發布日期：2026-07-31
你在 GitHub Project（把工作拆成卡片和欄位的管理看板）裡找待辦事項，不必先翻出那串難記的 ID 了。gh project item-edit 現在能依名稱找到項目；像整理「修登入頁」這張卡時，可直接用它的名字指定對象。gh project item-list 也能把具名欄位列出來，清單不再只像一排沒有標籤的抽屜。搜尋某個儲存庫時，gh search --repo 會提示 OWNER/REPO 格式，文件也把依名稱編輯列為主要做法。
想讓 AI 代理幫忙檢視程式碼時，gh skill 的選項更新了。它新增 Grok 的 skill host 支援，也把代理清單中的 Windsurf 換成 Devin；選擇畫面過長的標籤換行問題一併修好。專案還加入 code review agent skill，也就是給代理做程式碼審查用的操作說明。像替工具箱添了新轉接頭，現在能接 Grok；舊的 Windsurf 插槽則改標 Devin，拿取時不會再被斷行的標籤絆住。
開啟 GitHub CLI 時，驗證器需要的 trusted root（用來確認信任鏈起點的根憑證）若缺失，初始化失敗現在會被妥善處理，不會讓這一步變成死結。macOS 的 keyring（存放登入金鑰的地方）若跳出互動式解鎖提示，等待時間也從 3 秒延到 60 秒。這版還補上 macOS keyring 的安全文件。像進大樓時保全發現名冊少一頁，會改走可處理的流程；而你正翻包找門禁卡，櫃台願意多等一分鐘。
這張卡講的是 gh 專案自己的後勤，不是你今天要輸入的新指令。團隊新增 pull request 範本、用代理分流 issue 的 workflow，也新增 Dependabot 的分流流程；issue 分流 workflow 改用 Actions token 做 Copilot 推論，並更新到 gh-aw v0.83.1。部署 workflow 加強，網站部署用的 SITE_DEPLOY_PAT 改由 gh-cli-site-deployer App 取代。CodeQL 的 Dependabot 更新會分組處理，Go 與多個函式庫、Actions 也陸續升版；無效的 CODEOWNERS 規則與程式、文件、註解的錯字一併清掉。像倉庫後場重新排班：分貨、交接、補貨都各自有路走，前台的 CLI 使用方式沒有因此多一道手續。
When you are looking for a task in a GitHub Project, you no longer have to dig up its hard-to-remember ID first. gh project item-edit can now resolve an item by name, so you can target a card such as “Fix login page” by its name. gh project item-list can show named field columns too, rather than a row of unlabeled drawers. gh search --repo now hints at the OWNER/REPO format, and the docs present name-based editing as the main Project flow.
If you use AI agents to review code, gh skill has refreshed its choices. It adds support for Grok as a skill host and replaces Windsurf with Devin in its agent list; labels that wrapped awkwardly in the picker have also been fixed. The project now includes a code-review agent skill: instructions for an agent doing code review. Think of a toolbox gaining a new adapter for Grok while the old Windsurf slot is relabeled Devin, with no wrapped label getting in the way.
When GitHub CLI starts, verifier initialization can fail because a trusted root—the root certificate at the start of a chain of trust—is missing. That failure is now handled gracefully instead of becoming a dead end. On macOS, an interactive keyring access prompt now gets 60 seconds rather than 3 seconds. This release also adds security documentation for the macOS keyring. It is like a guard finding a page missing from a visitor list and following a workable procedure, while the desk gives you a full minute to find your access card.
This card is about the gh project's own backstage work, not a new command for you to type today. The team adds a pull-request template, an agentic issue-triage workflow, and a Dependabot-triage workflow; the issue-triage workflow uses the Actions token for Copilot inference and is refreshed to gh-aw v0.83.1. The deployment workflow is hardened, and SITE_DEPLOY_PAT is replaced by the gh-cli-site-deployer App. CodeQL Dependabot updates are grouped, while Go, libraries, and Actions receive updates; a dead CODEOWNERS rule and typos in code, docs, and comments are removed. It is like reorganizing a warehouse back room: sorting, handoffs, and restocking each get their own route, without adding a step to the CLI counter.
Add name-based resolution to `gh project item-edit` by @zwick in [#13807](https://github.com/cli/cli/pull/13807)
Add named field columns to `gh project item-list` by @zwick in [#13823](https://github.com/cli/cli/pull/13823)
Add `OWNER/REPO` format hint to the `gh search --repo` flag by @BagToad in [#13922](https://github.com/cli/cli/pull/13922)
Present by-name `item-edit` as the first-class project flow in docs by @Solaris-star in [#13927](https://github.com/cli/cli/pull/13927)
@zwick made their first contribution in https://github.com/cli/cli/pull/13807
@Solaris-star made their first contribution in https://github.com/cli/cli/pull/13927Add Grok skill host support by @tommaso-moro in [#13864](https://github.com/cli/cli/pull/13864)
Replace Windsurf with Devin in `gh skill` agents by @tommaso-moro in [#13987](https://github.com/cli/cli/pull/13987)
Fix skill picker label wrapping by @tommaso-moro in [#13967](https://github.com/cli/cli/pull/13967)
Add a code review agent skill by @BagToad in [#14003](https://github.com/cli/cli/pull/14003)Gracefully handle failed GitHub verifier initialization caused by a missing trusted root by @malancas in [#13624](https://github.com/cli/cli/pull/13624)
Bump keyring operation timeout from 3s to 60s so interactive unlock prompts have time to complete by @kofuk in [#13787](https://github.com/cli/cli/pull/13787)
Add a macOS keyring security doc by @williammartin in [#13960](https://github.com/cli/cli/pull/13960)
@kofuk made their first contribution in https://github.com/cli/cli/pull/13787Bump Go to 1.26.5 by @github-actions[bot] in [#13817](https://github.com/cli/cli/pull/13817)
Establish a pull request template for scale by @BagToad in [#14004](https://github.com/cli/cli/pull/14004)
Add an agentic issue-triage workflow by @lukewar in [#13777](https://github.com/cli/cli/pull/13777)
Use the Actions token for Copilot inference in the issue-triage workflow by @tidy-dev in [#13830](https://github.com/cli/cli/pull/13830)
Refresh the issue-triage agentic workflow to gh-aw v0.83.1 by @alondahari in [#13949](https://github.com/cli/cli/pull/13949)
Add a dependabot-triage agentic workflow by @williammartin in [#13985](https://github.com/cli/cli/pull/13985)
Harden the deployment workflow by @niik in [#13780](https://github.com/cli/cli/pull/13780)
Replace `SITE_DEPLOY_PAT` with the gh-cli-site-deployer App by @williammartin in [#13492](https://github.com/cli/cli/pull/13492)
Group CodeQL Dependabot updates by @williammartin in [#13943](https://github.com/cli/cli/pull/13943)
Remove a dead CODEOWNERS rule for the non-existent `pkg/cmd/release/attestation/` by @kobihikri in [#13886](https://github.com/cli/cli/pull/13886)
Fix typos in code and documentation by @pstoeckle in [#13940](https://github.com/cli/cli/pull/13940)
Fix duplicated-word typos in comments by @SORBELLOSTEFANIE in [#13900](https://github.com/cli/cli/pull/13900)
chore(deps): bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.5 by @dependabot in [#13790](https://github.com/cli/cli/pull/13790)
chore(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot in [#13789](https://github.com/cli/cli/pull/13789)
chore(deps): bump https://github.com/klauspost/compress from 1.18.6 to 1.19.0 by @dependabot in [#13791](https://github.com/cli/cli/pull/13791)
chore(deps): bump charm.land/bubbletea/v2 from 2.0.7 to 2.0.8 by @dependabot in [#13800](https://github.com/cli/cli/pull/13800)
chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 by @dependabot in [#13812](https://github.com/cli/cli/pull/13812)
chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot in [#13821](https://github.com/cli/cli/pull/13821)
chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 by @dependabot in [#13801](https://github.com/cli/cli/pull/13801)
chore(deps): bump github/gh-aw-actions/setup from 0.81.6 to 0.82.2 by @dependabot in [#13832](https://github.com/cli/cli/pull/13832)
chore(deps): bump charm.land/bubbles/v2 from 2.1.0 to 2.1.1 by @dependabot in [#13813](https://github.com/cli/cli/pull/13813)
chore(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 by @dependabot in [#13822](https://github.com/cli/cli/pull/13822)
chore(deps): bump github/gh-aw-actions/setup from 0.82.2 to 0.82.3 by @dependabot in [#13843](https://github.com/cli/cli/pull/13843)
