openSUSE Recommended Update: Recommended update for gh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2024:0127-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP5 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gh fixes the following issues: - Update to version 2.49.2: * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2 * Add further docs to Option type * Comment further on config changes * Remove unnecessary config list variable * Fix mistaken find and replace for Option type * Fix repo fork to use remote protocol if none configured * Avoid reconstructing config Options on each use * Make config list less fallible * Provide more type safety around config values * Move config interfaces into gh package (#9060) * Fix typos * Creating doc to capture Codespace usage guidance * Fix test function name * Add test to verify JSON fields section is rendered in Markdown * Output `JSON Fields` section in Markdown * Add test to verify JSON fields section is rendered * Add `jsonCmd` test command variable * Output `JSON Fields` section * Output `JSON FIELDS` * Add tests to verify proper `help:json-fields` annotations * Add `help:json-fields` annotation * Add `FormatSlice` function * Add --latest=false example to `release create` command * Update create.go * Add --latest=false to `gh release create` docs - Update to version 2.49.1: * Fix `attestation verify` source repository check bug * Fix unused params across project * Add support for jobs with long filenames * Run `attestation` command set integration tests separately * build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 * Adjust short and long to be the same * Do not mutate headers when initialising tableprinter * Document relationship between host and active account - Update to version 2.49.0: * Document repo clone protocol behaviour * whitespace aligment for inspect/inspect.go * whitespace alignment in attestation/attestation.go * Added tweaked note to tuf-root-verify * Tweaked gh attestation help strings to generate nicer cli manual site. * Update attestation's beta designation * Update cli/go-gh to v2.9.0 * Add beta designation on attestation command set * Test `gh at verify -b` does not require auth * Use ghinstance package for attestation host checks * Test cmdutil.IsAuthCheckEnabled cases * Fix issue with closing pager stream (#9020) * Support long URLs in `gh repo clone` (#9008) * check for enterprise host * Add missing title field for projectv2 * Match query fields with `ProjectV2` type * Include `URL` in `ProjectV2` type * Include `projectsV2` in GraphQL query * Remove unnecessary defensive check * Test verification failures when attestations are bad * Rework sigstore tests for easier maintenance * Make error more obvious when bundle has wrong extension * Add colon at the end of secret prompts (#9004) * Use cmdutil.ExactArgs instead of MinimumArgs; also add tests * proof of concept for flag-level disable auth check * remove hidden flag from attestation command (#8998) * Update `gh attestation verify` output (#8991) * Just base verification policy on trusted root, not bundle * Support offline mode for `gh attestation verify` * build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2 * `gh attestation tuf-root-verify` offline test fix (#8975) * Update `sigstore-go` dependency to v0.3.0 (#8977) * build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 * Make it clearer that job flag is meant to be an ID * Ignore run-id when providing also job for rerun - Update to version 2.48.0: * Update install_linux.md (#8950) * Remove unnecessary --help comment * Fix `go` directive in `go.mod` (#8956) * Use `filepath.Join` to support different platforms * Run `go mod tidy` * Refactor into table tests * Explain `--skip-ssh-key` usage in long doc * Tidy `go.mod` * Fix cache contention in Go CI jobs * Fix `attestation` cmd offline unit test failure (#8933) * Change subcommands default to be more user friendly * Add unit test, update naming, ensure DSSE envelope is in-toto * Updates from linter feedback * Add support to `attestation` command for more predicate types. * Close zip file in run view tests * Ensure run log cache creates cache dir if it doesn't exist * Test `--skip-ssh-key` is captured correctly * Add test to verify skipped SSH key prompts * Add `--skip-ssh-key` to options * Add `SkipSSHKey` field to `LoginOptions` * Add tests for non-happy field paths * Fix api cache test * Use testify in git url tests * Ensure cache dir is always available in RunLogCache * Remove RunLogCache interface * Use real Run Log Cache in run view tests * Capture error on Run Log Cache Exists * Rework Run Log Cache so that cache dir is injected * Expose CacheDir on Config * Minorly refactor scheme normalization in git ParseURL * Test for parsing error in git ParseURL * Remove naked returns from git ParseURL * Fix parsing IPv6 remote URLs (#8893) * Add codeowners entry for the GitHub TUF root included in the `attestation` command set (#8919) * Add comment to explain `showSelectedReposInfo` assignment * Rename const to avoid CodeQL error * Add tests to verify `numSelectedRepos` is populated when necessary * Populate `numSelectedRepos` only if needed * build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2 * Run defers in queue * Resolve PR comments * Wrap JSON arrays, objects in array with --slurp * Resolve PR comments * Clarify --merge-pages docs * Replace --paginate-all with --merge-pages * Resolve test issues * Add more JSON merge tests * Move jsonmerge package to internal * Merge JSON responses from `gh api` * Add tests for `FindByRepo` * Apply suggestions from code review * Improve error message returned by `FindByRepo` * Add test cases to verify exported JSON has non-zero `numSelectedRepos` * Populate `numSelectedRepos` in non-interactive mode, if explicitly selected * Anchor the log filename to the start * Add pr url pattern * Test pr url lock * update example for deeply nested array update * allow multiple items in nested array - Update to version 2.47.0: * Bump go-gh to v2.8.0 and go mod tidy * build(deps): bump github.com/sigstore/protobuf-specs from 0.3.0 to 0.3.1 * Bump glamour to v0.7.0 and go mod tidy * build(deps): bump github.com/google/go-containerregistry * build(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 * build(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1 * Rely on go.mod go version in all workflows (#8911) * Upgrade to Go 1.22 (#8836) * build(deps): bump github.com/docker/docker * build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 * gh-attestation cmd integration (#8698) * fix segfault in `gh repo rename` * Bump go-gh to 2.7.0 * Fix typo in auth switch help example - Update to version 2.46.0: * Include draft ID in project item list JSON (#8754) * build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.3 to 2.0.4 * Document run watch and view not supporting fine grained PATs * Document auth switch behaviour for two or more accounts * Improve discovery of `gh auth status` * grammar: avoid e.g.+etc. together * Fix the description of `gh release upload` * Bump go-keyring to fix race condition * feat: support `dry-run` in gh `pr create` (#8376) * build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.33.0 * fixed doc string * remove repetitive word * Fix breaking test for PR/issue # change * Enhance 2nd round of issue and PR number output * Apply first round of owner/repo#number consistency * fix: format files * feat(merge): add owner/repo in prompt - Update to version 2.45.0: * Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787) * Support `project view --web` with TTY (#8773) * Handle case: some system set 600 mod for new file. * Clarify helptext for `gh search issues` and `gh search repos` regarding archived repos * Make minor cache list ref flag adjustments * Update incorrect regex comment for client Commits * Use regex to split apart the git client Commit logs * Use null byte separators when fetching comments from git * Add new tests to git client Commits * Remove unnecessary split conditional from client Commits * Extract new test helper for git client Commits * redirect users to the `gh environment` command * Revert "make comments in the default config file more informative" * make comments in the default config file more informative * fixed whitespace * Clarify helptext for search prs regarding archived repos * bug: fixed the result.Operation variable prior to patchRepoVariable being called in the setVariable function. * Remove mainLoop label from garden * feat: Add `ref` option to `gh cache list` * chore: simplify parameter `owner` * Support for `[HOST/]OWNER/REPO` format * Replace `assert` with `require` in testing * Simplify install command for Debian & Ubuntu * Remove `--format` flag and add description for not specifying `--repo` and `--team` flag * Fix printed project number * Support for directory based repo and `GH_REPO` env variable * Change the output of link` and `unlink` * Refactor `OrganizationTeam` * Replace `httpmock` with `gock` in testing * handle flags with `cmdutil.MutuallyExclusive`, and move mutation methods to `queries.go` * fix wording, move conditional blocks to functions, and add api to retrieve the ID of a team * Fix wording * Add testing for link and unlink * Support for team * Support for unlink * Remove support for team * Link Project to Repository or Team Command - Update to version 2.44.1: * Fix PR create regression around title and body when there is only one commit by @williammartin in #8707 - Update to version 2.44.0: * Feature: added Order flag for release list command by @leevic31 in #8632 * autofill with body by @guerinoni in #8423 * Add default values to web manual and man pages by @zsloane in #8395 * build(deps): bump microsoft/setup-msbuild from 1.3.2 to 2.0.0 by @dependabot in #8648 * Documentation for built-in aliases by @Rebeccasun31 in #8367 * Add more detail to fork failure message by @chrisroat in #8614 * feat: Add cache key option to gh cache list by @toshimaru in #8667 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP5: zypper in -t patch openSUSE-2024-127=1 Package List: - openSUSE Backports SLE-15-SP5 (aarch64 i586 ppc64le s390x x86_64): gh-2.49.2-bp155.2.6.1 - openSUSE Backports SLE-15-SP5 (noarch): gh-bash-completion-2.49.2-bp155.2.6.1 gh-fish-completion-2.49.2-bp155.2.6.1 gh-zsh-completion-2.49.2-bp155.2.6.1 References: