{"schema_version":"1.7.5","id":"openSUSE-SU-2026:21310-1","published":"2026-07-10T08:47:45Z","modified":"2026-07-13T18:24:58.653927515Z","related":["CVE-2024-52308","CVE-2025-27144"],"upstream":["CVE-2024-52308","CVE-2025-27144"],"summary":"Security update for gh","details":"This update for gh fixes the following issues:\n\nChanges in gh:\n\n- Update to version 2.96.0:\n  * Critical security fix: patched vulnerability in gh codespace jupyter\n    that could allow command execution when connecting to malicious\n    Codespaces\n  * Merge commit from fork\n  * Fix concurrent map writes in codespace port forwarding (#13313)\n  * docs: fix broken install command and link/grammar errors (#13690)\n  * Clarify `--clone` boolean flag behaviour in `gh repo fork` help (#13786)\n  * docs: fix duplicated word in primer README (#13677)\n  * fix(skills): honor --dir without agent prompt (#13766)\n  * Support antigravity-cli and antigravity2.0 in gh skill (#13784)\n  * chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0\n  * docs(search): reword raw qualifier examples\n  * chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3\n  * docs(search): simplify raw qualifier examples\n  * docs(search): add examples for multiple qualifiers\n  * chore(deps): bump actions/attest from 4.1.0 to 4.1.1\n  * chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0\n  * fix(cmdutil): honor DisableAuthCheck under repo-override parents\n  * feat(release): allow download without authentication\n  * fix(release): don't let a failed draft lookup mask a found release\n  * Fix flaky TestHuhPrompterMultiSelectWithSearchPersistence on slow architectures (#13675)\n  * Detect additional third-party coding agents (#13722)\n  * Add security disclosure guidance to AGENTS.md (#13720)\n  * chore(deps): bump actions/checkout from 6.0.3 to 7.0.0\n  * chore(deps): bump github.com/microsoft/dev-tunnels from 0.1.19 to 0.1.27\n  * ci: pin GitHub Actions to commit SHAs\n  * chore(deps): bump github.com/google/go-containerregistry\n  * Use int64 for GitHub database IDs (#13403)\n  * docs: fix broken anchor link in release-process-deep-dive (#13688)\n  * Cover all printSummary branches in a table test\n  * fix(skills): install universal agent to ~/.agents/skills\n  * fix: show checks summary when all checks were cancelled\n- The following bugs are no longer present in this release (may have\n  been fixed in previous releases): bsc#1234566, bsc#1235345,\n  bsc#1237669, bsc#1239496, bsc#1241837, bsc#1243930, bsc#1251464,\n  bsc#1251666, bsc#1253929, bsc#1258617, bsc#1260271, bsc#1262339,\n  bsc#1262943, bsc#1265405, bsc#1265777, bsc#1266173, bsc#1266618,\n  bsc#1266975, bsc#1267158, bsc#1269427\n\n- Update to version 2.95.0:\n  * feat(skills): list available skills when install runs non-interactively (#13548)\n  * fix(skills): stage updates in a temp dir and swap in-place (#13449)\n  * feat: add `repo read-file` and `repo read-dir` (#13580)\n  * Bump Go in devcontainer\n  * Make filtering by bot authors more discoverable (#13642)\n  * chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0\n  * chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0\n  * chore(deps): bump charm.land/lipgloss/v2 from 2.0.3 to 2.0.4\n  * chore(deps): bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.1\n  * chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0\n  * test(skill): fix test case name\n  * test(skill): merge isolated test into table\n  * Potential fix for pull request finding\n  * docs(discussion): polish help docs\n  * chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2\n  * fix test\n  * support custom CLAUDE_CONFIG_DIR in install\n\n- Update to version 2.94.0:\n  * Add gh discussion and Issues 2.0 reference to the `gh` skill, plus a README note (#13631)\n  * fix(discussion comment): fix bug in requiring body/body-file in add/edit mode\n  * chore(discussion/client): rename client files\n  * test(acceptance): fix discussion comment acceptance tests\n  * fix(discussion/shared): error on out-of-range discussion number in URL\n  * fix(discussion view): print only requested items in non-tty output\n  * docs(discussion list): clarify answered examples refer to Q&A discussions\n  * fix(discussion view): show comments and replies in chronological order\n  * refactor(discussion list): simplify no-results message and use success icon helper\n  * fix(discussion view): use color scheme method for success icon\n  * fix(discussion view): error when --comments is used with a comment argument\n  * test(acceptance): use positional comment argument in discussion view test\n  * refactor(discussion/client): take host instead of repo in GetComment\n  * refactor(discussion view): replace --replies flag with positional comment argument\n  * chore: fix formatting\n  * test(acceptance): cover discussion comment URLs in comment and view tests\n  * feat(discussion): support comment URLs in --replies and comment command\n  * test(discussion comment): add non-tty delete flag validation test case\n  * test(acceptance): add discussion comment acceptance test\n  * refactor(acceptance): use discussion comment command instead of raw API calls\n  * feat(discussion): add discussion comment command\n  * feat(discussion/client): add comment manipulation methods\n  * chore: apply formatting\n  * chore(discussion): remove unused HttpClient field from create and edit\n  * fix(discussion): remove redundant error wrapping on ListCategories\n  * test(discussion list): rename TestNewCmdList2 to TestNewCmdList\n  * Add terminal-mockup canvas extension for marketing screenshots (#13612)\n  * fix(discussion): add missing repo flag override\n  * test(discussion list): consolidate tests into table-driven format\n  * docs(acceptance): add new jq2env and jq-assert functions\n  * test(discussion): add acceptance tests for discussion commands\n  * fix(discussion list): print \"answered\" instead of checkmark in non-tty mode\n  * refactor(discussion/client): precheck discussions enabled via getRepositoryMeta\n  * refactor(discussion): add Cursor field and ExportData to DiscussionListResult\n  * feat(extension): alias `uninstall` to `remove`\n  * chore(deps): bump actions/checkout from 6.0.2 to 6.0.3\n  * chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1\n  * chore(deps): bump charm.land/bubbletea/v2 from 2.0.6 to 2.0.7\n  * docs(discussion view): improve long help text for clarity\n  * fix(discussion): handle partial failure on create/update label mutations\n  * Clean up deferred issue update helper (#13584)\n  * Auto-install official extension stubs in CI (#13581)\n  * chore(discussion/client): fix formatting\n  * docs(discussion/client): add godoc to exported consts\n  * refactor(discussion list): make pager call/error consistent with view command\n  * refactor(discussion): extract command-level consts for enums\n  * fix(discussion): various polish and small fixes\n  * Merge pull request #13057 from cli/kw/issues-2.0\n  * Bump Go to 1.26.4\n  * chore(deps): bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15\n  * address review comments\n  * feat(discussion edit): add discussion edit command\n  * feat(discussion create): add discussion create command\n  * feat(discussion view): add discussion view command\n  * feat(discussion list): add discussion list command\n  * feat(discussion/shared): add shared utilities for discussion commands\n  * feat(discussion/client): add discussion client package\n  * Use github-copilot agent ID in skill list tests and help text\n  * Rename hosts field and helpers to agentHosts in skill list\n  * Stat SKILL.md before reading in skill list\n  * Sanitize terminal control characters in skill list output\n  * chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1\n  * chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.9 to 2.13.10\n  * address copilot comments, clarify text\n  * address copilot comments\n  * handle skills in skills/ folder when running list command, by marking them as published\n  * address bagtoad's feedback\n  * add --all flag to install all skills in a repo\n  * fix warning message to make it clear\n  * skip prompting for skills without metadata when running gh skill update --all\n  * add logic to preview too\n  * fix discovery support in nested dirs\n  * fix test\n  * fix tests\n  * fix linting\n  * add skill list command\n\n- Update to version 2.93.0:\n  * test(attestation): align integration tests with new external HTTP client\n  * fix: use separate http client for non-github hosts\n  * docs: note immutable releases starting v2.93.0\n  * bump golang.org/x/net\n  * Link to Accessibility category for community discussions instead of ACR (#13481)\n  * Allow agents as application for secrets (#13421)\n  * SHA pin first-party GitHub Actions\n  * chore(deps): bump github/codeql-action from 4 to 4.35.5\n  * Add 3 day dependabot cooldown period\n  * chore(deps): bump github.com/google/go-containerregistry\n  * Run govulncheck daily instead of weekly\n  * Merge pull request #13486 from cli/tommy/update-x-crypto\n  * Potential fix for pull request finding\n  * Potential fix for pull request finding\n  * Stop bumping homebrew on release\n  * chore(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#13461)\n  * Remove discussion workflow\n  * Remove dependency on persistent token\n  * Remove third-party license debris\n  * chore(deps): bump github.com/theupdateframework/go-tuf/v2\n  * docs: drop --repo gh-cli from dnf install lines\n  * Assert digest prefix in release verify no-attestation tests\n  * chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1\n  * Derive digest algorithm from ref length in release verify commands\n  * docs: fix duplicated \"of\" in release-process-deep-dive\n  * chore(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0\n  * Simplify bump-go.sh toolchain logic\n  * Remove unnecessary null checks in jq output handling\n  * Rewrite script to use go mod edit instead of grep/sed\n  * Address code review comments\n  * Improve version comparison to handle both X.Y.0 and X.Y.Z formats\n  * Update bump-go.sh to handle missing toolchain directive\n  * Initial plan\n  * Update CODEOWNERS for skills directory ownership\n  * chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0\n  * chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0\n  * chore(deps): bump golang.org/x/term from 0.42.0 to 0.43.0\n  * fix(copilot): update test assertion to match updated error message\n  * fix(copilot): provide full path to copilot binary on exec error\n  * fix(copilot): hint to run copilot directly when exec fails\n  * fix(telemetry): use CREATE_NO_WINDOW to prevent tzutil console flash on Windows\n  * Fix triage-pull-requests skipping PRs that open as draft\n  * chore(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0\n  * Bump Go toolchain to 1.26.3\n  * Fix skills acceptance tests\n  * Add explicit build tags to platform-specific echo test files\n  * Address review feedback on echo mode polling\n  * Poll TTY echo mode instead of sleeping in password tests\n  * Record accessibility state in telemetry\n  * Bump copilot telemetry sampling to 100%\n  * chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6\n  * Remove numberFieldOnly API shortcut\n  * Grammar fixes\n  * Switch from actions/attest-build-provenance to actions/attest\n  * Enable extended PR screening for external PRs\n  * Fix flaky Password test by increasing echo mode setup timeout\n  * Add missing //go:build integration tag to verify_integration_test.go\n  * chore(deps): bump goreleaser/goreleaser-action from 7.0.0 to 7.2.1\n  * Apply patch from code review feedback.\n  * Print `gh auth refresh` for 401 returns\n  * Update installation commands for GitHub CLI\n\n- Update to version 2.92.0:\n  * Bump Go to 1.26.2\n  * chore(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22\n  * Update command.go\n  * Add \"Resource not accessible\" to ProjectsV2IgnorableError\n  * chore: fix zsh completion on debian\n  * install_linux: correct typo in Homebrew copy\n  * chore(deps): bump charm.land/bubbletea/v2 from 2.0.2 to 2.0.6\n  * chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.8 to 2.13.9\n  * Update acceptance/testdata/workflow/run-view-log-escape-sequences.txtar\n  * Fix log terminal injection\n  * fix(skills): include --allow-hidden-dirs in preview hint from install\n  * Install skills flat by Name, not namespaced InstallName\n  * feat(skills): add --allow-hidden-dirs flag to preview command\n  * feat(skills): support GHEC with data residency hosts\n  * Fix SetSampleRate not updating sample_rate dimension\n  * fix: yaml.github-actions.security.run-shell-injection.run-shell-injection security vulnerability\n  * Enable telemetry without env var\n  * test(telemetry): assert ANSI escape chars for color codes\n  * fix(telemetry): lower bias in sample bucket calc\n  * feat(skills): detect re-published skills and offer upstream install\n  * Log when there is no telemetry\n  * Add telemetry command\n  * Record official extension telemetry\n  * fix(skills): prioritize DisplayName/Name over InstallName match\n  * fix(skills): match skills by install name in preview command\n  * use the right json field names for skills\n  * fix totalCount guidance\n  * docs(skills): note --template collisions and single-string search\n  * backtick skill filename\n  * docs(skills): drop hand-copied naming rules from gh-skill\n  * use hyphen instead\n  * docs(skills): add gh and gh-skill agent skills\n  * feat(skills): support nested skills/ directories in discovery\n  * fix(skills): make --fix and --dry-run mutually exclusive, suppress publish prompt\n  * fix(skills): use canonical 'gh skill' not 'gh skills' alias\n  * fix(skills): stop publish --fix from publishing\n  * Include CI context in telemetry\n  * refactor: decouple hidden-dir filtering from discovery layer\n  * Add support for installation in multiple agent hosts in `gh skills install` (#13209)\n  * Add skills specific telemetry\n  * chore(deps): bump github.com/google/go-containerregistry\n  * Do not send telemetry for aliases\n  * Apply review feedback\n  * Disable telemetry for GHES\n  * remove misleading text\n  * Add sampled command telemetry\n  * Update publish_test.go\n  * refactor: replace real git with run.CommandStubber in publish tests\n  * fix: apply review feedback — nil HttpClient, local dedup type\n  * Remove dispatch after install, install only\n  * Rename official extension files and types to stubs\n  * Replace em-dashes with regular dashes\n  * Address PR review feedback\n  * Add no em dash rule to AGENTS.md\n  * Suggest and install official extensions via stub commands\n  * Add @cli/code-reviewers to all CODEOWNERS rules\n  * Add cli/skill-reviewers as CODEOWNERS for skills packages\n  * style: fix gofmt alignment in publish tests\n  * fix: update acceptance test to match current error message\n  * fix: address post-merge review feedback for skills commands\n  * refactor: remove redundant nil-client fallback in skills publish (#13168)\n  * feat(skills): auto-push unpushed commits before publish\n  * refactor: use shared discovery logic in publish command\n  * fix(skill publish): remove misleading `validate` alias\n  * docs(skill): improve help docs\n  * fix skills names in examples\n  * Disable auth check for `gh extension install`\n  * Suggest and install official extensions for unknown commands\n  * Update acceptance/testdata/skills/skills-search-noresults.txtar\n  * URL-encode parentPath in skills discovery API call\n  * Disable auth check for local-only skill flags\n  * fix: address review feedback on namespace changes\n  * chore: remove unused newTestGitClient function\n  * fix: preserve namespace in skills search deduplication\n  * fix: use target directory remotes in skills publish\n  * fix: enforce size cap on first preview file, surface corrupted skills, fail on path traversal\n  * fix: align relevanceScore comments with implementation and fix typo\n  * chore(deps): bump charm.land/lipgloss/v2 from 2.0.2 to 2.0.3\n  * chore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21\n  * address review comments\n  * clean up interface and fix a few bugs\n  * cleanup frontmatter fields\n  * add .agents/skills as default installation path for hosts that support it: cursor, codex, gemini CLI, github copilot, antigravity.\n  * show loading spinner during installation, even for multi-file skills\n  * use markdown renderer in preview when previewing multi-file skills\n  * Expand test coverage and fix invariants/bugs\n  * add core logic and improve test coverage\n  * improve test coverage/cleanup\n  * register initial skills commands\n  * add skills command scaffold\n  * docs: fix SHA512 checksum for GPG key\n  * chore(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0\n  * chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0\n  * chore(deps): bump github.com/sigstore/timestamp-authority/v2\n  * docs: add sha/md5 checksums of keyring files\n  * chore(deps): bump github.com/google/go-containerregistry\n  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.5.0 to 0.5.1\n  * chore: delete experimental script/debian-devel\n  * chore(deps): bump charm.land/bubbles/v2 from 2.0.0 to 2.1.0\n  * Document dependency CVE policy in SECURITY.md\n  * docs: add manual PGP key verification commands\n  * chore: re-add toolchain to go1.26.2\n  * docs: polish wording around PGP keys\n  * docs: include PGP key fingerprints\n  * Fix infinite loop in 'gh release list --limit 0'\n  * chore(deps): bump github.com/in-toto/attestation from 1.1.2 to 1.2.0\n  * chore(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5\n  * test(internal/authflow): assert user-agent header is not modified/added\n  * replace github.com/golang/snappy with klauspost/compress/snappy\n  * docs: require tests and linter pass before committing\n  * fix(auth): preserve User-Agent in authflow getViewer\n  * fix(api): propagate InvokingAgent in gh api HTTP client\n  * chore(deps): bump github.com/yuin/goldmark from 1.7.16 to 1.8.2\n  * chore(deps): bump advanced-security/filter-sarif from 1.0.1 to 1.1\n\n- Update to version 2.89.0:\n  * Ensure huh prompter cleans up\n  * fix(huh prompter): remove unused fields and imports\n  * go mod tidy\n  * feat(huh prompter): clear search input after submitting query\n  * refactor(huh prompter): custom Field for MultiSelectWithSearch\n  * feat(huh prompter): add placeholder to search input\n  * fix(huh prompter): use synchronized accessors to eliminate data race\n  * fix(accessible prompter): update test expectations for huh v2\n  * refactor(huh prompter): pipe-based test harness with full coverage\n  * test(huh prompter): add table-driven tests for all prompt types\n  * Upgrade to huh/v2 and fix selection persistence in MultiSelectWithSearch\n  * Fix gofmt alignment for prompter-enabled fields in IOStreams\n  * Use LayoutStack for huhPrompter MultiSelectWithSearch\n  * Add experimental huh-only prompter gated by GH_EXPERIMENTAL_PROMPTER\n  * Add nameWithOwner to necessary tests\n  * fix(pr view): fetch nameWithOwner in headRepository GraphQL query\n  * test(acceptance): remove run-download-traversal test\n  * fix(acceptance): set git identity in testscript sandbox\n  * internal/codespaces/portforwarder: define err in go func instead of use err defined in outer scope\n  * chore(deps): bump github.com/zalando/go-keyring from 0.2.6 to 0.2.8\n  * Update docs/triage.md\n  * Update docs/triage.md\n  * Align triage.md with unified triage process\n  * Fix typo: remove extra space in README.md link\n  * fix(survey): use useReviewerSearch consistently in prompt path\n  * fix(pr create): wire up @copilot assignee replacement and [bot] suffix\n  * refactor(survey): simplify ApiActorsSupported in RepoMetadataInput\n  * docs(featuredetection): document GHES removal criteria for ApiActorsSupported\n  * refactor(featuredetection): rename ActorIsAssignable to ApiActorsSupported\n  * refactor(pr shared): consolidate ActorAssignees and ActorReviewers into ApiActorsSupported\n  * refactor(pr shared): extract SpecialAssigneeReplacer for @me and Copilot expansion\n  * chore(deps): bump github.com/google/go-containerregistry\n  * Record agentic invocations in User-Agent header\n  * Address review: table tests, godocs, code style\n  * Add AGENTS.md optimized for AI agent token efficiency\n  * docs: simplify flag text\n  * docs(pr edit): improve command examples with grouped sections\n  * docs: clarify that --add-reviewer can re-request reviews\n  * feat(pr create, issue create): search-based assignee selection in MetadataSurvey\n  * review: address code review feedback\n  * refactor(issue edit): wire up search-based assignee selection\n  * refactor(pr edit): remove actor accumulation hack from assignee search\n  * refactor(pr edit, issue edit): use login-based assignee mutation for flag flows\n  * fix(pr create): use login-based assignee mutation on github.com\n  * chore(deps): bump microsoft/setup-msbuild from 2.0.0 to 3.0.0\n  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.6 to 4.1\n  * Remove auto-labels from issue templates\n  * fix(agent-task): resolve Copilot API URL dynamically (#12956)\n  * chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3\n  * chore(deps): bump azure/login from 2.3.0 to 3.0.0\n  * fix: improve docs around IssueRepoInfo\n  * test(issue transfer): update stub for IssueRepositoryInfo query\n  * fix(issue transfer): use IssueRepoInfo to fetch minimal fields for issues\n  * test(issue create): update stubs for IssueRepositoryInfo query\n  * fix(issue create): use IssueRepoInfo to avoid requiring Contents:Read permission\n  * test(api): add tests for GitHubRepo and IssueRepoInfo\n  * refactor(api): add IssueRepoInfo for minimal issue repo queries\n\n- Update to version 2.88.1:\n  * Revert \"fix: clarify scope error while creating issues for projects\"\n  * Revert \"refactor: deduplicate scope error handling between api/client.go and project queries\"\n  * Switch deployment signing to OIDC authentication\n\n- Update to version 2.88.0:\n  * fix: add if guard to no-response job to prevent running on workflow_dispatch\n  * Add pitch surfacing workflow (monthly + manual dispatch)\n  * fix: address review feedback on squash merge commit message\n  * fix: gofmt alignment in test struct literals\n  * feat(repo): add --squash-merge-commit-message flag to gh repo edit\n  * chore(deps): bump golang.org/x/sync from 0.19.0 to 0.20.0\n  * refactor: change extractFileName param from []byte to string\n  * Update Go version requirement to 1.26+\n  * Bump golangci-lint from v2.6.0 to v2.11.0 for Go 1.26 support\n  * Bump Go from 1.25.7 to 1.26.1 to fix stdlib vulnerabilities\n  * Address review comments: use actorDisplayName for Copilot author display\n  * Show friendly display names in gh issue view\n  * Add generic actorDisplayName for all actor display names\n  * Show friendly Copilot (AI) name in gh pr view\n  * fix: align example indentation with codebase convention\n  * fix: address review feedback for --exclude flag\n  * fix: share diffHeaderRegexp between changedFilesNames and extractFileName, fix gofmt\n  * feat(pr diff): add --exclude flag to filter files from diff output\n  * Fetch org teams via repository.owner inline fragment\n  * chore(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2\n  * Exclude PR author from reviewer candidates in SuggestedReviewerActors\n  * Fix duplicate reviewers in gh pr edit by passing logins as defaults\n  * Exclude current user from suggested reviewers in gh pr create\n  * Replace @copilot with Copilot reviewer login in gh pr create\n  * Add TODO requestReviewsByLoginCleanup on GHES ID-based reviewer path\n  * Remove /slug team reviewer shorthand normalization\n  * Add TODO requestReviewsByLoginCleanup on static reviewer MultiSelect\n  * Check state.ActorReviewers in MetadataSurvey reviewer search gate\n  * Label Copilot detection in SuggestedReviewerActorsForRepo as a hack\n  * Add TODO requestReviewsByLoginCleanup in CreatePullRequest\n  * refactor: deduplicate scope error handling between api/client.go and project queries\n  * Fix extension install error message showing raw struct instead of owner/repo (#12836)\n  * chore(deps): bump github.com/docker/cli\n  * Remove StateReason feature detection for issue close\n  * Remove unnecessary StateReasonDuplicate feature detection\n  * docs: add examples to gh issue close help text (#12830)\n  * Fix incorrect integer conversion from int to uint16 in port forwarder (#12831)\n  * Combine issue feature detection into a single GraphQL query\n  * feat(browse): add blame flag\n  * Reword `--no-upstream` help doc\n  * test(issue list): cover additional PR search qualifier variants\n  * fix(issue list): reject pull request-only search qualifiers\n  * chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0\n  * chore(deps): bump github.com/gabriel-vasile/mimetype\n  * chore(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1\n  * chore(deps): bump actions/attest-build-provenance from 3.2.0 to 4.1.0\n  * chore(deps): bump actions/download-artifact from 7 to 8\n  * chore(deps): bump actions/upload-artifact from 6 to 7\n  * Set COPILOT_GH env var when launching Copilot CLI\n  * Simplify progress indicators in issue develop\n  * Emit null for zero createdAt/updatedAt values\n  * Address Copilot review feedback\n  * Polish --json support for agent-task view\n  * Polish --json support for agent-task list\n  * Fix gofmt alignment in view_test.go\n  * feat(pr): add changeType field to files JSON output\n  * Add --duplicate-of flag and duplicate reason to gh issue close\n  * Add --json support to `gh agent-task view`\n  * Add --json support to `gh agent-task list`\n  * fix(project/item-edit): preserve title/body when editing draft issue with partial flags\n  * Add databaseId to assignees GraphQL fragment\n  * fix(licenses): implement VCS-friendly embedding\n  * chore(gitignore): ignore generated license files\n  * Use pre-compiled regexp for matching Content-Type\n  * chore(script/licenses): fix indentation\n  * fix(script/licenses): generate licenses in separate dirs\n  * Fix invalid ANSI SGR escape code in JSON and diff colorization\n  * Add --no-upstream flag to gh repo clone\n  * Clarify ReviewerCandidate relationship to AssignableActor\n  * Move PR review queries from queries_pr.go to queries_pr_review.go\n  * Use org/slug format in test fixtures and remove /slug normalization\n  * Normalize /slug team shorthand to org/slug and fix docs\n  * Include bot logins in login-based reviewer mutation guard\n  * Skip reviewer metadata fetch when using search-based selection\n  * Update test assertions to expect org/slug team format\n  * Wire bot reviewer logins through CreatePullRequest\n  * Partition bot reviewers separately for RequestReviewsByLogin\n  * Preserve org/slug format for team reviewer slugs\n  * Apply suggestion from @BagToad\n  * Remove redundant comment\n  * Don't swallow error from FD\n  * Remove redundant comments\n  * Fix issue develop repeated invocation with named branches\n  * Fix redundant API call in gh issue view --comments (#12606)\n  * Add toGitHubV4Strings helper to reduce code duplication\n  * Address PR review comments\n  * gh pr create: CCR and multiselectwithsearch\n  * trigger rerun\n  * test: TestGenerateScopeErrorForGQL and TestRequiredScopesFromServerMessage\n  * fix: clarify scope error while creating issues for projects\n  * fix: error when --remote flag used with repo argument\n  * build: customizable install `prefix`\n\n- Update to version 2.87.3:\n  * Fix project mutation query variable usage\n\n- Update to version 2.87.2:\n  * chore(deps): bump golang.org/x/crypto from 0.47.0 to 0.48.0\n  * fix(agent-task/capi): fix capi API version\n  * Remove debris licenses\n\n- Update to version 2.87.0:\n  * Bundle licenses at release time (#12625)\n  * Rename query for clarity\n  * Remove pointer comments\n  * Simplify error message\n  * Remove DTO concept\n  * Add `--query` flag to `project item-list` (#12696)\n  * Clarify --clobber flag deletes assets before re-uploading\n  * Add usage examples to gh gist edit command\n  * Remove feedback issue template\n  * Migrate PR triage workflows to shared workflows\n  * Rename triage workflow to triage-discussion-label\n  * Pass environment as input to shared triage workflow\n  * Add missing environment and label check to triage workflow\n  * Initial plan\n  * fix(workflow run): bail out on feature detection error\n  * refactor(featuredetection): remove temp in favour of early returns\n  * docs(workflow run): improve help docs\n  * docs(workflow run): add cleanup marker with explanation on future changes\n  * fix(workflow run): apply `url.PathEscape` when compiling URL\n  * refactor(workflow run): remove temp `out`\n  * Add missing TODO comments for featuredetection if-statements\n  * docs(featuredetection): fix typo in comment\n  * test(featuredetection): fix test case name\n  * test(workflow run): verify retrieval of workflow run details\n  * feat(workflow run): retrieve workflow run if supported by the API\n  * test(featuredetection): add tests for `ActionsFeatures`\n  * fix(featuredetection): add `ActionsFeatures` to detect workflow dispatch features\n  * pin REST API version to 2022-11-28\n  * Migrate stale workflow to shared workflow\n  * Respect --exit-status with --log and --log-failed\n  * document fork default branch behavior\n  * Migrate issue triage workflows to shared workflows\n  * fork default branch only in pr create\n  * update third party licenses\n  * chore(deps): bump golang.org/x/crypto from 0.46.0 to 0.47.0\n  * Add manual dispatch to bump-go workflow\n  * bump go to 1.25.7\n  * update third party licenses\n  * chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0\n  * update third party licenses\n  * chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0\n  * Add toGitHubV4Strings helper to reduce code duplication\n  * Address PR review comments\n  * update third party licenses\n  * chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.4 to 2.13.7\n  * Update third party licenses\n  * chore(deps): bump github.com/theupdateframework/go-tuf/v2\n  * Update third-party licenses\n  * Clarify comment on reviewer API behavior\n  * Clarify assignee/reviewer fetching behavior\n  * Clarify EditableReviewers comment\n  * Clarify Copilot assignee comment\n  * Use unfiltered totalCount for reviewer 'more results' display\n  * Include name in reviewer display for existing review requests\n  * update Go 1.25.6\n  * Implement cascading quota for reviewer suggestions\n  * fix(pr edit): send empty slices to clear reviewers in replace mode\n  * Fix return proper slug only for ReviewerTeam\n  * Remove redundant comment\n  * chore: update licenses\n  * chore: bump `cli/oauth` to `v1.2.2`\n  * Add CCR and reviewer MultiSelectWithSearch\n  * chore(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0\n  * Remove outdated comment in SuggestedAssignableActors\n  * Apply suggestions from code review\n  * Remove outdated TODO comments in survey.go\n  * Remove redundant comment in editRun test\n  * Return total assignee count in SuggestedAssignableActors\n  * Add test for MultiSelectWithSearch error propagation\n  * Add test for legacy assignee flow on GHES\n  * Remove unused Viewer struct from SuggestedAssignableActors\n  * Add comments to assigneeSearchFunc for clarity\n  * Simplify variables map in SuggestedAssignableActors\n  * Simplify suggested assignable actors\n  * Fix linter and mock prompter signature\n  * Apply suggestions from code review\n  * Apply suggestions from code review\n  * Clarify TODO comment for reviewer search function\n  * Only support assignee searchfunc on GitHub.com\n  * Update  edit tests\n  * Refactor MultiSelectWithSearch to use result struct\n  * Add comment describing logger\n  * Pass editable to assigneeSearchFunc and update metadata\n  * Add dynamic assignee search to PR edit flow\n  * MultiSelectWithSearch initial implementation\n  * prshared: named prompt interface parameters\n  * typo: dont to don't\n  * chore(deps): bump goreleaser/goreleaser-action from 6.0.0 to 6.4.0\n  * chore: update licenses\n  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0\n  * chore(deps): bump github.com/theupdateframework/go-tuf/v2\n  * chore: update licenses\n  * chore(deps): bump github.com/sigstore/sigstore from 1.10.0 to 1.10.4\n  * docs: lint source.md\n  * fix(pr/shared): improve `ParseFullReference` error message\n  * Fix fmt.Errorf format argument in ParseFullReference\n  * chore(deps): bump actions/upload-artifact from 5 to 6\n  * chore(deps): bump actions/download-artifact from 6 to 7\n\n- Update to version 2.86.0:\n  * refactor: address review comments\n  * Update contributing guidelines for clarity\n  * test(copilot): fix windows asset URL\n  * fix(cache delete): add unit tests and expand help doc\n  * feat(cache delete): allow for delete all caches for a ref\n  * Fix OS name in test archive filename to 'win32'\n  * fix(copilot): replace `windows` with `win32` to match asset names\n  * fix(root): avoid command name collision when registering extensions\n  * chore(root): register `copilot` command\n  * feat: add `copilot` command\n  * refactor(run download): extract zip extraction func into a separate package\n  * fix: error when head and base refs are identical in pr create\n\n- Update to version 2.85.0:\n  * fix: simplify set-default remote parsing\n  * Handle repo argument before remote name\n  * chore: update licenses\n  * chore(deps): bump github.com/yuin/goldmark from 1.7.13 to 1.7.16\n  * chore: update licenses using `go-licenses@v2`\n  * chore: install `go-licenses@v2` in scripts\n  * Update go-licenses for 1.25\n  * chore: update licenses\n  * chore: bump `github.com/sigstore/sigstore-go` to `v1.1.4`\n  * chore: remove redundant comment\n  * ci: enable noop linters\n  * Add shell specification for temporary tag creation\n  * ci: shorten `run` block\n  * ci: improve step name\n  * ci: tag per build job\n  * Update Azure Code Signing endpoint URL\n  * Update Azure Code Signing client to 1.0.95\n  * Update actions/checkout to v6 in extension workflow templates\n  * feat: allow git remote names in gh repo set-default\n  * Add test to ensure null values are skipped\n  * ci: disable create storage record for artifacts\n  * chore(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0\n  * chore: run `go mod tidy`\n  * chore: update licenses\n  * chore: upgrade `github.com/cli/oauth` to `v1.2.1`\n  * fix: prevent panic when processing null project items\n  * ci: fix binary artficat dirs used in macos job\n  * ci: fix binary artifact dir paths used in Windows job\n  * ci: upgrade to GoReleaser v2 CLI syntax for `--skip`\n  * ci: limit deb/rpm packages to `linux` build\n  * ci: replace `archives.format` with `archives.formats` array\n  * ci: remove redundant `archives.rlcp`\n  * ci: replace `archives.builds` with `archives.ids`\n  * ci: quote 386 arch\n  * ci: upgrade `.goreleaser.yml` to v2\n  * ci: upgrade to GoReleaser v2\n  * chore: update licenses\n  * chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0\n  * chore: update licenses\n  * chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.2 to 2.13.4\n  * chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0\n  * chore: update licenses\n  * chore: update licenses\n  * chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2\n  * chore: update licenses\n  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0\n  * chore: update licenses\n  * chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0\n  * chore: update licenses\n  * chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0\n  * Fix Debian CLI package link in installation guide\n  * Add tests of browse --actions\n  * Add gh browse --actions flag\n  * chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.1 to 2.13.2\n\n- Update to version 2.83.2:\n  * Update licences\n  * Bump dev-tunnels SDK 0.1.13 to 0.1.19\n  * Bump Go to 1.25.5\n  * Update licenses for go-containerregistry-0.20.7 bump\n  * chore(deps): bump github.com/google/go-containerregistry\n  * Update licenses for go-version-1.8.0 bump\n  * chore(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0\n  * Update licenses for tcell-2.13.1 bump\n  * chore(deps): bump github.com/gdamore/tcell/v2 from 2.9.0 to 2.13.1\n  * chore: make licenses\n  * refactor: drop multierror in favor of std\n  * Bump Go to 1.25.4\n  * Update licenses for huh 0.8.0 bump\n  * Fix accessible prompter tests with huh 0.8.0 upgrade\n  * chore(deps): bump github.com/charmbracelet/huh from 0.7.0 to 0.8.0\n  * Update licenses with grpc-1.76.0 bump\n  * chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.76.0\n  * Update licenses for mimetype 1.4.11 bump\n  * chore(deps): bump github.com/gabriel-vasile/mimetype\n  * chore(deps): bump github.com/theupdateframework/go-tuf/v2\n  * chore(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.1.0\n  * Update licenses for protobuf 1.36.10 bump\n  * chore(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10\n  * Error if go-licenses is not on the PATH\n  * chore(deps): bump actions/checkout from 5 to 6\n  * Update licenses for crypto-0.45.0 bump\n  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0\n  * Alphabetize Ubuntu section\n  * Add Debian/Ubuntu to unofficial packages\n  * Add PGP key rotation PoC (#12176)\n  * refactor(pkg/search): rename `KeywordsVerbatim` to `ImmutableKeywords`\n  * refactor(pkg/search): rewrite returns in a more verbose way\n  * fix(pr/shared): delegate query compilation to `search` package\n  * test(pkg/search): assert verbatim keywords are respected\n  * fix(pkg/search): add `KeywordsVerbatim` field to `Query` type\n  * Remove extra flag default from help usage\n  * Refactor cfg out of CAPI Client\n\n- Update to version 2.83.1:\n  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0\n  * Check user and teams nil state instead of length\n  * Update third-party licenses and dependencies\n  * Ensure empty arrays for reviewers in PR API calls\n  * Update .github/workflows/lint.yml\n  * Annotate go-licenses install with version tag\n  * Integrate license checks back into lint workflow\n\n- Bump go from 1.24 to 1.25\n- Update to version 2.83.0:\n  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.2 to 2.13.0\n  * Apply suggestions from code review\n  * Add note on govulncheck source mode for Go 1.25\n  * docs(pkg/search): fix typo\n  * docs(repo garden): improve func godoc\n  * fix: ignore `nilerr` on intentionally swallowed error\n  * fix: resolve `nilerr` issues\n  * fix: resolve `copyloopvar` issues\n  * fix: resolve `gocritic` issue\n  * test(pkg/httpmock): ignore `bodyclose` on mock response value\n  * refactor(repo garden): return pagination link instead of resp\n  * fix: close resp body (bodyclose)\n  * refactor: remove returned resp from `api.EndpointNeedsScopes`\n  * refactor(pkg/search): remove passing resp for pagination\n  * ci: enable basic linters\n  * Update lint govulncheck to use source mode\n  * chore: add `workflow_dispatch` to govulncheck triggers\n  * Add example for --custom-agent usage\n  * Update error messages in job creation tests\n  * Update pkg/cmd/agent-task/capi/job.go\n  * Add shorthand flag for custom-agent option\n  * Fix: do not swallow job creation error\n  * Clarify custom agent flag description\n  * Add custom agent support to job creation\n  * docs(release list): fix typo\n  * docs(release list): reword comment\n  * feat(release list): add `isImmutable` JSON field\n  * fix(featuredetection): add `ReleaseFeatures` method\n  * docs(api): add example for `--input` option\n  * docs(api): mention use of `@<path>` and `@-` for `--field`\n  * docs: update go version 1.25\n  * refactor: replace backport with `strings.CutSuffix`\n  * chore: exclude `third-party` from Golangci-lint formatting paths\n  * chore: bump Go in devcontainer\n  * chore: apply `go fix` to remove deprecated `// +build` tags\n  * fix: --interval flags docs in gh pr checks\n  * test(gist/edit): add tests for single file edit and interactive multi-file selection\n  * Update Go toolchain version to 1.24.9\n  * docs(run list): mention `pr checks` in help docs\n  * ci: bump Golangci-lint to v2.6.0\n  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0\n  * chore(deps): bump golang.org/x/text from 0.29.0 to 0.30.0\n  * test(gist): fix failing tests\n  * fix(gist): prevent fetching full content for already edited files\n  * fix(gist): only include files that have changed in request\n  * fix(gist): fetch full content for truncated files during editing\n  * ✅ (repo delete) remove comprehensive assertions on check stderr output\n  * Fix typo in comment for gh issue develop branch checkout command\n  * 💡 (gh repo delete) Add warning when `--yes` is ignored without a repository, Closes: #12033\n  * chore(deps): bump github.com/rivo/tview\n  * chore(deps): bump actions/download-artifact from 5 to 6\n  * chore(deps): bump actions/upload-artifact from 4 to 5\n  * Remove skipped tests\n  * Make verifier choice more explicit\n  * Return only basic pull request info when reverting a PR\n  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.4 to 3.6\n  * chore(deps): bump goreleaser/goreleaser-action from 6.3.0 to 6.4.0\n  * test fixup\n  * Update release verify commands to use sentinel value\n  * Initial plan\n  * Make PGI verifier initialization non-fatal to allow GitHub attestation verification\n  * Initial plan\n  * improve docstring for release-create\n  * Bump Go to 1.25.3\n  * Address remaining PR comments for revert implementation\n  * Adjust PR revert based on new acceptance criteria\n  * Return nil when err is nil\n  * Fix revert unit tests by using renamed helper\n  * feat: include revert PR info in message output\n  * Undo autoformat changes\n  * feat: implement `pr revert`\n  * test(gist): add tests for handling truncated files in view command\n  * test(gist): add tests for editing truncated gist files\n  * test(gist): add tests for `GetRawGistFile` function\n  * feat(gist): retrieve full content for truncated gist files\n  * feat(gist): retrieve full content for truncated gist files\n  * feat(gist): add `GetRawGistFile` function to retrieve raw gist content\n  * feat(gist): add `RawURL` and `Truncated` fields to `GistFile`\n\n- Update to version 2.82.1:\n  * Add test for non-interactive projects v1 unsupported\n  * Inject Detector mock in edit command tests\n  * Pass ProjectsV1Support to FetchOptions functions\n  * chore(deps): bump github.com/gabriel-vasile/mimetype\n  * Update .github/workflows/govulncheck.yml\n  * chore(deps): bump github/codeql-action from 3 to 4\n  * chore(deps): Bump github.com/sigstore/sigstore-go from 1.1.0 to 1.1.3\n  * chore(deps): bump actions/attest-build-provenance from 2.4.0 to 3.0.0\n\n- Update to version 2.82.0:\n  * chore: run `go mod tidy`\n  * refactor(auth refresh): use `PlainHttpClient` instead of zero `http.Client`\n  * refactor(auth login): use `PlainHttpClient` for OAuth flow\n  * refactor(authflow): receive HTTP client via args\n  * fix(factory): add `PlainHttpClient` to factory\n  * test(api): assert `SkipDefaultHeaders` is honoured\n  * fix(api): expose `SkipDefaultHeaders` option\n  * test(api): improve `NewHTTPClient` test assertions\n  * Fix agentTaskCmd to use repoResolvingCmdFactory\n  * Add new displaying message to test expectation\n  * Fix --follow not killing the progress indicator\n  * Apply suggestion from @babakks\n  * Apply suggestion from @babakks\n  * Fix argument order in httpStubs test functions\n  * docs(cache delete): remove redundant comment\n  * docs(cache delete): add godoc for `deleteCacheByKey`\n  * Remove default empty slices in RemovePullRequestReviews\n  * Fix typo in error message for required flags\n  * Refactor reviewer partitioning in PR edit command\n  * Escape repo owner and name in PR reviewer API paths\n  * Remove unused ghIds function and githubv4 import\n  * fix(cache): report correct deleted count for key and key+ref deletions\n  * Refactor PR reviewer editing to use REST API and optimize team fetch\n\n- Update to version 2.81.0:\n  * test(auth status): correctly replace JSON-escaped paths\n  * update the description\n  * refactor: use strings.FieldsFuncSeq to reduce memory allocations\n  * fix(pr checkout): add alias `co`\n  * remove hidden value for release verify cmd\n  * fix latest tag for relase verify asset\n  * docs(auth status): explain `--json` will always exit with zero\n  * fix(auth status): return JSON entries under `hosts`\n  * fixup! examples\n  * fix error missing in json output\n  * examples\n  * remove showToken from authEntry\n  * address copilot comment on parameter order\n  * add examples\n  * simplify exporter usage\n  * remove includeScope\n  * do not mutate opts.ShowToken\n  * move displayToken to String method\n  * move flag validation to RunE\n  * refactor without VisitAll\n  * introduce AddJSONFlagsWithoutShorthand\n  * fix show token when using json\n  * fix exit code\n  * revert showToken change\n  * mutually exclusive flags\n  * flag duplicate check\n  * add ExpectCommandToSupportJSONFields\n  * do not export authState\n  * handle -t conflict\n  * do not fetch scope if not necessary\n  * json flags\n  * auth state enum\n  * Refactor entry to a single type\n  * Fix missing assertions\n- Packaging improvements:\n  * Update to BuildRequires: golang(API) >= 1.24 matching go.mod\n\n- Update to version 2.80.0:\n  * chore: update third-party licenses\n  * ci: pin release runner to Windows 2022\n  * Add math package import to sessions.go\n  * Add TODO for better integer handling in GetPullRequestDatabaseID\n  * chore: update third-party licenses\n  * update the test\n  * Update pkg/cmd/attestation/api/client.go\n  * add initiator_type for attestations\n  * fix(agent-task/capi): return proper error message when resp is not a JSON\n  * test(agent-task view): populate `Session.Name` in all test cases\n  * fix(agent-task view): improve session overview\n  * refactor(agent-task view): merge empty println calls with next\n  * fix(agent-task view): re-fetch session to get all pieces of data\n  * fix(agent-task/capi): remove fallback to viewer when user id is zero\n  * test(agent-tassk/capi): update `ListSessionsByResourceID` tests\n  * docs(agent-task/capi): add TODO note for dropping local ID generation\n  * fix(agent-task/capi): fetch viewer when resource session user id is zero\n  * fix(agent-task/capi): handle unpopulated resource session `LastUpdatedAt`\n  * refactor(agent-task/capi): keep `resource` private\n  * update agents resource route\n  * fix(agent-task view): improve session error\n  * fix(agent-task view): display session error\n  * fix(agent-task/capi): add `WorkflowRunID` field to `Session`\n  * refactor(agent-task/capi): remove unused slice\n  * fix(agent-task/capi): add `Error` field to `Session`\n  * fix(agent-task create): block empty problem statement arg\n  * fix(agent-task create): use pager when following logs\n  * fix(agent-task create): avoid prompting when problem statement is provided\n  * fix(agent-task list): show capitalised session state\n  * fix(agent-task/shared): fix session state value\n  * docs(agent-task list): add \"(preview)\" note to cmd docs\n  * chore(agent-task/shared): regenerate `LogRenderer` mock\n  * test(agent-task/capi): assert session with zero resource ID are kept\n  * fix(agent-task/capi): keep sessions with no resource attached\n  * refactor(agent-task list): remove unused `BaseRepo` from `ListOptions`\n  * docs(agent-task/capi): fix test case explanation\n  * Fix session deduplication and add test for paging\n  * Remove repo-scoped session listing and related code\n  * docs(agent-task): use `heredoc.Doc`\n  * docs(pr/shared): add a `TODO` on decoupling PR finder from IO\n  * fix(agent-task view): display zero premium requests\n  * fix(agent-task/shared): make capitalised status names consistent\n  * Update pkg/cmd/agent-task/agent_task.go\n  * Update pkg/cmd/agent-task/agent_task.go\n  * Enhance agent-task command help and usage info\n  * Refactor comments in stripDiffFormat function\n  * Remove obsolete log-3 test data files\n  * fix(agent-task view): omit session overview in log mode\n  * fix(agent-task view): display premium requests used\n  * fix(agent-task/capi): add `PremiumRequests` field to `Session`\n  * fix(agent-task view): display session duration\n  * fix(agent-task view): display completed sessions as \"Ready for review\"\n  * fix(agent-task view): disable PR finder progress indicator\n  * test(pr/shared): assert `FindOptions.DisableProgress` is respected\n  * fix(pr/shared): add `DisableProgress` field to `FindOptions`\n  * Refactor stripDiffFormat guard clause logic\n  * Use filepath.Ext to detect file extension in markdown renderer\n  * Improve log rendering error handling and test coverage\n  * Prefix rendered shell commands with '$ ' in logs\n  * Clarify comment on CRLF normalization in tests\n  * Refactor generic tool call titles map to package scope\n  * Add pager support to log output in printLogs\n  * test(agent-task create): add test for `--follow`\n  * docs(agent-task create): add example for `--follow` flag\n  * feat(agent-task create): add `--follow` flag\n  * refactor(agent-task create): extract session URL polling into a func\n  * Add TODO for bash-related tool call details\n  * Update comment for reasoning text formatting\n  * Enable Bash session tool handling in log rendering\n  * Rename testdata log files for clarity\n  * Normalize line endings in log testdata files too\n  * Fix line ending conversion in tests\n  * Add note for updating testdata files in log tests\n  * Make log tests OS-agnostic by normalizing line endings\n  * Fix comment for GetSessionLogs method\n  * Add and improve function documentation in log.go\n  * Update log test expectation files\n  * Rename renderToolCall to renderToolCallTitle\n  * Rename relativePath to relativeFilePath in log rendering\n  * Refactor markdown rendering helper function names\n  * Improve log rendering and tool call handling\n  * Refactor JSON content rendering in log entries\n  * Various log rendering improvements\n  * feat(agent-task view): add `--log` and `--follow` flags\n  * feat(agent-task view): add `--log` and `--follow` flags\n  * fix(agent-task/shared): add log renderer\n  * feat(agent-task/capi): add `GetSessionLogs` method\n  * Add error type assertion to createRun tests\n  * Add test for non-interactive problem statement input\n  * Update test to use edited task description\n  * Remove unused stdin field from create command tests\n  * Refactor create command tests and add base branch case\n  * refactor(pr/shared): rename `rest` to `tail`\n  * refactor(agent-task/shared): enhance symbol names\n  * Update command examples for agent-task create\n  * Refactor agent-task create to improve file input handling\n  * fix(pr/shared): ensure `ParseURL` regexp is backward-compatible\n  * refactor(agent-task/shared): extract uuid pattern\n  * refactor(agent-task view): rename `resourceID` to `prID`\n  * feat(agent-task view): support PR `/agent-sessions/*` URL as argument\n  * fix(agent-task/shared): add `ParsePullRequestAgentSessionURL`\n  * fix(pr/shared): add rest return value to `ParseURL`\n  * docs(agent-task view): improve `--help` docs\n  * refactor(agent-task create): assign `Config` at instantiation\n  * fix(agent-task create): only prompt for problem statement if not provided\n  * fix(agent-task view): stop progress indicator before opening browser\n  * test(agent-task view): enhance naming and stubs\n  * test(agent-task view): add `--web` mode tests\n  * feat(agent-task view): add `--web` mode\n  * refactor: move Copilot Agents home URL to capi\n  * fix(agent-task/capi): also return PR URL from `GetPullRequestDatabaseID`\n  * Still prompt for task desc with -F\n  * Add interactive prompt for task description in agent-task create\n  * Fix default value in session selection prompt\n  * Show session name instead of ID in agent-task list\n  * docs(agent-task view): explain test case rationale\n  * docs(agent-task view): explain when condition is met\n  * docs(agent-task/capi): remove redundant comment\n  * test(agent-task/capi): fix test case args\n  * fix(agent-task/capi): skip unpopulated resource ID when hydrating\n  * docs(agent-task/shared): add godoc to `SessionStateString`\n  * test(agent-task view): update tests\n  * fix(agent-task view): use lower limit for fetching sessions\n  * fix(agent-task view): use `CapiClient.GetPullRequestDatabaseID`\n  * fix(agent-task/capi): add `GetPullRequestDatabaseID` to `CapiClient` interface\n  * test(agent-task/capi): add tests for `GetPullRequestDatabaseID`\n  * feat(agent-task/capi): add `GetPullRequestDatabaseID` method\n  * test(agent-task/capi): add tests for `GetSessionByResourceID`\n  * feat(agent-task view): support PR arg\n  * fix(agent-task/shared): add `SessionSymbol` func\n  * test(agent-task/shared): add test for `IsSessionID`\n  * fix(agent-task/shared): add `IsSessionID`\n  * test(pr/shared): add test for `ParseFullReference`\n  * fix(pr/shared): add `ParseFullReference` func\n  * feat(agent-task/capi): add `ListSessionsByResourceID` method to `CapiClient` interface\n  * feat(agent-task/capi): add `ListSessionsByResourceID`\n  * test(agent-task view): add tests for the `view` command\n  * feat(agent-task view): add `view` command\n  * test(agent-task list): remove unused `stubs`\n  * feat(agent-task/capi): add `GetSession` method to `CapiClient` interface\n  * test(agent-task/capi): add tests for `GetSession`\n  * feat(agent-task/capi): add `GetSession` method\n  * refactor(agent-task/capi): populate PRs `IsDraft`\n  * refactor(agent-task/capi): hydrate user data\n  * test(agent-task create): quote file paths to pass CI on Windows\n  * refactor(agent-task list): simplify cmd initialisation\n  * refactor(agent-task create): remove redundant `if`\n  * test(agent-task create): use `CapiClientMock`\n  * fix(agent-task create): simplify command initialisation\n  * test(agent-task list): update `TestNewCmdCreate`\n  * fix(agent-task create): allow no positional arg\n  * test(agent-task list): apply test args anyway\n  * test(agent-task list): use `CapiClientMock`\n  * test(agent-task list): update `TestNewCmdList`\n  * refactor(agent-task/capi): drop embedding of unexported struct\n  * test(agent-task/capi): add `CapiClientMock`\n  * test(agent-task/capi): add `go:generate` directive to gen mock\n  * test(agent-task/capi): add tests for job-related methods\n  * test(agent-task/capi): add tests for session-related methods\n  * fix(agent-task/capi): handle non-JSON error response\n  * fix(agent-task/capi): improve returned errs\n  * refactor(agent-task/capi): improve pagination\n  * refactor(agent-task list): use shared `CapiClientFunc`\n  * fix(agent-task/shared): add `CapiClientFunc` helper\n  * Improve agent-task create command help text\n  * Refactor test case struct in create_test.go\n  * Add base branch option to agent task creation\n  * Support reading task description from stdin\n  * Increase backoff timing for agent task creation\n  * Add file input support to agent-task create command\n  * Update error messages and test repo handling in agent-task create\n  * Simplify error handling in CreateJob response\n  * Simplify stdout assertion in createRun test\n  * Improve job error handling and update tests\n  * Use Job struct in request\n  * Escape URL path parameters in GetJob request\n  * Escape owner and repo in job creation URL\n  * Escape URL path segments in agent session links\n  * Remove nil check for job in agentSessionWebURL\n  * Update test to expect 500 error response\n  * Update error message in createRun test\n  * Remove redundant 'error:' prefix from repo error\n  * Update command usage for agent task creation\n  * Update agent-task create command argument handling\n  * Add agent task creation command and job API\n  * Add pager support to agent-task list output\n  * Replace panic with require.FailNow in test\n  * Add test for web mode with repo flag in listRun\n  * Add comment on web dashboard filtering limitation\n  * Add test case for negative limit in list command\n  * Return NoResultsError when no agent tasks found\n  * Add comment explaining error handling in listRun\n  * Simplify time calculation in listRun test\n  * Simplify BaseRepo assignment in list command\n  * Handle repo resolution errors gracefully in agent-task list\n  * Add --web flag to agent-task list command\n  * Show default limit in agent-task list flag help\n  * Add limit flag to agent-task list command\n  * Add repo-scoped agent session listing support\n  * Refactor session state color logic to shared package\n  * Optimize session pull request hydration logic\n  * Refactor error handling in generatePullRequestNodeID\n  * Update API query name for session PR fetch\n  * Refactor variable names in ListSessionsForViewer\n  * Remove commented-out fields from sessionPullRequest\n  * Refactor agent-task list command client initialization\n  * Refactor session filtering in listRun function\n  * Fix import alias for shared package in agent-task list\n  * Add agent task listing command and CAPI client\n  * Refactor agent task tests into table-driven format\n  * Refactor test to use require.Empty assertion\n  * Show help on agent-task command execution\n  * Add agent-task command with OAuth token validation\n\n- Update to version 2.79.0:\n  * fix(featuredetection): remove redundant `AdvancedIssueSearchWebInIssuesTab` field\n  * docs(featuredetection): remove unknown dates\n  * docs(search prs): mention advanced issue search syntax support\n  * docs(search issues): mention advanced issue search syntax support\n  * docs(pr list): mention advanced issue search syntax support\n  * docs(issue list): mention advanced issue search syntax support\n  * refactor(search): rename `Query.String` to `StandardSearchString`\n  * test(search): improve test cases\n  * chore(deps): bump actions/stale from 9 to 10\n  * chore(deps): bump actions/setup-go from 5 to 6\n  * Bump sigstore/rekor to v1.4.1\n  * Remove mention of public preview in trustedroot.go\n  * docs(featuredetection): add godoc for min GHES version for advanced issue search\n  * docs(issue pr): fix incorrect formatting\n  * docs(issue list): fix incorrect formatting\n  * docs: add cleanup/future TODO marks for advanced issue search changes\n  * docs(pr list): explain use of advanced issue search syntax\n  * docs(issue list): explain use of advanced issue search syntax\n  * test(issue/pr list): assert integration with advanced issue search\n  * test(pr shared): assert `ListURLWithQuery` works with advanced search syntax\n  * refactor(issue/pr list): support advanced issue search\n  * docs(search): improve `Searcher.URL` method docs\n  * docs(search prs): mention advanced issue search takeover\n  * docs(search issues): mention advanced issue search takeover\n  * docs(search): improve docs for  `Query.String` and `Query.AdvancedIssueSearchString` methods\n  * refactor(search): improve special qualifier grouping\n  * test(search): test advanced search support\n  * fix(search): use advanced issue search when available\n  * refactor: improve mock feature detector names\n  * refactor(search): sort qualifiers in query\n  * test(search): provide feature detection dependency\n  * fix(search): add feature detection dependency\n  * test(search): explain why `is:` and `in:` qualifiers used in test case\n  * fix(search): sort qualifiers in advacned issue search syntax\n  * test(search): add tests for `AdvancedIssueSearchString` method\n  * fix(search): add `AdvancedIssueSearchString` method\n  * test(featuredetection): add tests for advanced issue search detection\n  * fix(featuredetection): add feature detection for advanced issue search\n  * test(cache delete): combine test cases for invalid/non-existent refs\n  * test(cache delete): replace `HTTP 204` with `200` to match API behaviour\n  * docs(cache delete): explain different API responses\n  * test(cache delete): add test case for key arg and `--all`\n  * refactor(cache delete): simplify error handling\n  * refactor(cache delete): simplify condition\n  * fix(cache): validate `--ref` flag usage with cache ID\n  * fix(cache): prevent using `--ref` flag with cache ID\n  * refactor(cache): extract cache ID parsing logic\n  * fix(cache): update error message for missing cache key with `--ref` flag\n  * chore(cache): improve help text for `--ref` flag in cache deletion\n  * test(cache): add tests for `--ref` flag in cache deletion\n  * feat(cache): add support for `--ref` flag in cache deletion\n  * refactor: use slices.Equal to simplify code (#11364)\n  * feat: `gh auth` Automatically copy one-time OAuth code to clipboard (#11518)\n  * docs(release create): difference `--generate-notes` and `--notes-from-tag` (#11534)\n\n- Update to version 2.78.0:\n  * Add `--force` flag to `gh run cancel` (#11513)\n  * Update third-party license versions (#11557)\n  * chore(deps): bump github.com/go-viper/mapstructure/v2 (#11556)\n  * Merge pull request #11536 from cli/copilot/fix-11535\n  * chore(deps): bump github.com/cli/go-gh/v2 from 2.12.1 to 2.12.2\n  * Update pkg/cmd/release/verify/verify.go\n  * Update pkg/cmd/release/verify-asset/verify_asset.go\n  * Hidden trusted root flag for release verify\n  * Update Go dependencies to latest versions\n  * chore(deps): bump actions/checkout from 4 to 5\n  * udpate the test\n  * replace /git/refs/tags/ to /git/ref/tags/\n  * Update feature_detection.go\n  * Update PR tests for v2 projects\n  * Base changes for PR project items\n  * Update `gh issue view` to show v2 projects\n  * PR feedback from @bagtoad\n  * Update v1 project detection logic\n  * Update govulncheck workflow to scan source code\n  * add test for FetchRefSHA\n  * Apply suggestion from @Copilot\n  * Update docs/install_windows.md\n  * Consolidate repo profile, fix headings\n  * chore(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2\n  * chore(deps): bump github.com/yuin/goldmark from 1.7.12 to 1.7.13\n  * Update docs on contributing new install methods\n  * markdown lint fixes\n  * Formatting\n  * Initial installation doc refactor\n  * Pushing empty commit to run CI\n  * Bump Go to 1.24.6\n  * Fix linter\n  * Update pkg/cmd/search/search.go\n  * chore(deps): bump