Skip to content

chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 - #13789

Merged
babakks merged 1 commit into
trunkfrom
dependabot/go_modules/google.golang.org/grpc-1.82.0
Jul 3, 2026
Merged

chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0#13789
babakks merged 1 commit into
trunkfrom
dependabot/go_modules/google.golang.org/grpc-1.82.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor

Bumps google.golang.org/grpc from 1.81.1 to 1.82.0.

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)
Commits
  • bd23985 Change version to 1.82.0 (#9170)
  • 0f3086d Fix minor issues not covered by PR #9137 (#9147)
  • fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
  • 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
  • adc97de test/kokoro: add config for regional-td test (#9158)
  • 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
  • b58f32d server: Set a pprof label on new stream goroutines (#9082)
  • 6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWrit...
  • bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (#9137)
  • 429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (#9074)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 3, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 3, 2026 14:02
@dependabot
dependabot Bot requested a review from babakks July 3, 2026 14:02
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 3, 2026
@babakks

babakks commented Jul 3, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.1 to 1.82.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.1...v1.82.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/grpc-1.82.0 branch from f211a64 to 4abc935 Compare July 3, 2026 15:16
@babakks
babakks enabled auto-merge July 3, 2026 15:16
@babakks
babakks merged commit 4e40c24 into trunk Jul 3, 2026
11 checks passed
@babakks
babakks deleted the dependabot/go_modules/google.golang.org/grpc-1.82.0 branch July 3, 2026 15:24
pabrahamsson pushed a commit to pabrahamsson/containers that referenced this pull request Aug 3, 2026
This PR contains the following updates:

| Package | Update | Change | OpenSSF |
|---|---|---|---|
| [cli/cli](https://github.com/cli/cli) | minor | `2.96.0` → `2.97.0` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/cli/cli/badge)](https://securityscorecards.dev/viewer/?uri=github.com/cli/cli) |

---

### Release Notes

<details>
<summary>cli/cli (cli/cli)</summary>

### [`v2.97.0`](https://github.com/cli/cli/releases/tag/v2.97.0): GitHub CLI 2.97.0

[Compare Source](cli/cli@v2.96.0...v2.97.0)

#### Security

Four security vulnerabilities have been identified, and fixed, in this release. Users are advised to update gh to version `v2.97.0` as soon as possible.

Several commands (including `gh gist view`, `gh api`, `gh pr diff`, `gh release download --output -`, `gh codespace logs`, `gh skills preview`, and `gh agent-task view`/`create`) printed externally controlled content without neutralizing terminal escape sequences, allowing escape sequence injection into a user's terminal.

See <GHSA-3m3g-3wcr-px46> for more information.

Some request URLs were built without escaping their variable path components, so a value containing URL path metacharacters could alter the request path and cause `gh` to address a different resource than intended.

See <GHSA-4fjg-2h4q-fwg3> for more information.

`gh auth status` (without `--show-token`) could print a portion of the authentication token in plaintext for token types whose format contains an underscore after the prefix, such as `github_pat_*`, `ghs_*`, and `ghu_*`.

See <GHSA-cg6r-mpgc-h9mm> for more information.

`gh attestation verify` built the certificate matcher from `--signer-repo` and `--signer-workflow` without escaping regex metacharacters, so a lookalike repository or workflow name could satisfy a matcher intended for a trusted signer and bypass attestation verification.

See <GHSA-mm27-mwq9-fr5g> for more information.

#### Address project fields and items by name in `gh project`

`gh project item-edit` and `gh project item-list` can now reference project fields and single-select options by name:

```shell

# Set an item's field by name
gh project item-edit 1 --owner monalisa --url <url> --field "Status" --value "In Progress"

# Show named fields as extra columns
gh project item-list 1 --owner "@me" --field "Status" --field "Priority"
```

#### What's Changed

##### ✨ Features

- Add name-based resolution to `gh project item-edit` by [@&#8203;zwick](https://github.com/zwick) in [#&#8203;13807](cli/cli#13807)
- Add named field columns to `gh project item-list` by [@&#8203;zwick](https://github.com/zwick) in [#&#8203;13823](cli/cli#13823)
- Add Grok skill host support by [@&#8203;tommaso-moro](https://github.com/tommaso-moro) in [#&#8203;13864](cli/cli#13864)
- Replace Windsurf with Devin in `gh skill` agents by [@&#8203;tommaso-moro](https://github.com/tommaso-moro) in [#&#8203;13987](cli/cli#13987)

##### 🐛 Fixes

- Gracefully handle failed GitHub verifier initialization caused by a missing trusted root by [@&#8203;malancas](https://github.com/malancas) in [#&#8203;13624](cli/cli#13624)
- Bump keyring operation timeout from 3s to 60s so interactive unlock prompts have time to complete by [@&#8203;kofuk](https://github.com/kofuk) in [#&#8203;13787](cli/cli#13787)
- Fix skill picker label wrapping by [@&#8203;tommaso-moro](https://github.com/tommaso-moro) in [#&#8203;13967](cli/cli#13967)

##### 📚 Docs & Chores

- Bump Go to 1.26.5 by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;13817](cli/cli#13817)
- Add `OWNER/REPO` format hint to the `gh search --repo` flag by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;13922](cli/cli#13922)
- Present by-name `item-edit` as the first-class project flow in docs by [@&#8203;Solaris-star](https://github.com/Solaris-star) in [#&#8203;13927](cli/cli#13927)
- Add a macOS keyring security doc by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;13960](cli/cli#13960)
- Add a code review agent skill by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;14003](cli/cli#14003)
- Establish a pull request template for scale by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;14004](cli/cli#14004)
- Add an agentic issue-triage workflow by [@&#8203;lukewar](https://github.com/lukewar) in [#&#8203;13777](cli/cli#13777)
- Use the Actions token for Copilot inference in the issue-triage workflow by [@&#8203;tidy-dev](https://github.com/tidy-dev) in [#&#8203;13830](cli/cli#13830)
- Refresh the issue-triage agentic workflow to gh-aw v0.83.1 by [@&#8203;alondahari](https://github.com/alondahari) in [#&#8203;13949](cli/cli#13949)
- Add a dependabot-triage agentic workflow by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;13985](cli/cli#13985)
- Harden the deployment workflow by [@&#8203;niik](https://github.com/niik) in [#&#8203;13780](cli/cli#13780)
- Replace `SITE_DEPLOY_PAT` with the gh-cli-site-deployer App by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;13492](cli/cli#13492)
- Group CodeQL Dependabot updates by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;13943](cli/cli#13943)
- Remove a dead CODEOWNERS rule for the non-existent `pkg/cmd/release/attestation/` by [@&#8203;kobihikri](https://github.com/kobihikri) in [#&#8203;13886](cli/cli#13886)
- Fix typos in code and documentation by [@&#8203;pstoeckle](https://github.com/pstoeckle) in [#&#8203;13940](cli/cli#13940)
- Fix duplicated-word typos in comments by [@&#8203;SORBELLOSTEFANIE](https://github.com/SORBELLOSTEFANIE) in [#&#8203;13900](cli/cli#13900)

##### :dependabot: Dependencies

- chore(deps): bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.5 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13790](cli/cli#13790)
- chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13789](cli/cli#13789)
- chore(deps): bump <https://github.com/klauspost/compress> from 1.18.6 to 1.19.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13791](cli/cli#13791)
- chore(deps): bump charm.land/bubbletea/v2 from 2.0.7 to 2.0.8 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13800](cli/cli#13800)
- chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13812](cli/cli#13812)
- chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13821](cli/cli#13821)
- chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13801](cli/cli#13801)
- chore(deps): bump github/gh-aw-actions/setup from 0.81.6 to 0.82.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13832](cli/cli#13832)
- chore(deps): bump charm.land/bubbles/v2 from 2.1.0 to 2.1.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13813](cli/cli#13813)
- chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13822](cli/cli#13822)
- chore(deps): bump github/gh-aw-actions/setup from 0.82.2 to 0.82.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13843](cli/cli#13843)
- chore(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13841](cli/cli#13841)
- chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13867](cli/cli#13867)
- chore(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13869](cli/cli#13869)
- chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13868](cli/cli#13868)
- chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13870](cli/cli#13870)
- chore(deps): bump <https://github.com/yuin/goldmark> from 1.8.2 to 1.8.4 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13888](cli/cli#13888)
- chore(deps): bump <https://github.com/sigstore/sigstore-go> from 1.2.1 to 1.2.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13842](cli/cli#13842)
- chore(deps): bump github/gh-aw-actions/setup from 0.82.3 to 0.82.8 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13877](cli/cli#13877)
- chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13933](cli/cli#13933)
- chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13934](cli/cli#13934)
- chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13936](cli/cli#13936)
- chore(deps): bump actions/attest from 4.1.1 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13935](cli/cli#13935)
- chore(deps): bump <https://github.com/mattn/go-isatty> from 0.0.22 to 0.0.23 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13937](cli/cli#13937)
- chore(deps): bump github/gh-aw-actions/setup from 0.82.8 to 0.82.13 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13938](cli/cli#13938)
- chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13941](cli/cli#13941)
- chore(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13942](cli/cli#13942)
- chore(deps): bump <https://github.com/gabriel-vasile/mimetype> from 1.4.13 to 1.4.14 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13944](cli/cli#13944)
- chore(deps): bump nodeselector/setup-apple-codesign from [`ab275d0`](cli/cli@ab275d0) to [`309922b`](cli/cli@309922b) by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13878](cli/cli#13878)
- chore(deps): bump <https://github.com/klauspost/compress> from 1.19.0 to 1.19.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13950](cli/cli#13950)
- chore(deps): bump github/gh-aw-actions/setup from 0.82.13 to 0.82.14 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13951](cli/cli#13951)
- chore(deps): bump the codeql-actions group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13965](cli/cli#13965)
- chore(deps): bump <https://github.com/mattn/go-isatty> from 0.0.23 to 0.0.24 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13977](cli/cli#13977)
- chore(deps): bump the codeql-actions group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13978](cli/cli#13978)
- chore(deps): bump <https://github.com/gabriel-vasile/mimetype> from 1.4.14 to 1.4.15 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13976](cli/cli#13976)
- chore(deps): bump github/gh-aw-actions/setup from 0.83.1 to 0.83.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13979](cli/cli#13979)
- chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.1 to 0.83.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13980](cli/cli#13980)
- chore(deps): bump actions/checkout from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13981](cli/cli#13981)
- chore(deps): bump github/gh-aw-actions/setup from 0.83.2 to 0.83.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13995](cli/cli#13995)
- chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.2 to 0.83.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13996](cli/cli#13996)
- chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.3 to 0.83.4 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;14018](cli/cli#14018)

#### New Contributors

- [@&#8203;lukewar](https://github.com/lukewar) made their first contribution in [#&#8203;13777](cli/cli#13777)
- [@&#8203;niik](https://github.com/niik) made their first contribution in [#&#8203;13780](cli/cli#13780)
- [@&#8203;kofuk](https://github.com/kofuk) made their first contribution in [#&#8203;13787](cli/cli#13787)
- [@&#8203;zwick](https://github.com/zwick) made their first contribution in [#&#8203;13807](cli/cli#13807)
- [@&#8203;kobihikri](https://github.com/kobihikri) made their first contribution in [#&#8203;13886](cli/cli#13886)
- [@&#8203;pstoeckle](https://github.com/pstoeckle) made their first contribution in [#&#8203;13940](cli/cli#13940)
- [@&#8203;Solaris-star](https://github.com/Solaris-star) made their first contribution in [#&#8203;13927](cli/cli#13927)
- [@&#8203;SORBELLOSTEFANIE](https://github.com/SORBELLOSTEFANIE) made their first contribution in [#&#8203;13900](cli/cli#13900)
- [@&#8203;alondahari](https://github.com/alondahari) made their first contribution in [#&#8203;13949](cli/cli#13949)

