Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 9, 2026

Updates github.com/cli/go-gh/v2 from 2.11.2 to 2.13.0

Release notes

Sourced from github.com/cli/go-gh/v2's releases.

v2.13.0

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

:dependabot: Dependencies

New Contributors

Full Changelog: cli/go-gh@v2.12.2...v2.13.0

v2.12.2

What's Changed

Full Changelog: cli/go-gh@v2.12.1...v2.12.2

v2.12.1

Security

A security vulnerability has been identified in go-gh where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub with local file paths for browsing.

For more information, see GHSA-g9f5-x53j-h563

Full Changelog: cli/go-gh@v2.12.0...v2.12.1

v2.12.0

Introducing experimental support for rendering markdown with customizable, accessible colors

Users with low vision or color blindness rely upon the terminal's ability to change how colors appear, however this requires CLIs to use a limited set of colors:

The markdown rendered for GitHub CLI and extensions defaults to 8-bit colors that users cannot easily customize in this way.

Now, users can force rendered markdown to use customizable, accessible colors by doing one of the following:

... (truncated)

Commits
  • a0a6e89 Merge pull request #201 from cli/kw/bump-go-1.25.0
  • 1585603 Merge pull request #202 from cli/babakks/explain-resp-body-close
  • ec8f5ca docs(pkg/api): explain HandleHTTPError does not close resp body
  • 5a975a9 Update Go version to 1.25.0
  • 41e1e0d Merge pull request #200 from cli/babakks/upgrade-golangci-lint
  • f6d1f60 chore: upgrade to Golangci-lint v2.6
  • b7798dc docs: fix incorrect godoc usages
  • 32287ae refactor: lift break condition into the loop
  • ff8ebd0 chore: disable QF1008 from staticcheck rules
  • c6bd235 chore: remove redundant/deprecated // +build tags
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Updates `github.com/cli/go-gh/v2` from 2.11.2 to 2.13.0
- [Release notes](https://github.com/cli/go-gh/releases)
- [Commits](cli/go-gh@v2.11.2...v2.13.0)

---
updated-dependencies:
- dependency-name: github.com/cli/go-gh/v2
  dependency-version: 2.13.0
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jan 9, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 9, 2026 21:44
@octosteve octosteve marked this pull request as draft January 9, 2026 22:07
@octosteve octosteve force-pushed the dependabot/go_modules/go_modules-94a41a1808 branch from 2cbd56c to 39c1390 Compare January 9, 2026 22:09
@octosteve octosteve marked this pull request as ready for review January 9, 2026 22:11
Copilot AI review requested due to automatic review settings January 9, 2026 22:11
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the github.com/cli/go-gh/v2 dependency from version 2.11.2 to 2.13.0, along with several other dependencies and workflow configurations. The update includes security fixes and new features from the upstream library.

Key changes:

  • Updates Go version declaration and numerous Go module dependencies
  • Adapts code to use updated ColorScheme API (ColorScheme() method instead of NewColorScheme constructor, Gray() renamed to Muted())
  • Improves error handling by capturing return values from fmt.Fprintln/Fprintf calls
  • Updates GitHub Actions workflows to use newer action versions

Reviewed changes

Copilot reviewed 14 out of 15 changed files in this pull request and generated no comments.

Show a summary per file
File Description
go.mod Updates Go version to 1.25.0 and numerous dependencies including the primary go-gh/v2 upgrade
go.sum Corresponding checksum updates for all dependency changes
cmd/gh-classroom/view/view.go Adapts to new ColorScheme API and adds error handling
cmd/gh-classroom/view/print_renderer.go Adapts to new ColorScheme API and adds error handling
cmd/gh-classroom/shared/shared.go Standardizes error message capitalization
cmd/gh-classroom/list/list.go Adds error handling for output operations
cmd/gh-classroom/assignments/assignments.go Updates cs.Gray() to cs.Muted() and improves error handling
cmd/gh-classroom/assignment/print_renderer.go Adapts to new ColorScheme API and adds error handling
cmd/gh-classroom/assignment/assignment.go Adapts to new ColorScheme API and adds error handling
cmd/gh-classroom/assignment-grades/assignment_grades.go Adds deferred error handling for file close
cmd/gh-classroom/accepted-assignments/accepted_assignments.go Adds error handling for output operations and import reordering
cmd/gh-classroom/clone/utils/clone-repository_test.go Formatting improvements and proper error handling in test cleanup
.github/workflows/release.yml Updates actions/checkout and gh-extension-precompile versions
.github/workflows/golangci-lint.yml Updates action versions and golangci-lint configuration
.github/workflows/go.yml Updates action versions and Go setup configuration

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@octosteve
Copy link
Collaborator

The change prompted linter changes so it's bigger than just a dep update.

@octosteve octosteve merged commit 8e1986d into main Jan 9, 2026
16 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/go_modules-94a41a1808 branch January 9, 2026 23:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants