Release notes

FEATURE

gh installed via APT or RPM on Linux needs the new signing key

Updating gh on Linux and suddenly getting a signature verification failure? The signing key most likely changed. GitHub CLI's APT and RPM repositories, along with individual RPM packages, are now signed only with the new PGP key, fingerprint 7F38BBB59D064DBCB3D84D725612B36462313325. If you installed gh from the official APT or RPM repositories before April 8, 2026 and haven't refreshed your keyring, installs and updates may fail.

Follow the official PGP signing key rotation guidance to check and update your keyring. Users on Windows or macOS, and anyone who installed through Homebrew, GitHub Releases, another package manager, or from source, are not affected.

FEATURE

gh now copies your login code for you

When you sign in with gh auth login or refresh permissions with gh auth refresh, the screen gives you an OAuth device code to paste into the browser's authorization page. You used to highlight it, copy it, then switch to the browser and paste. Now both commands put the code on your clipboard by default, so you just switch over and paste.

To turn this off for good, run:

gh config set clipboard disabled

If you pass an explicit clipboard option on a single run, that run follows your choice.

Original changelog

Original changeloggh installed via APT or RPM on Linux needs the new signing key
## Linux package repository signing key rotation

GitHub CLI's APT and RPM repositories, along with individual RPM packages, are now signed only with the new PGP key (fingerprint: `7F38BBB59D064DBCB3D84D725612B36462313325`)

> [!IMPORTANT]
> Linux users who installed `gh` from the official APT or RPM repositories before April 8, 2026, and have not refreshed their keyring, may now see package installation or update failures. Follow the [PGP signing key rotation guidance](https://github.com/cli/cli/issues/13118) to check and update your keyring. Users on Windows or macOS, and users who installed `gh` through Homebrew, GitHub Releases, another package manager, or from source, are not affected.
Original changeloggh now copies your login code for you
## Copy authentication codes to the clipboard by default

`gh auth login` and `gh auth refresh` now copy OAuth device codes to the clipboard by default, saving a manual copy step during authentication.

To persistently opt out, run:

```shell
gh config set clipboard disabled
```

Explicit clipboard options still take precedence for an individual invocation.