Commit graph

81 commits

Author SHA1 Message Date
dependabot[bot]
9fe2c26abd
chore(deps): bump certifi in /.github/workflows/dependencies (#13246)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-11 13:47:37 +02:00
dependabot[bot]
73024e8f08
chore(deps): bump charset-normalizer in /.github/workflows/dependencies (#13257)
Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.4.2 to 3.4.3.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.2...3.4.3)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-11 10:25:23 +02:00
Carlo Sala
5c804257ce
ci: use actions/create-github-app-token (#13233) 2025-07-28 19:20:50 +02:00
Marc Cornellà
98a182d71b
ci: add strict permissions to dependencies.yml workflow (#13232)
Just use `contents:read` initial permission. The other permissions needed are
those attached to the @ohmyzsh GitHub App.
2025-07-28 19:13:35 +02:00
dependabot[bot]
52f7ad6913
chore(deps): bump certifi in /.github/workflows/dependencies (#13218)
Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.4.26 to 2025.7.14.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.04.26...2025.07.14)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2025.7.14
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-07-28 18:55:43 +02:00
dependabot[bot]
7ee92de190
chore(deps): bump urllib3 in /.github/workflows/dependencies (#13176)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-19 10:02:32 +02:00
dependabot[bot]
042605ee6b
chore(deps): bump requests in /.github/workflows/dependencies (#13164)
Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.3...v2.32.4)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-06-10 16:15:59 +02:00
dependabot[bot]
8648cd640b
chore(deps): bump charset-normalizer in /.github/workflows/dependencies (#13100)
Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.4.1 to 3.4.2.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.1...3.4.2)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-04 17:22:51 +02:00
dependabot[bot]
137bfbbfd1
chore(deps): bump certifi in /.github/workflows/dependencies (#13094)
Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.1.31 to 2025.4.26.
- [Commits](https://github.com/certifi/python-certifi/compare/2025.01.31...2025.04.26)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2025.4.26
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-27 14:55:23 +02:00
dependabot[bot]
a84a0332a8
chore(deps): bump urllib3 in /.github/workflows/dependencies (#13065)
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.3.0...2.4.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-13 23:11:55 +02:00
dependabot[bot]
2b547d113b
chore(deps): bump certifi in /.github/workflows/dependencies (#12955)
Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.12.14 to 2025.1.31.
- [Commits](https://github.com/certifi/python-certifi/compare/2024.12.14...2025.01.31)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-02 13:38:22 +01:00
dependabot[bot]
9ffc14c3e1
chore(deps): bump semver from 3.0.3 to 3.0.4 in /.github/workflows/dependencies (#12938)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-26 14:11:35 +01:00
dependabot[bot]
6e9cda3d30
chore(deps): bump semver in /.github/workflows/dependencies (#12924)
Bumps [semver](https://github.com/python-semver/python-semver) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/python-semver/python-semver/releases)
- [Changelog](https://github.com/python-semver/python-semver/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-semver/python-semver/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: semver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-01-19 23:30:40 +01:00
dependabot[bot]
9c8afcc3ee
chore(deps): bump charset-normalizer in /.github/workflows/dependencies (#12874)
Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.4.0 to 3.4.1.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.0...3.4.1)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-29 13:22:49 +01:00
dependabot[bot]
f733dc340b
chore(deps): bump urllib3 from 2.2.3 to 2.3.0 in /.github/workflows/dependencies (#12863)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-22 16:19:12 +01:00
dependabot[bot]
62e3e0b2fd
chore(deps): bump certifi from 2024.8.30 to 2024.12.14 in /.github/workflows/dependencies (#12848)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-15 23:38:56 +01:00
Marc Cornellà
4ada154190
chore(installer): only serve installer in / and /install.sh
This avoids false positive detections on other bruteforced paths,
such as .zsh_history or others, which eventually result in
automated false vulnerability submissions.
2024-10-18 14:27:54 +02:00
Marc Cornellà
b3ba8da421
ci(dependencies): use tag version in git commit if available (#12756)
Related: https://github.com/ohmyzsh/ohmyzsh/pull/12747#issuecomment-2410440748
2024-10-14 13:15:39 +02:00
dependabot[bot]
9bfa3395f3
chore(deps): bump charset-normalizer in /.github/workflows/dependencies (#12749)
Bumps [charset-normalizer](https://github.com/Ousret/charset_normalizer) from 3.3.2 to 3.4.0.
- [Release notes](https://github.com/Ousret/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Ousret/charset_normalizer/compare/3.3.2...3.4.0)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-13 21:11:03 +02:00
dependabot[bot]
f11cc8fea1
chore(deps): bump idna in /.github/workflows/dependencies (#12688)
Bumps [idna](https://github.com/kjd/idna) from 3.9 to 3.10.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](https://github.com/kjd/idna/compare/v3.9...v3.10)

---
updated-dependencies:
- dependency-name: idna
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-22 16:20:33 +02:00
dependabot[bot]
ec7d01faf8
chore(deps): bump urllib3 in /.github/workflows/dependencies (#12677)
Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.2.2...2.2.3)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-15 19:36:24 +02:00
dependabot[bot]
8c13f021bf
chore(deps): bump idna in /.github/workflows/dependencies (#12678)
Bumps [idna](https://github.com/kjd/idna) from 3.8 to 3.9.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](https://github.com/kjd/idna/compare/v3.8...v3.9)

---
updated-dependencies:
- dependency-name: idna
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-15 19:36:08 +02:00
dependabot[bot]
b8c69d2652
chore(deps): bump certifi in /.github/workflows/dependencies (#12646)
Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.7.4 to 2024.8.30.
- [Commits](https://github.com/certifi/python-certifi/compare/2024.07.04...2024.08.30)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-09-01 21:02:04 +02:00
dependabot[bot]
f622e6a636
chore(deps): bump idna from 3.7 to 3.8 in /.github/workflows/dependencies (#12638)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-25 17:15:23 +02:00
dependabot[bot]
f1764f8a56
chore(deps): bump pyyaml from 6.0.1 to 6.0.2 in /.github/workflows/dependencies (#12610)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-08-11 19:51:32 +02:00
Marc Cornellà
3476148b19 chore(dependencies): sort dependencies.yml 2024-07-23 18:56:01 +02:00
dependabot[bot]
608d62b2a5
chore(deps): bump certifi in dependencies workflow (#12543)
Bumps [certifi](https://github.com/certifi/python-certifi) from 2024.6.2 to 2024.7.4.
- [Commits](https://github.com/certifi/python-certifi/compare/2024.06.02...2024.07.04)

---
updated-dependencies:
- dependency-name: certifi
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-06 20:51:57 +02:00
dependabot[bot]
dd4be1b6fb
chore(deps): bump requests from 2.31.0 to 2.32.3 in /.github/workflows/dependencies (#12518)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-28 11:53:03 +02:00
dependabot[bot]
a4313db16a
chore(deps): bump certifi from 2024.2.2 to 2024.6.2 in /.github/workflows/dependencies (#12519)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-28 11:52:47 +02:00
dependabot[bot]
c432ca0993
chore(deps): bump urllib3 to 2.2.2 in dependencies workflow (#12516)
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-18 13:40:27 +02:00
Carlo Sala
203369b0f9
ci(dependencies): run on sunday CET morning 2024-05-22 15:36:03 +02:00
Carlo Sala
04b66b2308
chore(dependencies): PR wording 2024-05-21 20:46:54 +02:00
Carlo Sala
0621944db5
fix(dependencies): only open PR if there are changes 2024-05-21 20:43:26 +02:00
Carlo Sala
0493eab8ce
fix(dependencies): check if repo is clean before committing 2024-05-12 12:40:45 +02:00
Carlo Sala
1d31ff6037
ci(dependencies): fetch all branches 2024-05-12 12:30:22 +02:00
Carlo Sala
eff648aab0 ci(dependencies): use setup-python and enable cron-based jobs 2024-05-12 12:26:30 +02:00
Carlo Sala
eb2ff84a2c fix(dependencies): avoid creating PR if it's already there 2024-05-12 12:26:30 +02:00
Carlo Sala
423b9a8ded feat(dependencies): add support for semver tags 2024-05-12 12:26:30 +02:00
Carlo Sala
a258eb4547 fix(dependencies): improve typing 2024-05-12 12:26:30 +02:00
Carlo Sala
13c8a10e39 style(dependencies): run ruff formatter 2024-05-12 12:26:30 +02:00
Carlo Sala
83110e8ce1 chore(dependencies): update requirements.txt 2024-05-12 12:26:30 +02:00
Raphael Boidol
f9bbf6047b
ci: bump actions/checkout version (#12210) 2024-02-13 17:32:44 +01:00
Carlo Sala
544eb17e33 ci(project): use ohmyzsh's bot credentials 2023-12-28 21:21:39 +01:00
Carlo Sala
46b24d4099 ci(dependencies): fix some envs and add requirements 2023-12-28 21:21:39 +01:00
Carlo Sala
0bb00eddbb
ci(dependencies): fix typo 2023-12-20 19:38:25 +01:00
Marc Cornellà
dd3be612e3
ci(dependencies): add automation for updating external dependencies (#12109) 2023-12-20 10:21:31 +01:00
Marc Cornellà
7a30bcae40
ci(installer): fix token passing and only run on main repo 2023-11-30 14:21:48 +01:00
Marc Cornellà
7733e3ab57
ci: fix path filtering in installer workflow
See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#example-including-and-excluding-paths
2023-10-28 10:29:54 +02:00
Marc Cornellà
7348d12f8e
ci(vercel): add Content-Disposition header on installer
This allows doing something like

  curl -O https://install.ohmyz.sh

and have the `install.sh` file automatically saved to its right name.
2023-10-28 10:24:24 +02:00
Marc Cornellà
408330e131
ci: remove redundant macos runner for CI tests
Currently the macOS runner is not needed, as we are only checking
zsh syntax. We can reactivate it in the future if needed.
2023-10-11 20:44:46 +02:00