GitHub CLI: opt-in expiring OAuth tokens now in public preview

Thu, 22 Oct 2026 15:46:09 +0000

Platform/SRE — Learn: Pre-GA preview of short-lived, auto-refreshing OAuth tokens in gh CLI; worth tracking if your teams use GitHub CLI for scripted infra workflows, but no action warranted until GA.
CI/CD — Learn: Expiring tokens would improve credential hygiene for pipelines that invoke gh CLI, but this is public preview — evaluate once it reaches GA before updating pipeline auth patterns.
Leader — Skip

GitHub CLI Linux package signing key expires September 5

Fri, 04 Sep 2026 14:38:54 +0000

Platform/SRE — Act: The PGP signing key for GitHub CLI APT/RPM repos expires 2026-09-05; any managed Linux host that auto-installs or updates gh via apt/rpm will fail package-signature verification on the first release after that date. Update the trusted keyring on those hosts today.
CI/CD — Act: Pipelines that install gh on Linux runners via apt or rpm will break signature verification starting with the first release after 2026-09-05; update the keyring import step in CI configs, runner setup scripts, or Dockerfiles immediately to add the new PGP key before pipelines go red.
Leader — Skip