16 releases · 0 this month
Expiring, auto-refreshing OAuth tokens (preview) gh can now sign in with expiring OAuth credentials that it refreshes automatically. When you opt in, gh stores a short-lived access token alongside a rotating refresh token and refreshes the access token whenever it is needed, so you stay signed in without having to authenticate again.
Security Four security vulnerabilities have been identified, and fixed, in this release. Users are advised to update gh to version v2.102.0 as soon as possible. gh release download, gh run download, gh repo read-file --output, and gh attestation download could write remote content to an unintended local file when the destination contained symbolic links.
Linux package repository signing key rotation GitHub CLI's APT and RPM repositories, along with individual RPM packages, are now signed only with the new PGP key (fingerprint: 7F38BBB59D064DBCB3D84D725612B36462313325 ) Important Linux users who installed gh from the official APT or RPM repositories before April 8, 2026, and have not refreshed their keyring...
Experimental: Route GitHub API traffic through a custom host Organizations can now route a GitHub host's API traffic through a gateway using the new per-host api_host configuration: # Route API traffic for github.com through a gateway gh config set api_host gh-gateway.example.com --host github.com # Read the configured API host gh config get api_host --host...
Attach images and videos to issues and pull requests The repeatable --attach flag uploads local images and videos and adds them to issue, pull request, or comment bodies.
Security A security vulnerability has been identified, and fixed, that binds the local forwarded port to all available network interfaces by default. Users of gh codespace ports forward are advised to update gh to version v2.98.0 as soon as possible.
Security Four security vulnerabilities have been identified, and fixed, in this release. Users are advised to update gh to version v2.97.0 as soon as possible. Several commands (including gh gist view , gh api , gh pr diff , gh release download --output - , gh codespace logs , gh skills preview , and gh agent-task view / create ) printed externally...
Security A security vulnerability has been identified, and fixed, that could allow command execution on a user's computer when connecting to a malicious Codespace via gh codespace jupyter . Users of gh codespace jupyter are advised to update gh to version v2.96.0 as soon as possible.
Read repository files and directories with gh repo read-file and gh repo read-dir Two new preview commands read repository contents without cloning: # Read a single file to stdout gh repo read-file README.md --repo cli/cli # Read from a specific branch, tag, or commit gh repo read-file go.mod --ref v2.94.0 --repo cli/cli # Write a file to disk (use...
Issue types, sub-issues, and relationships in gh issue This release brings GitHub's advanced issue features to gh issue create , edit , view , and list . You can set and view an issue's type, organize work with sub-issues, and track blocked-by and blocking relationships without leaving the command line: # Set an issue's type gh issue create --type Bug gh...
Security A security vulnerability has been identified, and fixed, that would incorrectly include authorization header in API requests to TUF repository mirrors via gh attestation , gh release verify , and gh release verify-asset commands. Users are advised to update gh to version v2.93.0 as soon as possible.
Security A security vulnerability has been identified, and fixed, that could allow terminal escape sequence injection when users view GitHub Actions workflow logs using gh run view --log or gh run view --log-failed . Users are advised to update gh to version v2.92.0 as soon as possible.
gh, GitHub on the command line.
Other GitHub products: GitHub Actions, GitHub Advanced Security, GitHub Copilot, GitHub platform
| Release-notes page | Site | Feed |
|---|---|---|
| Actions changelog github.blog | github.blog | RSS |
| Changelog github.blog | github.blog | RSS |
| Copilot changelog github.blog | github.blog | RSS |
| Copilot CLI releases github.com | github.com | RSS |
| Desktop release notes desktop.github.com | desktop.github.com | None |
| Enterprise Server release notes docs.github.com | docs.github.com | None |
| GitHub CLI releases github.com | github.com | RSS |
| Security changelog github.blog | github.blog | RSS |
Releasesby Glyph