Skip to content

⬆️ Update dependency aqua:cli/cli to v2.97.0 - #27

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/aqua-cli-cli-2.x
Open

⬆️ Update dependency aqua:cli/cli to v2.97.0#27
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/aqua-cli-cli-2.x

Conversation

@renovate

@renovate renovate Bot commented Jan 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
aqua:cli/cli tools minor 2.2.0 → 2.97.0

Release Notes

cli/cli (aqua:cli/cli)

v2.97.0: GitHub CLI 2.97.0

Compare Source

Security

Four security vulnerabilities have been identified, and fixed, in this release. Users are advised to update gh to version v2.97.0 as soon as possible.

Several commands (including gh gist view, gh api, gh pr diff, gh release download --output -, gh codespace logs, gh skills preview, and gh agent-task view/create) printed externally controlled content without neutralizing terminal escape sequences, allowing escape sequence injection into a user's terminal.

See GHSA-3m3g-3wcr-px46 for more information.

Some request URLs were built without escaping their variable path components, so a value containing URL path metacharacters could alter the request path and cause gh to address a different resource than intended.

See GHSA-4fjg-2h4q-fwg3 for more information.

gh auth status (without --show-token) could print a portion of the authentication token in plaintext for token types whose format contains an underscore after the prefix, such as github_pat_*, ghs_*, and ghu_*.

See GHSA-cg6r-mpgc-h9mm for more information.

gh attestation verify built the certificate matcher from --signer-repo and --signer-workflow without escaping regex metacharacters, so a lookalike repository or workflow name could satisfy a matcher intended for a trusted signer and bypass attestation verification.

See GHSA-mm27-mwq9-fr5g for more information.

Address project fields and items by name in gh project

gh project item-edit and gh project item-list can now reference project fields and single-select options by name:

# Set an item's field by name
gh project item-edit 1 --owner monalisa --url <url> --field "Status" --value "In Progress"

# Show named fields as extra columns
gh project item-list 1 --owner "@me" --field "Status" --field "Priority"

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: cli/cli@v2.96.0...v2.97.0

v2.96.0: GitHub CLI 2.96.0

Compare Source

Security

A security vulnerability has been identified, and fixed, that could allow command execution on a user's computer when connecting to a malicious Codespace via gh codespace jupyter.

Users of gh codespace jupyter are advised to update gh to version v2.96.0 as soon as possible.

For more information see: GHSA-8cg3-r6g9-fpg2

Download release assets without authentication

gh release download now works against public repositories without authentication, matching gh extension install. A token is still used when one is present:

# Download assets from a public repository, no login required
gh release download v2.96.0 --repo cli/cli

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: cli/cli@v2.95.0...v2.96.0

v2.95.0: GitHub CLI 2.95.0

Compare Source

Read repository files and directories with gh repo read-file and gh repo read-dir

Two new preview commands read repository contents without cloning:

# Read a single file to stdout
gh repo read-file README.md --repo cli/cli

# Read from a specific branch, tag, or commit
gh repo read-file go.mod --ref v2.94.0 --repo cli/cli

# Write a file to disk (use --clobber to overwrite)
gh repo read-file README.md --output ./README.md --repo cli/cli

# List the entries in a directory
gh repo read-dir script --repo cli/cli

Both commands default to the repository's default branch, accept --ref to target any branch, tag, or commit, and support --json, --jq, and --template for scripting. This makes it easy for agents and automation to inspect a repo without a full checkout.

[!NOTE]
gh repo read-file and gh repo read-dir are in preview and subject to change without notice.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

Full Changelog: cli/cli@v2.94.0...v2.95.0

v2.94.0: GitHub CLI 2.94.0

Compare Source

Issue types, sub-issues, and relationships in gh issue

issue-view-monas-cafe-with-frame

This release brings GitHub's advanced issue features to gh issue create, edit, view, and list. You can set and view an issue's type, organize work with sub-issues, and track blocked-by and blocking relationships without leaving the command line:

# Set an issue's type
gh issue create --type Bug
gh issue edit 123 --type Bug

# Organize work with sub-issues
gh issue create --parent 100
gh issue edit 100 --add-sub-issue 123

# Track blocked-by and blocking relationships
gh issue create --blocked-by 200
gh issue edit 123 --add-blocking 300

Issue types and sub-issues are available on GitHub.com and GHES 3.17+; relationships require GHES 3.19+.

