Merge pull request #9243 from cli/remove-attestation-public-beta

Remove `gh at verify` public beta note

Gracefully degrade when fetching annotations fails due to 403 (#9113)


Co-authored-by: William Martin <[email protected]>

Merge pull request #9140 from cli/andyfeller/cli-9139-sign-pkg-predocs

Clarify Mac OS Installer packages are unsigned

Merge pull request #9075 from cli/dependabot/go_modules/github.com/si…

…gstore/protobuf-specs-0.3.2

build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2

Fix `attestation verify` source repository check bug (#9053)

* add build source repo URI extension when repo is provided, add integration tests for this change

Signed-off-by: Meredith Lancaster <[email protected]>

* add initial docs on specifying cert identity

Signed-off-by: Meredith Lancaster <[email protected]>

* wording

Signed-off-by: Meredith Lancaster <[email protected]>

* add reusable workflow example

Signed-off-by: Meredith Lancaster <[email protected]>

* add more test cases

Signed-off-by: Meredith Lancaster <[email protected]>

* tweak to verify docs

---------

Signed-off-by: Meredith Lancaster <[email protected]>
Co-authored-by: Phill MV <[email protected]>

Merge pull request #9030 from cli/wm/doc-clone

Document repo clone protocol behaviour

Merge pull request #8620 from heaths/merge-json

Merge JSON responses from `gh api`

Merge pull request #8920 from cli/wm/bump-glam-glam

Include draft ID in project item list JSON (#8754)

Bump cli/go-gh v2.6.0 for tenant using GH_TOKEN (#8787)