chore(go-deps): bump github.com/cli/cli/v2 from 2.95.0 to 2.96.0 in the go-dependencies group

[dependabot]

Bumps the go-dependencies group with 1 update: github.com/cli/cli/v2.

Updates github.com/cli/cli/v2 from 2.95.0 to 2.96.0

Release notes

Sourced from github.com/cli/cli/v2's releases.

GitHub CLI 2.96.0

Security

A security vulnerability has been identified, and fixed, that could allow command execution on a user's computer when connecting to a malicious Codespace via gh codespace jupyter.

Users of gh codespace jupyter are advised to update gh to version v2.96.0 as soon as possible.

For more information see: GHSA-8cg3-r6g9-fpg2

Download release assets without authentication

gh release download now works against public repositories without authentication, matching gh extension install. A token is still used when one is present:

# Download assets from a public repository, no login required
gh release download v2.96.0 --repo cli/cli

What's Changed

✨ Features

• Allow gh release download without authentication on public repositories by @​BagToad in #13723
• Detect additional third-party coding agents by @​BagToad in #13722
• Support antigravity-cli and antigravity2.0 in gh skill by @​BagToad in #13784

🐛 Fixes

• fix: show checks summary when all checks were cancelled by @​s3onghyun in #13679
• fix(skills): install universal agent to ~/.agents/skills by @​toller892 in #13681
• fix(skills): honor --dir without agent prompt by @​happysnaker in #13766
• Fix concurrent map writes in codespace port forwarding by @​williammartin in #13313
• Use int64 for GitHub database IDs by @​williammartin in #13403

📚 Docs & Chores

• Pin reusable triage workflows to a commit SHA by @​BagToad in #13705
• Add security disclosure guidance to AGENTS.md by @​BagToad in #13720
• Clarify --clone boolean flag behaviour in gh repo fork help by @​BagToad in #13786
• Fix flaky TestHuhPrompterMultiSelectWithSearchPersistence on slow architectures by @​pdostal in #13675
• docs(search): add examples for multiple qualifiers by @​happysnaker in #13756
• docs: fix broken anchor link in release-process-deep-dive by @​patrickwehbe in #13688
• docs: fix broken install command and link/grammar errors by @​patrickwehbe in #13690
• docs: fix duplicated word in primer README by @​s3onghyun in #13677

Dependencies

• chore(deps): bump github.com/microsoft/dev-tunnels from 0.1.19 to 0.1.27 by @​dependabot in #13708
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot in #13703
• chore(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7 by @​dependabot in #13702

... (truncated)

Commits

• b300f2e Merge commit from fork
• 74e7791 Fix concurrent map writes in codespace port forwarding (#13313)
• 6dae307 docs: fix broken install command and link/grammar errors (#13690)
• 5cb1b08 Clarify --clone boolean flag behaviour in gh repo fork help (#13786)
• fd8bbbd docs: fix duplicated word in primer README (#13677)
• f1d1121 fix(skills): honor --dir without agent prompt (#13766)
• 326faaa Support antigravity-cli and antigravity2.0 in gh skill (#13784)
• 397876d Merge pull request #13779 from cli/dependabot/github_actions/golangci/golangc...
• f4ce1d9 chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
• ff4e4a2 Merge pull request #13756 from happysnaker/docs-search-qualifier-examples
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions