🛡️ openSUSE-SU-2024:0226-1 — gh (CVE-2024-6104)

Security update for gh

This update for gh fixes the following issues:

Update to version 2.53.0:

• CVE-2024-6104: gh: hashicorp/go-retryablehttp: url might write sensitive information to log file (boo#1227035)
• Disable TestGetTrustedRoot/successfully_verifies_TUF_root test due to https://github.com/cli/cli/issues/8928
• Rename package directory and files
• Rename package name to update_branch
• Rename gh pr update to gh pr update-branch
• Add test case for merge conflict error
• Handle merge conflict error
• Return error if PR is not mergeable
• Replace literals with consts for Mergeable field values
• Add separate type for PullRequest.Mergeable field
• Remove unused flag
• Print message on stdout instead of stderr
• Raise error if editor is used in non-tty mode
• Add tests for JSON field support on issue and pr view commands
• docs: Update documentation for gh repo create to clarify owner
• Ensure PR does not panic when stateReason is requested
• Enable to use --web even though editor is enabled by config
• Add editor hint message
• Use prefer_editor_prompt config by issue create
• Add prefer_editor_prompt config
• Add issue create --editor
• Update create.go
• gh attestation trusted-root subcommand (#9206)
• Fetch variable selected repo relationship when required
• Add createdAt field to tests
• Add createdAt field to Variable type
• Add test for exporting as JSON
• Add test for JSON output
• Only populate selected repo information for JSON output
• Add test to verify JSON exporter gets set
• Add --json option support
• Use Variable type defined in shared package
• Add tests for JSON output
• Move Variable type and PopulateSelectedRepositoryInformation func to shared
• Fix query parameter name
• Update tests to account for ref comparison step
• Improve query variable names
• Check if PR branch is already up-to-date
• Add ComparePullRequestBaseBranchWith function
• Run go mod tidy
• Add test to verify --repo requires non-empty selector
• Require non-empty selector when --repo override is used
• Run go mod tidy
• Register update command
• Add tests for pr update command
• Add pr update command
• Add UpdatePullRequestBranch method
• Upgrade shurcooL/githubv4

Update to version 2.52.0:

• Attestation Verification - Buffer Fix
• Remove beta note from attestation top level command
• Removed beta note from gh at download.
• Removed beta note from gh at verify, clarified reusable workflows use case.
• add -a flag to gh run list