releases.shpreview
GitHub/GitHub CLI

GitHub CLI

Mon
Wed
Fri
JunJulAugSepOctNovDecJanFebMarAprMay
Less
More
Releases8Avg2/moVersionsv2.87.3 to v2.93.0
All Releases

Authorization header no longer leaks to TUF mirrors in attestation commands

↗
v2.93.0

Security

A security vulnerability has been identified, and fixed, that would incorrectly include authorization header in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands.

Users are advised to update gh to version v2.93.0 as soon as possible.

For more information see: https://github.com/cli/cli/security/advisories/GHSA-8xvp-7hj6-mcj9

Support agents in gh secret command set

The gh secret command set can now set agent secrets. For more information, see "Configuring secrets and variables for Copilot cloud agent".

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.92.0...v2.93.0

GitHub CLI 2.92.0

↗
v2.92.0

Support GitHub Enterprise Cloud (GHEC) in skill commandset

Now gh skill subcommands (install, preview, publish, search, update) are able to work with GHEC hosts with data residency.

Add --allow-hidden-dirs flag to skill preview

Following the addition of --allow-hidden-dirs to skill install in the previous release, now the flag is also supported in skill preview, allowing users to preview skills located in hidden (dot-prefixed) directories such as .claude/skills/, .agents/skills/, and .github/skills/.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.91.0...v2.92.0

GitHub CLI 2.91.0

↗
v2.91.0

GitHub CLI now collects pseudoanonymous telemetry

To better understand how features are used in practice, especially as agentic adoption grows, GitHub CLI now sends pseudoanonymous telemetry.

See Telemetry for more details on what's collected, why, and how to opt out.

Support more agents in gh skill

Thanks to community feedback, gh now supports a large number of agent hosts. Run gh skill install --help for the list of available agents.

Improve skill discovery

gh skill install now adds the --allow-hidden-dirs flag to support discovering skills in hidden (dot-prefixed) directories such as .claude/skills/, .agents/skills/, and .github/skills/.

Detect skills re-published from other sources

GitHut CLI now detects if the skill to be installed is re-published from an upstream source and offers the option to install it from there. The --upstream flag is also added for non-interactive use cases.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.90.0...v2.91.0

GitHub CLI 2.90.0

↗
v2.90.0

Manage agent skills with gh skill (Public Preview)

Agent skills are portable sets of instructions, scripts, and resources that teach AI coding agents how to perform specific tasks. The new gh skill command makes it easy to discover, install, manage, and publish agent skills from GitHub repositories - right from the CLI.

# Discover skills
gh skill search copilot

# Preview a skill without installing
gh skill preview github/awesome-copilot documentation-writer

# Install a skill
gh skill install github/awesome-copilot documentation-writer

# Pin to a specific version
gh skill install github/awesome-copilot documentation-writer --pin v1.2.0

# Check installed skills for updates
gh skill update --all

# Validate and publish your own skills
gh skill publish --dry-run

Skills are automatically installed to the correct directory for your agent host. gh skill supports GitHub Copilot, Claude Code, Cursor, Codex, Gemini CLI, and Antigravity. Target a specific agent and scope with --agent and --scope flags.

gh skill publish validates skills against the Agent Skills specification and checks remote settings like tag protection and immutable releases to improve supply chain security.

Read the full announcement on the GitHub Blog.

gh skill is launching in public preview and is subject to change without notice.

Official extension suggestions

When you run a command that matches a known official extension that isn't installed (e.g. gh stack), the CLI now offers to install it instead of showing a generic "unknown command" error.

This feature is available for github/gh-aw and github/gh-stack.

When possible, you'll be prompted to install immediately. When prompting isn't possible, the CLI prints the gh extension install command to run.

gh extension install no longer requires authentication

gh extension install previously required a valid auth token even though it only needs to download a public release asset. The auth check has been removed, so you can install extensions without being logged in.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.89.0...v2.90.0

GitHub CLI 2.89.0

↗
v2.89.0

:copilot: gh agent-task now works on ghe.com tenancies

gh agent-task commands previously failed with 401 Unauthorized for users on ghe.com tenancy hosts because the Copilot API URL was hardcoded. The URL is now resolved dynamically per host, so gh agent-task works correctly regardless of your GitHub hosting environment.

Experimental new prompter

A new TUI-based prompter powered by charmbracelet/huh is available behind the GH_EXPERIMENTAL_PROMPTER environment variable. This is an early preview — try it out and share feedback!

export GH_EXPERIMENTAL_PROMPTER=1

gh issue create and gh issue transfer no longer require extra token scopes

gh issue create and gh issue transfer previously fetched repository fields they didn't need, which could require additional token scopes. These commands now fetch only the minimal fields necessary for issue operations.

What's Changed

✨ Features
  • gh pr create, gh issue create, gh issue edit: search-based assignee selection and login-based mutation on github.com by @BagToad in #13009
  • Add experimental huh-only prompter gated by GH_EXPERIMENTAL_PROMPTER by @BagToad in #12859
🐛 Fixes
  • fix(agent-task): resolve Copilot API URL dynamically for ghe.com tenancies by @BagToad in #12956
  • fix(issue): avoid fetching unnecessary fields in issue create and issue transfer by @babakks in #12884
  • fix: resolve data race in codespaces port forwarder by @Lslightly in #13033
📚 Docs & Chores
:dependabot: Dependencies
  • chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #12963
  • chore(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.3 by @dependabot[bot] in #12962
  • chore(deps): bump github.com/zalando/go-keyring from 0.2.6 to 0.2.8 by @dependabot[bot] in #13031
  • chore(deps): bump microsoft/setup-msbuild from 2.0.0 to 3.0.0 by @dependabot[bot] in #13005
  • chore(deps): bump mislav/bump-homebrew-formula-action from 3.6 to 4.1 by @dependabot[bot] in #13004
  • chore(deps): bump azure/login from 2.3.0 to 3.0.0 by @dependabot[bot] in #12951

New Contributors

Full Changelog: v2.88.1...v2.89.0

GitHub CLI 2.88.1

↗
v2.88.1

Fix pr commands failing with read:project scope error

v2.88.0 introduced a regression where pr commands would fail with the error:

error: your authentication token is missing required scopes [read:project]
To request it, run:  gh auth refresh -s read:project

Previously, missing read:project scope was gracefully handled, and project data was silently skipped. A change inadvertently broke the error matching that enabled this graceful degradation. v2.88.1 reverts these changes so that pr commands work correctly without requiring the read:project scope.

What's Changed

Full Changelog: https://github.com/cli/cli/compare/v2.88.0...v2.88.1

GitHub CLI 2.88.0

↗
v2.88.0

:copilot: Request Copilot Code Review from gh

<img width="80%" height="80%" alt="image" src="https://github.com/user-attachments/assets/c9b86700-5934-44b6-9210-227495a18d8e" />

gh pr create and gh pr edit now support Copilot Code Review as a reviewer. Request a review with --add-reviewer @copilot, or select Copilot interactively from the searchable reviewer prompt.

Create a pull request and request review from Copilot:

gh pr create --reviewer @copilot

Edit a pull request and request review from Copilot:

gh pr edit --add-reviewer @copilot

Close issues as duplicates with gh issue close --duplicate-of

You can now close issues as duplicates and link to a duplicate issue directly from the CLI. The new --duplicate-of flag accepts an issue number or URL and marks the closed issue as a duplicate of the referenced one. You can also use --reason duplicate to set the close reason without linking a specific issue.

# Close as duplicate, linking to the original issue
gh issue close 123 --duplicate-of 456

# Close with duplicate reason only
gh issue close 123 --reason duplicate

JSON support for gh agent-task

gh agent-task list and gh agent-task view now support --json, --jq, and --template flags, consistent with other gh commands.

gh agent-task list --json id,name,state
gh agent-task view <id> --json state --jq '.state'

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.87.3...v2.88.0

GitHub CLI 2.87.1

↗
v2.87.1

⚠️ Incomplete Release

The v2.87.1 release experienced a failure in our workflow and is not fully published to the designated package managers/repositories. This is resolved in v2.87.2, so we recommend using that release instead.

What's Changed

Full Changelog: https://github.com/cli/cli/compare/v2.87.0...v2.87.1

GitHub CLI 2.87.0

↗
v2.87.0

gh workflow run immediately returns workflow run URL

One of our most requested features - with the latest changes in GitHub API, gh workflow run will immediately print the created workflow run URL.

Improved gh auth login experience in VM/WSL environments

We have observed rare cases of time drift between the wall and monotonic clocks, mostly in WSL or VM environments, causing failures during polling for the OAuth token. This new release implements measures to account for such situations.

If you continue to experience gh auth login issues in WSL, please comment in https://github.com/cli/cli/issues/9370

:copilot: Request Copilot Code Review from gh + performance improvements

gh pr edit now supports Copilot Code Review as a reviewer. You can request a review from Copilot using the --add-reviewer @copilot flag or interactively by selecting reviewers in the prompts.

This release also introduces a new search experience for selecting reviewers and assignees in gh pr edit. Instead of loading all collaborators and teams upfront, results are now fetched based on inputs to a new search option. Initial options are suggestions based on those involved with the pull request already.

? Reviewers  [Use arrows to move, space to select, <right> to all, <left> to none, type to filter]
  [ ]  Search (7472 more)
  [x]  BagToad (Kynan Ware)
> [x]  Copilot (AI)

This experience will follow in gh pr create and gh issue for assignees in a later release.

What's Changed

✨ Features
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.86.0...v2.87.0

GitHub CLI 2.86.0

↗
v2.86.0

:copilot: Install and run GitHub Copilot CLI directly from gh

Since we deprecated the GitHub Copilot in the CLI extension in favor of the new agentic GitHub Copilot CLI, we want to give developers using gh a simple way to get started using our most powerful terminal assistant.

  • gh copilot will prompt to install, then run Copilot CLI
  • gh copilot <args> will execute the Copilot CLI, forwarding any arguments and flags

For more information and usage options, run gh copilot --help.

What's Changed

✨ Features
📚 Docs & Chores

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.85.0...v2.86.0

GitHub CLI 2.85.0

↗
v2.85.0

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.83.2...v2.85.0

GitHub CLI 2.83.2

↗
v2.83.2

What's Changed

🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.83.1...v2.83.2

GitHub CLI 2.83.1

↗
v2.83.1

What's Changed

🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

Full Changelog: https://github.com/cli/cli/compare/v2.83.0...v2.83.1

GitHub CLI 2.83.0

↗
v2.83.0

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.82.1...v2.83.0

GitHub CLI 2.82.1

↗
v2.82.1

Fix gh pr edit not detecting classic projects feature deprecation

gh pr edit was not correctly detecting the classic projects API deprecation. This release fixes that detection and avoids an incorrect fetch to the deprecated APIs.

This only impacted gh pr edit commands used to add or remove projects.

What's Changed

🐛 Fixes
:dependabot: Dependencies

Full Changelog: https://github.com/cli/cli/compare/v2.82.0...v2.82.1

GitHub CLI 2.82.0

↗
v2.82.0
✨ Features
🐛 Fixes

Full Changelog: https://github.com/cli/cli/compare/v2.81.0...v2.82.0

GitHub CLI 2.81.0

↗
v2.81.0

Support for GitHub Release Attestations

This release introduces the release verify and release verify-asset commands for verifying GitHub Release attestations. Part of the Immutable Releases initiative, a release attestation provides a signed, timestamped binding between a release, its git tag, and any associated assets. These new commands provide a convenient way to verify the integrity of an immutable release against its attestation.

  • Verify the latest release has a valid attestation: gh release verify
  • Verify a specific release by tag: gh release verify v1.2.3
  • Verify an asset from the latest release: gh release verify-asset my-asset.zip
  • Verify a local asset file originated from a specific release: gh release verify-asset v1.2.3 my-asset.zip

These commands help ensure that releases and their assets are authentic and haven’t been tampered with, providing an additional layer of security for your software supply chain.

gh auth status Supports JSON Output

This release adds support for the --json flag in gh auth status. Run gh auth status --help for more information and usage examples.

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores

New Contributors

Full Changelog: https://github.com/cli/cli/compare/v2.80.0...v2.81.0

GitHub CLI 2.80.0

↗
v2.80.0

:copilot: Manage GitHub Copilot Coding Agent From the GitHub CLI

This GitHub CLI release introduces the agent-task commandset for managing coding agent tasks in gh:

  • Create tasks: gh agent-task create "refactor the codebase"
  • List all your tasks: gh agent-task list
  • View task details: gh agent-task view 1234
  • View the task log in real-time: gh agent-task view 1234 --log --follow

For more information about command line flags and arguments, run gh agent-task <command> --help.

The agent-task commandset also ships with the following aliases for convenience:

  • gh agent-tasks
  • gh agent
  • gh agents

ℹ️ The agent-task commandset is in preview and is subject to change without notice.

Got feedback? Let us know what you like or don't like in an issue ❤️

What's Changed

✨ Features
🐛 Fixes

Full Changelog: https://github.com/cli/cli/compare/v2.79.0...v2.80.0

Last Checked
1h ago
Latest
v2.93.0
Source
@cli/cli44.7k
Tracking since Jan 27, 2023
.json·.md·.atom