GitHub CLI 2.98.0
Security A security vulnerability has been identified, and fixed, that binds the local forwarded port to all available network interfaces by default. Users of gh codespace ports forward are advised to update gh to version v2.98.0 as soon as possible.
Also shipped Aug 20, 2026GitHub in August 2026 →
BigQuery adds ML.TREND, ML.SEASONALITY and ML.DETECT_CHANGE_POINTS in preview
New table-valued functions in the query editor and conversational analytics identify trends, repeating seasonal patterns and structural change points in time series data.
BigQuery Graph core processing limited to Enterprise editions from April 26, 2027
Standard edition and on-demand billing support for BigQuery Graph core graph processing is deprecated, with processing restricted to Enterprise and Enterprise Plus from April 26, 2027. Graph measures remain available except in Standard edition.
The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server
The run_bq_command tool exposes the bq command-line tool within the Cloud CLI remote MCP server. AI agents can now execute advanced BigQuery operations, such as job scheduling, job management, and reservation management, through a managed MCP endpoint. For more information, see Use the Cloud CLI remote MCP server . This feature is in Preview .
AI_EXTRACT and AI_PARSE_DOCUMENT support for client-side encrypted stages and network-restricted accounts (General availability)
AI_EXTRACT and AI_PARSE_DOCUMENT now support documents stored on stages that use client-side or server-side encryption, including in accounts that use PrivateLink or other network policies that restrict public network access to stages. For more information, see the following topics:
Cortex Agent code execution tool (Preview)
The Cortex Agent code execution tool is now in public preview. When you enable the tool on an agent, the agent can generate and run Python in a secure, isolated sandbox to process data, perform calculations, and produce visualizations.
Salesforce connector mTLS authentication is now generally available
Mutual TLS (mTLS) authentication for the Salesforce connector in Lakeflow Connect is now generally available. With mTLS, Databricks and Salesforce exchange and verify client certificates to establish two-way trust, combined with the OAuth client credentials flow. Choose it for API-only users or when your organization requires mTLS.
More from GitHub CLIEvery GitHub CLI release →
GitHub CLI 2.99.0
Attach images and videos to issues and pull requests The repeatable --attach flag uploads local images and videos and adds them to issue, pull request, or comment bodies.
GitHub CLI 2.100.0
Experimental: Route GitHub API traffic through a custom host Organizations can now route a GitHub host's API traffic through a gateway using the new per-host api_host configuration: # Route API traffic for github.com through a gateway gh config set api_host gh-gateway.example.com --host github.com # Read the configured API host gh config get api_host --host...
GitHub CLI 2.97.0
Security Four security vulnerabilities have been identified, and fixed, in this release. Users are advised to update gh to version v2.97.0 as soon as possible. Several commands (including gh gist view , gh api , gh pr diff , gh release download --output - , gh codespace logs , gh skills preview , and gh agent-task view / create ) printed externally...
GitHub CLI 2.101.0
Linux package repository signing key rotation GitHub CLI's APT and RPM repositories, along with individual RPM packages, are now signed only with the new PGP key (fingerprint: 7F38BBB59D064DBCB3D84D725612B36462313325 ) Important Linux users who installed gh from the official APT or RPM repositories before April 8, 2026, and have not refreshed their keyring...
GitHub CLI 2.102.0
Security Four security vulnerabilities have been identified, and fixed, in this release. Users are advised to update gh to version v2.102.0 as soon as possible. gh release download, gh run download, gh repo read-file --output, and gh attestation download could write remote content to an unintended local file when the destination contained symbolic links.
GitHub CLI 2.96.0
Security A security vulnerability has been identified, and fixed, that could allow command execution on a user's computer when connecting to a malicious Codespace via gh codespace jupyter . Users of gh codespace jupyter are advised to update gh to version v2.96.0 as soon as possible.
GitHub CLI 2.102.1
:dependabot: Dependencies chore(deps): bump Go toolchain from 1.27.1 to 1.27.3 and golang.org/x/net from 0.58.0 to 0.60.0
GitHub CLI 2.103.0
Expiring, auto-refreshing OAuth tokens (preview) gh can now sign in with expiring OAuth credentials that it refreshes automatically. When you opt in, gh stores a short-lived access token alongside a rotating refresh token and refreshes the access token whenever it is needed, so you stay signed in without having to authenticate again.