actions/download-artifact from 4 to 5\n  * Update docs/triage.md\n  * Update docs/triage.md\n  * Update issue triage guidelines and label usage\n  * fix error for ErrReleaseNotFound when fetching ref\n  * Apply suggestion from @Copilot\n  * Update .github/workflows/scripts/spam-detection/process-issue.sh\n  * docs(search): move search syntax note to `gh search --help`\n  * Update spam detection to comment on and close issue\n  * Update permissions and events for workflow\n  * ci: use `help wanted` label link in comment\n  * ci: anchor regexp for `help wanted` label\n  * Improve spam detection evals (#11419)\n  * v1 project feature detection spike using version\n  * docs(help): rename `search-syntax` help topic\n  * docs(search): add reference to `gh help search`\n  * Add help topic for search syntax in gh commands\n  * docs(search): add note for exclusion search syntax\n  * Regenerate third-party licenses on trunk pushes\n  * chore(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7\n\n- Update to version 2.76.2:\n  * Refactor tab completion test\n  * Test `gh pr create --reviewer` tab completion\n  * Include org teams for PR reviewers\n  * docs(ci): delete obsolete comment\n\n- Update to version 2.76.1:\n  * Updated third-party license compliance content\n  * Add tests for reviewer team handling in PR creation\n  * Refactor and improve RepoMetadata teams test\n  * Refactor error assertion in Test_RepoMetadataTeams\n  * FIX: conditionally fetching team reviewers\n  * Add TeamReviewers flag to RepoMetadataInput\n  * Update .github/workflows/scripts/spam-detection/generate-sys-prompt.sh\n  * Use gh go templating for user prompt\n  * Update eval script comments\n  * Remove unnecessary file for heredoc\n  * First pass to optimize and improve\n  * Limit permissions of govulncheck workflow\n  * Incorporate govulncheck into workflows\n  * update ownership of pkg/cmd/release/shared/\n  * Run Lint and Tests on `push` to `trunk` branch\n  * ci: echo spam detection result\n  * ci: add `models: read` permission\n  * ci: correct `sed` usage to remove Markdown front matter\n  * docs: fix typo in script docs\n  * ci: fix potentially confusing typo in system prompt\n  * ci: use `issue.html_url` instead of `issue.url`\n  * ci: remove unused env vars\n  * ci: add spam issue detection workflow\n  * ci: add spam issue detection scripts\n  * chore(deps): bump github.com/sigstore/sigstore-go from 1.0.0 to 1.1.0\n  * chore(deps): bump advanced-security/filter-sarif from 1.0.0 to 1.0.1\n  * Improve `api` `--preview` docs\n  * add tenancy aware for san matcher\n\n- Update to version 2.76.0:\n  * Copilot Pro+ / Enterprise subscribers can now assign issues to\n    Copilot during issue creation\n  * Display immutable field in release view command\n  * Do not fetch logs for skipped jobs\n  * Transform extension and filename qualifiers into path qualifier\n    for web code search\n\n- Update to version 2.75.0:\n  * Quote Windows rsyso script global hook\n  * test(search): verify `URL` returns quoted query\n  * test(search): test pagination with multi-word quoted queries\n  * fix(search): fix mutating query state fields\n  * Add setup-go to bump-go\n  * Update contribution design link\n  * test(pr merge): always assert stderr\n  * test(pr merge): verify `deleteRemoteBranch` behaviour when API returns error\n  * fix(pr merge): ignore 404 as error when deleting remote branch\n  * Ensure go mod tidy is run in bump-go\n  * Inject token into bump-go workflow\n  * Reformat gh run view help\n  * docs(run view): explain restrictions of fallback API calls\n  * test(run view): delete unused ZIP archive\n  * refactor(run view): remove `Log` field from DTO types\n  * test(run view): update tests\n  * refactor(run view): use API as fallback to fetch job logs\n  * test: add `BinaryResponse` helper function\n  * Ensure bump go script has git user configured\n  * Support --no-repos-selected on secret set\n  * docs: consistently use apt in installation instructions\n  * Consume dependabot minor versions for go modules\n  * test: add test for `ParseURL`\n  * Update microsoft dev-tunnels to v0.1.13\n  * Bump all dependencies except dev-tunnels\n  * Fix inconsistent use of tabs and spaces\n  * docs: explain PR URL parsing reason\n  * test: improve test case to highlight host name override\n  * test: remove references to `AssignedActorsUsed` field\n  * test: verify providing a URL arg affects the base repo\n  * refactor: select PR fields based on detected features\n  * test: remove tests verifying assigne-related behaviour\n  * fix: remove assignee-related intervention\n  * fix: remove `AssignedActorsUsed` field\n  * Add workflow to automate go version bumping\n  * fix: expose `ParseURL` as a public func\n  * Remove unused GH_TOKEN env variable from workflow\n  * Add `workflow_dispatch` support to PR Help Wanted check (#11179)\n  * chore: improve error message when `versioninfo.json` is not found\n  * Fix: `gh pr create` prioritize `--title` and `--body` over `--fill` when `--web` is present (#10547)\n  * chore: create `.syso` libs only on Windows\n  * chore: delete `script/winres.json`\n  * chore: add `versioninfo.template.json`\n  * refactor: switch to `github.com/josephspurrier/goversioninfo`\n  * chore: exclude generated `.syso` files from git repo\n  * Ensure automation uses pinned go-licenses version\n  * Fix missing newline in install_linux.md\n  * Apply suggestions from code review\n  * Update missed Go 1.23 references\n  * chore: update Go version to 1.24 in devcontainer configuration\n  * Use `make` for license generation and checks\n  * Use temp directory for license checks\n  * Update 3rd party licenses\n  * Restored original test setup, clarified\n  * Enhance Activetoken prioritize test\n  * improve the description for gh release verify cmd\n  * chore: fix function name\n  * Push up\n  * Use active token stubbing on auth config\n  * refactor to simplify implementation\n  * Primer formatting\n  * Fix spacing\n  * Add missing files\n  * Rename READMEs\n  * Initial restore of Primer CLI docs\n  * use standardize color roles logic for the logging\n  * moved to shared lib\n  * moved to shared lib\n  * update the artifact and bundle for testing\n  * empty commit\n  * clean the code\n  * revert the workflow\n  * debug windows env\n  * debug windows env\n  * debug windows env\n  * chore: fix variable name casing\n  * Avoid analyzing 3rd party license content with CodeQL\n  * chore: ensure output path is a directory\n  * clean the path\n  * clean the path\n  * Update 3rd party license information\n  * Adopt license compliance scripts into workflows, docs\n  * clean the path\n  * improve test\n  * fix test\n  * add unit test\n  * chore: prepare Windows resources `.syso` files before build\n  * chore: add script to create Windows resources\n  * Cleanup\n  * fix: get token for active user instead of blank if possible\n  * remove filepath test\n  * update Sprintf\n  * removed unused file\n  * added the unit test\n  * add json format\n  * change verify-asset logic\n  * minor fix\n  * clean up the code\n  * update the lng\n  * wip\n  * remove comment\n  * wip\n  * init\n  * docs: install_linux.md: add Solus linux install instructions\n\n- Update to version 2.74.2:\n  * Update docs/install_linux.md\n  * Fix step order for CodeQL workflow\n  * docs: update install command for Debian\n  * chore(deps): bump github.com/google/go-containerregistry\n  * Use t.Chdir in tests\n  * Bump to Go 1.24\n  * Merge pull request #11121 from cli/11101-use-golangci-lint-version-2\n  * Apply suggestion from @Copilot\n  * Improve help wanted check skipping logic\n  * Ensure gh executes in workflow check script\n  * Fix repo checkout in help-wanted check\n  * Fixes #11126\n  * Fix script path for help-wanted check\n  * Quote filenames suggested at the end of worklow run\n  * chore(deps): bump github.com/in-toto/attestation from 1.1.1 to 1.1.2\n  * Quote workflow conditional\n  * Add workflow to check `help wanted` labelling (#11105)\n  * chore(deps): bump actions/attest-build-provenance from 2.3.0 to 2.4.0\n  * Add accurate context when `run rerun` fails (#10774)\n  * Avoid requesting PR reviewer twice\n  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.2 to 0.4.3\n  * chore(deps): bump mislav/bump-homebrew-formula-action from 3.2 to 3.4\n  * test(pr): Add tests for actor assignees\n  * Fix test, remove partial standalone test\n  * Iterate on `pr edit` problems with existing assignees\n  * chore(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2\n  * Fix expected error output of TestRepo/repo-rename-transfer-ownership\n  * Add instructions for MidnightBSD installation\n\n- Update to version 2.74.1:\n  * test: fix test data const\n  * Document support for `@copilot` in `gh [pr|issue] edit --add-assignee` and `--remove-assignee` (#11056)\n  * Fix pr edit when URL is provided\n\n- Update to version 2.74.0:\n  * Update `go-gh` to v2.12.1\n  * fixup release asset digest tests\n  * remove nolint comment for release header\n  * Update pkg/cmd/release/view/view.go\n  * chore(deps): bump github.com/sigstore/protobuf-specs from 0.4.1 to 0.4.2\n  * chore(deps): bump github.com/yuin/goldmark from 1.7.8 to 1.7.12\n  * fix: `gh gist edit` panic when no file in a gist (#10627)\n  * docs(pr list): mention `--head` does not support `<owner>:<branch>` syntax\n  * add Digest to ReleaseAsset struct\n  * doc(update): improve comments on updaterEnabled\n  * Refactor build tag logic\n  * replace deprecated func\n  * replace deprecated type\n  * update sigstore-go to v1\n  * feat(update): add `updateable` build tag for update notifications\n  * Update README.md\n  * test(run): add tests for `RenderJobs` and `RenderJobsCompact`\n  * Add `--compact` flag to `run watch` (#10629)\n  * test: improve test case naming\n  * chore: run `go mod tidy`\n  * test: ensure proper usage of pipes in docs\n  * Revert \"[gh config] Escape pipe symbol in Long desc for website manual\"\n  * doc(pr): format allowed values and defaults in help\n  * Mention created PR's URL will be printed upon success\n  * Add example usage of `--head` option\n  * doc(preview): add long description\n  * fix(prompter): print to iostreams stdout\n  * fix(prompter): update prompter create for changes in trunk\n  * fix(preview): remove needless newlines\n  * import sigstore-go at a more recent commit\n  * use constructor\n  * include http client in verifier setup\n  * add missing http client field in sigstoreConfig\n  * simplify test\n  * alphabetize fields\n  * move live inspect test to integration test file\n  * fetch http client from factory\n  * set custom fetcher in options\n  * pass http client for use with tuf\n  * get the latest go-tuf release\n  * get latest go-tuf version\n  * create fetcher with custom http client and retry options\n  * chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.9\n  * feat(preview): enforce fixed order for prompts\n  * feat(preview): add `preview prompter` command\n\n- Fixing boo#1237669 - CVE-2025-27144 -  Go JOSE's Parsing Vulnerable to Denial of Service\n- Do not skip the TestAccessiblePrompter tests\n- Update to version 2.73.0:\n  * refactor(api): inline struct definitions in RepoAssignableActors\n  * refactor(api): change CopilotActorLogin to constant\n  * fix(editable): include DefaultLogins in EditableAssignees clone\n  * doc(params): incorrect func name in comment\n  * refactor(api): use constant for Copilot login\n  * doc(issue/pr edit): clarify @copilot usage\n  * doc(issue/pr edit): doc `@copilot` assignee\n  * test(params): enhance Copilot replacer tests for edge cases\n  * fix(params): remove needless err return\n  * doc(editable): remove needless comment\n  * test(editable): prompts use assignee display names\n  * fix(pr edit): clarify error messages for assignee actors and users\n  * doc(pr edit): condense comment for reviewer/user filtering\n  * test(pr edit): fix typo in test name\n  * refactor(pr edit): move httpclient initialization\n  * feat(issue/pr edit): support @copilot in assignee flags\n  * doc(pr edit): Add comments describing the use of DefaultLogins\n  * fix(issues): fix non-interactive assignee matching to logins&IDs\n  * fix(pr edit): remove merge conflict artifact, extra detector\n  * feat(pr edit): fetch assignable actors\n  * feat(pr edit): fetch assigned actors\n  * fix(api): correct var name capitalization\n  * refactor(api): remove needless parenthesis\n  * fix(api): correct var name capitalization\n  * refactor(api): remove needless parenthesis\n  * doc(api): code comment typo\n  * feat(editable): update assigned actors to use display names\n  * feat(pr edit): fetch assignable actors\n  * feat(pr edit): fetch assigned actors\n  * doc(issue edit): clarify synchronous handling of assignees\n  * feat(issue edit): replacing actor assignee is done synchronously with updateIssue\n  * doc(api): remove needless comment\n  * refactor(api): rename assignable user types and methods\n  * fix(issue edit): revert rename of ActorAssignees\n  * fix(issue edit): use double quotes for assignedActors\n  * refactor(issue edit): add assignedActors to lookupFields\n  * refactor(issue edit): rename loop variable for clarity\n  * refactor(issue edit): rename AssignedActors to ActorAssignees\n  * Increase `beforePasswordSendTimeout` to 100 us (#10977)\n  * Update test case for removing all reviewers\n  * doc(repo queries): clarify reviewer actor fetching logic\n  * doc(issue): comment why assignable actors disabled\n  * refactor(issue edit): improve actor type handling\n  * Add test to verify removing all reviewers\n  * fix bug when removing all PR reviwers\n  * fix(issue edit): resolve race condition in actor assignment\n  * chore(issue edit): comments cleanup\n  * feat(issue edit): support assigning actors to issues\n  * feat(issue edit): fetch assignable actors\n  * feat(issue edit): fetch currently assigned actors\n  * Improve assertion for disabled echo mode (#10927)\n  * fix(a11y prompter): remove invalid defaults\n  * Release download handles missing archive URLs\n  * Fix release download test http stubbing\n  * feat(fd): add ActorIsAssignable to IssueFeatures\n  * Feature detect v1 projects on pr edit\n  * Add `closedByPullRequestsReferences` JSON field to `issue view` (#10941)\n  * fix(a11y prompter): confirm prompt default is readable\n  * fix(a11y prompter): multi select defaults are readable\n  * doc(prompter): remove TODO about default value panic\n  * fix(a11y prompter): select prompt default value is readable\n  * refactor(a11yprompter): shared method for prompt defaults\n  * fix(a11y prompter): Select prompt respects defaults\n  * fix(a11y prompter): input prompt default value is readable\n  * test(prompter): add timeout before password input\n  * Feature detect v1 projects for preview URL\n  * Feature detect v1 projects on interactive pr create\n  * Feature detect v1 projects on web mode pr create\n  * Feature detect v1 projects on non-interactive pr create\n  * Cleanup run command stubbed finders in tests\n  * Fix `StatusJSONResponse` usage (#10810)\n  * Feature detect v1 projects on pr view\n  * Add `--delete-last` option to `pr comment` and `issue comment` (#10596)\n  * Apply code review changes\n  * chore(deps): bump actions/attest-build-provenance from 2.2.2 to 2.3.0\n  * chore(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.6 to 2.0.7\n  * Update the test code to align with latest changes\n  * test pr number 0\n  * handle find pr number 0\n  * restore deleted file\n  * move filterAttestations function\n  * getAttestations unit tests\n  * add test for predicate