chore(deps): update dependency cli/cli to v2.49.1

[renovate]

This PR contains the following updates:

Package	Update	Change
cli/cli	minor	v2.47.0 -> v2.49.1

---

Release Notes

cli/cli (cli/cli)

v2.49.1: GitHub CLI 2.49.1

Compare Source

What's Changed

• Do not mutate headers when initialising tableprinter by @​williammartin in https:/cli/cli/pull/9033
• Document relationship between host and active account by @​williammartin in https:/cli/cli/pull/9032
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @​dependabot in https:/cli/cli/pull/9034
• Run attestation command set integration tests separately by @​malancas in https:/cli/cli/pull/9035
• Added support for jobs with long filenames by @​shayn-orca in https:/cli/cli/pull/8684
• Fix unused params across project by @​williammartin in https:/cli/cli/pull/9059
• Fix attestation verify source repository check bug by @​malancas in https:/cli/cli/pull/9053

New Contributors

• @​shayn-orca made their first contribution in https:/cli/cli/pull/8684

Full Changelog: cli/cli@v2.49.0...v2.49.1

v2.49.0: GitHub CLI 2.49.0

Compare Source

Support for GitHub Artifact Attestations

v2.49.0 release introduces the attestation command set for downloading and verifying attestations about artifacts built in GitHub Actions! This is part of the larger Artifact Attestations initiative. An artifact attestation is a piece of cryptographically signed metadata that is generated as part of your artifact build process. These attestations bind artifacts to the details of the workflow run that produced them, and allow you to guarantee the integrity and provenance of any artifact built in GitHub Actions.

### Verify a local artifact
gh attestation verify artifact.bin -o <your org>

### Verify a local artifact against a local artifact attestation
gh attestation verify artifact.bin -b ./artifact-v0.0.1-bundle.json -o <your org>

### Verify an OCI image
gh attestation verify oci://ghcr.io/foo/bar:latest -o <your org>

### Download artifact attestations
gh attestation download artifact.bin -o <your org>

To get started, check out gh help attestation. You can also use the gh at <command> alias for short.

What's Changed

• Improve gh run rerun docs by @​sochotnicky in https:/cli/cli/pull/8969
• build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 by @​dependabot in https:/cli/cli/pull/8981
• Update sigstore-go dependency to v0.3.0 by @​malancas in https:/cli/cli/pull/8977
• gh attestation tuf-root-verify offline test fix by @​malancas in https:/cli/cli/pull/8975
• Update gh attestation verify output by @​malancas in https:/cli/cli/pull/8991
• build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2 by @​dependabot in https:/cli/cli/pull/8989
• Remove Hidden flag from gh attestation command by @​malancas in https:/cli/cli/pull/8998
• Add colon for gh secret set by @​NeroBlackstone in https:/cli/cli/pull/9004
• Improve errors when loading bundle locally fails by @​williammartin in https:/cli/cli/pull/8996
• Support offline mode for gh attestation verify by @​steiza in https:/cli/cli/pull/8997
• Add projectsV2 to JSON fields of gh repo commands by @​babakks in https:/cli/cli/pull/9007
• Support long URLs in gh repo clone by @​babakks in https:/cli/cli/pull/9008
• Fix issue with closing pager stream by @​babakks in https:/cli/cli/pull/9020
• proof of concept for flag-level disable auth check by @​andyfeller in https:/cli/cli/pull/9000
• Be more general with attestation host checks by @​williammartin in https:/cli/cli/pull/9019
• Add beta designation on attestation command set by @​andyfeller in https:/cli/cli/pull/9022
• Tweaked gh attestation help strings to generate nicer cli manual site. by @​phillmv in https:/cli/cli/pull/9025
• Update cli/go-gh to v2.9.0 by @​andyfeller in https:/cli/cli/pull/9023
• Document repo clone protocol behaviour by @​williammartin in https:/cli/cli/pull/9030

New Contributors

• @​sochotnicky made their first contribution in https:/cli/cli/pull/8969
• @​NeroBlackstone made their first contribution in https:/cli/cli/pull/9004
• @​phillmv made their first contribution in https:/cli/cli/pull/9025

Full Changelog: cli/cli@v2.48.0...v2.49.0

v2.48.0: GitHub CLI 2.48.0

Compare Source

The Big Stuff

• Added support for --slurping JSON responses in gh api by @​heaths in https:/cli/cli/pull/8620
• Added --skip-ssh-key option to gh auth login command by @​babakks in https:/cli/cli/pull/8935
• Added numSelectedRepos to JSON output of gh secret list by @​babakks in https:/cli/cli/pull/8899
• Added support for multiple items in gh api nested array by @​Ebonsignori in https:/cli/cli/pull/8762
• Fixed panic when running gh repo rename by @​babakks in https:/cli/cli/pull/8906
• Fixed panic when parsing IPv6 remote URLs by @​babakks in https:/cli/cli/pull/8893
• Fixed gh pr lock/unlock not working when URL is passed by @​t4kamura in https:/cli/cli/pull/8837
• Fixed viewing run logs with filenames that the regex didn't handle @​zdrve in https:/cli/cli/pull/8882

The Rest

• Tidy go.mod by @​matthewhughes934 in https:/cli/cli/pull/8958
• Fix cache contention in Go CI jobs by @​matthewhughes934 in https:/cli/cli/pull/8957
• Fix go directive in go.mod by @​matthewhughes934 in https:/cli/cli/pull/8956
• Update install_linux.md by @​richterdavid in https:/cli/cli/pull/8950
• build(deps): bump google.golang.org/grpc from 1.61.1 to 1.61.2 by @​dependabot in https:/cli/cli/pull/8925
• Add codeowners entry for the GitHub TUF root included in the attestation command set by @​malancas in https:/cli/cli/pull/8919
• Create stronger run log cache abstraction by @​williammartin in https:/cli/cli/pull/8931
• Remove naked returns from git ParseURL by @​williammartin in https:/cli/cli/pull/8929
• Fix api cache test by @​williammartin in https:/cli/cli/pull/8932
• Ensure run log cache creates cache dir if it doesn't exist by @​williammartin in https:/cli/cli/pull/8944
• Close zip file in run view tests by @​williammartin in https:/cli/cli/pull/8945
• Fix attestation cmd offline unit test failure by @​malancas in https:/cli/cli/pull/8933
• Add support to attestation command for more predicate types. by @​steiza in https:/cli/cli/pull/8949

New Contributors

• @​babakks made their first contribution in https:/cli/cli/pull/8906
• @​t4kamura made their first contribution in https:/cli/cli/pull/8837
• @​zdrve made their first contribution in https:/cli/cli/pull/8882
• @​Ebonsignori made their first contribution in https:/cli/cli/pull/8762
• @​matthewhughes934 made their first contribution in https:/cli/cli/pull/8958
• @​richterdavid made their first contribution in https:/cli/cli/pull/8950

Full Changelog: cli/cli@v2.47.0...v2.48.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.