繁體中文

問題修復

Windows 簽署改用 OIDC,並撤回兩項專案權限改動

你下載 Windows 版 gh 時,發行端的程式碼簽署已從 client secret(應用程式保存的登入密鑰)改為 OIDC(讓工作流程向身分服務即時換取短期身分證明);這是發行流程的安全調整,不會改變你的使用指令。同時,上一版整理 project 查詢權限錯誤、以及讓建立 project issue 的範圍錯誤更清楚的兩項修改都被撤回。像門禁改成每次進門領一張短效通行證,但管理員也把兩條剛換、尚不合用的指示牌先換回原樣。

English

BUGFIX

Move Windows signing to OIDC and revert two project-scope changes

When you download gh for Windows, the release process now signs code with OIDC instead of a client secret. This changes how the publisher proves its identity during release, not the commands you use. Two changes from the previous release were also reverted: shared handling for project-query scope errors and clearer scope errors while creating project issues. It is like replacing a permanent door key with a short-lived entry pass for each visit, while putting two newly changed signs back until they are ready.

原始 CHANGELOG

Original changelogWindows 簽署改用 OIDC,並撤回兩項專案權限改動
Migrate Windows code signing from client secret to OIDC by @BagToad in https://github.com/cli/cli/pull/12911
Revert "refactor: deduplicate scope error handling between api/client.go and project queries" by @williammartin in https://github.com/cli/cli/pull/12914
Revert "fix: clarify scope error while creating issues for projects" by @williammartin in https://github.com/cli/cli/pull/12915