File _patchinfo of Package patchinfo.18486

<patchinfo incident="18486">
  <issue tracker="bnc" id="1227035">VUL-0: CVE-2024-6104: gh: hashicorp/go-retryablehttp: url might write sensitive information to log file</issue>
  <issue tracker="cve" id="2024-6104"/>
  <packager>pdostal</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for gh</summary>
  <description>This update for gh fixes the following issues:

Update to version 2.53.0:

  * CVE-2024-6104: gh: hashicorp/go-retryablehttp: url might write sensitive information to log file (boo#1227035)

  * Disable `TestGetTrustedRoot/successfully_verifies_TUF_root` test due to https://github.com/cli/cli/issues/8928
  * Rename package directory and files
  * Rename package name to `update_branch`
  * Rename `gh pr update` to `gh pr update-branch`
  * Add test case for merge conflict error
  * Handle merge conflict error
  * Return error if PR is not mergeable
  * Replace literals with consts for `Mergeable` field values
  * Add separate type for `PullRequest.Mergeable` field
  * Remove unused flag
  * Print message on stdout instead of stderr
  * Raise error if editor is used in non-tty mode
  * Add tests for JSON field support on issue and pr view commands
  * docs: Update documentation for `gh repo create` to clarify owner
  * Ensure PR does not panic when stateReason is requested
  * Enable to use --web even though editor is enabled by config
  * Add editor hint message
  * Use prefer_editor_prompt config by `issue create`
  * Add prefer_editor_prompt config
  * Add `issue create --editor`
  * Update create.go
  * gh attestation trusted-root subcommand (#9206)
  * Fetch variable selected repo relationship when required
  * Add `createdAt` field to tests
  * Add `createdAt` field to `Variable` type
  * Add test for exporting as JSON
  * Add test for JSON output
  * Only populate selected repo information for JSON output
  * Add test to verify JSON exporter gets set
  * Add `--json` option support
  * Use `Variable` type defined in `shared` package
  * Add tests for JSON output
  * Move `Variable` type and `PopulateSelectedRepositoryInformation` func to shared
  * Fix query parameter name
  * Update tests to account for ref comparison step
  * Improve query variable names
  * Check if PR branch is already up-to-date
  * Add `ComparePullRequestBaseBranchWith` function
  * Run `go mod tidy`
  * Add test to verify `--repo` requires non-empty selector
  * Require non-empty selector when `--repo` override is used
  * Run `go mod tidy`
  * Register `update` command
  * Add tests for `pr update` command
  * Add `pr update` command
  * Add `UpdatePullRequestBranch` method
  * Upgrade `shurcooL/githubv4`

Update to version 2.52.0:

  * Attestation Verification - Buffer Fix
  * Remove beta note from attestation top level command
  * Removed beta note from `gh at download`.
  * Removed beta note from `gh at verify`, clarified reusable workflows use case.
  * add `-a` flag to `gh run list`
</description>
</patchinfo>