Check
GH_REPO
too in addition to--repo
for disambiguation by @williammartin in #10539- (Fixes
gh secret
subcommands not working outside of a repository)
- (Fixes
- Fix unhandled panic in FindWorkflow and add tests by @jtmcg in #10521
- Fix checkout when URL arg is from fork and cwd is upstream by @williammartin in #10512
- [gh api] Escape package name (URL encoding) for packages endpoint by @iamazeem in #10384
- Fix
remoteResolver
caching issue by @iamazeem in #10456 - Fix gh project item-edit to allow --number 0 as a valid value by @aryanbhosale in #10417
- Add mutex to fix race in attestation test client by @codysoyland in #10439
- Base64 decode GPG passphrase in deployment workflow by @BagToad in #10546
📚 Docs & Chores
- Deep Dive Document Release Process by @williammartin in #10503
- Inconsistent format of examples in help text by @iamazeem in #10508
- Inconsistent format of description of flags (starting with lowercase letter) by @iamazeem in #10507
- Update Go version to 1.23 in CONTRIBUTING.md by @williammartin in #10504
- Fix minor auth login help typo by @williammartin in #10501
- docs: document how to revoke
gh
OAuth tokens inauth logout
's help by @BagToad in #10490 - chore: update codespaces Go version by @BagToad in #10491
- Allow injection of TUFMetadataDir in tests by @williammartin in #10478
- refactor: use a more straightforward return value by @beforetech in #10489
- Use subtests in attestation verification integration tests by @williammartin in #10463
- Fix typo in README by @iamazeem in #10445
- Update usage to lower-kebab-case by @iamazeem in #10447
- Standardize URLs by @iamazeem in #10429
- Remove trailing whitespace by @iamazeem in #10430
Dependencies
- Bump actions/attest-build-provenance from 2.2.0 to 2.2.2 by @dependabot in #10518
- Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in #10499
- Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by @dependabot in #10338