Security

A security vulnerability has been identified, and fixed, that could allow terminal escape sequence injection when users view GitHub Actions workflow logs using gh run view --log or gh run view --log-failed.

Users are advised to update gh to version v2.92.0 as soon as possible.

For more information see: GHSA-crc3-h8v6-qh57

Support GitHub Enterprise Cloud (GHEC) in skill commandset

Now gh skill subcommands (install, preview, publish, search, update) are able to work with GHEC hosts with data residency.

Add --allow-hidden-dirs flag to skill preview

Following the addition of --allow-hidden-dirs to skill install in the previous release, now the flag is also supported in skill preview, allowing users to preview skills located in hidden (dot-prefixed) directories such as .claude/skills/, .agents/skills/, and .github/skills/.

What's Changed

✨ Features

• feat(skills): add --allow-hidden-dirs flag to preview command by @SamMorrowDrums in #13265
• feat(skills): support GHEC with data residency hosts by @SamMorrowDrums in #13264

🐛 Fixes

• Fix SetSampleRate not updating sample_rate dimension by @williammartin in #13259
• Fix log terminal injection by @williammartin in #13272
• Add "Resource not accessible" to ProjectsV2IgnorableError by @maxbeizer in #13281

📚 Docs & Chores

• fix: using variable interpolation `${{ in deployment.yml... by @orbisai0security in #13258
• docs: correct typo in Linux Homebrew copy by @cassidyjames in #13273
• Install skills flat by Name, not namespaced InstallName by @SamMorrowDrums in #13266
• chore: fix zsh completion on debian by @babakks in #13274
• Add trust disclaimer to extension help text by @travellertales in #13296
• Bump Go to 1.26.2 by @github-actions[bot] in #13301

Dependencies

• chore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 by @dependabot[bot] in #13161
• chore(deps): bump github.com/google/go-containerregistry from 0.21.4 to 0.21.5 by @dependabot[bot] in #13162
• chore(deps): bump charm.land/lipgloss/v2 from 2.0.2 to 2.0.3 by @dependabot[bot] in #13163
• chore(deps): bump charm.land/bubbletea/v2 from 2.0.2 to 2.0.6 by @dependabot[bot] in #13206
• chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.8 to 2.13.9 by @dependabot[bot] in #13241
• chore(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 by @dependabot[bot] in #13298

New Contributors

• @orbisai0security made their first contribution in #13258
• @cassidyjames made their first contribution in #13273
• @travellertales made their first contribution in #13296

Full Changelog: v2.91.0...v2.92.0