繁體中文

新功能

擴充技能安裝與預覽更簡明,全面支援企業雲端資料存儲

現在你在預覽自訂擴充技能時,可以直接帶上參數來允許讀取隱藏的資料夾;如果你的公司使用限制資料只能存在特定地區的企業雲(GHEC,GitHub 企業雲端版),系統也能正常連線支援。同時,安裝這些技能時,系統會直接用技能本身的名稱存檔,不再加上複雜的前綴命名空間,讓路徑更簡潔。就像你的手機安裝小工具,以前必須按照開發者名字分類塞在好幾層資料夾裡,現在安裝直接放在案頭,而且在資料必須存於特定地區時也能正常使用。

新功能

過濾日誌控制碼防禦終端機注入攻擊,新增擴充功能安全警告

現在當你在查看執行紀錄時,系統會先過濾掉可能隱藏的惡意控制碼,防止有心人士透過終端機注入攻擊(terminal injection)來控制你的畫面。同時,當你查閱擴充功能說明時,畫面會貼心顯示安全免責聲明,提醒你只安裝信任的工具。此外,自動部署設定檔(deployment.yml)中關於變數替換的寫法也修正了,避免自動化流程出錯。就像你在路邊看佈告欄,以前可能有人在海報下偷黏按鈕騙你按,現在不僅海報被防護玻璃罩住,佈告欄旁邊還立了警告標語提醒你小心詐騙。

問題修復

忽略專案看板無權限錯誤,修復 Linux 自動補完與統計回報

現在在 Debian 系統上使用 zsh(一種終端機 shell 軟體)時,自動補完功能可以正常運作了。同時,如果你在存取專案看板時遇到「資源無法存取」的錯誤,系統會自動忽略,不會再像以前那樣直接中斷崩潰。底層也升級了 Go 語言與多個終端介面套件,修復了統計回報率沒有正確更新的問題。就像你去圖書館借書,以前遇到沒權限的書櫃機器人會直接死機,而且查詢系統還經常打錯字、自動推薦按不出來;現在它會自動跳過不合適的書,找書的過程也更順暢。

English

FEATURE

Extensions install flat by name and support GHEC with data residency

You can now preview and install custom extensions with more flexibility, and easily comply with corporate data residency policies. When previewing skills, you can pass a flag to allow access to hidden directories, and the system now fully supports GitHub Enterprise Cloud (GHEC) with data residency hosts. Additionally, skills are now installed flatly by their name rather than namespaces, making file paths much cleaner. It's like installing widgets on your phone: instead of nesting them deep inside folders named after developers, they now sit directly on your home screen, and it supports corporate data-residency requirements.

FEATURE

Clean logs to prevent terminal injection and add security warnings to extensions

You can now review logs and install third-party extensions with much better protection against malicious exploits. The CLI now filters unsafe escape codes when outputting logs to prevent terminal injection from manipulating your screen. Additionally, help pages for extensions now display a clear trust disclaimer, reminding you to only run extensions you trust. A syntax fix was also applied to variable interpolation in deployment workflows (deployment.yml) to keep automated processes stable. It's like looking at a public bulletin board: previously someone could hide sticky buttons under posters to trick you, but now the posters are behind safety glass and there's a warning sign reminding you to watch out for scams.

BUGFIX

Ignore project access errors and fix Linux autocompletion and telemetry metrics

You can now enjoy a smoother autocompletion experience and more stable CLI runs across different Linux environments. When running tab completions with zsh on Debian, autocomplete options now resolve correctly. In project management, accessing boards and hitting a "Resource not accessible" error will be gracefully ignored instead of crashing your session. Telemetry metrics also received a fix, ensuring the sample rate updates correctly. It's like visiting a library: previously, if you walked past a locked door, the guide robot would freeze completely, the lookup catalog had typos, and search suggestions didn't work. Now, it silently bypasses restricted sections, and looking up books is completely frictionless.

原始 CHANGELOG

Original changelog擴充技能安裝與預覽更簡明,全面支援企業雲端資料存儲
feat(skills): add --allow-hidden-dirs flag to preview command by @SamMorrowDrums in https://github.com/cli/cli/pull/13265
feat(skills): support GHEC with data residency hosts by @SamMorrowDrums in https://github.com/cli/cli/pull/13264
Install skills flat by Name, not namespaced InstallName by @SamMorrowDrums in https://github.com/cli/cli/pull/13266
Original changelog過濾日誌控制碼防禦終端機注入攻擊,新增擴充功能安全警告
Fix log terminal injection by @williammartin in https://github.com/cli/cli/pull/13272
Add trust disclaimer to extension help text by @travellertales in https://github.com/cli/cli/pull/13296
fix: using variable interpolation `${{ in deployment.yml... by @orbisai0security in https://github.com/cli/cli/pull/13258
@orbisai0security made their first contribution in https://github.com/cli/cli/pull/13258
@travellertales made their first contribution in https://github.com/cli/cli/pull/13296
Original changelog忽略專案看板無權限錯誤,修復 Linux 自動補完與統計回報
Fix SetSampleRate not updating sample_rate dimension by @williammartin in https://github.com/cli/cli/pull/13259
Add "Resource not accessible" to ProjectsV2IgnorableError by @maxbeizer in https://github.com/cli/cli/pull/13281
docs: correct typo in Linux Homebrew copy by @cassidyjames in https://github.com/cli/cli/pull/13273
chore: fix zsh completion on debian by @babakks in https://github.com/cli/cli/pull/13274
Bump Go to 1.26.2 by @github-actions[bot] in https://github.com/cli/cli/pull/13301
chore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 by @dependabot[bot] in https://github.com/cli/cli/pull/13161
chore(deps): bump github.com/google/go-containerregistry from 0.21.4 to 0.21.5 by @dependabot[bot] in https://github.com/cli/cli/pull/13162
chore(deps): bump charm.land/lipgloss/v2 from 2.0.2 to 2.0.3 by @dependabot[bot] in https://github.com/cli/cli/pull/13163
chore(deps): bump charm.land/bubbletea/v2 from 2.0.2 to 2.0.6 by @dependabot[bot] in https://github.com/cli/cli/pull/13206
chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.8 to 2.13.9 by @dependabot[bot] in https://github.com/cli/cli/pull/13241
chore(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 by @dependabot[bot] in https://github.com/cli/cli/pull/13298
@cassidyjames made their first contribution in https://github.com/cli/cli/pull/13273