chore(deps): update github cli to v2.100.0

[renovate]

This PR contains the following updates:

Package	Update	Change
cli/cli	minor	2.98.0 → 2.100.0

---

Release Notes

cli/cli (cli/cli)

v2.100.0: GitHub CLI 2.100.0

Compare Source

Experimental: Route GitHub API traffic through a custom host

Organizations can now route a GitHub host's API traffic through a gateway using the new per-host api_host configuration:

# Route API traffic for github.com through a gateway
gh config set api_host gh-gateway.example.com --host github.com

# Read the configured API host
gh config get api_host --host github.com

The original host remains in use for authentication, Git remotes, and browser URLs.

[!NOTE]
api_host is experimental and is not a security boundary. Requests may still reach the original host.

What's Changed

✨ Features

• Honor per-host api_host routing across GitHub API requests by @​williammartin in #​14104
• Expose api_host through gh config get and gh config set by @​williammartin in #​14332
• Add webhook as an official extension by @​williammartin in #​14326
• Print full command help after command misuse when gh is invoked by a coding agent by @​niik in #​14198

🐛 Fixes

• fix(api): disable telemetry for unauthenticated GHES requests using absolute hostnames by @​williammartin in #​14337

📚 Docs & Chores

• Fix discussion acceptance test flags by @​williammartin in #​14321
• Clarify supported GHES versions by @​williammartin in #​14324
• Improve automated issue triage analysis by @​sergiou87 in #​14318
• Record attachment counts in telemetry by @​BagToad in #​14327

Dependencies

• chore(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0 by @​babakks in #​14331
• chore(deps): bump Go toolchain from 1.26.7 to 1.26.8 by @​babakks in #​14330
• chore(deps): bump github.com/cli/go-gh/v2 from 2.15.0 to 2.16.0 by @​williammartin in #​14338

Full Changelog: cli/cli@v2.99.0...v2.100.0

v2.99.0: GitHub CLI 2.99.0

Compare Source

Attach images and videos to issues and pull requests

The repeatable --attach flag uploads local images and videos and adds them to issue, pull request, or comment bodies. If a body already references the local path, gh replaces it with the uploaded URL; otherwise it appends the attachment:

# Attach files when creating or editing an issue
gh issue create --attach './repro.png#The error state'
gh issue edit 123 --attach ./walkthrough.mp4

# Attach files when creating or editing a pull request
gh pr create --attach ./before.png
gh pr edit 456 --attach ./after.png

# Attach files to comments
gh issue comment 123 --attach ./repro.png
gh pr comment 456 --attach ./result.mp4

Repeat the flag to attach multiple files in a single invocation. Attachments are available on GitHub.com and GitHub Enterprise Cloud.

For more information see https://gh.io/gh-attach and https://github.blog/changelog/2026-09-01-github-cli-media-in-issues-pull-requests-and-comments/

Worktree support extended to gh issue develop

gh issue develop can now create a linked branch and check it out in a new Git worktree, leaving your current working copy unchanged:

# Create a linked branch for an issue and check it out in a worktree
gh issue develop 123 --checkout --worktree /path/to/wt-feature

What's Changed

✨ Features

• Add token and repository metadata required for attachment uploads by @​BagToad in #​14177
• Add validation for attachable image and video files by @​BagToad in #​14178
• Rewrite local Markdown references to uploaded attachment URLs by @​BagToad in #​14179
• Add attachment uploads to GitHub by @​BagToad in #​14180
• Add repeatable --attach flag parsing and upload orchestration by @​BagToad in #​14181
• Add --attach to gh pr comment and gh issue comment by @​BagToad in #​14182
• Add --attach to gh pr create and gh pr edit by @​BagToad in #​14183
• Add --attach to gh issue create and gh issue edit by @​BagToad in #​14184
• Add worktree checkout to gh issue develop by @​sergiou87 in #​14136
• Use text-only spinner output when gh is invoked by a coding agent by @​niik in #​14191
• Honor PI_CODING_AGENT_DIR for Pi user skills by @​tommaso-moro in #​14260

🐛 Fixes

• fix(repo sync): explain when the target branch is checked out in another worktree by @​williammartin in #​14076
• fix(pr merge): safely handle --delete-branch with linked worktrees by @​tidy-dev in #​14007
• fix(copilot): end the declined-install warning with a newline by @​BagToad in #​14222
• fix(attach): clarify retry windows and attachment path resolution by @​BagToad in #​14262
• fix(issue develop): reject non-empty worktree targets before creating a branch by @​tidy-dev in #​14244
• fix(repo sync): prevent linked-worktree corruption by @​sergiou87 in #​14060
• fix(view): reject --comments with --json by @​BagToad in #​14215
• fix(attach): limit batches to 50 files by @​BagToad in #​14289
• fix(skills): install Codex user skills to ~/.agents/skills by @​scarletkc in #​14154

📚 Docs & Chores

• Address review feedback across the --attach stack by @​BagToad in #​14200
• Refactor commands to own attachment flag policy by @​BagToad in #​14255
• Document attachment support in the gh skill by @​BagToad in #​14261
• Document gh issue develop --checkout --worktree in the gh skill by @​babakks in #​14265
• Clarify pull request testing guidance by @​williammartin in #​14272
• Fix issue triage to apply suspected-spam labels directly by @​williammartin in #​14271
• Prevent Dependabot from updating agentic-workflow dependencies by @​williammartin in #​14274
• Modernize Go code with go fix by @​BagToad in #​14278

Dependencies

• chore(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 by @​dependabot in #​14247
• chore(deps): bump charm.land/bubbletea/v2 from 2.0.8 to 2.0.9 by @​dependabot in #​14248
• chore(deps): bump the codeql-actions group across 1 directory with 3 updates by @​dependabot in #​14250
• chore(deps): bump charm.land/bubbles/v2 from 2.1.1 to 2.2.0 by @​dependabot in #​14249
• chore(deps): bump agentic-workflows to 0.87.5 by @​williammartin in #​14273
• chore(deps): bump charm.land/bubbles/v2 from 2.2.0 to 2.2.1 by @​dependabot in #​14275
• chore(deps): bump https://github.com/sigstore/protobuf-specs from 0.5.1 to 0.5.2 by @​dependabot in #​14258
• chore(deps): bump https://github.com/google/go-containerregistry from 0.21.9 to 0.22.0 by @​dependabot in #​14267
• chore(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @​dependabot in #​14299
• chore(deps): bump azure/login from 3.0.1 to 3.0.2 by @​dependabot in #​14301
• chore(deps): bump the codeql-actions group with 3 updates by @​dependabot in #​14300

New Contributors

• @​scarletkc made their first contribution in #​14154

Full Changelog: cli/cli@v2.98.0...v2.99.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 2c1fe51

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR