From dd3be612e3df1450de40a74fadc6df3c2885e9b1 Mon Sep 17 00:00:00 2001
From: Marc Cornellà <marc@mcornella.com>
Date: Wed, 20 Dec 2023 10:21:31 +0100
Subject: ci(dependencies): add automation for updating external dependencies
 (#12109)

---
 .github/workflows/dependencies/updater.py | 450 ++++++++++++++++++++++++++++++
 1 file changed, 450 insertions(+)
 create mode 100644 .github/workflows/dependencies/updater.py

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
new file mode 100644
index 000000000..5af19d14c
--- /dev/null
+++ b/.github/workflows/dependencies/updater.py
@@ -0,0 +1,450 @@
+import os
+import subprocess
+import sys
+import requests
+import shutil
+import yaml
+from copy import deepcopy
+from typing import Optional, TypedDict
+
+# Get TMP_DIR variable from environment
+TMP_DIR = os.path.join(os.environ.get("TMP_DIR", "/tmp"), "ohmyzsh")
+# Relative path to dependencies.yml file
+DEPS_YAML_FILE = ".github/dependencies.yml"
+# Dry run flag
+DRY_RUN = os.environ.get("DRY_RUN", "0") == "1"
+
+import timeit
+class CodeTimer:
+  def __init__(self, name=None):
+    self.name = " '"  + name + "'" if name else ''
+
+  def __enter__(self):
+    self.start = timeit.default_timer()
+
+  def __exit__(self, exc_type, exc_value, traceback):
+    self.took = (timeit.default_timer() - self.start) * 1000.0
+    print('Code block' + self.name + ' took: ' + str(self.took) + ' ms')
+
+
+### YAML representation
+def str_presenter(dumper, data):
+  """
+  Configures yaml for dumping multiline strings
+  Ref: https://stackoverflow.com/a/33300001
+  """
+  if len(data.splitlines()) > 1:  # check for multiline string
+    return dumper.represent_scalar('tag:yaml.org,2002:str', data, style='|')
+  return dumper.represent_scalar('tag:yaml.org,2002:str', data)
+
+yaml.add_representer(str, str_presenter)
+yaml.representer.SafeRepresenter.add_representer(str, str_presenter)
+
+
+# Types
+class DependencyDict(TypedDict):
+  repo: str
+  branch: str
+  version: str
+  precopy: Optional[str]
+  postcopy: Optional[str]
+
+class DependencyYAML(TypedDict):
+  dependencies: dict[str, DependencyDict]
+
+class UpdateStatus(TypedDict):
+  has_updates: bool
+  version: Optional[str]
+  compare_url: Optional[str]
+  head_ref: Optional[str]
+  head_url: Optional[str]
+
+
+class CommandRunner:
+  class Exception(Exception):
+    def __init__(self, message, returncode, stage, stdout, stderr):
+      super().__init__(message)
+      self.returncode = returncode
+      self.stage = stage
+      self.stdout = stdout
+      self.stderr = stderr
+
+  @staticmethod
+  def run_or_fail(command: list[str], stage: str, *args, **kwargs):
+    if DRY_RUN and command[0] == "gh":
+      command.insert(0, "echo")
+
+    result = subprocess.run(command, *args, capture_output=True, **kwargs)
+
+    if result.returncode != 0:
+      raise CommandRunner.Exception(
+        f"{stage} command failed with exit code {result.returncode}", returncode=result.returncode,
+        stage=stage,
+        stdout=result.stdout.decode("utf-8"),
+        stderr=result.stderr.decode("utf-8")
+      )
+
+    return result
+
+
+class DependencyStore:
+  store: DependencyYAML = {
+    "dependencies": {}
+  }
+
+  @staticmethod
+  def set(data: DependencyYAML):
+    DependencyStore.store = data
+
+  @staticmethod
+  def update_dependency_version(path: str, version: str) -> DependencyYAML:
+    with CodeTimer(f"store deepcopy: {path}"):
+      store_copy = deepcopy(DependencyStore.store)
+
+    dependency = store_copy["dependencies"].get(path, {})
+    dependency["version"] = version
+    store_copy["dependencies"][path] = dependency
+
+    return store_copy
+
+  @staticmethod
+  def write_store(file: str, data: DependencyYAML):
+    with open(file, "w") as yaml_file:
+      yaml.safe_dump(data, yaml_file, sort_keys=False)
+
+
+class Dependency:
+  def __init__(self, path: str, values: DependencyDict):
+    self.path = path
+    self.values = values
+
+    self.name: str = ""
+    self.desc: str = ""
+    self.kind: str = ""
+
+    match path.split("/"):
+      case ["plugins", name]:
+        self.name = name
+        self.kind = "plugin"
+        self.desc = f"{name} plugin"
+      case ["themes", name]:
+        self.name = name.replace(".zsh-theme", "")
+        self.kind = "theme"
+        self.desc = f"{self.name} theme"
+      case _:
+        self.name = self.desc = path
+
+  def __str__(self):
+    output: str = ""
+    for key in DependencyDict.__dict__['__annotations__'].keys():
+      if key not in self.values:
+        output += f"{key}: None\n"
+        continue
+
+      value = self.values[key]
+      if "\n" not in value:
+        output += f"{key}: {value}\n"
+      else:
+        output += f"{key}:\n  "
+        output += value.replace("\n", "\n  ", value.count("\n") - 1)
+    return output
+
+  def update_or_notify(self):
+    # Print dependency settings
+    print(f"Processing {self.desc}...", file=sys.stderr)
+    print(self, file=sys.stderr)
+
+    # Check for updates
+    repo = self.values["repo"]
+    remote_branch = self.values["branch"]
+    version = self.values["version"]
+    is_tag = version.startswith("tag:")
+
+    try:
+      with CodeTimer(f"update check: {repo}"):
+        if is_tag:
+          status = GitHub.check_newer_tag(repo, version.replace("tag:", ""))
+        else:
+          status = GitHub.check_updates(repo, remote_branch, version)
+
+      if status["has_updates"]:
+        short_sha = status["head_ref"][:8]
+        new_version = status["version"] if is_tag else short_sha
+
+        try:
+          # Create new branch
+          branch = Git.create_branch(self.path, new_version)
+
+          # Update dependencies.yml file
+          self.__update_yaml(f"tag:{new_version}" if is_tag else status["version"])
+
+          # Update dependency files
+          self.__apply_upstream_changes()
+
+          # Add all changes and commit
+          Git.add_and_commit(self.name, short_sha)
+
+          # Push changes to remote
+          Git.push(branch)
+
+          # Create GitHub PR
+          GitHub.create_pr(
+            branch,
+            f"feat({self.name}): update to version {new_version}",
+            f"""## Description
+
+Update for **{self.desc}**: update to version [{new_version}]({status['head_url']}).
+Check out the [list of changes]({status['compare_url']}).
+"""
+          )
+
+          # Clean up repository
+          Git.clean_repo()
+        except (CommandRunner.Exception, shutil.Error) as e:
+          # Handle exception on automatic update
+          match type(e):
+            case CommandRunner.Exception:
+              # Print error message
+              print(f"Error running {e.stage} command: {e.returncode}", file=sys.stderr)
+              print(e.stderr, file=sys.stderr)
+            case shutil.Error:
+              print(f"Error copying files: {e}", file=sys.stderr)
+
+          try:
+            Git.clean_repo()
+          except CommandRunner.Exception as e:
+            print(f"Error reverting repository to clean state: {e}", file=sys.stderr)
+            sys.exit(1)
+
+          # Create a GitHub issue to notify maintainer
+          title = f"{self.path}: update to {new_version}"
+          body = (
+            f"""## Description
+
+There is a new version of `{self.name}` {self.kind} available.
+
+New version: [{new_version}]({status['head_url']})
+Check out the [list of changes]({status['compare_url']}).
+"""
+          )
+
+          print(f"Creating GitHub issue", file=sys.stderr)
+          print(f"{title}\n\n{body}", file=sys.stderr)
+          GitHub.create_issue(title, body)
+    except Exception as e:
+      print(e, file=sys.stderr)
+
+  def __update_yaml(self, new_version: str) -> None:
+    dep_yaml = DependencyStore.update_dependency_version(self.path, new_version)
+    DependencyStore.write_store(DEPS_YAML_FILE, dep_yaml)
+
+  def __apply_upstream_changes(self) -> None:
+    # Patterns to ignore in copying files from upstream repo
+    GLOBAL_IGNORE = [
+      ".git",
+      ".github",
+      ".gitignore"
+    ]
+
+    path = os.path.abspath(self.path)
+    precopy = self.values.get("precopy")
+    postcopy = self.values.get("postcopy")
+
+    repo = self.values["repo"]
+    branch = self.values["branch"]
+    remote_url = f"https://github.com/{repo}.git"
+    repo_dir = os.path.join(TMP_DIR, repo)
+
+    # Clone repository
+    Git.clone(remote_url, branch, repo_dir, reclone=True)
+
+    # Run precopy on tmp repo
+    if precopy is not None:
+      print("Running precopy script:", end="\n  ", file=sys.stderr)
+      print(precopy.replace("\n", "\n  ", precopy.count("\n") - 1), file=sys.stderr)
+      CommandRunner.run_or_fail(["bash", "-c", precopy], cwd=repo_dir, stage="Precopy")
+
+    # Copy files from upstream repo
+    print(f"Copying files from {repo_dir} to {path}", file=sys.stderr)
+    shutil.copytree(repo_dir, path, dirs_exist_ok=True, ignore=shutil.ignore_patterns(*GLOBAL_IGNORE))
+
+    # Run postcopy on our repository
+    if postcopy is not None:
+      print("Running postcopy script:", end="\n  ", file=sys.stderr)
+      print(postcopy.replace("\n", "\n  ", postcopy.count("\n") - 1), file=sys.stderr)
+      CommandRunner.run_or_fail(["bash", "-c", postcopy], cwd=path, stage="Postcopy")
+
+
+class Git:
+  default_branch = "master"
+
+  @staticmethod
+  def clone(remote_url: str, branch: str, repo_dir: str, reclone=False):
+    # If repo needs to be fresh
+    if reclone and os.path.exists(repo_dir):
+      shutil.rmtree(repo_dir)
+
+    # Clone repo in tmp directory and checkout branch
+    if not os.path.exists(repo_dir):
+      print(f"Cloning {remote_url} to {repo_dir} and checking out {branch}", file=sys.stderr)
+      CommandRunner.run_or_fail(["git", "clone", "--depth=1", "-b", branch, remote_url, repo_dir], stage="Clone")
+
+  @staticmethod
+  def create_branch(path: str, version: str):
+    # Get current branch name
+    result = CommandRunner.run_or_fail(["git", "rev-parse", "--abbrev-ref", "HEAD"], stage="GetDefaultBranch")
+    Git.default_branch = result.stdout.decode("utf-8").strip()
+
+    # Create new branch and return created branch name
+    branch_name = f"update/{path}/{version}"
+    CommandRunner.run_or_fail(["git", "checkout", "-b", branch_name], stage="CreateBranch")
+    return branch_name
+
+  @staticmethod
+  def add_and_commit(scope: str, version: str):
+    user_name = "ohmyzsh"
+    user_email = "bot@ohmyz.sh"
+
+    # Add all files to git staging
+    CommandRunner.run_or_fail(["git", "add", "-A", "-v"], stage="AddFiles")
+
+    # Reset environment and git config
+    clean_env = os.environ.copy()
+    clean_env["LANG"]="C.UTF-8"
+    clean_env["GIT_CONFIG_GLOBAL"]="/dev/null"
+    clean_env["GIT_CONFIG_NOSYSTEM"]="1"
+
+    # Commit with settings above
+    CommandRunner.run_or_fail([
+      "git",
+      "-c", f"user.name={user_name}",
+      "-c", f"user.email={user_email}",
+      "commit",
+      "-m", f"feat({scope}): update to {version}"
+    ], stage="CreateCommit", env=clean_env)
+
+  @staticmethod
+  def push(branch: str):
+    CommandRunner.run_or_fail(["git", "push", "-u", "origin", branch], stage="PushBranch")
+
+  @staticmethod
+  def clean_repo():
+    CommandRunner.run_or_fail(["git", "reset", "--hard", "HEAD"], stage="ResetRepository")
+    CommandRunner.run_or_fail(["git", "checkout", Git.default_branch], stage="CheckoutDefaultBranch")
+
+
+class GitHub:
+  @staticmethod
+  def check_newer_tag(repo, current_tag) -> UpdateStatus:
+    # GET /repos/:owner/:repo/git/refs/tags
+    url = f"https://api.github.com/repos/{repo}/git/refs/tags"
+
+    # Send a GET request to the GitHub API
+    response = requests.get(url)
+
+    # If the request was successful
+    if response.status_code == 200:
+      # Parse the JSON response
+      data = response.json()
+
+      if len(data) == 0:
+        return {
+          "has_updates": False,
+        }
+
+      latest_ref = data[-1]
+      latest_tag = latest_ref["ref"].replace("refs/tags/", "")
+
+      if latest_tag == current_tag:
+        return {
+          "has_updates": False,
+        }
+
+      return {
+        "has_updates": True,
+        "version": latest_tag,
+        "compare_url": f"https://github.com/{repo}/compare/{current_tag}...{latest_tag}",
+        "head_ref": latest_ref["object"]["sha"],
+        "head_url": f"https://github.com/{repo}/releases/tag/{latest_tag}",
+      }
+    else:
+      # If the request was not successful, raise an exception
+      raise Exception(f"GitHub API request failed with status code {response.status_code}: {response.json()}")
+
+  @staticmethod
+  def check_updates(repo, branch, version) -> UpdateStatus:
+    # TODO: add support for semver updating (based on tags)
+    # Check if upstream github repo has a new version
+    # GitHub API URL for comparing two commits
+    url = f"https://api.github.com/repos/{repo}/compare/{version}...{branch}"
+
+    # Send a GET request to the GitHub API
+    response = requests.get(url)
+
+    # If the request was successful
+    if response.status_code == 200:
+      # Parse the JSON response
+      data = response.json()
+
+      # If the base is behind the head, there is a newer version
+      has_updates = data["status"] != "identical"
+
+      if not has_updates:
+        return {
+          "has_updates": False,
+        }
+
+      return {
+        "has_updates": data["status"] != "identical",
+        "version": data["commits"][-1]["sha"],
+        "compare_url": data["permalink_url"],
+        "head_ref": data["commits"][-1]["sha"],
+        "head_url": data["commits"][-1]["html_url"]
+      }
+    else:
+      # If the request was not successful, raise an exception
+      raise Exception(f"GitHub API request failed with status code {response.status_code}: {response.json()}")
+
+  @staticmethod
+  def create_issue(title: str, body: str) -> None:
+    cmd = [
+      "gh",
+      "issue",
+      "create",
+      "-t", title,
+      "-b", body
+    ]
+    CommandRunner.run_or_fail(cmd, stage="CreateIssue")
+
+  @staticmethod
+  def create_pr(branch: str, title: str, body: str) -> None:
+    cmd = [
+      "gh",
+      "pr",
+      "create",
+      "-B", Git.default_branch,
+      "-H", branch,
+      "-t", title,
+      "-b", body
+    ]
+    CommandRunner.run_or_fail(cmd, stage="CreatePullRequest")
+
+
+def main():
+  # Load the YAML file
+  with open(DEPS_YAML_FILE, "r") as yaml_file:
+    data: DependencyYAML = yaml.safe_load(yaml_file)
+
+  if "dependencies" not in data:
+    raise Exception(f"dependencies.yml not properly formatted")
+
+  # Cache YAML version
+  DependencyStore.set(data)
+
+  dependencies = data["dependencies"]
+  for path in dependencies:
+    dependency = Dependency(path, dependencies[path])
+    dependency.update_or_notify()
+
+if __name__ == "__main__":
+  main()
-- 
cgit v1.2.3-70-g09d2


From 46b24d409909cdc00ac441448c0aa31cc35d12c9 Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Thu, 28 Dec 2023 21:20:28 +0100
Subject: ci(dependencies): fix some envs and add requirements

---
 .github/workflows/dependencies.yml              | 11 +++++++----
 .github/workflows/dependencies/requirements.txt |  2 ++
 .github/workflows/dependencies/updater.py       |  4 ++--
 3 files changed, 11 insertions(+), 6 deletions(-)
 create mode 100644 .github/workflows/dependencies/requirements.txt

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
index aab740126..2e2217e1c 100644
--- a/.github/workflows/dependencies.yml
+++ b/.github/workflows/dependencies.yml
@@ -8,19 +8,22 @@ jobs:
   check:
     name: Check for updates
     runs-on: ubuntu-latest
+    if: github.repository == 'ohmyzsh/ohmyzsh'
     steps:
       - name: Checkout
-        if: github.repository == 'ohmyzsh/ohmyzsh'
         uses: actions/checkout@v4
       - name: Authenticate as @ohmyzsh
+        id: generate_token
         uses: ohmyzsh/github-app-token@v2
         with:
           app_id: ${{ secrets.OHMYZSH_APP_ID }}
           private_key: ${{ secrets.OHMYZSH_APP_PRIVATE_KEY }}
       - name: Process dependencies
         env:
-          GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }}
-          TMP_DIR: ${{ env.RUNNER_TEMP }}
+          GH_TOKEN: ${{ steps.generate_token.outputs.token }}
+          GIT_APP_NAME: ohmyzsh[bot]
+          GIT_APP_EMAIL: 54982679+ohmyzsh[bot]@users.noreply.github.com
+          TMP_DIR: ${{ runner.temp }}
         run: |
-          gh auth login --with-token <<< "${GITHUB_TOKEN}"
+          pip install -r .github/workflows/dependencies/requirements.txt
           python3 .github/workflows/dependencies/updater.py
diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
new file mode 100644
index 000000000..3c4c149ea
--- /dev/null
+++ b/.github/workflows/dependencies/requirements.txt
@@ -0,0 +1,2 @@
+PyYAML~=6.0.1
+requests~=2.31.0
diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index 5af19d14c..f54d316f9 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -302,8 +302,8 @@ class Git:
 
   @staticmethod
   def add_and_commit(scope: str, version: str):
-    user_name = "ohmyzsh"
-    user_email = "bot@ohmyz.sh"
+    user_name = os.environ.get("GIT_APP_NAME")
+    user_email = os.environ.get("GIT_APP_EMAIL")
 
     # Add all files to git staging
     CommandRunner.run_or_fail(["git", "add", "-A", "-v"], stage="AddFiles")
-- 
cgit v1.2.3-70-g09d2


From 83110e8ce16cd3c6bd85e7f96a920d114f598df1 Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Thu, 9 May 2024 17:19:43 +0200
Subject: chore(dependencies): update requirements.txt

---
 .github/workflows/dependencies/requirements.txt | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 3c4c149ea..0ef3e54ca 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,2 +1,6 @@
-PyYAML~=6.0.1
-requests~=2.31.0
+certifi==2024.2.2
+charset-normalizer==3.3.2
+idna==3.7
+PyYAML==6.0.1
+requests==2.31.0
+urllib3==2.2.1
-- 
cgit v1.2.3-70-g09d2


From 13c8a10e39d60c078193d403b253270cdc4abc80 Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Thu, 9 May 2024 17:20:09 +0200
Subject: style(dependencies): run `ruff` formatter

---
 .editorconfig                             |   3 +
 .github/workflows/dependencies/updater.py | 788 ++++++++++++++++--------------
 2 files changed, 420 insertions(+), 371 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.editorconfig b/.editorconfig
index b5321de59..b349bcc42 100644
--- a/.editorconfig
+++ b/.editorconfig
@@ -6,3 +6,6 @@ insert_final_newline = true
 charset = utf-8
 indent_size = 2
 indent_style = space
+
+[*.py]
+indent_size = 4
diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index f54d316f9..765cb26fe 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -1,12 +1,14 @@
 import os
+import shutil
 import subprocess
 import sys
-import requests
-import shutil
-import yaml
+import timeit
 from copy import deepcopy
 from typing import Optional, TypedDict
 
+import requests
+import yaml
+
 # Get TMP_DIR variable from environment
 TMP_DIR = os.path.join(os.environ.get("TMP_DIR", "/tmp"), "ohmyzsh")
 # Relative path to dependencies.yml file
@@ -14,28 +16,29 @@ DEPS_YAML_FILE = ".github/dependencies.yml"
 # Dry run flag
 DRY_RUN = os.environ.get("DRY_RUN", "0") == "1"
 
-import timeit
+
 class CodeTimer:
-  def __init__(self, name=None):
-    self.name = " '"  + name + "'" if name else ''
+    def __init__(self, name=None):
+        self.name = " '" + name + "'" if name else ""
 
-  def __enter__(self):
-    self.start = timeit.default_timer()
+    def __enter__(self):
+        self.start = timeit.default_timer()
 
-  def __exit__(self, exc_type, exc_value, traceback):
-    self.took = (timeit.default_timer() - self.start) * 1000.0
-    print('Code block' + self.name + ' took: ' + str(self.took) + ' ms')
+    def __exit__(self, exc_type, exc_value, traceback):
+        self.took = (timeit.default_timer() - self.start) * 1000.0
+        print("Code block" + self.name + " took: " + str(self.took) + " ms")
 
 
 ### YAML representation
 def str_presenter(dumper, data):
-  """
-  Configures yaml for dumping multiline strings
-  Ref: https://stackoverflow.com/a/33300001
-  """
-  if len(data.splitlines()) > 1:  # check for multiline string
-    return dumper.represent_scalar('tag:yaml.org,2002:str', data, style='|')
-  return dumper.represent_scalar('tag:yaml.org,2002:str', data)
+    """
+    Configures yaml for dumping multiline strings
+    Ref: https://stackoverflow.com/a/33300001
+    """
+    if len(data.splitlines()) > 1:  # check for multiline string
+        return dumper.represent_scalar("tag:yaml.org,2002:str", data, style="|")
+    return dumper.represent_scalar("tag:yaml.org,2002:str", data)
+
 
 yaml.add_representer(str, str_presenter)
 yaml.representer.SafeRepresenter.add_representer(str, str_presenter)
@@ -43,408 +46,451 @@ yaml.representer.SafeRepresenter.add_representer(str, str_presenter)
 
 # Types
 class DependencyDict(TypedDict):
-  repo: str
-  branch: str
-  version: str
-  precopy: Optional[str]
-  postcopy: Optional[str]
+    repo: str
+    branch: str
+    version: str
+    precopy: Optional[str]
+    postcopy: Optional[str]
+
 
 class DependencyYAML(TypedDict):
-  dependencies: dict[str, DependencyDict]
+    dependencies: dict[str, DependencyDict]
+
 
 class UpdateStatus(TypedDict):
-  has_updates: bool
-  version: Optional[str]
-  compare_url: Optional[str]
-  head_ref: Optional[str]
-  head_url: Optional[str]
+    has_updates: bool
+    version: Optional[str]
+    compare_url: Optional[str]
+    head_ref: Optional[str]
+    head_url: Optional[str]
 
 
 class CommandRunner:
-  class Exception(Exception):
-    def __init__(self, message, returncode, stage, stdout, stderr):
-      super().__init__(message)
-      self.returncode = returncode
-      self.stage = stage
-      self.stdout = stdout
-      self.stderr = stderr
+    class Exception(Exception):
+        def __init__(self, message, returncode, stage, stdout, stderr):
+            super().__init__(message)
+            self.returncode = returncode
+            self.stage = stage
+            self.stdout = stdout
+            self.stderr = stderr
 
-  @staticmethod
-  def run_or_fail(command: list[str], stage: str, *args, **kwargs):
-    if DRY_RUN and command[0] == "gh":
-      command.insert(0, "echo")
+    @staticmethod
+    def run_or_fail(command: list[str], stage: str, *args, **kwargs):
+        if DRY_RUN and command[0] == "gh":
+            command.insert(0, "echo")
 
-    result = subprocess.run(command, *args, capture_output=True, **kwargs)
+        result = subprocess.run(command, *args, capture_output=True, **kwargs)
 
-    if result.returncode != 0:
-      raise CommandRunner.Exception(
-        f"{stage} command failed with exit code {result.returncode}", returncode=result.returncode,
-        stage=stage,
-        stdout=result.stdout.decode("utf-8"),
-        stderr=result.stderr.decode("utf-8")
-      )
+        if result.returncode != 0:
+            raise CommandRunner.Exception(
+                f"{stage} command failed with exit code {result.returncode}",
+                returncode=result.returncode,
+                stage=stage,
+                stdout=result.stdout.decode("utf-8"),
+                stderr=result.stderr.decode("utf-8"),
+            )
 
-    return result
+        return result
 
 
 class DependencyStore:
-  store: DependencyYAML = {
-    "dependencies": {}
-  }
+    store: DependencyYAML = {"dependencies": {}}
 
-  @staticmethod
-  def set(data: DependencyYAML):
-    DependencyStore.store = data
+    @staticmethod
+    def set(data: DependencyYAML):
+        DependencyStore.store = data
 
-  @staticmethod
-  def update_dependency_version(path: str, version: str) -> DependencyYAML:
-    with CodeTimer(f"store deepcopy: {path}"):
-      store_copy = deepcopy(DependencyStore.store)
+    @staticmethod
+    def update_dependency_version(path: str, version: str) -> DependencyYAML:
+        with CodeTimer(f"store deepcopy: {path}"):
+            store_copy = deepcopy(DependencyStore.store)
 
-    dependency = store_copy["dependencies"].get(path, {})
-    dependency["version"] = version
-    store_copy["dependencies"][path] = dependency
+        dependency = store_copy["dependencies"].get(path, {})
+        dependency["version"] = version
+        store_copy["dependencies"][path] = dependency
 
-    return store_copy
+        return store_copy
 
-  @staticmethod
-  def write_store(file: str, data: DependencyYAML):
-    with open(file, "w") as yaml_file:
-      yaml.safe_dump(data, yaml_file, sort_keys=False)
+    @staticmethod
+    def write_store(file: str, data: DependencyYAML):
+        with open(file, "w") as yaml_file:
+            yaml.safe_dump(data, yaml_file, sort_keys=False)
 
 
 class Dependency:
-  def __init__(self, path: str, values: DependencyDict):
-    self.path = path
-    self.values = values
-
-    self.name: str = ""
-    self.desc: str = ""
-    self.kind: str = ""
-
-    match path.split("/"):
-      case ["plugins", name]:
-        self.name = name
-        self.kind = "plugin"
-        self.desc = f"{name} plugin"
-      case ["themes", name]:
-        self.name = name.replace(".zsh-theme", "")
-        self.kind = "theme"
-        self.desc = f"{self.name} theme"
-      case _:
-        self.name = self.desc = path
-
-  def __str__(self):
-    output: str = ""
-    for key in DependencyDict.__dict__['__annotations__'].keys():
-      if key not in self.values:
-        output += f"{key}: None\n"
-        continue
-
-      value = self.values[key]
-      if "\n" not in value:
-        output += f"{key}: {value}\n"
-      else:
-        output += f"{key}:\n  "
-        output += value.replace("\n", "\n  ", value.count("\n") - 1)
-    return output
-
-  def update_or_notify(self):
-    # Print dependency settings
-    print(f"Processing {self.desc}...", file=sys.stderr)
-    print(self, file=sys.stderr)
-
-    # Check for updates
-    repo = self.values["repo"]
-    remote_branch = self.values["branch"]
-    version = self.values["version"]
-    is_tag = version.startswith("tag:")
-
-    try:
-      with CodeTimer(f"update check: {repo}"):
-        if is_tag:
-          status = GitHub.check_newer_tag(repo, version.replace("tag:", ""))
-        else:
-          status = GitHub.check_updates(repo, remote_branch, version)
-
-      if status["has_updates"]:
-        short_sha = status["head_ref"][:8]
-        new_version = status["version"] if is_tag else short_sha
+    def __init__(self, path: str, values: DependencyDict):
+        self.path = path
+        self.values = values
+
+        self.name: str = ""
+        self.desc: str = ""
+        self.kind: str = ""
+
+        match path.split("/"):
+            case ["plugins", name]:
+                self.name = name
+                self.kind = "plugin"
+                self.desc = f"{name} plugin"
+            case ["themes", name]:
+                self.name = name.replace(".zsh-theme", "")
+                self.kind = "theme"
+                self.desc = f"{self.name} theme"
+            case _:
+                self.name = self.desc = path
+
+    def __str__(self):
+        output: str = ""
+        for key in DependencyDict.__dict__["__annotations__"].keys():
+            if key not in self.values:
+                output += f"{key}: None\n"
+                continue
+
+            value = self.values[key]
+            if "\n" not in value:
+                output += f"{key}: {value}\n"
+            else:
+                output += f"{key}:\n  "
+                output += value.replace("\n", "\n  ", value.count("\n") - 1)
+        return output
+
+    def update_or_notify(self):
+        # Print dependency settings
+        print(f"Processing {self.desc}...", file=sys.stderr)
+        print(self, file=sys.stderr)
+
+        # Check for updates
+        repo = self.values["repo"]
+        remote_branch = self.values["branch"]
+        version = self.values["version"]
+        is_tag = version.startswith("tag:")
 
         try:
-          # Create new branch
-          branch = Git.create_branch(self.path, new_version)
+            with CodeTimer(f"update check: {repo}"):
+                if is_tag:
+                    status = GitHub.check_newer_tag(repo, version.replace("tag:", ""))
+                else:
+                    status = GitHub.check_updates(repo, remote_branch, version)
 
-          # Update dependencies.yml file
-          self.__update_yaml(f"tag:{new_version}" if is_tag else status["version"])
+            if status["has_updates"]:
+                short_sha = status["head_ref"][:8]
+                new_version = status["version"] if is_tag else short_sha
 
-          # Update dependency files
-          self.__apply_upstream_changes()
+                try:
+                    # Create new branch
+                    branch = Git.create_branch(self.path, new_version)
 
-          # Add all changes and commit
-          Git.add_and_commit(self.name, short_sha)
+                    # Update dependencies.yml file
+                    self.__update_yaml(
+                        f"tag:{new_version}" if is_tag else status["version"]
+                    )
 
-          # Push changes to remote
-          Git.push(branch)
+                    # Update dependency files
+                    self.__apply_upstream_changes()
 
-          # Create GitHub PR
-          GitHub.create_pr(
-            branch,
-            f"feat({self.name}): update to version {new_version}",
-            f"""## Description
+                    # Add all changes and commit
+                    Git.add_and_commit(self.name, short_sha)
+
+                    # Push changes to remote
+                    Git.push(branch)
+
+                    # Create GitHub PR
+                    GitHub.create_pr(
+                        branch,
+                        f"feat({self.name}): update to version {new_version}",
+                        f"""## Description
 
 Update for **{self.desc}**: update to version [{new_version}]({status['head_url']}).
 Check out the [list of changes]({status['compare_url']}).
-"""
-          )
-
-          # Clean up repository
-          Git.clean_repo()
-        except (CommandRunner.Exception, shutil.Error) as e:
-          # Handle exception on automatic update
-          match type(e):
-            case CommandRunner.Exception:
-              # Print error message
-              print(f"Error running {e.stage} command: {e.returncode}", file=sys.stderr)
-              print(e.stderr, file=sys.stderr)
-            case shutil.Error:
-              print(f"Error copying files: {e}", file=sys.stderr)
-
-          try:
-            Git.clean_repo()
-          except CommandRunner.Exception as e:
-            print(f"Error reverting repository to clean state: {e}", file=sys.stderr)
-            sys.exit(1)
-
-          # Create a GitHub issue to notify maintainer
-          title = f"{self.path}: update to {new_version}"
-          body = (
-            f"""## Description
+""",
+                    )
+
+                    # Clean up repository
+                    Git.clean_repo()
+                except (CommandRunner.Exception, shutil.Error) as e:
+                    # Handle exception on automatic update
+                    match type(e):
+                        case CommandRunner.Exception:
+                            # Print error message
+                            print(
+                                f"Error running {e.stage} command: {e.returncode}",
+                                file=sys.stderr,
+                            )
+                            print(e.stderr, file=sys.stderr)
+                        case shutil.Error:
+                            print(f"Error copying files: {e}", file=sys.stderr)
+
+                    try:
+                        Git.clean_repo()
+                    except CommandRunner.Exception as e:
+                        print(
+                            f"Error reverting repository to clean state: {e}",
+                            file=sys.stderr,
+                        )
+                        sys.exit(1)
+
+                    # Create a GitHub issue to notify maintainer
+                    title = f"{self.path}: update to {new_version}"
+                    body = f"""## Description
 
 There is a new version of `{self.name}` {self.kind} available.
 
 New version: [{new_version}]({status['head_url']})
 Check out the [list of changes]({status['compare_url']}).
 """
-          )
-
-          print(f"Creating GitHub issue", file=sys.stderr)
-          print(f"{title}\n\n{body}", file=sys.stderr)
-          GitHub.create_issue(title, body)
-    except Exception as e:
-      print(e, file=sys.stderr)
-
-  def __update_yaml(self, new_version: str) -> None:
-    dep_yaml = DependencyStore.update_dependency_version(self.path, new_version)
-    DependencyStore.write_store(DEPS_YAML_FILE, dep_yaml)
-
-  def __apply_upstream_changes(self) -> None:
-    # Patterns to ignore in copying files from upstream repo
-    GLOBAL_IGNORE = [
-      ".git",
-      ".github",
-      ".gitignore"
-    ]
-
-    path = os.path.abspath(self.path)
-    precopy = self.values.get("precopy")
-    postcopy = self.values.get("postcopy")
-
-    repo = self.values["repo"]
-    branch = self.values["branch"]
-    remote_url = f"https://github.com/{repo}.git"
-    repo_dir = os.path.join(TMP_DIR, repo)
-
-    # Clone repository
-    Git.clone(remote_url, branch, repo_dir, reclone=True)
-
-    # Run precopy on tmp repo
-    if precopy is not None:
-      print("Running precopy script:", end="\n  ", file=sys.stderr)
-      print(precopy.replace("\n", "\n  ", precopy.count("\n") - 1), file=sys.stderr)
-      CommandRunner.run_or_fail(["bash", "-c", precopy], cwd=repo_dir, stage="Precopy")
-
-    # Copy files from upstream repo
-    print(f"Copying files from {repo_dir} to {path}", file=sys.stderr)
-    shutil.copytree(repo_dir, path, dirs_exist_ok=True, ignore=shutil.ignore_patterns(*GLOBAL_IGNORE))
-
-    # Run postcopy on our repository
-    if postcopy is not None:
-      print("Running postcopy script:", end="\n  ", file=sys.stderr)
-      print(postcopy.replace("\n", "\n  ", postcopy.count("\n") - 1), file=sys.stderr)
-      CommandRunner.run_or_fail(["bash", "-c", postcopy], cwd=path, stage="Postcopy")
+
+                    print("Creating GitHub issue", file=sys.stderr)
+                    print(f"{title}\n\n{body}", file=sys.stderr)
+                    GitHub.create_issue(title, body)
+        except Exception as e:
+            print(e, file=sys.stderr)
+
+    def __update_yaml(self, new_version: str) -> None:
+        dep_yaml = DependencyStore.update_dependency_version(self.path, new_version)
+        DependencyStore.write_store(DEPS_YAML_FILE, dep_yaml)
+
+    def __apply_upstream_changes(self) -> None:
+        # Patterns to ignore in copying files from upstream repo
+        GLOBAL_IGNORE = [".git", ".github", ".gitignore"]
+
+        path = os.path.abspath(self.path)
+        precopy = self.values.get("precopy")
+        postcopy = self.values.get("postcopy")
+
+        repo = self.values["repo"]
+        branch = self.values["branch"]
+        remote_url = f"https://github.com/{repo}.git"
+        repo_dir = os.path.join(TMP_DIR, repo)
+
+        # Clone repository
+        Git.clone(remote_url, branch, repo_dir, reclone=True)
+
+        # Run precopy on tmp repo
+        if precopy is not None:
+            print("Running precopy script:", end="\n  ", file=sys.stderr)
+            print(
+                precopy.replace("\n", "\n  ", precopy.count("\n") - 1), file=sys.stderr
+            )
+            CommandRunner.run_or_fail(
+                ["bash", "-c", precopy], cwd=repo_dir, stage="Precopy"
+            )
+
+        # Copy files from upstream repo
+        print(f"Copying files from {repo_dir} to {path}", file=sys.stderr)
+        shutil.copytree(
+            repo_dir,
+            path,
+            dirs_exist_ok=True,
+            ignore=shutil.ignore_patterns(*GLOBAL_IGNORE),
+        )
+
+        # Run postcopy on our repository
+        if postcopy is not None:
+            print("Running postcopy script:", end="\n  ", file=sys.stderr)
+            print(
+                postcopy.replace("\n", "\n  ", postcopy.count("\n") - 1),
+                file=sys.stderr,
+            )
+            CommandRunner.run_or_fail(
+                ["bash", "-c", postcopy], cwd=path, stage="Postcopy"
+            )
 
 
 class Git:
-  default_branch = "master"
-
-  @staticmethod
-  def clone(remote_url: str, branch: str, repo_dir: str, reclone=False):
-    # If repo needs to be fresh
-    if reclone and os.path.exists(repo_dir):
-      shutil.rmtree(repo_dir)
-
-    # Clone repo in tmp directory and checkout branch
-    if not os.path.exists(repo_dir):
-      print(f"Cloning {remote_url} to {repo_dir} and checking out {branch}", file=sys.stderr)
-      CommandRunner.run_or_fail(["git", "clone", "--depth=1", "-b", branch, remote_url, repo_dir], stage="Clone")
-
-  @staticmethod
-  def create_branch(path: str, version: str):
-    # Get current branch name
-    result = CommandRunner.run_or_fail(["git", "rev-parse", "--abbrev-ref", "HEAD"], stage="GetDefaultBranch")
-    Git.default_branch = result.stdout.decode("utf-8").strip()
-
-    # Create new branch and return created branch name
-    branch_name = f"update/{path}/{version}"
-    CommandRunner.run_or_fail(["git", "checkout", "-b", branch_name], stage="CreateBranch")
-    return branch_name
-
-  @staticmethod
-  def add_and_commit(scope: str, version: str):
-    user_name = os.environ.get("GIT_APP_NAME")
-    user_email = os.environ.get("GIT_APP_EMAIL")
-
-    # Add all files to git staging
-    CommandRunner.run_or_fail(["git", "add", "-A", "-v"], stage="AddFiles")
-
-    # Reset environment and git config
-    clean_env = os.environ.copy()
-    clean_env["LANG"]="C.UTF-8"
-    clean_env["GIT_CONFIG_GLOBAL"]="/dev/null"
-    clean_env["GIT_CONFIG_NOSYSTEM"]="1"
-
-    # Commit with settings above
-    CommandRunner.run_or_fail([
-      "git",
-      "-c", f"user.name={user_name}",
-      "-c", f"user.email={user_email}",
-      "commit",
-      "-m", f"feat({scope}): update to {version}"
-    ], stage="CreateCommit", env=clean_env)
-
-  @staticmethod
-  def push(branch: str):
-    CommandRunner.run_or_fail(["git", "push", "-u", "origin", branch], stage="PushBranch")
-
-  @staticmethod
-  def clean_repo():
-    CommandRunner.run_or_fail(["git", "reset", "--hard", "HEAD"], stage="ResetRepository")
-    CommandRunner.run_or_fail(["git", "checkout", Git.default_branch], stage="CheckoutDefaultBranch")
+    default_branch = "master"
+
+    @staticmethod
+    def clone(remote_url: str, branch: str, repo_dir: str, reclone=False):
+        # If repo needs to be fresh
+        if reclone and os.path.exists(repo_dir):
+            shutil.rmtree(repo_dir)
+
+        # Clone repo in tmp directory and checkout branch
+        if not os.path.exists(repo_dir):
+            print(
+                f"Cloning {remote_url} to {repo_dir} and checking out {branch}",
+                file=sys.stderr,
+            )
+            CommandRunner.run_or_fail(
+                ["git", "clone", "--depth=1", "-b", branch, remote_url, repo_dir],
+                stage="Clone",
+            )
+
+    @staticmethod
+    def create_branch(path: str, version: str):
+        # Get current branch name
+        result = CommandRunner.run_or_fail(
+            ["git", "rev-parse", "--abbrev-ref", "HEAD"], stage="GetDefaultBranch"
+        )
+        Git.default_branch = result.stdout.decode("utf-8").strip()
+
+        # Create new branch and return created branch name
+        branch_name = f"update/{path}/{version}"
+        CommandRunner.run_or_fail(
+            ["git", "checkout", "-b", branch_name], stage="CreateBranch"
+        )
+        return branch_name
+
+    @staticmethod
+    def add_and_commit(scope: str, version: str):
+        user_name = os.environ.get("GIT_APP_NAME")
+        user_email = os.environ.get("GIT_APP_EMAIL")
+
+        # Add all files to git staging
+        CommandRunner.run_or_fail(["git", "add", "-A", "-v"], stage="AddFiles")
+
+        # Reset environment and git config
+        clean_env = os.environ.copy()
+        clean_env["LANG"] = "C.UTF-8"
+        clean_env["GIT_CONFIG_GLOBAL"] = "/dev/null"
+        clean_env["GIT_CONFIG_NOSYSTEM"] = "1"
+
+        # Commit with settings above
+        CommandRunner.run_or_fail(
+            [
+                "git",
+                "-c",
+                f"user.name={user_name}",
+                "-c",
+                f"user.email={user_email}",
+                "commit",
+                "-m",
+                f"feat({scope}): update to {version}",
+            ],
+            stage="CreateCommit",
+            env=clean_env,
+        )
+
+    @staticmethod
+    def push(branch: str):
+        CommandRunner.run_or_fail(
+            ["git", "push", "-u", "origin", branch], stage="PushBranch"
+        )
+
+    @staticmethod
+    def clean_repo():
+        CommandRunner.run_or_fail(
+            ["git", "reset", "--hard", "HEAD"], stage="ResetRepository"
+        )
+        CommandRunner.run_or_fail(
+            ["git", "checkout", Git.default_branch], stage="CheckoutDefaultBranch"
+        )
 
 
 class GitHub:
-  @staticmethod
-  def check_newer_tag(repo, current_tag) -> UpdateStatus:
-    # GET /repos/:owner/:repo/git/refs/tags
-    url = f"https://api.github.com/repos/{repo}/git/refs/tags"
-
-    # Send a GET request to the GitHub API
-    response = requests.get(url)
-
-    # If the request was successful
-    if response.status_code == 200:
-      # Parse the JSON response
-      data = response.json()
-
-      if len(data) == 0:
-        return {
-          "has_updates": False,
-        }
-
-      latest_ref = data[-1]
-      latest_tag = latest_ref["ref"].replace("refs/tags/", "")
-
-      if latest_tag == current_tag:
-        return {
-          "has_updates": False,
-        }
-
-      return {
-        "has_updates": True,
-        "version": latest_tag,
-        "compare_url": f"https://github.com/{repo}/compare/{current_tag}...{latest_tag}",
-        "head_ref": latest_ref["object"]["sha"],
-        "head_url": f"https://github.com/{repo}/releases/tag/{latest_tag}",
-      }
-    else:
-      # If the request was not successful, raise an exception
-      raise Exception(f"GitHub API request failed with status code {response.status_code}: {response.json()}")
-
-  @staticmethod
-  def check_updates(repo, branch, version) -> UpdateStatus:
-    # TODO: add support for semver updating (based on tags)
-    # Check if upstream github repo has a new version
-    # GitHub API URL for comparing two commits
-    url = f"https://api.github.com/repos/{repo}/compare/{version}...{branch}"
-
-    # Send a GET request to the GitHub API
-    response = requests.get(url)
-
-    # If the request was successful
-    if response.status_code == 200:
-      # Parse the JSON response
-      data = response.json()
-
-      # If the base is behind the head, there is a newer version
-      has_updates = data["status"] != "identical"
-
-      if not has_updates:
-        return {
-          "has_updates": False,
-        }
-
-      return {
-        "has_updates": data["status"] != "identical",
-        "version": data["commits"][-1]["sha"],
-        "compare_url": data["permalink_url"],
-        "head_ref": data["commits"][-1]["sha"],
-        "head_url": data["commits"][-1]["html_url"]
-      }
-    else:
-      # If the request was not successful, raise an exception
-      raise Exception(f"GitHub API request failed with status code {response.status_code}: {response.json()}")
-
-  @staticmethod
-  def create_issue(title: str, body: str) -> None:
-    cmd = [
-      "gh",
-      "issue",
-      "create",
-      "-t", title,
-      "-b", body
-    ]
-    CommandRunner.run_or_fail(cmd, stage="CreateIssue")
-
-  @staticmethod
-  def create_pr(branch: str, title: str, body: str) -> None:
-    cmd = [
-      "gh",
-      "pr",
-      "create",
-      "-B", Git.default_branch,
-      "-H", branch,
-      "-t", title,
-      "-b", body
-    ]
-    CommandRunner.run_or_fail(cmd, stage="CreatePullRequest")
+    @staticmethod
+    def check_newer_tag(repo, current_tag) -> UpdateStatus:
+        # GET /repos/:owner/:repo/git/refs/tags
+        url = f"https://api.github.com/repos/{repo}/git/refs/tags"
+
+        # Send a GET request to the GitHub API
+        response = requests.get(url)
+
+        # If the request was successful
+        if response.status_code == 200:
+            # Parse the JSON response
+            data = response.json()
+
+            if len(data) == 0:
+                return {
+                    "has_updates": False,
+                }
+
+            latest_ref = data[-1]
+            latest_tag = latest_ref["ref"].replace("refs/tags/", "")
+
+            if latest_tag == current_tag:
+                return {
+                    "has_updates": False,
+                }
+
+            return {
+                "has_updates": True,
+                "version": latest_tag,
+                "compare_url": f"https://github.com/{repo}/compare/{current_tag}...{latest_tag}",
+                "head_ref": latest_ref["object"]["sha"],
+                "head_url": f"https://github.com/{repo}/releases/tag/{latest_tag}",
+            }
+        else:
+            # If the request was not successful, raise an exception
+            raise Exception(
+                f"GitHub API request failed with status code {response.status_code}: {response.json()}"
+            )
+
+    @staticmethod
+    def check_updates(repo, branch, version) -> UpdateStatus:
+        # TODO: add support for semver updating (based on tags)
+        # Check if upstream github repo has a new version
+        # GitHub API URL for comparing two commits
+        url = f"https://api.github.com/repos/{repo}/compare/{version}...{branch}"
+
+        # Send a GET request to the GitHub API
+        response = requests.get(url)
+
+        # If the request was successful
+        if response.status_code == 200:
+            # Parse the JSON response
+            data = response.json()
+
+            # If the base is behind the head, there is a newer version
+            has_updates = data["status"] != "identical"
+
+            if not has_updates:
+                return {
+                    "has_updates": False,
+                }
+
+            return {
+                "has_updates": data["status"] != "identical",
+                "version": data["commits"][-1]["sha"],
+                "compare_url": data["permalink_url"],
+                "head_ref": data["commits"][-1]["sha"],
+                "head_url": data["commits"][-1]["html_url"],
+            }
+        else:
+            # If the request was not successful, raise an exception
+            raise Exception(
+                f"GitHub API request failed with status code {response.status_code}: {response.json()}"
+            )
+
+    @staticmethod
+    def create_issue(title: str, body: str) -> None:
+        cmd = ["gh", "issue", "create", "-t", title, "-b", body]
+        CommandRunner.run_or_fail(cmd, stage="CreateIssue")
+
+    @staticmethod
+    def create_pr(branch: str, title: str, body: str) -> None:
+        cmd = [
+            "gh",
+            "pr",
+            "create",
+            "-B",
+            Git.default_branch,
+            "-H",
+            branch,
+            "-t",
+            title,
+            "-b",
+            body,
+        ]
+        CommandRunner.run_or_fail(cmd, stage="CreatePullRequest")
 
 
 def main():
-  # Load the YAML file
-  with open(DEPS_YAML_FILE, "r") as yaml_file:
-    data: DependencyYAML = yaml.safe_load(yaml_file)
+    # Load the YAML file
+    with open(DEPS_YAML_FILE, "r") as yaml_file:
+        data: DependencyYAML = yaml.safe_load(yaml_file)
+
+    if "dependencies" not in data:
+        raise Exception("dependencies.yml not properly formatted")
 
-  if "dependencies" not in data:
-    raise Exception(f"dependencies.yml not properly formatted")
+    # Cache YAML version
+    DependencyStore.set(data)
 
-  # Cache YAML version
-  DependencyStore.set(data)
+    dependencies = data["dependencies"]
+    for path in dependencies:
+        dependency = Dependency(path, dependencies[path])
+        dependency.update_or_notify()
 
-  dependencies = data["dependencies"]
-  for path in dependencies:
-    dependency = Dependency(path, dependencies[path])
-    dependency.update_or_notify()
 
 if __name__ == "__main__":
-  main()
+    main()
-- 
cgit v1.2.3-70-g09d2


From a258eb4547e610899162526f754ce1bf88027112 Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Thu, 9 May 2024 18:27:01 +0200
Subject: fix(dependencies): improve typing

---
 .github/workflows/dependencies/updater.py | 36 ++++++++++++++++++-------------
 1 file changed, 21 insertions(+), 15 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index 765cb26fe..9754cdf83 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -4,7 +4,7 @@ import subprocess
 import sys
 import timeit
 from copy import deepcopy
-from typing import Optional, TypedDict
+from typing import Literal, NotRequired, TypedDict
 
 import requests
 import yaml
@@ -49,20 +49,24 @@ class DependencyDict(TypedDict):
     repo: str
     branch: str
     version: str
-    precopy: Optional[str]
-    postcopy: Optional[str]
+    precopy: NotRequired[str]
+    postcopy: NotRequired[str]
 
 
 class DependencyYAML(TypedDict):
     dependencies: dict[str, DependencyDict]
 
 
-class UpdateStatus(TypedDict):
-    has_updates: bool
-    version: Optional[str]
-    compare_url: Optional[str]
-    head_ref: Optional[str]
-    head_url: Optional[str]
+class UpdateStatusFalse(TypedDict):
+    has_updates: Literal[False]
+
+
+class UpdateStatusTrue(TypedDict):
+    has_updates: Literal[True]
+    version: str
+    compare_url: str
+    head_ref: str
+    head_url: str
 
 
 class CommandRunner:
@@ -105,7 +109,9 @@ class DependencyStore:
         with CodeTimer(f"store deepcopy: {path}"):
             store_copy = deepcopy(DependencyStore.store)
 
-        dependency = store_copy["dependencies"].get(path, {})
+        dependency = store_copy["dependencies"].get(path)
+        if dependency is None:
+            raise ValueError(f"Dependency {path} {version} not found")
         dependency["version"] = version
         store_copy["dependencies"][path] = dependency
 
@@ -171,7 +177,7 @@ class Dependency:
                 else:
                     status = GitHub.check_updates(repo, remote_branch, version)
 
-            if status["has_updates"]:
+            if status["has_updates"] is True:
                 short_sha = status["head_ref"][:8]
                 new_version = status["version"] if is_tag else short_sha
 
@@ -212,10 +218,10 @@ Check out the [list of changes]({status['compare_url']}).
                         case CommandRunner.Exception:
                             # Print error message
                             print(
-                                f"Error running {e.stage} command: {e.returncode}",
+                                f"Error running {e.stage} command: {e.returncode}",  # pyright: ignore[reportAttributeAccessIssue]
                                 file=sys.stderr,
                             )
-                            print(e.stderr, file=sys.stderr)
+                            print(e.stderr, file=sys.stderr)  # pyright: ignore[reportAttributeAccessIssue]
                         case shutil.Error:
                             print(f"Error copying files: {e}", file=sys.stderr)
 
@@ -378,7 +384,7 @@ class Git:
 
 class GitHub:
     @staticmethod
-    def check_newer_tag(repo, current_tag) -> UpdateStatus:
+    def check_newer_tag(repo, current_tag) -> UpdateStatusFalse | UpdateStatusTrue:
         # GET /repos/:owner/:repo/git/refs/tags
         url = f"https://api.github.com/repos/{repo}/git/refs/tags"
 
@@ -417,7 +423,7 @@ class GitHub:
             )
 
     @staticmethod
-    def check_updates(repo, branch, version) -> UpdateStatus:
+    def check_updates(repo, branch, version) -> UpdateStatusFalse | UpdateStatusTrue:
         # TODO: add support for semver updating (based on tags)
         # Check if upstream github repo has a new version
         # GitHub API URL for comparing two commits
-- 
cgit v1.2.3-70-g09d2


From 423b9a8ded10b0d4a81d6134c4045d0b7e077eb5 Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Thu, 9 May 2024 19:20:11 +0200
Subject: feat(dependencies): add support for semver tags

---
 .github/workflows/dependencies/requirements.txt |  1 +
 .github/workflows/dependencies/updater.py       | 62 ++++++++++++++++++++++---
 2 files changed, 57 insertions(+), 6 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 0ef3e54ca..7e840a74c 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -3,4 +3,5 @@ charset-normalizer==3.3.2
 idna==3.7
 PyYAML==6.0.1
 requests==2.31.0
+semver==3.0.2
 urllib3==2.2.1
diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index 9754cdf83..7e8e92ca9 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -1,13 +1,15 @@
 import os
+import re
 import shutil
 import subprocess
 import sys
 import timeit
 from copy import deepcopy
-from typing import Literal, NotRequired, TypedDict
+from typing import Literal, NotRequired, Optional, TypedDict
 
 import requests
 import yaml
+from semver import Version
 
 # Get TMP_DIR variable from environment
 TMP_DIR = os.path.join(os.environ.get("TMP_DIR", "/tmp"), "ohmyzsh")
@@ -16,6 +18,35 @@ DEPS_YAML_FILE = ".github/dependencies.yml"
 # Dry run flag
 DRY_RUN = os.environ.get("DRY_RUN", "0") == "1"
 
+# utils for tag comparison
+BASEVERSION = re.compile(
+    r"""[vV]?
+    (?P<major>(0|[1-9])\d*)
+    (\.
+    (?P<minor>(0|[1-9])\d*)
+    (\.
+    (?P<patch>(0|[1-9])\d*)
+    )?
+    )?
+    """,
+    re.VERBOSE,
+)
+
+
+def coerce(version: str) -> Optional[Version]:
+    match = BASEVERSION.search(version)
+    if not match:
+        return None
+
+    # BASEVERSION looks for `MAJOR.minor.patch` in the string given
+    # it fills with None if any of them is missing (for example `2.1`)
+    ver = {
+        key: 0 if value is None else value for key, value in match.groupdict().items()
+    }
+    # Version takes `major`, `minor`, `patch` arguments
+    ver = Version(**ver)  # pyright: ignore[reportArgumentType]
+    return ver
+
 
 class CodeTimer:
     def __init__(self, name=None):
@@ -390,6 +421,11 @@ class GitHub:
 
         # Send a GET request to the GitHub API
         response = requests.get(url)
+        current_version = coerce(current_tag)
+        if current_version is None:
+            raise ValueError(
+                f"Stored {current_version} from {repo} does not follow semver"
+            )
 
         # If the request was successful
         if response.status_code == 200:
@@ -401,10 +437,27 @@ class GitHub:
                     "has_updates": False,
                 }
 
-            latest_ref = data[-1]
+            latest_ref = None
+            latest_version: Optional[Version] = None
+            for ref in data:
+                # we find the tag since GitHub returns it as plain git ref
+                tag_version = coerce(ref["ref"].replace("refs/tags/", ""))
+                if tag_version is None:
+                    # we skip every tag that is not semver-complaint
+                    continue
+                if latest_version is None or tag_version.compare(latest_version) > 0:
+                    # if we have a "greater" semver version, set it as latest
+                    latest_version = tag_version
+                    latest_ref = ref
+
+            # raise if no valid semver tag is found
+            if latest_ref is None or latest_version is None:
+                raise ValueError(f"No tags following semver found in {repo}")
+
+            # we get the tag since GitHub returns it as plain git ref
             latest_tag = latest_ref["ref"].replace("refs/tags/", "")
 
-            if latest_tag == current_tag:
+            if latest_version.compare(current_version) <= 0:
                 return {
                     "has_updates": False,
                 }
@@ -424,9 +477,6 @@ class GitHub:
 
     @staticmethod
     def check_updates(repo, branch, version) -> UpdateStatusFalse | UpdateStatusTrue:
-        # TODO: add support for semver updating (based on tags)
-        # Check if upstream github repo has a new version
-        # GitHub API URL for comparing two commits
         url = f"https://api.github.com/repos/{repo}/compare/{version}...{branch}"
 
         # Send a GET request to the GitHub API
-- 
cgit v1.2.3-70-g09d2


From eb2ff84a2c8ae45b90d36e367c6bd6bc01f8464d Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Thu, 9 May 2024 19:52:50 +0200
Subject: fix(dependencies): avoid creating PR if it's already there

---
 .github/workflows/dependencies/updater.py | 42 ++++++++++++++++++++++++++-----
 1 file changed, 36 insertions(+), 6 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index 7e8e92ca9..6fa32e378 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -1,3 +1,4 @@
+import json
 import os
 import re
 import shutil
@@ -213,8 +214,10 @@ class Dependency:
                 new_version = status["version"] if is_tag else short_sha
 
                 try:
+                    branch_name = f"update/{self.path}/{new_version}"
+
                     # Create new branch
-                    branch = Git.create_branch(self.path, new_version)
+                    branch = Git.checkout_or_create_branch(branch_name)
 
                     # Update dependencies.yml file
                     self.__update_yaml(
@@ -353,7 +356,7 @@ class Git:
             )
 
     @staticmethod
-    def create_branch(path: str, version: str):
+    def checkout_or_create_branch(branch_name: str):
         # Get current branch name
         result = CommandRunner.run_or_fail(
             ["git", "rev-parse", "--abbrev-ref", "HEAD"], stage="GetDefaultBranch"
@@ -361,10 +364,16 @@ class Git:
         Git.default_branch = result.stdout.decode("utf-8").strip()
 
         # Create new branch and return created branch name
-        branch_name = f"update/{path}/{version}"
-        CommandRunner.run_or_fail(
-            ["git", "checkout", "-b", branch_name], stage="CreateBranch"
-        )
+        try:
+            # try to checkout already existing branch
+            CommandRunner.run_or_fail(
+                ["git", "checkout", branch_name], stage="CreateBranch"
+            )
+        except CommandRunner.Exception:
+            # otherwise create new branch
+            CommandRunner.run_or_fail(
+                ["git", "checkout", "-b", branch_name], stage="CreateBranch"
+            )
         return branch_name
 
     @staticmethod
@@ -515,6 +524,27 @@ class GitHub:
 
     @staticmethod
     def create_pr(branch: str, title: str, body: str) -> None:
+        # first of all let's check if PR is already open
+        check_cmd = [
+            "gh",
+            "pr",
+            "list",
+            "--state",
+            "open",
+            "--head",
+            branch,
+            "--json",
+            "title",
+        ]
+        # returncode is 0 also if no PRs are found
+        output = json.loads(
+            CommandRunner.run_or_fail(check_cmd, stage="CheckPullRequestOpen")
+            .stdout.decode("utf-8")
+            .strip()
+        )
+        # we have PR in this case!
+        if len(output) > 0:
+            return
         cmd = [
             "gh",
             "pr",
-- 
cgit v1.2.3-70-g09d2


From 0493eab8ce02c4988a16cbe27ad61a20ed8a89df Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Sun, 12 May 2024 12:40:45 +0200
Subject: fix(dependencies): check if repo is clean before committing

---
 .github/workflows/dependencies/updater.py | 36 ++++++++++++++++++-------------
 1 file changed, 21 insertions(+), 15 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index 6fa32e378..4533b7aeb 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -390,21 +390,27 @@ class Git:
         clean_env["GIT_CONFIG_GLOBAL"] = "/dev/null"
         clean_env["GIT_CONFIG_NOSYSTEM"] = "1"
 
-        # Commit with settings above
-        CommandRunner.run_or_fail(
-            [
-                "git",
-                "-c",
-                f"user.name={user_name}",
-                "-c",
-                f"user.email={user_email}",
-                "commit",
-                "-m",
-                f"feat({scope}): update to {version}",
-            ],
-            stage="CreateCommit",
-            env=clean_env,
-        )
+        # check if repo is clean (clean => no error, no commit)
+        try:
+            CommandRunner.run_or_fail(
+                ["git", "diff", "--exit-code"], stage="CheckRepoClean", env=clean_env
+            )
+        except CommandRunner.Exception:
+            # Commit with settings above
+            CommandRunner.run_or_fail(
+                [
+                    "git",
+                    "-c",
+                    f"user.name={user_name}",
+                    "-c",
+                    f"user.email={user_email}",
+                    "commit",
+                    "-m",
+                    f"feat({scope}): update to {version}",
+                ],
+                stage="CreateCommit",
+                env=clean_env,
+            )
 
     @staticmethod
     def push(branch: str):
-- 
cgit v1.2.3-70-g09d2


From 0621944db50aec931850806644b673e39b650163 Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Tue, 21 May 2024 20:43:26 +0200
Subject: fix(dependencies): only open PR if there are changes

---
 .github/workflows/dependencies/updater.py | 78 +++++++++++++++++--------------
 1 file changed, 44 insertions(+), 34 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index 4533b7aeb..e64d69939 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -228,21 +228,22 @@ class Dependency:
                     self.__apply_upstream_changes()
 
                     # Add all changes and commit
-                    Git.add_and_commit(self.name, short_sha)
+                    has_new_commit = Git.add_and_commit(self.name, short_sha)
 
-                    # Push changes to remote
-                    Git.push(branch)
+                    if has_new_commit:
+                        # Push changes to remote
+                        Git.push(branch)
 
-                    # Create GitHub PR
-                    GitHub.create_pr(
-                        branch,
-                        f"feat({self.name}): update to version {new_version}",
-                        f"""## Description
+                        # Create GitHub PR
+                        GitHub.create_pr(
+                            branch,
+                            f"feat({self.name}): update to version {new_version}",
+                            f"""## Description
 
-Update for **{self.desc}**: update to version [{new_version}]({status['head_url']}).
-Check out the [list of changes]({status['compare_url']}).
-""",
-                    )
+    Update for **{self.desc}**: update to version [{new_version}]({status['head_url']}).
+    Check out the [list of changes]({status['compare_url']}).
+    """,
+                        )
 
                     # Clean up repository
                     Git.clean_repo()
@@ -377,7 +378,21 @@ class Git:
         return branch_name
 
     @staticmethod
-    def add_and_commit(scope: str, version: str):
+    def add_and_commit(scope: str, version: str) -> bool:
+        """
+        Returns `True` if there were changes and were indeed commited.
+        Returns `False` if the repo was clean and no changes were commited.
+        """
+        # check if repo is clean (clean => no error, no commit)
+        try:
+            CommandRunner.run_or_fail(
+                ["git", "diff", "--exit-code"], stage="CheckRepoClean"
+            )
+            return False
+        except CommandRunner.Exception:
+            # if it's other kind of error just throw!
+            pass
+
         user_name = os.environ.get("GIT_APP_NAME")
         user_email = os.environ.get("GIT_APP_EMAIL")
 
@@ -390,27 +405,22 @@ class Git:
         clean_env["GIT_CONFIG_GLOBAL"] = "/dev/null"
         clean_env["GIT_CONFIG_NOSYSTEM"] = "1"
 
-        # check if repo is clean (clean => no error, no commit)
-        try:
-            CommandRunner.run_or_fail(
-                ["git", "diff", "--exit-code"], stage="CheckRepoClean", env=clean_env
-            )
-        except CommandRunner.Exception:
-            # Commit with settings above
-            CommandRunner.run_or_fail(
-                [
-                    "git",
-                    "-c",
-                    f"user.name={user_name}",
-                    "-c",
-                    f"user.email={user_email}",
-                    "commit",
-                    "-m",
-                    f"feat({scope}): update to {version}",
-                ],
-                stage="CreateCommit",
-                env=clean_env,
-            )
+        # Commit with settings above
+        CommandRunner.run_or_fail(
+            [
+                "git",
+                "-c",
+                f"user.name={user_name}",
+                "-c",
+                f"user.email={user_email}",
+                "commit",
+                "-m",
+                f"feat({scope}): update to {version}",
+            ],
+            stage="CreateCommit",
+            env=clean_env,
+        )
+        return True
 
     @staticmethod
     def push(branch: str):
-- 
cgit v1.2.3-70-g09d2


From 04b66b230857fb9bc28af5e7590b09ff79f888fa Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Tue, 21 May 2024 20:46:54 +0200
Subject: chore(dependencies): PR wording

---
 .github/workflows/dependencies/updater.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index e64d69939..f85c9eda7 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -240,9 +240,9 @@ class Dependency:
                             f"feat({self.name}): update to version {new_version}",
                             f"""## Description
 
-    Update for **{self.desc}**: update to version [{new_version}]({status['head_url']}).
-    Check out the [list of changes]({status['compare_url']}).
-    """,
+Update for **{self.desc}**: update to version [{new_version}]({status['head_url']}).
+Check out the [list of changes]({status['compare_url']}).
+""",
                         )
 
                     # Clean up repository
-- 
cgit v1.2.3-70-g09d2


From c432ca09932bb0c2f2f7f8862b949b0875615724 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 18 Jun 2024 13:40:27 +0200
Subject: chore(deps): bump `urllib3` to 2.2.2 in `dependencies` workflow
 (#12516)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 7e840a74c..743d838b5 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -4,4 +4,4 @@ idna==3.7
 PyYAML==6.0.1
 requests==2.31.0
 semver==3.0.2
-urllib3==2.2.1
+urllib3==2.2.2
-- 
cgit v1.2.3-70-g09d2


From a4313db16ab76cfb059d1ca716dae00278672c25 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 28 Jun 2024 11:52:47 +0200
Subject: chore(deps): bump certifi from 2024.2.2 to 2024.6.2 in
 /.github/workflows/dependencies (#12519)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 743d838b5..8c80c60a2 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2024.2.2
+certifi==2024.6.2
 charset-normalizer==3.3.2
 idna==3.7
 PyYAML==6.0.1
-- 
cgit v1.2.3-70-g09d2


From dd4be1b6fb9973d63eba334d8bd92b3da30b3e72 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 28 Jun 2024 11:53:03 +0200
Subject: chore(deps): bump requests from 2.31.0 to 2.32.3 in
 /.github/workflows/dependencies (#12518)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 8c80c60a2..f8d8d4289 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -2,6 +2,6 @@ certifi==2024.6.2
 charset-normalizer==3.3.2
 idna==3.7
 PyYAML==6.0.1
-requests==2.31.0
+requests==2.32.3
 semver==3.0.2
 urllib3==2.2.2
-- 
cgit v1.2.3-70-g09d2


From 608d62b2a5ee7f3af62dd8f31d47c167bf04547f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 6 Jul 2024 20:51:57 +0200
Subject: chore(deps): bump certifi in `dependencies` workflow (#12543)

Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.6.2 to 2024.7.4.
- [Commits](https://github.com/certifi/python-certifi/compare/2024.06.02...2024.07.04)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index f8d8d4289..f125da542 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2024.6.2
+certifi==2024.7.4
 charset-normalizer==3.3.2
 idna==3.7
 PyYAML==6.0.1
-- 
cgit v1.2.3-70-g09d2


From 3476148b19dc0771ec8df75fc29c3364bc90d013 Mon Sep 17 00:00:00 2001
From: Marc Cornellà <marc@mcornella.com>
Date: Tue, 23 Jul 2024 16:16:19 +0200
Subject: chore(dependencies): sort dependencies.yml

---
 .github/dependencies.yml                  | 30 +++++++++++++++---------------
 .github/workflows/dependencies/.gitignore |  1 +
 2 files changed, 16 insertions(+), 15 deletions(-)
 create mode 100644 .github/workflows/dependencies/.gitignore

(limited to '.github/workflows/dependencies')

diff --git a/.github/dependencies.yml b/.github/dependencies.yml
index 43ec92fb7..be2d02cd8 100644
--- a/.github/dependencies.yml
+++ b/.github/dependencies.yml
@@ -7,17 +7,13 @@ dependencies:
       set -e
       rm -rf git-completion.plugin.zsh Makefile README.adoc t tools
       test -e git-completion.zsh && mv -f git-completion.zsh _git
-  plugins/z:
+  plugins/gradle:
+    repo: gradle/gradle-completion
     branch: master
-    repo: agkozak/zsh-z
-    version: afaf2965b41fdc6ca66066e09382726aa0b6aa04
+    version: 25da917cf5a88f3e58f05be3868a7b2748c8afe6
     precopy: |
       set -e
-      test -e README.md && mv -f README.md MANUAL.md
-    postcopy: |
-      set -e
-      test -e _zshz && mv -f _zshz _z
-      test -e zsh-z.plugin.zsh && mv -f zsh-z.plugin.zsh z.plugin.zsh
+      find . ! -name _gradle ! -name LICENSE -delete
   plugins/history-substring-search:
     repo: zsh-users/zsh-history-substring-search
     branch: master
@@ -29,13 +25,6 @@ dependencies:
     postcopy: |
       set -e
       test -e dependencies/OMZ-README.md && cat dependencies/OMZ-README.md >> README.md
-  plugins/gradle:
-    repo: gradle/gradle-completion
-    branch: master
-    version: 25da917cf5a88f3e58f05be3868a7b2748c8afe6
-    precopy: |
-      set -e
-      find . ! -name _gradle ! -name LICENSE -delete
   plugins/wd:
     repo: mfaerevaag/wd
     branch: master
@@ -44,3 +33,14 @@ dependencies:
       set -e
       rm -r test
       rm install.sh tty.gif wd.1
+  plugins/z:
+    branch: master
+    repo: agkozak/zsh-z
+    version: afaf2965b41fdc6ca66066e09382726aa0b6aa04
+    precopy: |
+      set -e
+      test -e README.md && mv -f README.md MANUAL.md
+    postcopy: |
+      set -e
+      test -e _zshz && mv -f _zshz _z
+      test -e zsh-z.plugin.zsh && mv -f zsh-z.plugin.zsh z.plugin.zsh
diff --git a/.github/workflows/dependencies/.gitignore b/.github/workflows/dependencies/.gitignore
new file mode 100644
index 000000000..1d17dae13
--- /dev/null
+++ b/.github/workflows/dependencies/.gitignore
@@ -0,0 +1 @@
+.venv
-- 
cgit v1.2.3-70-g09d2


From f1764f8a569a84264ad5a6182721f6ae3bba835d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 11 Aug 2024 19:51:32 +0200
Subject: chore(deps): bump pyyaml from 6.0.1 to 6.0.2 in
 /.github/workflows/dependencies (#12610)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index f125da542..2a383e14b 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,7 +1,7 @@
 certifi==2024.7.4
 charset-normalizer==3.3.2
 idna==3.7
-PyYAML==6.0.1
+PyYAML==6.0.2
 requests==2.32.3
 semver==3.0.2
 urllib3==2.2.2
-- 
cgit v1.2.3-70-g09d2


From f622e6a6367b5142c868f554fda968982226e5df Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 25 Aug 2024 17:15:23 +0200
Subject: chore(deps): bump idna from 3.7 to 3.8 in
 /.github/workflows/dependencies (#12638)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 2a383e14b..81a119844 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,6 +1,6 @@
 certifi==2024.7.4
 charset-normalizer==3.3.2
-idna==3.7
+idna==3.8
 PyYAML==6.0.2
 requests==2.32.3
 semver==3.0.2
-- 
cgit v1.2.3-70-g09d2


From b8c69d265257fae88fe504ea43cbcf2728bc1308 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 1 Sep 2024 21:02:04 +0200
Subject: chore(deps): bump certifi in /.github/workflows/dependencies (#12646)

Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.7.4 to 2024.8.30.
- [Commits](https://github.com/certifi/python-certifi/compare/2024.07.04...2024.08.30)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 81a119844..7cf0b642f 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2024.7.4
+certifi==2024.8.30
 charset-normalizer==3.3.2
 idna==3.8
 PyYAML==6.0.2
-- 
cgit v1.2.3-70-g09d2


From 8c13f021bf3f0315f516f73c8f2555bd7a4313d1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 15 Sep 2024 19:36:08 +0200
Subject: chore(deps): bump idna in /.github/workflows/dependencies (#12678)

Bumps [idna](https://github.com/kjd/idna) from 3.8 to 3.9.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](https://github.com/kjd/idna/compare/v3.8...v3.9)

---
updated-dependencies:
- dependency-name: idna
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 7cf0b642f..9b5b03ea0 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,6 +1,6 @@
 certifi==2024.8.30
 charset-normalizer==3.3.2
-idna==3.8
+idna==3.9
 PyYAML==6.0.2
 requests==2.32.3
 semver==3.0.2
-- 
cgit v1.2.3-70-g09d2


From ec7d01faf837f17ccdc91249d0e63117ad0585af Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 15 Sep 2024 19:36:24 +0200
Subject: chore(deps): bump urllib3 in /.github/workflows/dependencies (#12677)

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.2.2...2.2.3)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 9b5b03ea0..05b2f27fe 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -4,4 +4,4 @@ idna==3.9
 PyYAML==6.0.2
 requests==2.32.3
 semver==3.0.2
-urllib3==2.2.2
+urllib3==2.2.3
-- 
cgit v1.2.3-70-g09d2


From f11cc8fea190eb9a1638dc67877436d0b8475ff5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 22 Sep 2024 16:20:33 +0200
Subject: chore(deps): bump idna in /.github/workflows/dependencies (#12688)

Bumps [idna](https://github.com/kjd/idna) from 3.9 to 3.10.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](https://github.com/kjd/idna/compare/v3.9...v3.10)

---
updated-dependencies:
- dependency-name: idna
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 05b2f27fe..eedd6d276 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,6 +1,6 @@
 certifi==2024.8.30
 charset-normalizer==3.3.2
-idna==3.9
+idna==3.10
 PyYAML==6.0.2
 requests==2.32.3
 semver==3.0.2
-- 
cgit v1.2.3-70-g09d2


From 9bfa3395f34f63d14945e01c45c72ec43d372dfa Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 13 Oct 2024 21:11:03 +0200
Subject: chore(deps): bump charset-normalizer in
 /.github/workflows/dependencies (#12749)

Bumps [charset-normalizer](https://github.com/Ousret/charset_normalizer) from 3.3.2 to 3.4.0.
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Ousret/charset_normalizer/compare/3.3.2...3.4.0)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index eedd6d276..ed0d129b3 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,5 +1,5 @@
 certifi==2024.8.30
-charset-normalizer==3.3.2
+charset-normalizer==3.4.0
 idna==3.10
 PyYAML==6.0.2
 requests==2.32.3
-- 
cgit v1.2.3-70-g09d2


From b3ba8da4218c3b9e1e5e45e1d4c00d312ff7226b Mon Sep 17 00:00:00 2001
From: Marc Cornellà <marc@mcornella.com>
Date: Mon, 14 Oct 2024 13:15:39 +0200
Subject: ci(dependencies): use tag version in git commit if available (#12756)

Related: https://github.com/ohmyzsh/ohmyzsh/pull/12747#issuecomment-2410440748
---
 .github/workflows/dependencies/updater.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index f85c9eda7..02cff9030 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -228,7 +228,7 @@ class Dependency:
                     self.__apply_upstream_changes()
 
                     # Add all changes and commit
-                    has_new_commit = Git.add_and_commit(self.name, short_sha)
+                    has_new_commit = Git.add_and_commit(self.name, new_version)
 
                     if has_new_commit:
                         # Push changes to remote
-- 
cgit v1.2.3-70-g09d2


From 62e3e0b2fdd25919de6ae2d4e09317e1bd07a2dc Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 15 Dec 2024 23:38:56 +0100
Subject: chore(deps): bump certifi from 2024.8.30 to 2024.12.14 in
 /.github/workflows/dependencies (#12848)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index ed0d129b3..8ca4477c9 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2024.8.30
+certifi==2024.12.14
 charset-normalizer==3.4.0
 idna==3.10
 PyYAML==6.0.2
-- 
cgit v1.2.3-70-g09d2


From f733dc340b2a1c5b2e61a4da7de790b2f557175f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 22 Dec 2024 16:19:12 +0100
Subject: chore(deps): bump urllib3 from 2.2.3 to 2.3.0 in
 /.github/workflows/dependencies (#12863)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 8ca4477c9..5204e2cb7 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -4,4 +4,4 @@ idna==3.10
 PyYAML==6.0.2
 requests==2.32.3
 semver==3.0.2
-urllib3==2.2.3
+urllib3==2.3.0
-- 
cgit v1.2.3-70-g09d2


From 9c8afcc3ee2fe6da2e2487a623498a9105cbd38c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 29 Dec 2024 13:22:49 +0100
Subject: chore(deps): bump charset-normalizer in
 /.github/workflows/dependencies (#12874)

Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.4.0 to 3.4.1.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.0...3.4.1)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 5204e2cb7..a3922cd03 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,5 +1,5 @@
 certifi==2024.12.14
-charset-normalizer==3.4.0
+charset-normalizer==3.4.1
 idna==3.10
 PyYAML==6.0.2
 requests==2.32.3
-- 
cgit v1.2.3-70-g09d2


From 6e9cda3d30d8e73c11e4d32044b7f4c5e06f822d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 19 Jan 2025 23:30:40 +0100
Subject: chore(deps): bump semver in /.github/workflows/dependencies (#12924)

Bumps [semver](https://github.com/python-semver/python-semver) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/python-semver/python-semver/releases)
- [Changelog](https://github.com/python-semver/python-semver/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-semver/python-semver/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index a3922cd03..d8149743c 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -3,5 +3,5 @@ charset-normalizer==3.4.1
 idna==3.10
 PyYAML==6.0.2
 requests==2.32.3
-semver==3.0.2
+semver==3.0.3
 urllib3==2.3.0
-- 
cgit v1.2.3-70-g09d2


From 9ffc14c3e1de2054fa113e2c7d42cbdac542769b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 26 Jan 2025 14:11:35 +0100
Subject: chore(deps): bump semver from 3.0.3 to 3.0.4 in
 /.github/workflows/dependencies (#12938)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index d8149743c..0471ccc4a 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -3,5 +3,5 @@ charset-normalizer==3.4.1
 idna==3.10
 PyYAML==6.0.2
 requests==2.32.3
-semver==3.0.3
+semver==3.0.4
 urllib3==2.3.0
-- 
cgit v1.2.3-70-g09d2


From 2b547d113b7e55a556b695c9372f1beb721efd67 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 2 Feb 2025 13:38:22 +0100
Subject: chore(deps): bump certifi in /.github/workflows/dependencies (#12955)

Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.12.14 to 2025.1.31.
- [Commits](https://github.com/certifi/python-certifi/compare/2024.12.14...2025.01.31)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 0471ccc4a..910db7bac 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2024.12.14
+certifi==2025.1.31
 charset-normalizer==3.4.1
 idna==3.10
 PyYAML==6.0.2
-- 
cgit v1.2.3-70-g09d2


From a84a0332a822a78ddf3f66d0e1ed3990d4badd12 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 13 Apr 2025 23:11:55 +0200
Subject: chore(deps): bump urllib3 in /.github/workflows/dependencies (#13065)

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.3.0...2.4.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 910db7bac..f2044a5f5 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -4,4 +4,4 @@ idna==3.10
 PyYAML==6.0.2
 requests==2.32.3
 semver==3.0.4
-urllib3==2.3.0
+urllib3==2.4.0
-- 
cgit v1.2.3-70-g09d2


From 137bfbbfd1e39897f02ca47e9f010b0d81cc15ef Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 27 Apr 2025 14:55:23 +0200
Subject: chore(deps): bump certifi in /.github/workflows/dependencies (#13094)

Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.1.31 to 2025.4.26.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.01.31...2025.04.26)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2025.4.26
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index f2044a5f5..63eadd07d 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2025.1.31
+certifi==2025.4.26
 charset-normalizer==3.4.1
 idna==3.10
 PyYAML==6.0.2
-- 
cgit v1.2.3-70-g09d2


From 8648cd640b428bdd7dea65886c2671ef1e8ffe32 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 4 May 2025 17:22:51 +0200
Subject: chore(deps): bump charset-normalizer in
 /.github/workflows/dependencies (#13100)

Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.4.1 to 3.4.2.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.1...3.4.2)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 63eadd07d..e73c1b5ca 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,5 +1,5 @@
 certifi==2025.4.26
-charset-normalizer==3.4.1
+charset-normalizer==3.4.2
 idna==3.10
 PyYAML==6.0.2
 requests==2.32.3
-- 
cgit v1.2.3-70-g09d2


From 042605ee6b2afeb21e380d05b22d5072f0eeff44 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 10 Jun 2025 16:15:59 +0200
Subject: chore(deps): bump requests in /.github/workflows/dependencies
 (#13164)

Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.3...v2.32.4)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index e73c1b5ca..5dae1f64b 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -2,6 +2,6 @@ certifi==2025.4.26
 charset-normalizer==3.4.2
 idna==3.10
 PyYAML==6.0.2
-requests==2.32.3
+requests==2.32.4
 semver==3.0.4
 urllib3==2.4.0
-- 
cgit v1.2.3-70-g09d2


From 7ee92de190b3710b55aa04e10eb54e907587e61c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 19 Jun 2025 10:02:32 +0200
Subject: chore(deps): bump urllib3 in /.github/workflows/dependencies (#13176)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 5dae1f64b..d2c8bdcc9 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -4,4 +4,4 @@ idna==3.10
 PyYAML==6.0.2
 requests==2.32.4
 semver==3.0.4
-urllib3==2.4.0
+urllib3==2.5.0
-- 
cgit v1.2.3-70-g09d2


From 52f7ad6913cd039c32f4088d101c30db2492d518 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 28 Jul 2025 18:55:43 +0200
Subject: chore(deps): bump certifi in /.github/workflows/dependencies (#13218)

Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.4.26 to 2025.7.14.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.04.26...2025.07.14)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2025.7.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index d2c8bdcc9..4c55ff760 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2025.4.26
+certifi==2025.7.14
 charset-normalizer==3.4.2
 idna==3.10
 PyYAML==6.0.2
-- 
cgit v1.2.3-70-g09d2


From 73024e8f0849ff22ea15dee1d7c38157cefc77d3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 Aug 2025 10:25:23 +0200
Subject: chore(deps): bump charset-normalizer in
 /.github/workflows/dependencies (#13257)

Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.4.2 to 3.4.3.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.2...3.4.3)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 4c55ff760..167f9df8f 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,5 +1,5 @@
 certifi==2025.7.14
-charset-normalizer==3.4.2
+charset-normalizer==3.4.3
 idna==3.10
 PyYAML==6.0.2
 requests==2.32.4
-- 
cgit v1.2.3-70-g09d2


From 9fe2c26abd3f476a3377bf37b513e5cabf3f3637 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 Aug 2025 13:47:37 +0200
Subject: chore(deps): bump certifi in /.github/workflows/dependencies (#13246)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 167f9df8f..09bebefbd 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2025.7.14
+certifi==2025.8.3
 charset-normalizer==3.4.3
 idna==3.10
 PyYAML==6.0.2
-- 
cgit v1.2.3-70-g09d2


From b95022dde6a200ba3dbb96c8b997ba74d8db0136 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 25 Aug 2025 02:37:09 +0200
Subject: chore(deps): bump requests in /.github/workflows/dependencies
 (#13280)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 09bebefbd..7388ed765 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -2,6 +2,6 @@ certifi==2025.8.3
 charset-normalizer==3.4.3
 idna==3.10
 PyYAML==6.0.2
-requests==2.32.4
+requests==2.32.5
 semver==3.0.4
 urllib3==2.5.0
-- 
cgit v1.2.3-70-g09d2


From 9ac3b895d426dfdd000b8ae884a8bf9d42840839 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 29 Sep 2025 08:31:23 +0200
Subject: chore(deps): bump pyyaml in /.github/workflows/dependencies (#13337)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 7388ed765..441426dcf 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,7 +1,7 @@
 certifi==2025.8.3
 charset-normalizer==3.4.3
 idna==3.10
-PyYAML==6.0.2
+PyYAML==6.0.3
 requests==2.32.5
 semver==3.0.4
 urllib3==2.5.0
-- 
cgit v1.2.3-70-g09d2


From d4cb4f249c365ba921840f1a4279ffd55d09e9a3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Oct 2025 09:21:45 +0200
Subject: chore(deps): bump certifi in /.github/workflows/dependencies (#13353)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 441426dcf..0531f9f0a 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2025.8.3
+certifi==2025.10.5
 charset-normalizer==3.4.3
 idna==3.10
 PyYAML==6.0.3
-- 
cgit v1.2.3-70-g09d2


From 064f0c1d0adbe5a4a4a239eab452f80ad0a7ee20 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Oct 2025 11:28:57 +0300
Subject: chore(deps): bump idna in /.github/workflows/dependencies (#13377)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 0531f9f0a..d6757a0f6 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,6 +1,6 @@
 certifi==2025.10.5
 charset-normalizer==3.4.3
-idna==3.10
+idna==3.11
 PyYAML==6.0.3
 requests==2.32.5
 semver==3.0.4
-- 
cgit v1.2.3-70-g09d2


From ac9258296117df625ba69d8e3cd1fe4883062c2b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Oct 2025 11:33:03 +0300
Subject: chore(deps): bump charset-normalizer in
 /.github/workflows/dependencies (#13378)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index d6757a0f6..cc8b0a28f 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,5 +1,5 @@
 certifi==2025.10.5
-charset-normalizer==3.4.3
+charset-normalizer==3.4.4
 idna==3.11
 PyYAML==6.0.3
 requests==2.32.5
-- 
cgit v1.2.3-70-g09d2


From 73d79fe1376cc773b2bcb7f7a27bff880a4502e2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 16 Nov 2025 09:08:43 -0300
Subject: chore(deps): bump certifi in /.github/workflows/dependencies (#13431)

Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.10.5 to 2025.11.12.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2025.11.12)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2025.11.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index cc8b0a28f..4fc25d593 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2025.10.5
+certifi==2025.11.12
 charset-normalizer==3.4.4
 idna==3.11
 PyYAML==6.0.3
-- 
cgit v1.2.3-70-g09d2


From ca5c467db1d495a4b5c0049a4cf476ca7f34b790 Mon Sep 17 00:00:00 2001
From: Carlo Sala <carlosalag@protonmail.com>
Date: Mon, 1 Dec 2025 09:59:09 +0100
Subject: fix(dependencies): only open PR if there are relevant changes
 (#13454)

Fixes cases like #13453
---
 .github/workflows/dependencies/updater.py | 62 +++++++++++++++++--------------
 1 file changed, 35 insertions(+), 27 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index 02cff9030..aee15d9e0 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -219,31 +219,32 @@ class Dependency:
                     # Create new branch
                     branch = Git.checkout_or_create_branch(branch_name)
 
-                    # Update dependencies.yml file
-                    self.__update_yaml(
-                        f"tag:{new_version}" if is_tag else status["version"]
-                    )
-
                     # Update dependency files
                     self.__apply_upstream_changes()
 
-                    # Add all changes and commit
-                    has_new_commit = Git.add_and_commit(self.name, new_version)
+                    if not Git.repo_is_clean():
+                        # Update dependencies.yml file
+                        self.__update_yaml(
+                            f"tag:{new_version}" if is_tag else status["version"]
+                        )
+
+                        # Add all changes and commit
+                        has_new_commit = Git.add_and_commit(self.name, new_version)
 
-                    if has_new_commit:
-                        # Push changes to remote
-                        Git.push(branch)
+                        if has_new_commit:
+                            # Push changes to remote
+                            Git.push(branch)
 
-                        # Create GitHub PR
-                        GitHub.create_pr(
-                            branch,
-                            f"feat({self.name}): update to version {new_version}",
-                            f"""## Description
+                            # Create GitHub PR
+                            GitHub.create_pr(
+                                branch,
+                                f"feat({self.name}): update to version {new_version}",
+                                f"""## Description
 
-Update for **{self.desc}**: update to version [{new_version}]({status['head_url']}).
-Check out the [list of changes]({status['compare_url']}).
+Update for **{self.desc}**: update to version [{new_version}]({status["head_url"]}).
+Check out the [list of changes]({status["compare_url"]}).
 """,
-                        )
+                            )
 
                     # Clean up repository
                     Git.clean_repo()
@@ -275,8 +276,8 @@ Check out the [list of changes]({status['compare_url']}).
 
 There is a new version of `{self.name}` {self.kind} available.
 
-New version: [{new_version}]({status['head_url']})
-Check out the [list of changes]({status['compare_url']}).
+New version: [{new_version}]({status["head_url"]})
+Check out the [list of changes]({status["compare_url"]}).
 """
 
                     print("Creating GitHub issue", file=sys.stderr)
@@ -378,20 +379,27 @@ class Git:
         return branch_name
 
     @staticmethod
-    def add_and_commit(scope: str, version: str) -> bool:
+    def repo_is_clean() -> bool:
         """
-        Returns `True` if there were changes and were indeed commited.
-        Returns `False` if the repo was clean and no changes were commited.
+        Returns `True` if the repo is clean.
+        Returns `False` if the repo is dirty.
         """
-        # check if repo is clean (clean => no error, no commit)
         try:
             CommandRunner.run_or_fail(
                 ["git", "diff", "--exit-code"], stage="CheckRepoClean"
             )
-            return False
+            return True
         except CommandRunner.Exception:
-            # if it's other kind of error just throw!
-            pass
+            return False
+
+    @staticmethod
+    def add_and_commit(scope: str, version: str) -> bool:
+        """
+        Returns `True` if there were changes and were indeed commited.
+        Returns `False` if the repo was clean and no changes were commited.
+        """
+        if Git.repo_is_clean():
+            return False
 
         user_name = os.environ.get("GIT_APP_NAME")
         user_email = os.environ.get("GIT_APP_EMAIL")
-- 
cgit v1.2.3-70-g09d2


From e9fc134236323ce3ce376715b1e55a54ed6ac7ac Mon Sep 17 00:00:00 2001
From: Marc Cornellà <marc@mcornella.com>
Date: Mon, 1 Dec 2025 11:22:14 +0100
Subject: ci(dependencies): update job permissions, change commits to `chore`
 (#13457)

---
 .github/workflows/dependencies.yml        | 5 ++---
 .github/workflows/dependencies/updater.py | 4 ++--
 2 files changed, 4 insertions(+), 5 deletions(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies.yml b/.github/workflows/dependencies.yml
index 000589087..a21803ec6 100644
--- a/.github/workflows/dependencies.yml
+++ b/.github/workflows/dependencies.yml
@@ -4,14 +4,13 @@ on:
   schedule:
     - cron: "0 6 * * 0"
 
-permissions:
-  contents: write
-
 jobs:
   check:
     name: Check for updates
     runs-on: ubuntu-latest
     if: github.repository == 'ohmyzsh/ohmyzsh'
+    permissions:
+      contents: write # this is needed to push commits and branches
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
diff --git a/.github/workflows/dependencies/updater.py b/.github/workflows/dependencies/updater.py
index aee15d9e0..783161d6c 100644
--- a/.github/workflows/dependencies/updater.py
+++ b/.github/workflows/dependencies/updater.py
@@ -238,7 +238,7 @@ class Dependency:
                             # Create GitHub PR
                             GitHub.create_pr(
                                 branch,
-                                f"feat({self.name}): update to version {new_version}",
+                                f"chore({self.name}): update to version {new_version}",
                                 f"""## Description
 
 Update for **{self.desc}**: update to version [{new_version}]({status["head_url"]}).
@@ -423,7 +423,7 @@ class Git:
                 f"user.email={user_email}",
                 "commit",
                 "-m",
-                f"feat({scope}): update to {version}",
+                f"chore({scope}): update to {version}",
             ],
             stage="CreateCommit",
             env=clean_env,
-- 
cgit v1.2.3-70-g09d2


From 1b4497fc8f51cfc1f326f3474203f9ea6dfd3804 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 6 Dec 2025 09:06:29 +0100
Subject: chore(deps): bump urllib3 in /.github/workflows/dependencies (#13464)

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 4fc25d593..94eaf3c9a 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -4,4 +4,4 @@ idna==3.11
 PyYAML==6.0.3
 requests==2.32.5
 semver==3.0.4
-urllib3==2.5.0
+urllib3==2.6.0
-- 
cgit v1.2.3-70-g09d2


From 57781231bbef3df293ce3a4ae4bc58643f839c97 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 15 Dec 2025 09:59:27 +0100
Subject: chore(deps): bump urllib3 in /.github/workflows/dependencies (#13482)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 94eaf3c9a..44ec3fb30 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -4,4 +4,4 @@ idna==3.11
 PyYAML==6.0.3
 requests==2.32.5
 semver==3.0.4
-urllib3==2.6.0
+urllib3==2.6.2
-- 
cgit v1.2.3-70-g09d2


From d23d3ea69fdb839088e6e5589557cce77b34aaf8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 4 Jan 2026 21:50:31 +0100
Subject: chore(deps): bump certifi in /.github/workflows/dependencies (#13499)

Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.11.12 to 2026.1.4.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.11.12...2026.01.04)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2026.1.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/dependencies/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to '.github/workflows/dependencies')

diff --git a/.github/workflows/dependencies/requirements.txt b/.github/workflows/dependencies/requirements.txt
index 44ec3fb30..584a96ac9 100644
--- a/.github/workflows/dependencies/requirements.txt
+++ b/.github/workflows/dependencies/requirements.txt
@@ -1,4 +1,4 @@
-certifi==2025.11.12
+certifi==2026.1.4
 charset-normalizer==3.4.4
 idna==3.11
 PyYAML==6.0.3
-- 
cgit v1.2.3-70-g09d2