GitHub CLI 2.92.0: Extensions install flat by name and support GHEC with data

Release notes

FEATURE

Extensions install flat by name and support GHEC with data residency

You can now preview and install custom extensions with more flexibility, and easily comply with corporate data residency policies. When previewing skills, you can pass a flag to allow access to hidden directories, and the system now fully supports GitHub Enterprise Cloud (GHEC) with data residency hosts. Additionally, skills are now installed flatly by their name rather than namespaces, making file paths much cleaner. It's like installing widgets on your phone: instead of nesting them deep inside folders named after developers, they now sit directly on your home screen, and it supports corporate data-residency requirements.

FEATURE

Clean logs to prevent terminal injection and add security warnings to extensions

You can now review logs and install third-party extensions with much better protection against malicious exploits. The CLI now filters unsafe escape codes when outputting logs to prevent terminal injection from manipulating your screen. Additionally, help pages for extensions now display a clear trust disclaimer, reminding you to only run extensions you trust. A syntax fix was also applied to variable interpolation in deployment workflows (deployment.yml) to keep automated processes stable. It's like looking at a public bulletin board: previously someone could hide sticky buttons under posters to trick you, but now the posters are behind safety glass and there's a warning sign reminding you to watch out for scams.

BUGFIX

Ignore project access errors and fix Linux autocompletion and telemetry metrics

You can now enjoy a smoother autocompletion experience and more stable CLI runs across different Linux environments. When running tab completions with zsh on Debian, autocomplete options now resolve correctly. In project management, accessing boards and hitting a "Resource not accessible" error will be gracefully ignored instead of crashing your session. Telemetry metrics also received a fix, ensuring the sample rate updates correctly. It's like visiting a library: previously, if you walked past a locked door, the guide robot would freeze completely, the lookup catalog had typos, and search suggestions didn't work. Now, it silently bypasses restricted sections, and looking up books is completely frictionless.

Original changelog

Original changelogExtensions install flat by name and support GHEC with data residency

feat(skills): add --allow-hidden-dirs flag to preview command by @SamMorrowDrums in https://github.com/cli/cli/pull/13265
feat(skills): support GHEC with data residency hosts by @SamMorrowDrums in https://github.com/cli/cli/pull/13264
Install skills flat by Name, not namespaced InstallName by @SamMorrowDrums in https://github.com/cli/cli/pull/13266

Original changelogClean logs to prevent terminal injection and add security warnings to extensions

Fix log terminal injection by @williammartin in https://github.com/cli/cli/pull/13272
Add trust disclaimer to extension help text by @travellertales in https://github.com/cli/cli/pull/13296
fix: using variable interpolation `${{ in deployment.yml... by @orbisai0security in https://github.com/cli/cli/pull/13258
@orbisai0security made their first contribution in https://github.com/cli/cli/pull/13258
@travellertales made their first contribution in https://github.com/cli/cli/pull/13296

Original changelogIgnore project access errors and fix Linux autocompletion and telemetry metrics

Fix SetSampleRate not updating sample_rate dimension by @williammartin in https://github.com/cli/cli/pull/13259
Add "Resource not accessible" to ProjectsV2IgnorableError by @maxbeizer in https://github.com/cli/cli/pull/13281
docs: correct typo in Linux Homebrew copy by @cassidyjames in https://github.com/cli/cli/pull/13273
chore: fix zsh completion on debian by @babakks in https://github.com/cli/cli/pull/13274
Bump Go to 1.26.2 by @github-actions[bot] in https://github.com/cli/cli/pull/13301
chore(deps): bump github.com/mattn/go-isatty from 0.0.20 to 0.0.21 by @dependabot[bot] in https://github.com/cli/cli/pull/13161
chore(deps): bump github.com/google/go-containerregistry from 0.21.4 to 0.21.5 by @dependabot[bot] in https://github.com/cli/cli/pull/13162
chore(deps): bump charm.land/lipgloss/v2 from 2.0.2 to 2.0.3 by @dependabot[bot] in https://github.com/cli/cli/pull/13163
chore(deps): bump charm.land/bubbletea/v2 from 2.0.2 to 2.0.6 by @dependabot[bot] in https://github.com/cli/cli/pull/13206
chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.8 to 2.13.9 by @dependabot[bot] in https://github.com/cli/cli/pull/13241
chore(deps): bump github.com/mattn/go-isatty from 0.0.21 to 0.0.22 by @dependabot[bot] in https://github.com/cli/cli/pull/13298
@cassidyjames made their first contribution in https://github.com/cli/cli/pull/13273