gomod(deps): Bump github.com/cli/cli/v2 from 2.46.0 to 2.49.0

[dependabot[bot]]

Bumps github.com/cli/cli/v2 from 2.46.0 to 2.49.0.

Release notes

Sourced from github.com/cli/cli/v2's releases.

GitHub CLI 2.49.0

Support for GitHub Artifact Attestations

v2.49.0 release introduces the attestation command set for downloading and verifying attestations about artifacts built in GitHub Actions! This is part of the larger Artifact Attestations initiative. An artifact attestation is a piece of cryptographically signed metadata that is generated as part of your artifact build process. These attestations bind artifacts to the details of the workflow run that produced them, and allow you to guarantee the integrity and provenance of any artifact built in GitHub Actions.

# Verify a local artifact
gh attestation verify artifact.bin -o <your org>
Verify a local artifact against a local artifact attestation
gh attestation verify artifact.bin -b ./artifact-v0.0.1-bundle.json -o <your org>
Verify an OCI image
gh attestation verify oci://ghcr.io/foo/bar:latest -o <your org>
Download artifact attestations
gh attestation download artifact.bin -o <your org>

To get started, check out gh help attestation. You can also use the gh at <command> alias for short.

What's Changed

• Improve gh run rerun docs by @​sochotnicky in cli/cli#8969
• build(deps): bump golang.org/x/net from 0.21.0 to 0.23.0 by @​dependabot in cli/cli#8981
• Update sigstore-go dependency to v0.3.0 by @​malancas in cli/cli#8977
• gh attestation tuf-root-verify offline test fix by @​malancas in cli/cli#8975
• Update gh attestation verify output by @​malancas in cli/cli#8991
• build(deps): bump google.golang.org/grpc from 1.62.1 to 1.62.2 by @​dependabot in cli/cli#8989
• Remove Hidden flag from gh attestation command by @​malancas in cli/cli#8998
• Add colon for gh secret set by @​NeroBlackstone in cli/cli#9004
• Improve errors when loading bundle locally fails by @​williammartin in cli/cli#8996
• Support offline mode for gh attestation verify by @​steiza in cli/cli#8997
• Add projectsV2 to JSON fields of gh repo commands by @​babakks in cli/cli#9007
• Support long URLs in gh repo clone by @​babakks in cli/cli#9008
• Fix issue with closing pager stream by @​babakks in cli/cli#9020
• proof of concept for flag-level disable auth check by @​andyfeller in cli/cli#9000
• Be more general with attestation host checks by @​williammartin in cli/cli#9019
• Add beta designation on attestation command set by @​andyfeller in cli/cli#9022
• Tweaked gh attestation help strings to generate nicer cli manual site. by @​phillmv in cli/cli#9025
• Update cli/go-gh to v2.9.0 by @​andyfeller in cli/cli#9023
• Document repo clone protocol behaviour by @​williammartin in cli/cli#9030

New Contributors

• @​sochotnicky made their first contribution in cli/cli#8969
• @​NeroBlackstone made their first contribution in cli/cli#9004
• @​phillmv made their first contribution in cli/cli#9025

Full Changelog: https://github.com/cli/cli/compare/v2.48.0...v2.49.0

GitHub CLI 2.48.0

... (truncated)

Commits

• f2d6a8e Merge pull request #9030 from cli/wm/doc-clone
• 1902b8b Merge pull request #9023 from cli/andyfeller/go-gh-v2.9.0
• d1f8c7d Merge pull request #9025 from cli/phillmv/tweak-attestation-helpdocs
• 825beef Document repo clone protocol behaviour
• 38ee906 whitespace aligment for inspect/inspect.go
• 9523a99 whitespace alignment in attestation/attestation.go
• ce61fd8 Added tweaked note to tuf-root-verify
• 5619251 Tweaked gh attestation help strings to generate nicer cli manual site.
• f5430ce Merge pull request #9022 from cli/andyfeller/attestation-beta-usage
• d51ae5c Update attestation's beta designation
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)