Skip to content

chore(deps): bump github.com/cli/cli/v2 from 2.94.0 to 2.96.0 - #61

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/github.com/cli/cli/v2-2.96.0
Jul 5, 2026
Merged

chore(deps): bump github.com/cli/cli/v2 from 2.94.0 to 2.96.0#61
github-actions[bot] merged 1 commit into
mainfrom
dependabot/go_modules/github.com/cli/cli/v2-2.96.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 5, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/cli/cli/v2 from 2.94.0 to 2.96.0.

Release notes

Sourced from github.com/cli/cli/v2's releases.

GitHub CLI 2.96.0

Security

A security vulnerability has been identified, and fixed, that could allow command execution on a user's computer when connecting to a malicious Codespace via gh codespace jupyter.

Users of gh codespace jupyter are advised to update gh to version v2.96.0 as soon as possible.

For more information see: GHSA-8cg3-r6g9-fpg2

Download release assets without authentication

gh release download now works against public repositories without authentication, matching gh extension install. A token is still used when one is present:

# Download assets from a public repository, no login required
gh release download v2.96.0 --repo cli/cli

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

:dependabot: Dependencies

... (truncated)

Commits
  • b300f2e Merge commit from fork
  • 74e7791 Fix concurrent map writes in codespace port forwarding (#13313)
  • 6dae307 docs: fix broken install command and link/grammar errors (#13690)
  • 5cb1b08 Clarify --clone boolean flag behaviour in gh repo fork help (#13786)
  • fd8bbbd docs: fix duplicated word in primer README (#13677)
  • f1d1121 fix(skills): honor --dir without agent prompt (#13766)
  • 326faaa Support antigravity-cli and antigravity2.0 in gh skill (#13784)
  • 397876d Merge pull request #13779 from cli/dependabot/github_actions/golangci/golangc...
  • f4ce1d9 chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
  • ff4e4a2 Merge pull request #13756 from happysnaker/docs-search-qualifier-examples
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/cli/cli/v2](https://github.com/cli/cli) from 2.94.0 to 2.96.0.
- [Release notes](https://github.com/cli/cli/releases)
- [Changelog](https://github.com/cli/cli/blob/trunk/docs/release-process-deep-dive.md)
- [Commits](cli/cli@v2.94.0...v2.96.0)

---
updated-dependencies:
- dependency-name: github.com/cli/cli/v2
  dependency-version: 2.96.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 5, 2026
@github-actions
github-actions Bot merged commit 89c1c07 into main Jul 5, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/github.com/cli/cli/v2-2.96.0 branch July 5, 2026 07:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants