This is an older version. The current version is 2.103.2. GitHub CLI 2.103.2 · Released:
Installer files 2.90.0
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | MSI | All users | — | github.com | VirusTotal |
| 64-bit | ZIP → Portable | — | — | github.com | VirusTotal |
| ARM64 | MSI | All users | — | github.com | VirusTotal |
| ARM64 | ZIP → Portable | — | — | github.com | VirusTotal |
| 32-bit | MSI | All users | — | github.com | VirusTotal |
| 32-bit | ZIP → Portable | — | — | github.com | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
What's Changed
- Ensure api and auth commands record agentic invocations by @williammartin in #13046
- replace github.com/golang/snappy with klauspost/compress/snappy by @thaJeztah in #13048
- chore(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5 by @dependabot[bot] in #13071
- Fix infinite loop in gh release list --limit 0 by @Bahtya in #13097
- docs: include PGP key fingerprints by @babakks in #13112
- chore: bump to go1.26.2 by @babakks in #13116
- chore(deps): bump github.com/yuin/goldmark from 1.7.16 to 1.8.2 by @dependabot[bot] in #13045
- Document dependency CVE policy in SECURITY.md by @BagToad in #13119
- chore(deps): bump charm.land/bubbles/v2 from 2.0.0 to 2.1.0 by @dependabot[bot] in #13051
- chore: delete experimental script/debian-devel by @babakks in #13127
- docs: add sha/md5 checksums of keyring files by @babakks in #13150
- chore(deps): bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @dependabot[bot] in #13152
- chore(deps): bump github.com/google/go-containerregistry from 0.21.3 to 0.21.4 by @dependabot[bot] in #13129
- chore(deps): bump github.com/sigstore/protobuf-specs from 0.5.0 to 0.5.1 by @dependabot[bot] in #13128
- chore(deps): bump github.com/in-toto/attestation from 1.1.2 to 1.2.0 by @dependabot[bot] in #13044
- chore(deps): bump advanced-security/filter-sarif from 1.0.1 to 1.1 by @dependabot[bot] in #12918
- chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @dependabot[bot] in #13076
- chore(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by @dependabot[bot] in #13065
- docs: fix SHA512 checksum for GPG key by @timsu92 in #13157
- Disable auth check for local-only skill flags by @SamMorrowDrums in #13173
- URL-encode parentPath in skills discovery API call by @SamMorrowDrums in #13172
- fix: use target directory remotes in skills publish by @SamMorrowDrums in #13169
- Disable auth check for gh extension install by @BagToad in #13176
- docs(skill): polish skill commadset docs by @babakks in #13183
- feat(skills): auto-push unpushed commits before publish by @SamMorrowDrums in #13171
- Publish: use shared discovery logic instead of requiring skills/ directory by @SamMorrowDrums in #13167
- Remove redundant nil-client fallback in skills publish by @SamMorrowDrums in #13168
- fix: preserve namespace in skills search deduplication by @SamMorrowDrums in #13170
- Fix skills-publish-dry-run acceptance test error message mismatch by @SamMorrowDrums in #13187
- Add agent skills command by @SamMorrowDrums in #13165
- Add cli/skill-reviewers as CODEOWNERS for skills packages by @BagToad in #13189
- Add @cli/code-reviewers to all CODEOWNERS rules by @BagToad in #13190
- Suggest first party extensions by @williammartin in #13182
- Suggest and install official extensions for unknown commands by @BagToad in #13175
- Address post-merge review feedback for skills commands by @SamMorrowDrums in #13185
- Skills: replace real git in publish tests with CommandStubber by @SamMorrowDrums in #13188
New Contributors
- @thaJeztah made their first contribution in #13048
- @Bahtya made their first contribution in #13097
- @timsu92 made their first contribution in #13157
- @SamMorrowDrums made their first contribution in #13173
