[pull] trunk from cli:trunk

.github/CONTRIBUTING.md

@@ -10,14 +10,14 @@ We accept pull requests for bug fixes and features where we've discussed the app
 * Open an issue if things aren't working as expected
 * Open an issue to propose a significant change
 * Open an issue to propose a design for an issue labelled [`needs-design` and `help wanted`][needs design and help wanted], following the [proposing a design guidelines](#proposing-a-design) instructions below
+* Open an issue to propose a new community supported `gh` package with details about support and redistribution
 * Mention `@cli/code-reviewers` when an issue you want to work on does not have clear Acceptance Criteria
 * Open a pull request for any issue labelled [`help wanted`][hw] and [`good first issue`][gfi]
 
 ### Please _do not_:
 
 * Open a pull request for issues without the `help wanted` label or explicit Acceptance Criteria
 * Expand pull request scope to include changes that are not described in the issue's Acceptance Criteria
-* Add installation instructions specifically for your OS/package manager
 * Open pull requests for any issue marked `core`. These issues require additional context from
   the core CLI team at GitHub and any external pull requests will not be accepted
 

.github/workflows/govulncheck.yml

@@ -21,8 +21,7 @@ jobs:
       # See https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck#hdr-Exit_codes for more information on exit codes.
       - name: Check Go vulnerabilities
         run: |
-          make
-          go run golang.org/x/vuln/cmd/govulncheck@d1f380186385b4f64e00313f31743df8e4b89a77 -mode=binary -format sarif bin/gh > gh.sarif
+          go run golang.org/x/vuln/cmd/govulncheck@d1f380186385b4f64e00313f31743df8e4b89a77 -format sarif ./... > gh.sarif
 
       - name: Upload SARIF report
         uses: github/codeql-action/upload-sarif@9b02dc2f60288b463e7a66e39c78829b62780db7 # 2.22.1

README.md

@@ -8,106 +8,44 @@ GitHub CLI is supported for users on GitHub.com, GitHub Enterprise Cloud, and Gi
 
 ## Documentation
 
-For [installation options see below](#installation), for usage instructions [see the manual][manual].
+For [installation options see below](#installation), for usage instructions [see the manual]( https://cli.github.com/manual/).
 
 ## Contributing
 
-If anything feels off or if you feel that some functionality is missing, please check out the [contributing page][contributing]. There you will find instructions for sharing your feedback, building the tool locally, and submitting pull requests to the project.
+If anything feels off or if you feel that some functionality is missing, please check out the [contributing page](.github/CONTRIBUTING.md). There you will find instructions for sharing your feedback, building the tool locally, and submitting pull requests to the project.
 
-If you are a hubber and are interested in shipping new commands for the CLI, check out our [doc on internal contributions][intake-doc].
+If you are a hubber and are interested in shipping new commands for the CLI, check out our [doc on internal contributions](docs/working-with-us.md)
 
 <!-- this anchor is linked to from elsewhere, so avoid renaming it -->
 ## Installation
 
-### macOS
+### [macOS](docs/install_macos.md)
 
-`gh` is available via [Homebrew][], [MacPorts][], [Conda][], [Spack][], [Webi][], and as a downloadable binary including Mac OS installer `.pkg` from the [releases page][].
+- [Homebrew](docs/install_macos.md#homebrew)
+- [Precompiled binaries](docs/install_macos.md#precompiled-binaries) on [releases page][]
 
-> [!NOTE]
-> As of May 29th, Mac OS installer `.pkg` are unsigned with efforts prioritized in [`cli/cli#9139`](https://github.com/cli/cli/issues/9139) to support signing them.
+For additional macOS packages and installers, see [community-supported docs](docs/install_macos.md#community-unofficial)
 
-#### Homebrew
+### [Linux & Unix](docs/install_linux.md)
 
-| Install:          | Upgrade:          |
-| ----------------- | ----------------- |
-| `brew install gh` | `brew upgrade gh` |
+- [Debian, Raspberry Pi, Ubuntu](docs/install_linux.md#debian)
+- [Amazon Linux, CentOS, Fedora, openSUSE, RHEL, SUSE](docs/install_linux.md#rpm)
+- [Precompiled binaries](docs/install_linux.md#precompiled-binaries) on [releases page][]
 
-#### MacPorts
+For additional Linux & Unix packages and installers, see [community-supported docs](docs/install_linux.md#community-unofficial)
 
-| Install:               | Upgrade:                                       |
-| ---------------------- | ---------------------------------------------- |
-| `sudo port install gh` | `sudo port selfupdate && sudo port upgrade gh` |
+### [Windows](docs/install_windows.md)
 
-#### Conda
+- [WinGet](docs/install_windows.md#winget)
+- [Precompiled binaries](docs/install_windows.md#precompiled-binaries) on [releases page][]
 
-| Install:                                 | Upgrade:                                |
-|------------------------------------------|-----------------------------------------|
-| `conda install gh --channel conda-forge` | `conda update gh --channel conda-forge` |
+For additional Windows packages and installers, see [community-supported docs](docs/install_windows.md#community-unofficial)
 
-Additional Conda installation options available on the [gh-feedstock page](https://github.com/conda-forge/gh-feedstock#installing-gh).
-
-#### Spack
-
-| Install:           | Upgrade:                                 |
-| ------------------ | ---------------------------------------- |
-| `spack install gh` | `spack uninstall gh && spack install gh` |
-
-#### Webi
-
-| Install:                            | Upgrade:         |
-| ----------------------------------- | ---------------- |
-| `curl -sS https://webi.sh/gh \| sh` | `webi gh@stable` |
-
-For more information about the Webi installer, see [its homepage](https://webinstall.dev/).
-
-#### Flox
-
-| Install:          | Upgrade:                |
-| ----------------- | ----------------------- |
-| `flox install gh` | `flox upgrade toplevel` |
-
-For more information about Flox, see [its homepage](https://flox.dev)
-
-### Linux & BSD
-
-`gh` is available via:
-- [our Debian and RPM repositories](./docs/install_linux.md);
-- community-maintained repositories in various Linux distros;
-- OS-agnostic package managers such as [Homebrew](#homebrew), [Conda](#conda), [Spack](#spack), [Webi](#webi); and
-- our [releases page][] as precompiled binaries.
-
-For more information, see [Linux & BSD installation](./docs/install_linux.md).
-
-### Windows
-
-`gh` is available via [WinGet][], [scoop][], [Chocolatey][], [Conda](#conda), [Webi](#webi), and as downloadable MSI.
-
-#### WinGet
-
-| Install:            | Upgrade:            |
-| ------------------- | --------------------|
-| `winget install --id GitHub.cli` | `winget upgrade --id GitHub.cli` |
-
-> [!NOTE]
-> The Windows installer modifies your PATH. When using Windows Terminal, you will need to **open a new window** for the changes to take effect. (Simply opening a new tab will _not_ be sufficient.)
-
-#### scoop
-
-| Install:           | Upgrade:           |
-| ------------------ | ------------------ |
-| `scoop install gh` | `scoop update gh`  |
-
-#### Chocolatey
-
-| Install:           | Upgrade:           |
-| ------------------ | ------------------ |
-| `choco install gh` | `choco upgrade gh` |
-
-#### Signed MSI
+### Build from source
 
-MSI installers are available for download on the [releases page][].
+See here on how to [build GitHub CLI from source](docs/install_source.md).
 
-### Codespaces
+### GitHub Codespaces
 
 To add GitHub CLI to your codespace, add the following to your [devcontainer file](https://docs.github.com/en/codespaces/setting-up-your-project-for-codespaces/adding-features-to-a-devcontainer-file):
 
@@ -119,13 +57,13 @@ To add GitHub CLI to your codespace, add the following to your [devcontainer fil
 
 ### GitHub Actions
 
-GitHub CLI comes pre-installed in all [GitHub-Hosted Runners](https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners).
+[GitHub-hosted runners](https://docs.github.com/en/actions/using-github-hosted-runners/about-github-hosted-runners) have the GitHub CLI pre-installed, which is updated weekly.
 
-### Other platforms
+If a specific version is needed, your GitHub Actions workflow will need to install it based on the [macOS](#macos), [Linux & Unix](#linux--unix), or [Windows](#windows) instructions above.
 
-Download packaged binaries from the [releases page][].
+For information on all pre-installed tools, see [`actions/runner-images`](https://github.com/actions/runner-images)
 
-#### Verification of binaries
+### Verification of binaries
 
 Since version 2.50.0, `gh` has been producing [Build Provenance Attestation](https://github.blog/changelog/2024-06-25-artifact-attestations-is-generally-available/), enabling a cryptographically verifiable paper-trail back to the origin GitHub repository, git revision, and build instructions used. The build provenance attestations are signed and rely on Public Good [Sigstore](https://www.sigstore.dev/) for PKI.
 
@@ -157,29 +95,11 @@ There are two common ways to verify a downloaded release, depending on whether `
   Verified OK
   ```
 
-### Build from source
-
-See here on how to [build GitHub CLI from source][build from source].
-
 ## Comparison with hub
 
-For many years, [hub][] was the unofficial GitHub CLI tool. `gh` is a new project that helps us explore
+For many years, [hub](https://github.com/github/hub) was the unofficial GitHub CLI tool. `gh` is a new project that helps us explore
 what an official GitHub CLI tool can look like with a fundamentally different design. While both
 tools bring GitHub to the terminal, `hub` behaves as a proxy to `git`, and `gh` is a standalone
-tool. Check out our [more detailed explanation][gh-vs-hub] to learn more.
-
-[manual]: https://cli.github.com/manual/
-[Homebrew]: https://brew.sh
-[MacPorts]: https://www.macports.org
-[winget]: https://github.com/microsoft/winget-cli
-[scoop]: https://scoop.sh
-[Chocolatey]: https://chocolatey.org
-[Conda]: https://docs.conda.io/en/latest/
-[Spack]: https://spack.io
-[Webi]: https://webinstall.dev
+tool. Check out our [more detailed explanation](docs/gh-vs-hub.md) to learn more.
+
 [releases page]: https://github.com/cli/cli/releases/latest
-[hub]: https://github.com/github/hub
-[contributing]: ./.github/CONTRIBUTING.md
-[gh-vs-hub]: ./docs/gh-vs-hub.md
-[build from source]: ./docs/source.md
-[intake-doc]: ./docs/working-with-us.md