Important note about renewed GPG key

The Debian and RedHat releases have been signed with a new GPG key. If you are experiencing issues updating your .deb or .rpm packages, please read cli/cli#9569.

What's Changed

• Always print URL scheme to stdout by @heaths in #9471
• Quote repo names consistently in gh repo sync stdout by @muzimuzhi in #9491
• Fetch bundle from OCI registry for verify by @ejahnGithub in #9421
• Remove Internal from gh repo create prompt when owner is not an org by @jtmcg in #9465
• Drop surplus trailing space char in flag names in web by @muzimuzhi in #9495
• fix the trimming of log filenames for gh run view by @benebsiny in #9482
• "offline" verification using the bundle of attestations without any additional handling of the file by @aryanbhosale in #9523
• build(deps): bump actions/attest-build-provenance from 1.4.1 to 1.4.2 by @dependabot in #9518
• Fix doc typo for repo sync by @muzimuzhi in #9509
• Correct the help message for -F by @Goooler in #9525
• chore: fix some function names by @crystalstall in #9555
• verify 2nd artifact without swapping order by @aryanbhosale in #9532
• gh attestation verify handles empty JSONL files by @malancas in #9541
• Enhance Linux installation docs to redirect users to GPG renewal issue, better troubleshooting support by @andyfeller in #9573
• Upgrade sigstore-go to v0.6.1 by @codysoyland in #9566
• Check for nil values to prevent nil dereference panic by @codysoyland in #9578
• build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3 by @dependabot in #9575

New Contributors

• @aryanbhosale made their first contribution in #9523
• @Goooler made their first contribution in #9525
• @crystalstall made their first contribution in #9555

Full Changelog: v2.55.0...v2.56.0