Update dependency gh to v2.101.0

[timmo001]

This PR contains the following updates:

Package	Type	Update	Change
gh	tools	minor	2.100.0 → 2.101.0

---

Release Notes

cli/cli (gh)

v2.101.0: GitHub CLI 2.101.0

Compare Source

Linux package repository signing key rotation

GitHub CLI's APT and RPM repositories, along with individual RPM packages, are now signed only with the new PGP key (fingerprint: 7F38BBB59D064DBCB3D84D725612B36462313325)

[!IMPORTANT]
Linux users who installed gh from the official APT or RPM repositories before April 8, 2026, and have not refreshed their keyring, may now see package installation or update failures. Follow the PGP signing key rotation guidance to check and update your keyring. Users on Windows or macOS, and users who installed gh through Homebrew, GitHub Releases, another package manager, or from source, are not affected.

Copy authentication codes to the clipboard by default

gh auth login and gh auth refresh now copy OAuth device codes to the clipboard by default, saving a manual copy step during authentication.

To persistently opt out, run:

gh config set clipboard disabled

Explicit clipboard options still take precedence for an individual invocation.

What's Changed

✨ Features

• Add clipboard preference for auth flows and default to enabled by @​williammartin in #​14345

🐛 Fixes

• Use API SSH URLs for repository clones by @​williammartin in #​14346
• Validate repository names during interactive creation by @​sergiou87 in #​14313
• Finalize telemetry at invocation completion by @​williammartin in #​14390
• Record attachment operation counts in telemetry by @​BagToad in #​14360
• Propagate gh path to extensions by @​williammartin in #​14282
• Delete repo garden command by @​williammartin in #​14416
• Fix remote branch deletion for owner case mismatch by @​williammartin in #​14429
• Retire multi-account migration by @​williammartin in #​14430

📚 Docs & Chores

• docs: announce Linux PGP key rotation by @​babakks in #​14340
• Require verified SHAs in issue-triage permalinks by @​sergiou87 in #​14343
• Add VHS demo skill by @​williammartin in #​14334
• docs: fix broken "GitHub language" link in primer foundations by @​areesh-ali in #​14363
• Fix and validate Go bump workflow by @​williammartin in #​14347
• chore: sign Linux repositories only with the new PGP key by @​babakks in #​14197
• Rewrite CLI agent guidance by @​williammartin in #​14388
• Prepare exit errors for Go 1.27 by @​williammartin in #​14397
• Reduce rate limiting and reduce time taken for acceptance tests by @​williammartin in #​14320
• Filter acceptance tests for installation token capabilities by @​williammartin in #​14354
• Fix Go bump workflow authentication by @​williammartin in #​14412
• Run acceptance tests in Actions with a GitHub App token by @​williammartin in #​14356
• Fix acceptance script paths on Windows by @​williammartin in #​14414
• Wait for repository readiness before archiving by @​williammartin in #​14415
• Update Go bump validation tools by @​williammartin in #​14428
• Recognize maintainer authorization by @​williammartin in #​14438
• Safely replace stale Go bump branches by @​williammartin in #​14441
• Use internal Apple codesign action by @​williammartin in #​14437
• Test explicit default repository resolution by @​williammartin in #​14460
• Revert "Use internal Apple codesign action" by @​williammartin in #​14462

Dependencies

• chore(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 by @​dependabot[bot] in #​14376
• chore(deps): bump github.com/google/go-containerregistry from 0.22.0 to 0.22.1 by @​dependabot[bot] in #​14377
• chore(deps): bump github.com/yuin/goldmark from 1.8.5 to 1.8.6 by @​dependabot[bot] in #​14378
• chore(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 by @​dependabot[bot] in #​14391
• chore(deps): bump github.com/microsoft/dev-tunnels from 0.1.27 to 0.2.0 by @​dependabot[bot] in #​14375
• chore(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 by @​dependabot[bot] in #​14417
• Bump Go to 1.27.1 by @​github-actions[bot] in #​14442
• chore(deps): bump azure/login from 3.0.2 to 3.1.0 by @​dependabot[bot] in #​14447
• chore(deps): bump the codeql-actions group with 3 updates by @​dependabot[bot] in #​14446
• chore(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 by @​dependabot[bot] in #​14445
• chore(deps): bump golang.org/x/text from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​14444
• chore(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0 by @​dependabot[bot] in #​14443
• Bump github.com/cli/go-gh/v2 to v2.16.1 by @​niik in #​14461

New Contributors

• @​areesh-ali made their first contribution in #​14363

Full Changelog: cli/cli@v2.100.0...v2.101.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.