GitHub Release: cli/cli v2.103.0 (21.10.2026)

What's Changed

• Bump go-runewidth to v0.0.30 for faster startup by @williammartin in #14577


• docs: recommend nix-shell and declarative config for Nix/NixOS by @reginaldalfret in #14592


• Clarify issue view comment output modes by @babakks with @Copilot in #14616


• Add ACCESSIBILITY.md by @BagToad in #14583


• Replace extension browse with Bubble Tea by @williammartin in #14578


• Bump shell-quote to 1.11.0 in cli-exercise skill by @williammartin in #14625


• Leave validation checks to CI in bump-go script by @williammartin in #14631


• Avoid spawning git for each extension at startup by @williammartin in #14620


• Bump Go to 1.27.2 by @github-actions[bot] in #14632


• chore(deps): bump golang.org/x/sync from 0.23.0 to 0.24.0 by @dependabot[bot] in #14633


• chore(deps): bump github.com/mattn/go-colorable from 0.1.15 to 0.1.16 by @dependabot[bot] in #14634


• Remove CLAUDE.md in favor of AGENTS.md by @jarrensj in #14474


• Fix the unclean background colors of gh-search-code by @A4-Tacks in #14648


• Clarify --repo and --owner checks for attestation bundles by @bdehamer in #14650


• Fix Go vendoring in Dependabot triage and bump gh-aw by @williammartin in #14682


• chore(deps): bump golang.org/x/crypto from 0.57.0 to 0.58.0 by @dependabot[bot] in #14660


• chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 by @dependabot[bot] in #14656


• chore(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 by @dependabot[bot] in #14655


• chore(deps): bump the codeql-actions group with 3 updates by @dependabot[bot] in #14654


• chore(deps): bump charm.land/bubbletea/v2 from 2.0.10 to 2.1.0 by @dependabot[bot] in #14657


• chore(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0 by @dependabot[bot] in #14485


• chore(deps): bump github.com/cli/go-gh/v2 from 2.16.1 to 2.16.2 by @dependabot[bot] in #14696


• chore(deps): bump actions/setup-node from 7.0.0 to 7.1.0 by @dependabot[bot] in #14697


• chore(deps): bump goreleaser/goreleaser-action from 7.2.3 to 7.3.0 by @dependabot[bot] in #14707


• chore(deps): bump github.com/klauspost/compress from 1.20.1 to 1.20.3 by @dependabot[bot] in #14705


• chore(deps): bump actions/create-github-app-token from 3.2.0 to 3.3.0 by @dependabot[bot] in #14706


• gh issue artifact stack 1/12: Resolve --attach references against the body file's directory by @BagToad in #14564


• gh issue artifact stack 2/12: Attach one set of files to several Markdown documents by @BagToad in #14565


• gh issue artifact stack 3/12: Add the command group and list by @BagToad in #14566


• gh issue artifact stack 4/12: Add view by @BagToad in #14567


• gh issue artifact stack 5/12: Add delete by @BagToad in #14568


• gh issue artifact stack 6/12: Add download by @BagToad in #14569


• gh issue artifact stack 7/12: Add create by @BagToad in #14570


• gh issue artifact stack 8/12: Add edit by @BagToad in #14571


• gh issue artifact stack 9/12: Document gh issue artifact in the gh skill by @BagToad in #14572


• gh issue artifact stack 10/12: Add edit --restore-version by @BagToad in #14580


• gh issue artifact stack 11/12: Address review feedback by @BagToad in #14640


• gh issue artifact stack 12/12: Add artifact URLs by @BagToad in #14678


• Clarify --comments behavior when piped in view commands by @arsalanyavari in #14714


• Support HTML documents in gh issue artifact by @BagToad in #14720


• Clarify release creation atomicity and immutability by @bdehamer in #14722


• Add deterministic Dependabot scheduler by @williammartin in #14750


• chore(deps): bump the codeql-actions group with 3 updates by @dependabot[bot] in #14751


• Fix help text that references nonexistent flags by @BagToad in #14719


• Bump Go to 1.27.3 by @github-actions[bot] in #14767


• Merge v2.102.1 release branch into trunk by @BagToad in #14770


• chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.15 to 1.4.16 by @dependabot[bot] in #14766


• Update glamour to v2 by @heaths in #14148


• Refreshable tokens (1/7): foundation credential model, storage migration, and file lock by @babakks in #14450


• Refreshable tokens (2/7): refresher domain, OAuth refresher, storage, and wiring by @babakks in #14451


• Refreshable tokens (3/7): short-lived login, refresh, and git credential path by @babakks in #14452


• Refreshable tokens (4/7): gh auth token refresh and secure-storage handling by @babakks in #14453


• Refreshable tokens (5/7): gh auth status short-lived token details by @babakks in #14454


• Refreshable tokens (6/7): agent-task and CAPI per-request refresh by @babakks in #14455


• Refreshable tokens (7/7): guided end-to-end verification scripts by @babakks in #14456


• Refreshable tokens: review fixes across the stack by @babakks in #14663


• Refreshable tokens: rename --short-lived flag to --expiring by @babakks in #14665


• Refreshable tokens: add prefer_expiring_credentials config option by @babakks in #14672


• Refreshable tokens: capture auth_invocation telemetry on login and refresh by @babakks in #14673


• Refreshable tokens: review fixes (round 2) by @babakks in #14717


• Refreshable tokens: show relative time-to-expiry in gh auth status by @babakks in #14745


• Refreshable tokens: build-gated debug overrides for testing token expiry by @babakks in #14752


• Refreshable tokens: bump cli/oauth to v1.3.0 and fix gh status column width by @babakks in #14768


• Document expiring tokens in the gh skill by @babakks in #14782

New Contributors

• @reginaldalfret made their first contribution in #14592


• @jarrensj made their first contribution in #14474


• @A4-Tacks made their first contribution in #14648


• @arsalanyavari made their first contribution in #14714

Full Changelog: v2.102.1...v2.103.0