**Full Changelog**: <cli/cli@v2.96.0...v2.97.0>

</details>

---

### Configuration

📅 **Schedule**: (in timezone America/New_York)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41LjMiLCJ1cGRhdGVkSW5WZXIiOiI0NC41LjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Reviewed-on: https://codeberg.org/pabrahamsson/containers/pulls/28
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Aug 11, 2026
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cli/cli](https://github.com/cli/cli) | minor | `v2.96.0` → `v2.97.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>cli/cli (cli/cli)</summary>

### [`v2.97.0`](https://github.com/cli/cli/releases/tag/v2.97.0): GitHub CLI 2.97.0

[Compare Source](cli/cli@v2.96.0...v2.97.0)

#### Security

Four security vulnerabilities have been identified, and fixed, in this release. Users are advised to update gh to version `v2.97.0` as soon as possible.

Several commands (including `gh gist view`, `gh api`, `gh pr diff`, `gh release download --output -`, `gh codespace logs`, `gh skills preview`, and `gh agent-task view`/`create`) printed externally controlled content without neutralizing terminal escape sequences, allowing escape sequence injection into a user's terminal.

See <GHSA-3m3g-3wcr-px46> for more information.

Some request URLs were built without escaping their variable path components, so a value containing URL path metacharacters could alter the request path and cause `gh` to address a different resource than intended.

See <GHSA-4fjg-2h4q-fwg3> for more information.

`gh auth status` (without `--show-token`) could print a portion of the authentication token in plaintext for token types whose format contains an underscore after the prefix, such as `github_pat_*`, `ghs_*`, and `ghu_*`.

See <GHSA-cg6r-mpgc-h9mm> for more information.

`gh attestation verify` built the certificate matcher from `--signer-repo` and `--signer-workflow` without escaping regex metacharacters, so a lookalike repository or workflow name could satisfy a matcher intended for a trusted signer and bypass attestation verification.

See <GHSA-mm27-mwq9-fr5g> for more information.

#### Address project fields and items by name in `gh project`

`gh project item-edit` and `gh project item-list` can now reference project fields and single-select options by name:

```shell

# Set an item's field by name
gh project item-edit 1 --owner monalisa --url <url> --field "Status" --value "In Progress"

# Show named fields as extra columns
gh project item-list 1 --owner "@&#8203;me" --field "Status" --field "Priority"
```

#### What's Changed

##### ✨ Features

- Add name-based resolution to `gh project item-edit` by [@&#8203;zwick](https://github.com/zwick) in [#&#8203;13807](cli/cli#13807)
- Add named field columns to `gh project item-list` by [@&#8203;zwick](https://github.com/zwick) in [#&#8203;13823](cli/cli#13823)
- Add Grok skill host support by [@&#8203;tommaso-moro](https://github.com/tommaso-moro) in [#&#8203;13864](cli/cli#13864)
- Replace Windsurf with Devin in `gh skill` agents by [@&#8203;tommaso-moro](https://github.com/tommaso-moro) in [#&#8203;13987](cli/cli#13987)

##### 🐛 Fixes

- Gracefully handle failed GitHub verifier initialization caused by a missing trusted root by [@&#8203;malancas](https://github.com/malancas) in [#&#8203;13624](cli/cli#13624)
- Bump keyring operation timeout from 3s to 60s so interactive unlock prompts have time to complete by [@&#8203;kofuk](https://github.com/kofuk) in [#&#8203;13787](cli/cli#13787)
- Fix skill picker label wrapping by [@&#8203;tommaso-moro](https://github.com/tommaso-moro) in [#&#8203;13967](cli/cli#13967)

