# GitHub CLI v2.98.0 — GitHub CLI 2.98.0

- Product: GitHub CLI (https://whatsnew.fyi/product/github-cli)
- Vendor: GitHub
- Date: 2026-08-20
- Version: v2.98.0
- Original notes: https://github.com/cli/cli/releases/tag/v2.98.0
- Permalink: https://whatsnew.fyi/product/github-cli/releases/v2.98.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Fix a vulnerability that bound the local forwarded port to all available network interfaces by default in gh codespace ports forward
- **added** — Add --worktree flag to gh pr checkout to checkout a pull request into a git worktree
- **added** — Add --search-type flag to gh search issues to support semantic and hybrid search
- **added** — Set GH_EXTENSION=1 environment variable when gh invokes an extension
- **fixed** — Fix RESTWithNext error type, repairing gh status and attestation retries
- **fixed** — Trim spaces when parsing X-Oauth-Scopes in gh release create
- **fixed** — Fix project item-add output for non-TTY

##### Security
A security vulnerability has been identified, and fixed, that binds the local forwarded port to all available network interfaces by default.

Users of `gh codespace ports forward` are advised to update `gh` to version `v2.98.0` as soon as possible.

For more information see: https://github.com/cli/cli/security/advisories/GHSA-vfhh-p7hm-pxfh

##### Support worktrees in `pr checkout`

Users can now checkout a pull request into a git worktree by using the new `--worktree PATH` flag in `gh pr checkout`:

```shell
gh pr checkout 12 --worktree ../wt-feature
```

##### Add semantic search to `search issues`

The `gh search issues` command now supports semantic search for issues. Users can select the search type by passing the `--search-type` flag:

```shell
gh search issues --search-type semantic ...

gh search issues --search-type hybrid ...
```

For more information about semantic search see: ["Improved Search for github issues is now generally available"](https://github.blog/changelog/2026-04-02-improved-search-for-github-issues-is-now-generally-available/).

##### What's Changed

###### ✨ Features
* Add --worktree flag to gh pr checkout by @tidy-dev in https://github.com/cli/cli/pull/13946
* Set GH_EXTENSION=1 when gh invokes an extension by @williammartin in https://github.com/cli/cli/pull/14072
* Add --search-type flag for semantic and hybrid issue search by @michaeljacholke in https://github.com/cli/cli/pull/14006


###### 🐛 Fixes
* Fix `RESTWithNext` error type, repairing `gh status` and attestation retries by @williammartin in https://github.com/cli/cli/pull/13988
* Trim spaces when parsing X-Oauth-Scopes in `gh release create` by @williammartin in https://github.com/cli/cli/pull/14065
* Fix project item-add output for non-TTY by @zwick in https://github.com/cli/cli/pull/14056

###### 📚 Docs & Chores
* Slim down dependabot triage comments by @williammartin in https://github.com/cli/cli/pull/14019
* Require explicit PR review ownership by @williammartin in https://github.com/cli/cli/pull/14028
* Collapse spam triage into the agentic issue-triage workflow by @williammartin in https://github.com/cli/cli/pull/14027
* Run Dependabot triage every hour by @sergiou87 in https://github.com/cli/cli/pull/14030
* Route deploy key requests through api.Client by @williammartin in https://github.com/cli/cli/pull/13989
* Route ssh key requests through api.Client by @williammartin in https://github.com/cli/cli/pull/13994
* Route gpg key requests through api.Client by @williammartin in https://github.com/cli/cli/pull/13997
* Route autolink requests through api.Client by @williammartin in https://github.com/cli/cli/pull/14013
* Route extension requests through api.Client by @williammartin in https://github.com/cli/cli/pull/14059
* Route release creation through api.Client by @williammartin in https://github.com/cli/cli/pull/14062
* Tell agents to use the PR template in AGENTS.md by @williammartin in https://github.com/cli/cli/pull/14074
* Make Dependabot triage cheaper and more decisive by @williammartin in https://github.com/cli/cli/pull/14079
* Route release deletions through api.Client by @williammartin in https://github.com/cli/cli/pull/14077
* Give Dependabot triage a real reachability check by @williammartin in https://github.com/cli/cli/pull/14087
* Restore automatic spam issue closure by @williammartin in https://github.com/cli/cli/pull/14088
* Add a scheduled tech debt burndown skill by @williammartin in https://github.com/cli/cli/pull/14095
* Use reflect.Pointer instead of deprecated reflect.Ptr by @williammartin in https://github.com/cli/cli/pull/14098
* Clarify what belongs in the PR template's testing section by @williammartin in https://github.com/cli/cli/pull/14103
* Rename cli-code-reviewer skill to code-review by @BagToad in https://github.com/cli/cli/pull/14116
* Add aw-actions group to dependabot configuration by @babakks in https://github.com/cli/c

_[Truncated at 4000 characters — full notes: https://github.com/cli/cli/releases/tag/v2.98.0]_