GitHub CLI

A critical vulnerability in gh codespace jupyter that could allow command execution from a malicious Codespace is fixed — users should update immediately. gh release download now works on public repositories without authentication.

Two new preview commands, gh repo read-file and gh repo read-dir, read repository contents directly from GitHub without cloning. Both support --ref, --json, --jq, and --template for scripting, and default to the repository's default branch.

The GitHub CLI now supports managing issue types, sub-issues, and relationships with gh issue commands, and introduces a new preview gh discussion command set for managing GitHub Discussions. Also added gh skill list and the ability to auto-install official extensions in CI.

A security vulnerability that incorrectly included authorization headers in API requests to TUF repository mirrors via gh attestation, gh release verify, and gh release verify-asset commands has been fixed. The gh secret command set can now set agent secrets. Also fixed a PR API validation optimization that was skipped and improved digest algorithm derivation in release verify commands.

Support GitHub Enterprise Cloud (GHEC) in skill commandset

Now gh skill subcommands (install, preview, publish, search, update) are able to work with GHEC hosts…

GitHub CLI now collects pseudoanonymous telemetry

To better understand how features are used in practice, especially as agentic adoption grows, GitHub CLI now sends pseudoanonymous telemetry.

See Telemetry for more details on what's…

Manage agent skills with gh skill (Public Preview)

Agent skills are portable sets of instructions, scripts, and resources that teach AI coding agents how to perform specific tasks. The new gh skill command makes it easy to discover, install,…

:copilot: gh agent-task now works on ghe.com tenancies

gh agent-task commands previously failed with 401 Unauthorized for users on ghe.com tenancy hosts because the Copilot API URL was hardcoded. The URL is now resolved dynamically per host, so gh agent-task works…

Fix pr commands failing with read:project scope error

v2.88.0 introduced a regression where pr commands would fail with the error:

error: your authentication token is missing required scopes [read:project]
To request it, run:  gh auth refresh -s…

:copilot: Request Copilot Code Review from gh

gh pr create and gh pr edit now support [Copilot Code…

What's Changed

• Fix project mutation query variable usage by @williammartin in https://github.com/cli/cli/pull/12757

Full Changelog: https://github.com/cli/cli/compare/v2.87.2...v2.87.3

ℹ️ Note

This release was cut primarily to resolve a publishing issue. We recommend reviewing the v2.87.1 release notes for the complete set of latest features and fixes.

What's Changed

• chore(deps): bump…

⚠️ Incomplete Release

The v2.87.1 release experienced a failure in our workflow and is not fully published to the designated package managers/repositories. This is resolved in v2.87.2, so we recommend using that release…

gh workflow run immediately returns workflow run URL

One of our most requested features - with the latest changes in GitHub API, gh workflow run will immediately print the created workflow run URL.

Improved gh auth login experience in VM/WSL environments

We…

:copilot: Install and run GitHub Copilot CLI directly from gh

Since we deprecated the GitHub Copilot in the CLI extension in favor of the new agentic [GitHub Copilot…

What's Changed

✨ Features

• Add gh browse --actions flag by @rneatherway in https://github.com/cli/cli/pull/12091
• feat: allow git remote names in gh repo set-default by @majiayu000 in https://github.com/cli/cli/pull/12377

🐛 Fixes

• Fix Debian CLI package…

What's Changed

🐛 Fixes

• Isolate user-provided search query from contextual qualifiers by @babakks in https://github.com/cli/cli/pull/12170

📚 Docs & Chores

• Refactor cfg out of CAPI Client by @williammartin in https://github.com/cli/cli/pull/12148 *…

What's Changed

🐛 Fixes

• gh pr edit: Ensure empty arrays for reviewers in PR API calls by @BagToad in https://github.com/cli/cli/pull/12122

📚 Docs & Chores

• Integrate license checks back into lint workflow by @BagToad in…

What's Changed

✨ Features

• Add isImmutable to release list JSON output by @babakks in https://github.com/cli/cli/pull/12064
• gh agent-task create: support --custom-agent/-a flag by @BagToad in https://github.com/cli/cli/pull/12068
• 💡 (gh repo delete)…

Fix gh pr edit not detecting classic projects feature deprecation

gh pr edit was not correctly detecting the classic projects API deprecation. This release fixes that detection and avoids an incorrect fetch to the deprecated APIs.

This only impacted gh pr edit…