chore(deps): bump actions/cache/restore from 5.0.5 to 6.1.0 by @dependabot in [#13841](https://github.com/cli/cli/pull/13841)
chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot in [#13867](https://github.com/cli/cli/pull/13867)
chore(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 by @dependabot in [#13869](https://github.com/cli/cli/pull/13869)
chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @dependabot in [#13868](https://github.com/cli/cli/pull/13868)
chore(deps): bump github/codeql-action/init from 4.36.3 to 4.37.1 by @dependabot in [#13870](https://github.com/cli/cli/pull/13870)
chore(deps): bump https://github.com/yuin/goldmark from 1.8.2 to 1.8.4 by @dependabot in [#13888](https://github.com/cli/cli/pull/13888)
chore(deps): bump https://github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2 by @dependabot in [#13842](https://github.com/cli/cli/pull/13842)
chore(deps): bump github/gh-aw-actions/setup from 0.82.3 to 0.82.8 by @dependabot in [#13877](https://github.com/cli/cli/pull/13877)
chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot in [#13933](https://github.com/cli/cli/pull/13933)
chore(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @dependabot in [#13934](https://github.com/cli/cli/pull/13934)
chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 by @dependabot in [#13936](https://github.com/cli/cli/pull/13936)
chore(deps): bump actions/attest from 4.1.1 to 4.2.0 by @dependabot in [#13935](https://github.com/cli/cli/pull/13935)
chore(deps): bump https://github.com/mattn/go-isatty from 0.0.22 to 0.0.23 by @dependabot in [#13937](https://github.com/cli/cli/pull/13937)
chore(deps): bump github/gh-aw-actions/setup from 0.82.8 to 0.82.13 by @dependabot in [#13938](https://github.com/cli/cli/pull/13938)
chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot in [#13941](https://github.com/cli/cli/pull/13941)
chore(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1 by @dependabot in [#13942](https://github.com/cli/cli/pull/13942)
chore(deps): bump https://github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.14 by @dependabot in [#13944](https://github.com/cli/cli/pull/13944)
chore(deps): bump nodeselector/setup-apple-codesign from ab275d0 to 309922b by @dependabot in [#13878](https://github.com/cli/cli/pull/13878)
chore(deps): bump https://github.com/klauspost/compress from 1.19.0 to 1.19.1 by @dependabot in [#13950](https://github.com/cli/cli/pull/13950)
chore(deps): bump github/gh-aw-actions/setup from 0.82.13 to 0.82.14 by @dependabot in [#13951](https://github.com/cli/cli/pull/13951)
chore(deps): bump the codeql-actions group with 3 updates by @dependabot in [#13965](https://github.com/cli/cli/pull/13965)
chore(deps): bump https://github.com/mattn/go-isatty from 0.0.23 to 0.0.24 by @dependabot in [#13977](https://github.com/cli/cli/pull/13977)
chore(deps): bump the codeql-actions group with 3 updates by @dependabot in [#13978](https://github.com/cli/cli/pull/13978)
chore(deps): bump https://github.com/gabriel-vasile/mimetype from 1.4.14 to 1.4.15 by @dependabot in [#13976](https://github.com/cli/cli/pull/13976)
chore(deps): bump github/gh-aw-actions/setup from 0.83.1 to 0.83.2 by @dependabot in [#13979](https://github.com/cli/cli/pull/13979)
chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.1 to 0.83.2 by @dependabot in [#13980](https://github.com/cli/cli/pull/13980)
chore(deps): bump actions/checkout from 6 to 7 by @dependabot in [#13981](https://github.com/cli/cli/pull/13981)
chore(deps): bump github/gh-aw-actions/setup from 0.83.2 to 0.83.3 by @dependabot in [#13995](https://github.com/cli/cli/pull/13995)
chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.2 to 0.83.3 by @dependabot in [#13996](https://github.com/cli/cli/pull/13996)
chore(deps): bump github/gh-aw-actions/setup-cli from 0.83.3 to 0.83.4 by @dependabot in [#14018](https://github.com/cli/cli/pull/14018)
@lukewar made their first contribution in https://github.com/cli/cli/pull/13777
@niik made their first contribution in https://github.com/cli/cli/pull/13780
@kobihikri made their first contribution in https://github.com/cli/cli/pull/13886
@pstoeckle made their first contribution in https://github.com/cli/cli/pull/13940
@SORBELLOSTEFANIE made their first contribution in https://github.com/cli/cli/pull/13900
@alondahari made their first contribution in https://github.com/cli/cli/pull/13949