Merge pull request #9688 from cli/dependabot/go_modules/github.com/th…

…eupdateframework/go-tuf/v2-2.0.1

build(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.0.0 to 2.0.1

Merge pull request #9618 from cli/wm/tenant-api

Use api subdomains for tenant hosts

Merge pull request #9575 from cli/dependabot/github_actions/actions/a…

…ttest-build-provenance-1.4.3

build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3

Merge pull request #9453 from cli/jtmcg/project-v2-syntax-in-search

Update `--project <number>` flags in `gh search` to `owner/number`

Merge pull request #9392 from cli/eugene/gh-attestation-case-insensit…

…ivity

handle attest case insensitivity

Merge pull request #8953 from babakks/8426-add-pr-update-cmd-no-local…

…-update

Add `pr update-branch` command

Merge pull request #9243 from cli/remove-attestation-public-beta

Remove `gh at verify` public beta note

Gracefully degrade when fetching annotations fails due to 403 (#9113)


Co-authored-by: William Martin <williammartin@github.com>

Merge pull request #9140 from cli/andyfeller/cli-9139-sign-pkg-predocs

Clarify Mac OS Installer packages are unsigned

Merge pull request #9075 from cli/dependabot/go_modules/github.com/si…

…gstore/protobuf-specs-0.3.2

build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2