Skip to content

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented Oct 15, 2025

deps(codespaces): bump devcontainer dependencies

[.devcontainer/devcontainer.json] Bump GitHub CLI version

1 file(s) updated with "${1}2.81.0${3}": * .devcontainer/devcontainer.json

v2.81.0
## Support for GitHub Release Attestations

This release introduces the `release verify` and `release verify-asset` commands for verifying GitHub Release attestations. Part of the Immutable Releases initiative, a release attestation provides a signed, timestamped binding between a release, its git tag, and any associated assets. These new commands provide a convenient way to verify the integrity of an immutable release against its attestation.

- Verify the latest release has a valid attestation: `gh release verify`
- Verify a specific release by tag: `gh release verify v1.2.3`
- Verify an asset from the latest release: `gh release verify-asset my-asset.zip`
- Verify a local asset file originated from a specific release: `gh release verify-asset v1.2.3 my-asset.zip`

These commands help ensure that releases and their assets are authentic and haven’t been tampered with, providing an additional layer of security for your software supply chain.

## `gh auth status` Supports JSON Output

This release adds support for the `--json` flag in `gh auth status`. Run `gh auth status --help` for more information and usage examples.

## What's Changed
### ✨ Features
* Add alias `co` for `pr checkout` by @babakks in https://github.com/cli/cli/pull/11804
* Add JSON output to `gh auth status` by @benjlevesque in https://github.com/cli/cli/pull/11544
* `release verify`  and `release verify-asset` are now visible by @ejahnGithub in https://github.com/cli/cli/pull/11801


### 🐛 Fixes
* Fix no tagname logic for  release verify-asset  by @ejahnGithub in https://github.com/cli/cli/pull/11798


### 📚 Docs & Chores
* refactor: use strings.FieldsFuncSeq to reduce memory allocations by @juejinyuxitu in https://github.com/cli/cli/pull/11805


## New Contributors
* @juejinyuxitu made their first contribution in https://github.com/cli/cli/pull/11805

**Full Changelog**: https://github.com/cli/cli/compare/v2.80.0...v2.81.0
[.devcontainer/devcontainer.json] Bump Docker version

1 file(s) updated with "${1}28.5${3}": * .devcontainer/devcontainer.json

v28.5.1
## 28.5.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

- [docker/cli, 28.5.1 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A28.5.1)
- [moby/moby, 28.5.1 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A28.5.1)
- Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v28.5.1/docs/deprecated.md).
- Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v28.5.1/docs/api/version-history.md).

### Bug fixes and enhancements

- Update BuildKit to v0.25.1. [moby/moby#51137](https://github.com/moby/moby/pull/51137)
- Update Go runtime to [1.24.8](https://go.dev/doc/devel/release#go1.24.8). [moby/moby#51133](https://github.com/moby/moby/pull/51133), [docker/cli#6541](https://github.com/docker/cli/pull/6541)

### Deprecations

- api/types/image: InspectResponse: deprecate `Parent` and `DockerVersion` fields. [moby/moby#51105](https://github.com/moby/moby/pull/51105)
- api/types/plugin: deprecate `Config.DockerVersion` field. [moby/moby#51110](https://github.com/moby/moby/pull/51110)
[.devcontainer/setup.sh] Bump yq version

1 file(s) updated with "${1}4.48.1${3}": * .devcontainer/setup.sh

v4.48.1
  - Added 'parents' operator, to return a list of all the hierarchical parents of a node
  - Added 'first(exp)' operator, to return the first entry matching an expression in an array 
  - Fixed xml namespace prefixes #1730 (thanks @baodrate)
  - Fixed out of range panic in yaml decoder #2460 (thanks @n471d)
  - Bumped dependencies 
GitHub Action workflow link
Updatecli logo

Created automatically by Updatecli

Options:

Most of Updatecli configuration is done via its manifest(s).

  • If you close this pull request, Updatecli will automatically reopen it, the next time it runs.
  • If you close this pull request and delete the base branch, Updatecli will automatically recreate it, erasing all previous commits made.

Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!

@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label Oct 15, 2025
@github-actions github-actions bot force-pushed the updatecli_main_f2ff05c9683a6a713a53753e4f79070265822d712880f98b6f9e18155e2ab792 branch from 54f8b12 to 32fef45 Compare October 15, 2025 16:49
@gounthar gounthar merged commit 34db22a into main Oct 15, 2025
@gounthar gounthar deleted the updatecli_main_f2ff05c9683a6a713a53753e4f79070265822d712880f98b6f9e18155e2ab792 branch October 15, 2025 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants