Cb 33683 Updated internal release job to install GH CLI on Debian Trixie container (#121)

CB-33683 Release job fixes for Debian Trixie.

Author: kergyik

Makefile

@@ -41,12 +41,15 @@ GOLANG_CONTAINER?=docker-private.infra.cloudera.com/cloudera_thirdparty/golang
 deps:
 ifeq ($(shell uname),Linux)
 ifeq (, $(shell which gh))
-	apt-get update
-	apt-get -y install software-properties-common
-	apt-key adv --keyserver keyserver.ubuntu.com --recv-key 23F3D4EA75716059
-	apt-add-repository https://cli.github.com/packages
-	apt update
-	apt -y install gh
+# Based on the official GH CLI docs: https://github.com/cli/cli/blob/trunk/docs/install_linux.md#debian
+# Snapshot: https://web.archive.org/web/20260710093431/https://github.com/cli/cli/blob/trunk/docs/install_linux.md#debian
+	(type -p wget >/dev/null || (apt update && apt install wget -y)) \
+	&& mkdir -p /etc/apt/keyrings \
+	&& wget -nv -O /etc/apt/keyrings/githubcli-archive-keyring.gpg https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+	&& mkdir -p /etc/apt/sources.list.d \
+	&& echo "deb [arch=$$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" > /etc/apt/sources.list.d/github-cli.list \
+	&& apt update \
+	&& apt install gh -y
 endif
 endif