Subject: CVS commit: pkgsrc/net/gh
From: Benny Siegert
Date: 2024-06-01 18:46:45
Message id: 20240601164645.72887FC74@cvs.NetBSD.org

Log Message:
gh: update to 2.50.0

GitHub CLI 2.50.0

  * Refactor git credential flow code
  * feat: add json output for gh pr checks
  * Rework first auth tests with new gitcredential abstractions
  * list the various alias permutations for the command and subcommands, via
    '--help' and 'gh reference'
  * Removed tty message when checking for extension upgrades
  * Fix doc bug for gh run watch
  * feat: add support for stateReason in gh pr view
  * fix: rename the Attempts field to Attempt; expose in gh run view and gh run
    ls
  * Update regex in changedFilesNames to handle quoted paths
  * Add a gh variable get FOO command
  * Add macOS pkg installer to deployment
  * Add integration tests for gh attestation verify shared workflow use case
  * Add build provenance for gh CLI releases
  * Build completions during release on macos
  * Clarify Mac OS Installer packages are unsigned

GitHub CLI 2.49.2

  * Improve run list doc with available --json fields
  * Move config interfaces into gh package
  * Creating doc to capture Codespace usage guidance
  * Fix repo fork regression
  * Add --latest=false to gh release create docs

GitHub CLI 2.49.1

  * Do not mutate headers when initialising tableprinter
  * Document relationship between host and active account
  * Run attestation command set integration tests separately
  * Added support for jobs with long filenames
  * Fix attestation verify source repository check bug

GitHub CLI 2.49.0

Support for GitHub Artifact Attestations

v2.49.0 release introduces the attestation command set for downloading and
verifying attestations about artifacts built in GitHub Actions! This is part of
the larger Artifact Attestations initiative. An artifact attestation is a piece
of cryptographically signed metadata that is generated as part of your artifact
build process. These attestations bind artifacts to the details of the workflow
run that produced them, and allow you to guarantee the integrity and provenance
of any artifact built in GitHub Actions.

# Verify a local artifact
gh attestation verify artifact.bin -o <your org>

# Verify a local artifact against a local artifact attestation
gh attestation verify artifact.bin -b ./artifact-v0.0.1-bundle.json -o <your \ 
org>

# Verify an OCI image
gh attestation verify oci://ghcr.io/foo/bar:latest -o <your org>

# Download artifact attestations
gh attestation download artifact.bin -o <your org>

To get started, check out gh help attestation. You can also use the gh at
<command> alias for short.

What's Changed

  * Improve gh run rerun docs
  * Add colon for gh secret set
  * Improve errors when loading bundle locally fails
  * Support offline mode for gh attestation verify
  * Add projectsV2 to JSON fields of gh repo commands
  * Support long URLs in gh repo clone
  * Fix issue with closing pager stream
  * proof of concept for flag-level disable auth check
  * Be more general with attestation host checks
  * Add beta designation on attestation command set
  * Tweaked gh attestation help strings to generate nicer cli manual site
  * Update cli/go-gh to v2.9.0
  * Document repo clone protocol behaviour

Files:
RevisionActionfile
1.78modifypkgsrc/net/gh/Makefile
1.38modifypkgsrc/net/gh/distinfo
1.32modifypkgsrc/net/gh/go-modules.mk