type filtering\n  * add missing nil struct checks and udpate error messages\n  * add check for nil api client\n  * clean up test fixtures\n  * reduce test duplication\n  * comment\n  * restructure api client methods\n  * simplify client methods\n  * remove duplicate predicate filtering code\n  * create single fetch by digest client method\n  * dedpulicate if else logic\n  * pass params object to api client methods\n  * move local and oci registry attestation filtering\n  * reorganize getAttestations func to check for remote gh api fetching first\n  * pass predicate type to get attestation api methods\n\n- Fix the package tests:\n  * Ignore TestNewInspectCmd\n\t  https://github.com/cli/cli/issues/10926\n\t* Ignore TestAccessiblePrompter\n\t  https://github.com/cli/cli/issues/10916\n\n- Update to version 2.72.0:\n  * Introduce gh accessibility help topic highlighting GitHub CLI accessibility\n    experiences\n  * [gh pr view] Support closingIssuesReferences JSON field\n  * Fix expected error output of TestRepo/repo-set-default\n  * Ensure accessible password and auth token prompters disable echo mode\n  * Fix: Accessible multiselect prompt respects default selections\n\n- Update to version 2.71.2:\n  * Fix pr create when push.default tracking and no merge ref\n\n- Update to version 2.71.1:\n  * Fix pr create when branch name contains slashes\n\n- Update to version 2.71.0:\n  * gh pr create: Support Git's @{push} revision syntax for determining\n    head ref\n  * Introduce option to opt-out of spinners\n  * Update configuration support for accessible colors\n  * gh config: add config settings for accessible prompter and disabling spinner\n  * Fix multi pages search for gh search\n  * Fix: project commands use shared progress indicator\n  * Issue commands should parse args early\n  * Feature detect v1 projects on issue view and edit\n  * Feature detect v1 projects on web and non web-mode issue create\n  * Refactor Sigstore verifier logic\n  * bump deps\n\n- Update to version 2.70.0:\n  * Explain job log resolution reason\n  * Document UNKNOWN STEP in run view\n  * Add `$` anchor to log file regexps\n  * Test normal job run log is preferred over legacy one\n  * Prefer normal job run log file over legacy one\n  * Explain when a negative number prefix appears\n  * Improve explanation for missing step logs\n  * Explain the `UNKNWON STEP` placeholder\n  * Replace `UNKNOWN` with `UNKNOWN STEP` in job run log\n  * Explain why step logs are preferred\n  * test(prompter): fix invalid comment\n  * test(prompter):  fix race condition\n  * Ensure markdown confirm prompt shows editor name\n  * fix(prompter): remove needless default value assignment\n  * test(prompter): doc how accessible prompter tests work\n  * test(prompter): describe why echo is editorcmd\n  * test(prompter): use *testing.T instead\n  * Add missing `gc.AssertExpectations` calls\n  * Add tests for `IsPinned` method\n  * Simplify cosign verification example by not using a regex.\n  * chore: go mod tidy\n  * fix(prompter): pass io to `huh` and refactor tests\n  * fix(prompter): update `huh` and fix tests\n  * refactor(prompter): rename speechSynthesizerFriendlyPrompter to accessiblePrompter\n  * doc(prompter env): accessible prompter includes braille reader\n  * chore: go mod tidy\n  * Merge pull request #10749 from malancas/update-to-sigstore-go-v0.7.1\n  * Update pkg/cmd/run/shared/presentation.go\n  * Apply suggestions from code review\n  * Test for explicit config disable of label colors\n  * Use truthy value for `GH_COLOR_LABELS`\n  * test(prompter):  re-add skipped test for accessible confirm default\n  * doc(help): label GH_ACCESSIBLE_PROMPTER as preview\n  * fix(prompter): rename GH_ACCESSIBLE_PROMPTER\n  * refactor(prompter): explicit return values\n  * doc(prompter): remove senseless comment\n  * refactor(prompter): remove unused variable\n  * test(prompter): timeout for tests is 1s\n  * fix(prompter): use os.lookupenv for accessible prompter\n  * test(prompter): remove needless NO_COLOR set\n  * test: use example.com in tests\n  * doc: comment typos and formatting\n  * test(prompter): add basic survey prompter test\n  * test(prompter): fix race conditions\n  * doc(envs): speech synthesis prompter\n  * Escape dots in regexp pattern in example command\n  * Verify fallback to job run logs when step logs are missing\n  * Verify job run logs attached in `attachRunLog` test\n  * Update `run_log.zip` fixture\n  * Fallback to print entire job run log if step logs are missing\n  * Add `Log` to `Job` data structure\n  * Add `jobLogFilenameRegexp` function\n  * Extract job name sanitization as a separate function\n  * Deprecate ColorScheme.Gray for ColorScheme.Muted\n  * ci: pin third party actions to commit sha\n  * doc(prompter): clarify comments\n  * refactor(prompter): less magic strings\n  * fix(prompter): remove impossible condition\n  * fix(prompter): notes about Confirm default\n  * fix(prompter): input returns default when blank\n  * test(prompter): more tests for bad input\n  * Refactor ColorScheme initializer\n  * Add label color env var to help topic, unused fix\n  * refactor(prompter): rename env var for speech synthesizer friendly prompter\n  * docs(prompter): doc prompter interface\n  * fix(linter): linter errors\n  * test(prompter): move to external package\n  * test(prompter): skip vt10x tests on Windows\n  * Fix comment language\n  * Introduce `color_labels` support, update commands\n  * test(prompter): remove needless variable declaration\n  * tests(prompter): rename huhprompter\n  * test(prompter): replace assert with require\n  * fix(prompter): rename huhprompter\n  * test(prompter): `go-expect` based prompter tests\n  * feat(prompter): include `no` as false-y value\n  * test(prompter): remove t.parallel calls\n  * fix(md prompter): accessible prompt allows blank\n  * feat(md prompter): md prompt respects blankAllowed\n  * feat(prompter): add accessible prompter support\n  * Remove deprecated note on gray color functions\n  * Regenerate mocks\n  * Remove configuration setting vestage\n  * Remove out of scope configuration setting change\n  * Implement tests for muted logic, standardize reset\n  * Remove out of scope changes, update list commands\n  * Accessible color config boilerplate, colors update\n  * Acceptance test issue/pr create/edit with project\n  * Update pkg/cmd/attestation/verify/verify.go\n  * test(release view): fix indentation\n  * doc(formatting): add line breaks for readability\n  * Renaming tabl eheader variables for maintainability\n  * doc(formatting): update sprig func descriptions\n  * test(many): fix whitespace in tests expectations\n  * updated test\n  * added minor caveat\n  * Tweaked language a bit, improved error message.\n  * Rewrote the gh at verify --help text to a) clarify and b) document the verificationResult object.\n  * doc(run shared): clarify 404 handling\n  * Fixes #10590\n  * docs: add Sprig library functions to help topics\n  * chore: update go-gh to v2.12.0\n  * Implement and fix tests for table headers\n  * test(run list): update rulesets test name\n  * doc(run list): add enterprise ruleset notes\n  * refactor(tests): update test name for org workflows\n  * docs(run list): doc runs without workflow names\n  * fix(run list): do not fail on org workflows\n  * Fix typos in CONTRIBUTING.md\n  * Underline table headers if colors enabled but no theme\n  * Ensure table headers are thematically contrasting\n  * [gh ext] Fix `GitKind` extension directory path\n  * More cleanup\n  * `./script/sign` cleanup\n  * Add initial test\n  * Show host name in repo creation prompts\n\n- Update to version 2.69.0:\n  * Curly bracket wrapping acceptance tests\n  * Refactor commentable logic\n  * Clean up pr/issue comment test names\n  * Bring issue/PR comment tests up to par, correct\n  * Revert \"Merge pull request #10384 from iamazeem/9798-gh-api-encode-package-name\"\n  * Initial pass fixing gh issue and gh pr comment\n  * Bump golang.org/x/net from 0.34.0 to 0.36.0\n  * chore: remove redundant word in comment\n  * Make missing workflow regexp aware of GitHub App\n  * Change issueauto and prauto actions to use the cli-automation env\n  * Add environment to prauto and issueauto workflows\n  * Add cli-discuss-automation environment to triage.md\n  * Separate partitioning from globbing in cmdutil/args package and consumers (#3)\n  * Add `exclude` callback function\n  * Add tests for - and label args\n  * Remove slicing\n  * Support globbing for all platforms\n  * Add testing to GlobWindowsPaths (#2)\n  * Fix `gh gist create` for multiple filenames and glob patterns\n  * [gh release create/upload] Expand glob patterns on Windows\n\n- Update to version 2.68.1:\n  * Fix secret command panic when base repo from cwd\n  * Fix(ci): base64 decode GPG passphrase\n  * Update pkg/cmd/attestation/verification/attestation.go\n  * Update pkg/cmd/attestation/verification/attestation.go\n  * Fix acceptance test descriptions\n  * Fix gh secret disambiguity test\n  * Expand gh secret acceptance tests\n  * Expand gh secret base repo tests\n  * [gh secret] Check `GH_REPO` too in addition to `--repo` for disambiguation\n  * Deep Dive Document Release Process (#10503)\n  * Fix unhandled panic in FindWorkflow and add tests\n  * Bump actions/attest-build-provenance from 2.2.0 to 2.2.2\n  * Fix checkout when URL arg is from fork and cwd is upstream\n  * Update `project` help text; fix `unlink` usage\n  * Inconsistent format of examples in help text\n  * Inconsistent format of description of flags (starting with lowercase letter) (#10507)\n  * Update Go version to 1.23 in CONTRIBUTING.md\n  * Fix minor auth login help typo\n  * Add docs; rename function name\n  * Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5\n  * docs: OAuth doc link moves to newline\n  * fix expected test output\n  * undo regex changes\n  * remove signer-ref option\n  * chore: update go version in devcontainer\n  * docs: warn about process revoking all tokens\n  * docs: document how to revoke `gh` OAuth tokens\n  * refactor: use a more straightforward return value\n  * Test pr checkout force on different branch\n  * [gh pr checkout] Add --no-tags option to git fetch commands in checkout logic\n  * Allow injection of TUFMetadataDir in tests\n  * Refactor remote resolver caching tests\n  * Fix `remoteResolver` caching issue\n  * Address pr comments\n  * Add test for item-edit --number 0\n  * Support setting project item number to 0\n  * Wrap error\n  * Rename flag to `--fail-on-no-commits`\n  * Update tests\n  * Fix non-TTY case\n  * Suggestions to enhance upstream default handling\n  * Use API REST Client\n  * Use subtests in attestation verification integration tests\n  * update default upstream when forking repo\n  * Update usage to lower-kebab-case\n  * Fix typo in README\n  * Add missing <> in gh auth login docs\n  * Add mutex to fix race in attestation test client\n  * Update tests\n  * Remove trailing whitespace\n  * Standardize URLs\n  * [gh issue/pr comment] Create a comment if no comment already\n  * Update tests\n  * Address review comments\n  * Align no default repo message with other uses\n  * [gh release create] Fail when there are no new commits since the most recent release\n  * Use API without shorthand flag\n  * Update tests\n  * [gh api] Escape package name (URL encoding) for packages endpoint\n  * remove custom transport\n  * var naming\n  * dedup local bundle err handling\n  * Update tests\n  * Add test cases for succeed on no cache and api errors for --all (#1)\n  * Remove short (abbreviated) flag support\n  * Address PR review comments\n  * add checks to cert extensions func\n  * fix option ordering\n  * fix issues causing tests to fail\n  * add signer and source ref, commit options\n  * Bump github.com/spf13/pflag from 1.0.5 to 1.0.6\n  * [gh repo view] Improve error message for forked repo\n  * [gh cache delete --all] Add `--succeed-on-no-caches` flag to return exit code 0\n  * set new options in enforcement criteria\n  * reorder fields\n  * add new signing options\n\n- Update to version 2.67.0:\n  * Exit with error if no matching predicate type exists\n  * Fix logic error in contributing docs\n  * Improve http error test cases\n  * Handle non-TTY behavior\n  * Do not try to parse bodies for HEAD requests\n  * Update pkg/cmd/pr/status/status.go\n  * Collapse related instructions\n  * Remove redundant instructions\n  * Update language\n  * [gh pr status] Mention `gh pr checks` in the `Long` section\n  * Update release doc content\n  * Doc: Clarify guidelines for `help wanted` issues and prs\n  * Bump google.golang.org/protobuf from 1.36.4 to 1.36.5\n  * Update tests\n  * [gh project item-edit] Fix number type\n  * Address review comments\n  * Address review comments\n  * Revert breaking change\n  * Revert \"[gh repo edit] Allow setting commit message defaults\"\n  * Use HTML numeric code instead of escaping with slash\n  * [gh config] Escape pipe symbol in Long desc for website manual\n  * Ensure item iteration field is populated in tests\n  * Drop accidental help text change\n  * Error when `gh repo rename` is used with a new repo name that contains an owner\n  * [gh repo edit] Allow setting commit title defaults\n  * Rename staggler\n  * Formatting\n  * AuoLink -> Autolink\n  * Use http constants\n  * refac and some spacing in output\n  * More consistency\n  * whitespace\n  * clean up\n  * Autolink delete http tests\n  * Revert change to deps\n  * Autolink delete tests\n  * Initial working implementation\n  * remove duplicated Prompter type\n  * revert isEqualSet to private\n  * Revert color changes\n  * [docs/releasing.md] Add basic info for homebrew update flow\n  * consolidate tests around getBundle func when possible\n  * change permanent backoff error condition\n  * Remove unused env var, PRID\n  * dont retry when parsing fails\n  * Update test\n  * [gh issue/pr list] Improve help text\n  * [gh extensions install] Improve help text and error message\n  * [gh api] Fix mutual exclusion messages of `--slurp` flag\n  * Remove v1 project 'add to board' automation from prauto workflow\n  * [gh project item-list] Add `iterationId` field in ProjectV2ItemFieldIterationValue\n  * [gh workflow run] Improve error handling for `--ref` flag\n  * update tests\n  * add missing return statement\n  * method update\n  * update no attestations found err\n  * remove old tests\n  * drop unneeded methods\n  * deduplicate get attestation code\n  * fix tests\n  * update testing\n  * chore: remove unused file\n  * feat: integrate new PRLister into pr list command\n  * issue #2329: create shared PRLister\n  * fix: tab format may break checkout prompts\n  * issue #2329: handle empty list of PR\n  * issue #2329: include PR status in the prompt's options\n  * issue #2329: fix prompt header getting duplicated\n  * issue #2329: simplify the UI of the prompt\n  * issue #2329: update the prompt's format\n  * issue #2329: fix unit tests\n  * issue cli#2329: Fix linter\n  * issue cli#2329: fix unsufficent properties required for PR checkout\n  * issue #2329: move Interactive check to RunE\n  * fix: update the copy\n  * issue #2329: return error when not running interactively\n  * issue #2329: fix missing stub\n  * issue #2329: improve UI/UX\n  * issue #2329: add happy path unit test\n  * issue #2329: fix the linting issue\n  * issue #2329: fix the unit tests issue - ensure its backward compatible\n  * feat: let user select pr to checkout\n\n- Update to version 2.66.1:\n  * Address PR comments\n  * Remove unused ErrNoGitRepository error\n  * Handle error from ParsePRRefs when the selector is provided\n  * Add comment to status recognizing when we require a repo\n  * Refactor finder to work with URL selectors\n  * Add tests for using the pr Finder outside of repo\n  * Update deployment.yml\n  * update tests to account for logic flip\n  * flip bundle fetching logic\n  * Update formatting for autolink output\n  * Rename PRRefs to PullRequestRefs and PR comment cleanup\n  * Remove redundant error check\n  * Keeping autolink IDs the same in all test cases\n  * Expand test case\n  * Remove unused test field\n  * Remove unused test field\n  * Use `defer` instead\n  * Error case test for viewRun\n  * Autolink view HTTP tests\n  * Shorten description\n  * Updates following renaming domain to shared\n  * Partial testing for view\n  * Initial, working implementation\n  * Stop progress indicator on failure (`gh run list --workflow`)\n  * Cleaned up some naming and comments\n  * Minor refactoring autolink create help and logic\n  * Bump github.com/in-toto/attestation from 1.1.0 to 1.1.1\n  * Cleanup comment\n  * Fix pr create tests\n  * Fix breaking changes from sigstore-go v0.7.0 upgrade\n  * go mod tidy\n  * Upgrade sigstore-go to v0.7.0: fixes #10114 formatting issue\n  * Refactor pr status to use the ParsePRRefs helper on the Finder\n  * Moved remote.pushDefault out of ReadBranchConfig and into finder\n  * Remove @{push} from branch config\n  * Add PushDefault method to git client\n  * WIP: push default defaults to simple\n  * Error if push revision doesn't match a remote\n  * Bump google.golang.org/protobuf from 1.36.3 to 1.36.4\n  * Refactor finder.Find and replace parseCurrentBranch with parsePRRefs\n  * Bump actions/attest-build-provenance from 2.1.0 to 2.2.0\n  * remove bolding from bullet point output\n  * Update test to be compatible with latest Glamour v0.8.0\n  * reorder policy enforcement criteria print out\n  * bold bullet point list header text\n  * Enable MSI building for Windows arm64\n  * chore: fix some comments\n  * Bump go module version to 1.23\n  * Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3\n  * Remove unncessary printf usage\n  * Bump golang ci lint to work with go 1.24\n  * Fix: Ensure constant format strings in fmt and printf calls\n  * Change back to exponential backoff\n  * Linter\n  * Better handling for codespace state polling\n  * Add affected version to bug report form\n  * fix: tiny typo fix\n  * Fix: accidental whitespace in gist edit\n  * Fix: gist edit test name\n  * Fix: gist edit/view tests var name consistency\n  * Fix: Gist edit tests for interactivity\n  * Add small wait to extension update tests\n  * Refactor test based on PR feedback\n  * fixup! Add comments and a bit of code cleanup\n  * Use PushRemoteURL instead of RemoteURL in prSelectorForCurrentBranch\n  * Add comments and a bit of code cleanup\n  * skip check\n  * add tty check\n  * formatting\n  * delete unused function\n  * drop unused handler method\n  * print attestation output info as bullet points instead of table\n  * Bump google.golang.org/protobuf from 1.36.2 to 1.36.3\n  * Fix typo in secret base repo selection comment\n  * Change wording on secret repo prompt\n  * Print informative message before prompting for secret repo\n  * Secret base repo prompting should not use resolved remote\n  * Move secret base repo prompting earlier\n  * Add acceptance test for secrets remote disambiguation\n  * Remove validated TODO and add review warning\n  * Rename secret BaseRepo func\n  * Use smarter base repo funcs for secret commands\n  * Move secret repo validation into secrets subpackage\n  * Always prompt on secret set when multiple remotes\n  * Update setdefault test\n  * Update docs for set-default\n  * Prompt for secret commands\n  * Add tests for secret commands\n  * Add remote check to secret commands\n  * Add missing git stubs to tests\n  * Add tests for deleteGist\n  * Make extension update check non-blocking\n  * Update pkg/cmd/attestation/verify/verify.go\n  * add install instructions for Manjaro Linux\n  * Bump github.com/gabriel-vasile/mimetype from 1.4.7 to 1.4.8\n  * #10042: Attempt to add a new test scenario for handling error messages when TTY is unavailable\n  * Rename domain pkg to shared\n  * #10042: Applied code review suggestions to view_test.go\n  * show error message for rerun workflow older than a month ago\n  * Enhance help docs on ext upgrade notices\n  * fix tests\n  * fix tests\n  * gist delete - check no gists\n  * removed unnecessary space\n  * Update pkg/cmd/gist/edit/edit.go\n  * chore: fix some function names in comment\n  * drop description from prompts, fix tests\n  * Expand docs on cleaning extension update dir\n  * Simplifying cleanExtensionUpdateDir logic\n  * Separate logic for checking updates\n  * Capture greater detail on updaterEnabled\n  * Restore old error functionality of prSelectorForCurrentBranch\n  * Change error handling on ReadBranchConfig to respect git Exit Codes\n  * fix: add back colon that I removed\n  * fix: actually read how MaxFunc work and simplify the code\n  * fix: padded display\n  * Collapse dryrun checks in ext bin upgrade\n  * Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14\n  * Bump github.com/sigstore/protobuf-specs from 0.3.2 to 0.3.3\n  * gist delete - use  in confirmation and success info\n  * Rename test user in tests\n  * Change pr number in test\n  * Surface and handle error from ReadBranchConfig in parseCurrentBranch\n  * Directly stub headBranchConfig in Test_tryDetermineTrackingRef\n  * Refactor error handling in ReadBranchConfig to avoid panic\n  * Refine error handling of ReadBranchConfig\n  * Add test for empty BranchConfig in prSelectorForCurrentBranch\n  * #10042 removed unnecessary field\n  * Correct help documentation around template use in `gh issue create`\n  * #10042: Add error messages for 'gh gist view/edit' prompts when no TTY is detected\n  * Comment exported functions\n  * fix gist description in tests\n  * gist delete prompt with gist description\n  * Remove shadowed errors from prSelectorForCurrentBranch and cover with tests\n  * Added tests to cover prSelectorForCurrentBranch for confidence in refactor\n  * Refactor prSelectorForCurrentBranch and tests\n  * Add missing test for RemoteURL in parseBranchConfig\n  * update table column headers\n  * Change ReadBranchConfig error message in gh pr create\n  * Remove private readBranchConfig method and remove parseBranchConfig from Client\n  * update test fixtures to include buildConfigURI\n  * add check for invalid attestation\n  * tentative updates for acceptance criteria - pending confirmation re description in prompt\n  * PR review edits\n  * Refactor Test_readGitBranchConfig for easier parsing\n  * update tests to use new function name\n  * Update pkg/cmd/attestation/api/client.go\n  * Update pkg/cmd/attestation/api/client.go\n  * Remove named return values from prSelectorForCurrentBranch\n  * Refactor ReadBranchConfig for test coverage of newly returned erros\n  * Remove named returns from ReadBranchConfig and surface errors\n  * remove old comment\n  * remove commented out code\n  * comment\n  * undo more name chanages\n  * undo other name change\n  * remove spaces\n  * undo name change for now\n  * more mock http client cleanup\n  * Update triage.md to reflect FR experiment outcome\n  * simplify mock http client\n  * use mock to assert number of http calls\n  * add http client test constructors\n  * setup testing struct for test cases\n  * feat: make the extension upgrade fancier\n  * Fix up intra-org fork test setup\n  * Add renamed acceptance tests\n  * Reflect coverage for view and status subcommands\n  * Expand with gh pr status\n  * Add base gh pr view acceptance tests for changes\n  * Find push remote using branch.<name>.pushRemote and remote.pushDefault\n  * Only find PRs w/ branch.<name>.merge if push.default = upstream/tracking\n  * Find PRs using @{push}\n  * add mutex for test field\n  * add test case for bundle url fetch failure\n  * add tests for bundle url fetch and fallback\n  * fetch bundles in parallel\n  * return fetch attestations err directly\n  * provide additional logging and fallback\n  * Update pkg/cmd/auth/login/login.go\n  * Clear up --with-token fine grained PAT usage\n  * Fix typos\n  * feat: Add support for creating autolink references\n  * cleanup\n  * gist delete prompt for confirmation\n  * undo extra move\n  * rearrange struct vals for consistency\n  * add gist delete tests for blank gist id\n  * gh gist delete: prompt for gist id\n  * Escape '.' in version validation regex in deployment workflow\n  * Add job to deployment workflow to validate the tag name for a given release\n  * update verify output table\n  * simplify func params\n  * add more verification integration tests\n  * fix failing tests\n  * add mock http client\n  * update error messages\n  * var naming\n  * go mod tidy\n  * add httpClient field to LiveClient struct\n  * remove unused method\n  * fetch bundles with sas url\n  * Fix failig local extension tests\n  * Implement remaining PR feedback\n  * Implement partial feedback before trunk update\n  * Add build constraint for non-Windows systems\n  * Add build constraint for non-Windows systems\n  * Refactor local installation manager test by OS\n  * #10042 fixed test\n  * fixing gh gist view prompts with no TTY\n  * Remove unnecessary Extension.FullName()\n  * Expand update tests for local extensions\n  * Test whether extension update should be checked\n  * Remove Extension.FullName() from interface\n  * Enhance extension manager and tests\n  * Initial extension update check testing\n  * Refactor extension command testing\n  * Bring extension update check in line with gh check\n  * initial pass at fetching bundles with sas urls\n\n- Update to version 2.65.0:\n  * Bump cli/go-gh for indirect security vulnerability\n  * Panic mustParseTrackingRef if format is incorrect\n  * Move trackingRef into pr create package\n  * Make tryDetermineTrackingRef tests more respective of reality\n  * Rework tryDetermineTrackingRef tests\n  * Avoid pointer return from determineTrackingBranch\n  * Doc determineTrackingBranch\n  * Don't use pointer for determineTrackingBranch branchConfig\n  * Panic if tracking ref can't be reconstructed\n  * Document and rework pr create tracking branch lookup\n  * Upgrade generated workflows\n  * Fixed test for stdout in non-tty use case of repo fork\n  * Fix test\n  * Alternative: remove LocalBranch from BranchConfig\n  * Set LocalBranch even if the git config fails\n  * Add test for permissions check for security and analysis edits (#1)\n  * print repo url to stdout\n  * Update pkg/cmd/auth/login/login.go\n  * Move mention of classic token to correct line\n  * Separate type decrarations\n  * Add mention of classic token in gh auth login docs\n  * Update pkg/cmd/repo/create/create.go\n  * docs(repo): make explicit which branch is used when creating a repo\n  * fix(repo fork): add non-TTY output when fork is newly created\n  * Move api call to editRun\n  * Complete get -> list renaming\n  * Better error testing for autolink TestListRun\n  * Decode instead of unmarshal\n  * Use 'list' instead of 'get' for autolink list type and method\n  * Remove NewAutolinkClient\n  * Break out autolink list json fields test\n  * PR nits\n  * Refactor autolink subcommands into their own packages\n  * Whitespace\n  * Refactor out early return in test code\n  * Add testing for AutoLinkGetter\n  * Refactor autolink list and test to use http interface for simpler testing\n  * Apply PR comment changes\n  * Introduce repo autolinks list commands\n  * Remove release discussion posts and clean up related block in deployment yml\n  * Extract logic into helper function\n  * add pending status for workflow runs\n  * Feat: Allow setting security_and_analysis settings in gh repo edit\n  * Upgrade golang.org/x/net to v0.33.0\n  * Document SmartBaseRepoFunc\n  * Document BaseRepoFunc\n  * Update releasing.md\n  * Document how to set gh-merge-base\n\n- Update to version 2.64.0:\n  * add test for different SAN and SourceRepositoryURI values\n  * add test for signerRepo and tenant\n  * add some more fields to test that san, sanregex are set properly\n  * Bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6\n  * update san and sanregex configuration for readability\n  * reduce duplication when creating policy content\n  * tweak output of build policy info\n  * Name conditionals in PR finder\n  * Support pr view for intra-org forks\n  * Return err instead of silentError in merge queue check\n  * linting pointed out this var is no longer used\n  * Removed fun, but inaccessible ASCII header\n  * further tweaks to the long description\n  * Exit on pr merge with `-d` and merge queue\n  * Addressed PR review feedback; expanded Long command help string, used ghrepo, clarified some abbreviations\n  * Update pkg/cmd/attestation/inspect/inspect.go\n  * Update gh auth commands to point to GitHub Docs\n  * Reformat ext install long\n  * Mention Windows quirk in ext install help text\n  * Fix error mishandling in local ext install\n  * Assert on err msg directly in ext install tests\n  * Clarify hosts in ext install help text\n  * Bump golang.org/x/crypto from 0.29.0 to 0.31.0\n  * Removed now redundant file\n  * minor tweak to language\n  * go mod tidy\n  * Deleted no-longer-used code.\n  * deleted now-invalid tests, added a tiny patina of new testing.\n  * Tightened up docs, deleted dead code, improved printing\n  * fix file name creation on windows\n  * wording\n  * hard code expected digest\n  * fix download test\n  * use bash shell with integration tests\n  * simplify var creation\n  * update integration test scripts\n  * fix: list branches in square brackets in gh codespace\n  * try nesting scripts\n  * run all tests in a single script\n  * windows for loop syntax\n  * use replaceAll\n  * update expected file path on windows\n  * run integration tests with windows specific syntax\n  * run all attestation cmd integration tests automatically\n  * Bump actions/attest-build-provenance from 1.4.4 to 2.1.0\n  * Improve error handling in apt setup script\n  * use different file name for attestation files on windows\n  * test(gh run): assert branch names are enclosed in square brackets\n  * docs: enhance help text and prompt for rename command\n  * Revert \"Confirm auto-detected base branch\"\n  * Confirm auto-detected base branch\n  * Merge changes from #10004\n  * Set gh-merge-base from `issue develop`\n  * Open PR against gh-merge-base\n  * Refactor extension executable error handling\n  * fix: list branches in square brackets in gh run view (#10038)\n  * docs: update description of command\n  * style: reformat files\n  * docs: update sentence case\n  * use github owned oci image\n  * docs: add mention of scopes help topic in `auth refresh` command help\n  * docs: add mention of scopes help topic in `auth login` command help\n  * docs: add help topic for auth scopes\n  * docs: improve help for browse command\n  * docs: improve docs for browse command as of #5352\n  * fix package reference\n  * add gh attestation verify integration test for oci bundles\n  * add integration test for bundle-from-oci option\n  * update tests\n  * update tests\n  * move content of veriy policy options function into enforcement criteria\n  * comment\n  * try switch statement\n  * remove duplicate err checking\n  * get bundle issuer in another func\n  * more logic updating to remove nesting\n  * inverse logic for less nesting\n  * remove unneeded nesting\n  * wip, linting, getting tests to pass\n  * wording\n  * var naming\n  * drop table view\n  * order policy info so relevant info is printed next to each other\n  * Update pkg/cmd/attestation/verification/policy.go\n  * Update pkg/cmd/attestation/verification/policy.go\n  * Update pkg/cmd/attestation/verification/policy.go\n  * wip: added new printSummaryInspection\n  * Improve error handling for missing executable\n  * experiment with table output\n  * Assert stderr is empty in manager_test.go\n  * Update error message wording\n  * Change: exit zero, still print warning to stderr\n  * wording\n  * Improve docs on installing extensions\n  * Update language for missing extension executable\n  * Update test comments about Windows behavior\n  * wording\n  * wording\n  * wording\n  * add newlines for additional policy info\n  * Document requirements for local extensions\n  * Warn when installing local ext with no executable\n  * wording\n  * formatting\n  * print policy information before verifying\n  * add initial policy info method\n  * more wip poking around, now with table printing\n  * wip, gh at inspect will check the signature on the bundle\n  * wip: inspect now prints various bundle fields in a nice json\n\n- Update to version 2.63.2:\n  * include alg with digest when fetching bundles from OCI\n  * Error for mutually exclusive json and watch flags\n  * Use safepaths for run download\n  * Use consistent slice ordering in run download tests\n  * Consolidate logic for isolating artifacts\n  * Fix PR checkout panic when base repo is not in remotes\n  * When renaming an existing remote in `gh repo fork`, log the change\n  * Improve DNF version clarity in install steps\n  * Fix formatting in client_test.go comments for linter\n  * Expand logic and tests to handle edge cases\n  * Refactor download testing, simpler file descends\n  * Bump github.com/gabriel-vasile/mimetype from 1.4.6 to 1.4.7\n  * Improve test names so there is no repetition\n  * Second attempt to address exploit\n\n- Update to version 2.63.0:\n  * Bump cli/go-gh for codespace fix\n  * Update git/client_test.go\n  * Update git/client_test.go\n  * Update git/client_test.go\n  * Add checkout test that uses ssh git remote url\n  * Rename backwards compatible credentials pattern\n  * Fix CredentialPattern doc typos\n  * Remove TODOs\n  * Fix typos and add tests for CredentialPatternFrom* functions\n  * Add SSH remote todo\n  * General cleanup and docs\n  * Allow repo sync fetch to use insecure credentials pattern\n  * Allow client fetch to use insecure credentials pattern\n  * Allow client push to use insecure credential pattern\n  * Allow client pull to use insecure credential pattern\n  * Allow opt-in to insecure pattern\n  * Support secure credential pattern\n  * Refactor error handling for missing \"workflow\" scope in createRelease\n  * ScopesResponder wraps StatusScopesResponder\n  * Refactor `workflow` scope checking\n  * pr feedback\n  * pr feedback\n  * Update pkg/cmd/attestation/verify/attestation_integration_test.go\n  * Apply suggestions from code review\n  * Refactor command documentation to use heredoc\n  * pr feedback\n  * remove unused test file\n  * undo change\n  * add more testing testing fixtures\n  * update test with new test bundle\n  * naming\n  * update test\n  * update test\n  * Fix README.md code block formatting\n  * clean up\n  * wrap sigstore and cert ext verification into a single function\n  * Adding option to return `baseRefOid` in `pr view`\n  * verify cert extensions function should return filtered result list\n  * pr feedback\n  * Update pkg/cmd/attestation/download/download.go\n  * fix function param calls\n  * Update pkg/cmd/attestation/verification/extensions.go\n  * Formatting fix\n  * Updated formatting to be more clear\n  * Updated markdown syntax for a `note`.\n  * Added a section on manual verification of the relases.\n  * Handle missing \"workflow\" scope in createRelease\n  * Modify push prompt on repo create when bare\n  * Doc push behaviour for bare repo create\n  * Push --mirror on bare repo create\n  * Add acceptance test for bare repo create\n  * Doc isLocalRepo and git.Client IsLocalRepo differences\n  * Use errWithExitCode interface in repo create isLocalRepo\n  * Backfill repo creation failure tests\n  * Support bare repo creation\n  * use logger println method\n  * simplify verifyCertExtensions\n  * rename type\n  * refactor fetch attestations funcs\n\n- Update to version 2.62.0\n  * CVE-2024-52308: remote code execution (RCE) when users connect\n    to a malicious Codespace SSH server and use the gh codespace\n    ssh or gh codespace logs commands\n    (boo#1233387, GHSA-p2h2-3vg9-4p87)\n  * Check extension for latest version when executed\n  * Shorten extension release checking from 3s to 1s\n- includes changes from 2.61.0:\n  * Enhance gh repo edit command to inform users about\n    consequences of changing visibility and ensure users are\n    intentional before making irreversible changes\n\n- Update to version 2.60.1:\n  * Update testscript to use hard fork\n  * Note token redaction in Acceptance test README\n  * Refactor gpg-key delete to align with ssh-key delete\n  * Add acceptance tests for org command\n  * Adjust environment help for host and tokens (#9809)\n  * Add SSH Key Acceptance test\n  * Add Acceptance test for label command\n  * Add acceptance test for gpg-key\n  * Update go-internal to redact more token types in Acceptance tests\n  * Address PR feedback\n  * Clarify `gh` is available for GitHub Enterprise Cloud\n  * Remove comment from gh auth logout\n  * Add acceptance tests for auth-setup-git and formattedStringToEnv helper func\n  * Use forked testscript for token redaction\n  * Use new GitHub preview terms in working-with-us.md\n  * Use new GitHub previews terminology in attestation\n  * Test json flags for repo view and list\n  * Clean up auth-login-logout acceptance test with native functionality\n  * Add --token flag to `gh auth login` to accept a PAT as a flag\n  * Setup acceptance testing for auth and tests for auth-token and auth-status\n  * Update variable testscripts based on secret\n  * Check extOwner for no value instead\n  * Fix tests for invalid extension name\n  * Refactor to remove code duplication\n  * Linting: now that mockDataGenerator has an embedded mock, we ought to have pointer receivers in its funcs.\n  * Minor tweaks, added backoff to getTrustDomain\n  * added test for verifying we do 3 retries when fetching attestations.\n  * Fix single quote not expanding vars\n  * Added constant backoff retry to getAttestations.\n  * Address @williammartin PR feedback\n  * wip: added test that fails in the absence of a backoff.\n  * add validation for local ext install\n  * feat: add ArchivedAt field to Repository struct\n  * Refactor `gh secret` testscript\n  * Wrap true in '' in repo-fork-sync\n  * Rename acceptance test directory from repos to repo\n  * Remove unnecessary flags from repo-delete testscript\n  * Replace LICENSE Makefile README.md acceptance api bin build cmd context docs git go.mod go.sum internal pkg script share test utils commands with\n  * Wrap boolean strings in '' so it is clear they are strings\n  * Remove unnecessary gh auth setup-git steps\n  * Cleanup some inconsistencies and improve collapse some functionality\n  * Add acceptance tests for repo deploy-key add/list/delete\n  * Add acceptance tests for repo-fork and repo-sync\n  * Add acceptance test for repo-set-default\n  * Add acceptance test for repo-edit\n  * Add acceptance tests for repo-list and repo-rename\n  * Acceptance testing for repo-archive and repo-unarchive\n  * Add acceptance test for repo-clone\n  * Added acceptance test for repo-delete\n  * Added test function for repos and repo-create test\n  * Implement acceptance tests for search commands\n  * Remove . from test case for TestTitleSurvey\n  * Clean up Title Survey empty title message code\n  * Add missing test to trigger acceptance tests\n  * Add acceptance tests for `gh variable`\n  * Minor polish / consistency\n  * Fix typo in custom command doc\n  * Refactor env2upper, env2lower; add docs\n  * Update secret note about potential failure\n  * Add testscripts for `gh secret`, helper cmds\n  * Remove stdout assertion from release\n  * Rename test files\n  * Add acceptance tests for `release` commands\n  * Implement basic API acceptance test\n  * Remove unnecesary mkdir from download Acceptance test\n  * Remove empty stdout checks\n  * Adjust sleeps to echos in Acceptance workflows\n  * Use regex assert for enable disable workflow Acceptance test\n  * Watch for run to end for cancel Acceptance test\n  * Include startedAt, completedAt in run steps data\n  * Rewrite a sentence in CONTRIBUTING.md\n  * Add filtered content output to docs\n  * sleep 10s before checking for workflow run\n  * Update run-rerun.txtar\n  * Create cache-list-delete.txtar\n  * Create run-view.txtar\n  * Create run-rerun.txtar\n  * Create run-download.txtar\n  * Create run-delete.txtar\n  * Remove IsTenancy and relevant tests from gists as they are unsupported\n  * Remove unnecessary code branches\n  * Add ghe.com to tests describing ghec data residency\n  * Remove comment\n  * auth: Removed redundant ghauth.IsTenancy(host) check\n  * Use go-gh/auth package for IsEnterprise, IsTenancy, and NormalizeHostname\n  * Upgrade go-gh version to 2.11.0\n  * Add test coverage to places where IsEnterprise incorrectly covers Tenancy\n  * Fix issue creation with metadata regex\n  * Create run-cancel.txtar\n  * Create workflow-run.txtar\n  * Create workflow-view.txtar\n  * implement workflow enable/disable acceptance test\n  * implement base workflow list acceptance test\n  * Add comment to acceptance make target\n  * Resolve PR feedback\n  * Acceptance test issue command\n  * Support GH_ACCEPTANCE_SCRIPT\n  * Ensure Acceptance defer failures are debuggable\n  * Add acceptance task to makefile\n  * build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6\n  * Ensure pr create with metadata has assignment\n  * Document sharedCmds func in acceptance tests\n  * Correct testscript description in Acceptance readme\n  * Add link to testscript pkg documentation\n  * Add VSCode extension links to Acceptance README\n  * Fix GH_HOST / GH_ACCEPTANCE_HOST misuse\n  * Acceptance test PR list\n  * Support skipping Acceptance test cleanup\n  * Acceptance test PR creation with metadata\n  * Suggest using legacy PAT for acceptance tests\n  * Add host recommendation to Acceptance test docs\n  * Don't append remaining text if more matches\n  * Highlight matches in table and content\n  * Split all newlines, and output no-color to non-TTY\n  * Print filtered gists similar to code search\n  * Show progress when filtering\n  * Simplify description\n  * Disallow use of --include-content without --filter\n  * Improve help docs\n  * Refactor filtering into existing `gist list`\n  * Improve performance\n  * Add `gist search` command\n  * Fix api tests after function signature changes\n  * Return nil instead of empty objects when err\n  * Fix license list and view tests\n  * Validate required env vars not-empty for Acceptance tests\n  * Add go to test instructions in Acceptance README\n  * Apply suggestions from code review\n  * Error if acceptance tests are targeting github or cli orgs\n  * Add codecoverage to Acceptance README\n  * Isolate acceptance env vars\n  * Add Writing Tests section to Acceptance README\n  * Add Debug and Authoring sections to Acceptance README\n  * Acceptance test PR comment\n  * Acceptance test PR merge and rebase\n  * Note syntax highlighting support for txtar files\n  * Refactor acceptance test environment handling\n  * Add initial acceptance test README\n  * Use txtar extension for testscripts\n  * Support targeting other hosts in acceptance tests\n  * Use stdout2env in PR acceptance tests\n  * Acceptance test PR checkout\n  * Add pr view test script\n  * Initial testscript introduction\n  * While we're at it, let's ensure VerifyCertExtensions can't be tricked the same way.\n  * Add examples for creating `.gitignore` files\n  * Update help for license view\n  * Refactor http error handling\n  * implement `--web` flag for license view\n  * Fix license view help doc, add LICENSE.md example\n  * Update help and fix heredoc indentation\n  * Add SPDX ID to license list output\n  * Fix ExactArgs invocation\n  * Add `Long` for license list indicating limitations\n  * Update function names\n  * Reverse repo/shared package name change\n  * If provided with zero attestations to verify, the LiveSigstoreVerifier.Verify func should return an error.\n  * Bump cli/oauth to 1.1.1\n  * Add test coverage for TitleSurvey change\n  * Fix failing test for pr and issue create\n  * Make the X in the error message red and print with io writer\n  * Handle errors from parsing hostname in auth flow\n  * Apply suggestions from code review\n  * Refactor tests and add new tests\n  * Move API calls to queries_repo.go\n  * Allow user to override markdown wrap width via $GH_MDWIDTH from environment\n  * Add handling of empty titles for Issues and PRs\n  * Print the login URL even when opening a browser\n  * Apply suggestions from code review\n  * Update SECURITY.md\n  * Fix typo and wordsmithing\n  * fix typo\n  * Remove trailing space from heading\n  * Revise wording\n  * Update docs to allow community submitted designs\n  * Implement license view\n  * Implement gitignore view\n  * implement gitignore list\n  * Update license table headings and tests\n  * Fix ListLicenseTemplates doc\n  * fix output capitalization\n  * Cleanup rendering and tests\n  * Remove json output option\n  * Divide shared repo package and add queries tests\n  * First pass at implementing `gh repo license list`\n  * Emit a log message when extension installation falls back to a darwin-amd64 binary on an Apple Silicon macOS machine\n","affected":[{"package":{"name":"gh","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/gh&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.96.0-bp160.1.1"}]}],"ecosystem_specific":{"binaries":[{"gh":"2.96.0-bp160.1.1","gh-bash-completion":"2.96.0-bp160.1.1","gh-fish-completion":"2.96.0-bp160.1.1","gh-zsh-completion":"2.96.0-bp160.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21310-1.json"}}],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1233387"},{"type":"REPORT","url":"https://bugzilla.suse.com/1234566"},{"type":"REPORT","url":"https://bugzilla.suse.com/1235345"},{"type":"REPORT","url":"https://bugzilla.suse.com/1237669"},{"type":"REPORT","url":"https://bugzilla.suse.com/1239496"},{"type":"REPORT","url":"https://bugzilla.suse.com/1241837"},{"type":"REPORT","url":"https://bugzilla.suse.com/1243930"},{"type":"REPORT","url":"https://bugzilla.suse.com/1251464"},{"type":"REPORT","url":"https://bugzilla.suse.com/1251666"},{"type":"REPORT","url":"https://bugzilla.suse.com/1253929"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258617"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260271"},{"type":"REPORT","url":"https://bugzilla.suse.com/1262339"},{"type":"REPORT","url":"https://bugzilla.suse.com/1262943"},{"type":"REPORT","url":"https://bugzilla.suse.com/1265405"},{"type":"REPORT","url":"https://bugzilla.suse.com/1265777"},{"type":"REPORT","url":"https://bugzilla.suse.com/1266173"},{"type":"REPORT","url":"https://bugzilla.suse.com/1266618"},{"type":"REPORT","url":"https://bugzilla.suse.com/1266975"},{"type":"REPORT","url":"https://bugzilla.suse.com/1267158"},{"type":"REPORT","url":"https://bugzilla.suse.com/1269427"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-52308"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-27144"}]}