Manage discussions with gh discussion

discussion-view-monas-cafe-with-frame

This release introduces the discussion command set for working with GitHub Discussions in gh:

# List discussions
gh discussion list

# View a discussion, its comments, or replies to a comment
gh discussion view 123 --comments

# Create a discussion
gh discussion create

# Edit a discussion
gh discussion edit 123

# Comment on a discussion
gh discussion comment 123

# Reply to a comment using its URL
gh discussion comment <url>

Run gh discussion --help for more information.

[!NOTE]
The discussion command set is in preview and is subject to change without notice.

Equip your agents with new gh features

Teach your agents how to leverage new GitHub CLI features on release day by installing the gh skill:

# Install
gh skill install cli/cli gh --scope user

# Or update
gh skill update gh

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

Full Changelog: cli/cli@v2.93.0...v2.94.0

v2.93.0: GitHub CLI 2.93.0

Compare Source

Security

A security vulnerability has been identified, and fixed, that would incorrectly include authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands.

Users are advised to update gh to version v2.93.0 as soon as possible.

For more information see: GHSA-8xvp-7hj6-mcj9

Support agents in gh secret command set

The gh secret command set can now set agent secrets. For more information, see "Configuring secrets and variables for Copilot cloud agent".

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: cli/cli@v2.92.0...v2.93.0

v2.92.0: GitHub CLI 2.92.0

Compare Source

Security

A security vulnerability has been identified, and fixed, that could allow terminal escape sequence injection when users view GitHub Actions workflow logs using gh run view --log or gh run view --log-failed.

Users are advised to update gh to version v2.92.0 as soon as possible.

For more information see: GHSA-crc3-h8v6-qh57

Support GitHub Enterprise Cloud (GHEC) in skill commandset

Now gh skill subcommands (install, preview, publish, search, update) are able to work with GHEC hosts with data residency.

Add --allow-hidden-dirs flag to skill preview

Following the addition of --allow-hidden-dirs to skill install in the previous release, now the flag is also supported in skill preview, allowing users to preview skills located in hidden (dot-prefixed) directories such as .claude/skills/, .agents/skills/, and .github/skills/.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: cli/cli@v2.91.0...v2.92.0

v2.91.0: GitHub CLI 2.91.0

Compare Source

GitHub CLI now collects pseudonymous telemetry

To better understand how features are used in practice, especially as agentic adoption grows, GitHub CLI now sends pseudonymous telemetry.

See Telemetry for more details on what's collected, why, and how to opt out.

Support more agents in gh skill

Thanks to community feedback, gh now supports a large number of agent hosts. Run gh skill install --help for the list of available agents.

Improve skill discovery

gh skill install now adds the --allow-hidden-dirs flag to support discovering skills in hidden (dot-prefixed) directories such as .claude/skills/, .agents/skills/, and .github/skills/.

Detect skills re-published from other sources

GitHub CLI now detects if the skill to be installed is re-published from an upstream source and offers the option to install it from there. The --upstream flag is also added for non-interactive use cases.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores

Full Changelog: cli/cli@v2.90.0...v2.91.0

v2.90.0: GitHub CLI 2.90.0

Compare Source

Manage agent skills with gh skill (Public Preview)

Agent skills are portable sets of instructions, scripts, and resources that teach AI coding agents how to perform specific tasks. The new gh skill command makes it easy to discover, install, manage, and publish agent skills from GitHub repositories - right from the CLI.


# Discover skills
gh skill search copilot

# Preview a skill without installing
gh skill preview github/awesome-copilot documentation-writer

# Install a skill
gh skill install github/awesome-copilot documentation-writer

# Pin to a specific version
gh skill install github/awesome-copilot documentation-writer --pin v1.2.0

# Check installed skills for updates
gh skill update --all

# Validate and publish your own skills
gh skill publish --dry-run

Skills are automatically installed to the correct directory for your agent host. gh skill supports GitHub Copilot, Claude Code, Cursor, Codex, Gemini CLI, and Antigravity. Target a specific agent and scope with --agent and --scope flags.

gh skill publish validates skills against the Agent Skills specification and checks remote settings like tag protection and immutable releases to improve supply chain security.

Read the full announcement on the GitHub Blog.

gh skill is launching in public preview and is subject to change without notice.

Official extension suggestions

When you run a command that matches a known official extension that isn't installed (e.g. gh stack), the CLI now offers to install it instead of showing a generic "unknown command" error.

This feature is available for github/gh-aw and github/gh-stack.

When possible, you'll be prompted to install immediately. When prompting isn't possible, the CLI prints the gh extension install command to run.

gh extension install no longer requires authentication

gh extension install previously required a valid auth token even though it only needs to download a public release asset. The auth check has been removed, so you can install extensions without being logged in.

What's Changed

✨ Features
🐛 Fixes

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from a8acc9c to f56d8aa Compare January 21, 2026 21:48
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.85.0 ⬆️ Update dependency aqua:cli/cli to v2.86.0 Jan 21, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch 2 times, most recently from 344fbf5 to 1caf435 Compare February 18, 2026 22:11
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.86.0 ⬆️ Update dependency aqua:cli/cli to v2.87.0 Feb 18, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from 1caf435 to a84d337 Compare February 20, 2026 22:08
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.87.0 ⬆️ Update dependency aqua:cli/cli to v2.87.2 Feb 20, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from a84d337 to a7b6909 Compare February 23, 2026 19:49
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.87.2 ⬆️ Update dependency aqua:cli/cli to v2.87.3 Feb 23, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from a7b6909 to ca5bcbf Compare March 10, 2026 22:35
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.87.3 ⬆️ Update dependency aqua:cli/cli to v2.88.0 Mar 10, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from ca5bcbf to 7013049 Compare March 12, 2026 13:47
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.88.0 ⬆️ Update dependency aqua:cli/cli to v2.88.1 Mar 12, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from 7013049 to 4e3c455 Compare March 26, 2026 17:01
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.88.1 ⬆️ Update dependency aqua:cli/cli to v2.89.0 Mar 26, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from 4e3c455 to a9e4bd3 Compare April 16, 2026 20:09
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.89.0 ⬆️ Update dependency aqua:cli/cli to v2.90.0 Apr 16, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from a9e4bd3 to ebaf078 Compare April 22, 2026 17:51
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.90.0 ⬆️ Update dependency aqua:cli/cli to v2.91.0 Apr 22, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from ebaf078 to 60b33cf Compare April 28, 2026 16:36
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.91.0 ⬆️ Update dependency aqua:cli/cli to v2.92.0 Apr 28, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from 60b33cf to 9612afd Compare May 27, 2026 18:35
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.92.0 ⬆️ Update dependency aqua:cli/cli to v2.93.0 May 27, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from 9612afd to 5ad65b4 Compare June 11, 2026 02:43
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.93.0 ⬆️ Update dependency aqua:cli/cli to v2.94.0 Jun 11, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from 5ad65b4 to 3f1684e Compare June 17, 2026 20:35
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.94.0 ⬆️ Update dependency aqua:cli/cli to v2.95.0 Jun 17, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from 3f1684e to e04ecb0 Compare July 3, 2026 01:00
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.95.0 ⬆️ Update dependency aqua:cli/cli to v2.96.0 Jul 3, 2026
@renovate
renovate Bot force-pushed the renovate/aqua-cli-cli-2.x branch from e04ecb0 to 0cd8306 Compare July 31, 2026 02:44
@renovate renovate Bot changed the title ⬆️ Update dependency aqua:cli/cli to v2.96.0 ⬆️ Update dependency aqua:cli/cli to v2.97.0 Jul 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants