Merge pull request cli#9618 from cli/wm/tenant-api

Use api subdomains for tenant hosts

Merge pull request cli#9575 from cli/dependabot/github_actions/action…

…s/attest-build-provenance-1.4.3

build(deps): bump actions/attest-build-provenance from 1.4.2 to 1.4.3

Merge pull request cli#9453 from cli/jtmcg/project-v2-syntax-in-search

Update `--project <number>` flags in `gh search` to `owner/number`

Merge pull request cli#9392 from cli/eugene/gh-attestation-case-insen…

…sitivity

handle attest case insensitivity

Merge pull request cli#8953 from babakks/8426-add-pr-update-cmd-no-lo…

…cal-update

Add `pr update-branch` command

Merge pull request cli#9243 from cli/remove-attestation-public-beta

Remove `gh at verify` public beta note

Gracefully degrade when fetching annotations fails due to 403 (cli#9113)


Co-authored-by: William Martin <[email protected]>

Merge pull request cli#9140 from cli/andyfeller/cli-9139-sign-pkg-pre…

…docs

Clarify Mac OS Installer packages are unsigned

Merge pull request cli#9075 from cli/dependabot/go_modules/github.com…

…/sigstore/protobuf-specs-0.3.2

build(deps): bump github.com/sigstore/protobuf-specs from 0.3.1 to 0.3.2

Fix `attestation verify` source repository check bug (cli#9053)

* add build source repo URI extension when repo is provided, add integration tests for this change

Signed-off-by: Meredith Lancaster <[email protected]>

* add initial docs on specifying cert identity

Signed-off-by: Meredith Lancaster <[email protected]>

* wording

Signed-off-by: Meredith Lancaster <[email protected]>

* add reusable workflow example

Signed-off-by: Meredith Lancaster <[email protected]>

* add more test cases

Signed-off-by: Meredith Lancaster <[email protected]>

* tweak to verify docs

---------

Signed-off-by: Meredith Lancaster <[email protected]>
Co-authored-by: Phill MV <[email protected]>