##### 📚 Docs & Chores

- Bump Go to 1.26.5 by [@&#8203;github-actions](https://github.com/github-actions)\[bot] in [#&#8203;13817](cli/cli#13817)
- Add `OWNER/REPO` format hint to the `gh search --repo` flag by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;13922](cli/cli#13922)
- Present by-name `item-edit` as the first-class project flow in docs by [@&#8203;Solaris-star](https://github.com/Solaris-star) in [#&#8203;13927](cli/cli#13927)
- Add a macOS keyring security doc by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;13960](cli/cli#13960)
- Add a code review agent skill by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;14003](cli/cli#14003)
- Establish a pull request template for scale by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;14004](cli/cli#14004)
- Add an agentic issue-triage workflow by [@&#8203;lukewar](https://github.com/lukewar) in [#&#8203;13777](cli/cli#13777)
- Use the Actions token for Copilot inference in the issue-triage workflow by [@&#8203;tidy-dev](https://github.com/tidy-dev) in [#&#8203;13830](cli/cli#13830)
- Refresh the issue-triage agentic workflow to gh-aw v0.83.1 by [@&#8203;alondahari](https://github.com/alondahari) in [#&#8203;13949](cli/cli#13949)
- Add a dependabot-triage agentic workflow by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;13985](cli/cli#13985)
- Harden the deployment workflow by [@&#8203;niik](https://github.com/niik) in [#&#8203;13780](cli/cli#13780)
- Replace `SITE_DEPLOY_PAT` with the gh-cli-site-deployer App by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;13492](cli/cli#13492)
- Group CodeQL Dependabot updates by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;13943](cli/cli#13943)
- Remove a dead CODEOWNERS rule for the non-existent `pkg/cmd/release/attestation/` by [@&#8203;kobihikri](https://github.com/kobihikri) in [#&#8203;13886](cli/cli#13886)
- Fix typos in code and documentation by [@&#8203;pstoeckle](https://github.com/pstoeckle) in [#&#8203;13940](cli/cli#13940)
- Fix duplicated-word typos in comments by [@&#8203;SORBELLOSTEFANIE](https://github.com/SORBELLOSTEFANIE) in [#&#8203;13900](cli/cli#13900)

##### :dependabot: Dependencies

- chore(deps): bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.5 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13790](cli/cli#13790)
- chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13789](cli/cli#13789)
- chore(deps): bump <https://github.com/klauspost/compress> from 1.18.6 to 1.19.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13791](cli/cli#13791)
- chore(deps): bump charm.land/bubbletea/v2 from 2.0.7 to 2.0.8 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13800](cli/cli#13800)
- chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13812](cli/cli#13812)
- chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13821](cli/cli#13821)
- chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13801](cli/cli#13801)
- chore(deps): bump github/gh-aw-actions/setup from 0.81.6 to 0.82.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13832](cli/cli#13832)
- chore(deps): bump charm.land/bubbles/v2 from 2.1.0 to 2.1.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13813](cli/cli#13813)
- chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13822](cli/cli#13822)
- chore(deps): bump github/gh-aw-actions/setup from 0.82.2 to 0.82.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13843](cli/cli#13843)
- chore(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13841](cli/cli#13841)
- chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13867](cli/cli#13867)
- chore(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13869](cli/cli#13869)
- chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13868](cli/cli#13868)
- chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13870](cli/cli#13870)
- chore(deps): bump <https://github.com/yuin/goldmark> from 1.8.2 to 1.8.4 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13888](cli/cli#13888)
- chore(deps): bump <https://github.com/sigstore/sigstore-go> from 1.2.1 to 1.2.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13842](cli/cli#13842)
- chore(deps): bump github/gh-aw-actions/setup from 0.82.3 to 0.82.8 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13877](cli/cli#13877)
- chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13933](cli/cli#13933)
- chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13934](cli/cli#13934)
- chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13936](cli/cli#13936)
- chore(deps): bump actions/attest from 4.1.1 to 4.2.0 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13935](cli/cli#13935)
- chore(deps): bump <https://github.com/mattn/go-isatty> from 0.0.22 to 0.0.23 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13937](cli/cli#13937)
- chore(deps): bump github/gh-aw-actions/setup from 0.82.8 to 0.82.13 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13938](cli/cli#13938)
- chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13941](cli/cli#13941)
- chore(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13942](cli/cli#13942)
- chore(deps): bump <https://github.com/gabriel-vasile/mimetype> from 1.4.13 to 1.4.14 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13944](cli/cli#13944)
- chore(deps): bump nodeselector/setup-apple-codesign from [`ab275d0`](cli/cli@ab275d0) to [`309922b`](cli/cli@309922b) by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13878](cli/cli#13878)
- chore(deps): bump <https://github.com/klauspost/compress> from 1.19.0 to 1.19.1 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13950](cli/cli#13950)
- chore(deps): bump github/gh-aw-actions/setup from 0.82.13 to 0.82.14 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13951](cli/cli#13951)
- chore(deps): bump the codeql-actions group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13965](cli/cli#13965)
- chore(deps): bump <https://github.com/mattn/go-isatty> from 0.0.23 to 0.0.24 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13977](cli/cli#13977)
- chore(deps): bump the codeql-actions group with 3 updates by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13978](cli/cli#13978)
- chore(deps): bump <https://github.com/gabriel-vasile/mimetype> from 1.4.14 to 1.4.15 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13976](cli/cli#13976)
- chore(deps): bump github/gh-aw-actions/setup from 0.83.1 to 0.83.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13979](cli/cli#13979)
- chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.1 to 0.83.2 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13980](cli/cli#13980)
- chore(deps): bump actions/checkout from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13981](cli/cli#13981)
- chore(deps): bump github/gh-aw-actions/setup from 0.83.2 to 0.83.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13995](cli/cli#13995)
- chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.2 to 0.83.3 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;13996](cli/cli#13996)
- chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.3 to 0.83.4 by [@&#8203;dependabot](https://github.com/dependabot) in [#&#8203;14018](cli/cli#14018)

#### New Contributors

- [@&#8203;lukewar](https://github.com/lukewar) made their first contribution in [#&#8203;13777](cli/cli#13777)
- [@&#8203;niik](https://github.com/niik) made their first contribution in [#&#8203;13780](cli/cli#13780)
- [@&#8203;kofuk](https://github.com/kofuk) made their first contribution in [#&#8203;13787](cli/cli#13787)
- [@&#8203;zwick](https://github.com/zwick) made their first contribution in [#&#8203;13807](cli/cli#13807)
- [@&#8203;kobihikri](https://github.com/kobihikri) made their first contribution in [#&#8203;13886](cli/cli#13886)
- [@&#8203;pstoeckle](https://github.com/pstoeckle) made their first contribution in [#&#8203;13940](cli/cli#13940)
- [@&#8203;Solaris-star](https://github.com/Solaris-star) made their first contribution in [#&#8203;13927](cli/cli#13927)
- [@&#8203;SORBELLOSTEFANIE](https://github.com/SORBELLOSTEFANIE) made their first contribution in [#&#8203;13900](cli/cli#13900)
- [@&#8203;alondahari](https://github.com/alondahari) made their first contribution in [#&#8203;13949](cli/cli#13949)

**Full Changelog**: <cli/cli@v2.96.0...v2.97.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiLCJhdXRvbWF0aW9uOmJvdC1hdXRob3JlZCIsImRlcGVuZGVuY3ktdHlwZTo6bWlub3IiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant