asher-cli 1.3.0__tar.gz → 1.4.0__tar.gz

{asher_cli-1.3.0 → asher_cli-1.4.0}/.github/workflows/bandit.yml

@@ -41,7 +41,7 @@ jobs:
           -c pyproject.toml -r . -f sarif -o bandit.sarif --exit-zero
 
       - name: Upload SARIF to code scanning
-        uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: bandit.sarif
           category: bandit

{asher_cli-1.3.0 → asher_cli-1.4.0}/.github/workflows/claude-code-review.yml

@@ -33,7 +33,7 @@ jobs:
 
       - name: Run Claude Code Review
         id: claude-review
-        uses: anthropics/claude-code-action@9d7150bc8a3dae8149739a88019d192b579ad90c # v1
+        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'

{asher_cli-1.3.0 → asher_cli-1.4.0}/.github/workflows/claude.yml

@@ -32,7 +32,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@9d7150bc8a3dae8149739a88019d192b579ad90c # v1
+        uses: anthropics/claude-code-action@9c5ddab2e6d17b83ea679153b31f1d5f023cf636 # v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
 

asher_cli-1.4.0/.github/workflows/dependency-automerge.yml

@@ -0,0 +1,66 @@
+name: Dependency auto-merge
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened, edited, labeled]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  automerge:
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.base.repo.full_name == github.repository
+    steps:
+      - name: Dependabot metadata
+        if: github.event.pull_request.user.login == 'dependabot[bot]'
+        id: dependabot-metadata
+        uses: dependabot/fetch-metadata@v2
+        with:
+          github-token: "${{ secrets.GITHUB_TOKEN }}"
+
+      - name: Decide eligibility
+        id: decide
+        env:
+          TITLE: ${{ github.event.pull_request.title }}
+          ACTOR: ${{ github.event.pull_request.user.login }}
+          LABELS: ${{ join(github.event.pull_request.labels.*.name, ',') }}
+          DEPENDABOT_UPDATE_TYPE: ${{ steps.dependabot-metadata.outputs.update-type }}
+        run: |
+          safe=false
+          if [ "$ACTOR" = "dependabot[bot]" ]; then
+            # Only semver patch/minor bumps auto-merge; majors always wait for review.
+            case "$DEPENDABOT_UPDATE_TYPE" in
+              version-update:semver-patch|version-update:semver-minor) safe=true ;;
+            esac
+          elif [ "$ACTOR" = "karanshukla" ]; then
+            # The dependency-update routine commits under this account rather than a
+            # bot identity. The `dependencies` label is the reliable signal; the title
+            # pattern is a fallback for when it is missing. Either way, a title
+            # mentioning "major"/"breaking" is left for manual merge. Only the
+            # title is scanned -- dependency-audit bodies routinely mention other
+            # packages' major versions, which used to veto safe patch-level PRs.
+            matched=false
+            case ",$LABELS," in
+              *,dependencies,*) matched=true ;;
+            esac
+            if [ "$matched" = false ]; then
+              if printf '%s' "$TITLE" | grep -Eiq '^(chore|fix)(\([a-z0-9/_-]+\))?:.*(dependenc|advisory|CVE|vulnerab|bump)'; then
+                matched=true
+              fi
+            fi
+            if [ "$matched" = true ]; then
+              if ! printf '%s' "$TITLE" | grep -Eiq '\b(major|breaking)\b'; then
+                safe=true
+              fi
+            fi
+          fi
+          echo "safe=$safe" >> "$GITHUB_OUTPUT"
+
+      - name: Enable auto-merge
+        if: steps.decide.outputs.safe == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          PR_URL: ${{ github.event.pull_request.html_url }}
+        run: gh pr merge --auto --squash "$PR_URL"

{asher_cli-1.3.0 → asher_cli-1.4.0}/CHANGELOG.md

@@ -7,6 +7,22 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 Generated by [git-cliff](https://git-cliff.org) from conventional commits.
 
+## [1.4.0] - 2026-09-13
+
+### 🐛 Bug Fixes
+
+- *(ci)* Only scan the PR title for major/breaking in auto-merge (#86)
+- *(deps)* Update dependency pylitterbot to v2025.6.5 (#82)
+
+### 👷 CI/CD
+
+- Auto-merge non-major dependency PRs once checks pass (#85)
+
+### 🔧 Miscellaneous
+
+- *(renovate)* Squash automerged updates (#84)
+- *(renovate)* Auto-merge non-major updates once checks pass (#83)
+
 ## [1.3.0] - 2026-08-23
 
 ### 🚀 Features

{asher_cli-1.3.0 → asher_cli-1.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: asher-cli
-Version: 1.3.0
+Version: 1.4.0
 Summary: Terminal dashboard for Litter Robot (LR3/LR4/LR5) via the Whisker cloud API
 Project-URL: Homepage, https://github.com/karanshukla/asher-cli
 Project-URL: Repository, https://github.com/karanshukla/asher-cli
@@ -40,14 +40,14 @@ Classifier: Topic :: Home Automation
 Requires-Python: >=3.10
 Requires-Dist: keyring>=24.0.0
 Requires-Dist: plyer>=2.1.0
-Requires-Dist: pylitterbot==2025.6.4
+Requires-Dist: pylitterbot==2025.6.5
 Requires-Dist: python-dotenv>=1.0.0
 Requires-Dist: rich>=13.0.0
 Requires-Dist: textual>=0.47.0
 Requires-Dist: tzlocal>=5.4
 Provides-Extra: mcp
 Requires-Dist: mcp<2; extra == 'mcp'
-Requires-Dist: pylitterbot[mcp]==2025.6.4; extra == 'mcp'
+Requires-Dist: pylitterbot[mcp]==2025.6.5; extra == 'mcp'
 Provides-Extra: tray
 Requires-Dist: pillow>=10.0; extra == 'tray'
 Requires-Dist: pygobject>=3.42; (sys_platform == 'linux') and extra == 'tray'
@@ -66,7 +66,9 @@ Description-Content-Type: text/markdown
 
 A Claude Code-style terminal dashboard for monitoring and controlling Litter Robot via the Whisker cloud API.
 
-<img width="808" height="351" alt="image" src="https://github.com/user-attachments/assets/6599966f-837c-419c-8692-bfda3533e730" />
+<img width="1165" height="885" alt="image" src="https://github.com/user-attachments/assets/03be7ed3-95f6-45cf-93db-cf5bf84d6499" />
+
+<img width="1165" height="885" alt="image" src="https://github.com/user-attachments/assets/5aa60ff1-6e6b-4c71-8376-d96d52d96809" />
 
 ## Features
 

{asher_cli-1.3.0 → asher_cli-1.4.0}/README.md

@@ -10,7 +10,9 @@
 
 A Claude Code-style terminal dashboard for monitoring and controlling Litter Robot via the Whisker cloud API.
 
-<img width="808" height="351" alt="image" src="https://github.com/user-attachments/assets/6599966f-837c-419c-8692-bfda3533e730" />
+<img width="1165" height="885" alt="image" src="https://github.com/user-attachments/assets/03be7ed3-95f6-45cf-93db-cf5bf84d6499" />
+
+<img width="1165" height="885" alt="image" src="https://github.com/user-attachments/assets/5aa60ff1-6e6b-4c71-8376-d96d52d96809" />
 
 ## Features
 

{asher_cli-1.3.0 → asher_cli-1.4.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "asher-cli"
-version = "1.3.0"
+version = "1.4.0"
 description = "Terminal dashboard for Litter Robot (LR3/LR4/LR5) via the Whisker cloud API"
 readme = "README.md"
 license = { file = "LICENSE" }
@@ -17,7 +17,7 @@ classifiers = [
     "Topic :: Home Automation",
 ]
 dependencies = [
-    "pylitterbot==2025.6.4",
+    "pylitterbot==2025.6.5",
     "textual>=0.47.0",
     "rich>=13.0.0",
     "python-dotenv>=1.0.0",
@@ -30,7 +30,7 @@ dependencies = [
 # pylitterbot asks for mcp[cli]>=1.0.0 with no upper bound, but its server does
 # `from mcp.server.fastmcp import FastMCP`, and mcp 2.0 deleted that module.
 # Cap it here until pylitterbot ships a 2.x-compatible release.
-mcp = ["pylitterbot[mcp]==2025.6.4", "mcp<2"]
+mcp = ["pylitterbot[mcp]==2025.6.5", "mcp<2"]
 # PyGObject is what puts pystray on its AppIndicator backend. Without it pystray
 # silently falls back to a legacy XEmbed icon, which KDE Plasma and GNOME no
 # longer host at all — the watcher runs, draws an icon, and nothing shows it.

asher_cli-1.4.0/renovate.json

@@ -0,0 +1,48 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended"
+  ],
+  "packageRules": [
+    {
+      "matchManagers": [
+        "pep621"
+      ],
+      "enabled": false
+    },
+    {
+      "matchManagers": [
+        "pep621"
+      ],
+      "matchPackageNames": [
+        "pylitterbot"
+      ],
+      "enabled": true,
+      "schedule": [
+        "before 9am on Monday"
+      ]
+    },
+    {
+      "matchManagers": [
+        "github-actions"
+      ],
+      "pinDigests": true,
+      "enabled": true,
+      "schedule": [
+        "before 9am on Monday"
+      ]
+    },
+    {
+      "description": "Auto-merge non-major updates once required checks pass; majors still get manual review.",
+      "matchUpdateTypes": [
+        "patch",
+        "minor",
+        "digest",
+        "pin"
+      ],
+      "automerge": true,
+      "platformAutomerge": true,
+      "automergeStrategy": "squash"
+    }
+  ]
+}

{asher_cli-1.3.0 → asher_cli-1.4.0}/uv.lock

@@ -3,13 +3,13 @@ revision = 3
 requires-python = ">=3.10"
 resolution-markers = [
     "python_full_version >= '3.15' and sys_platform == 'win32'",
-    "python_full_version == '3.14.*' and sys_platform == 'win32'",
     "python_full_version >= '3.15' and sys_platform != 'win32'",
+    "python_full_version == '3.14.*' and sys_platform == 'win32'",
     "python_full_version == '3.14.*' and sys_platform != 'win32'",
-    "python_full_version >= '3.11' and python_full_version < '3.14' and sys_platform == 'win32'",
-    "python_full_version < '3.11' and sys_platform == 'win32'",
     "python_full_version >= '3.12' and python_full_version < '3.14' and sys_platform == 'emscripten'",
+    "python_full_version >= '3.11' and python_full_version < '3.14' and sys_platform == 'win32'",
     "(python_full_version >= '3.11' and python_full_version < '3.14' and sys_platform != 'emscripten' and sys_platform != 'win32') or (python_full_version == '3.11.*' and sys_platform == 'emscripten')",
+    "python_full_version < '3.11' and sys_platform == 'win32'",
     "python_full_version < '3.11' and sys_platform != 'win32'",
 ]
 
@@ -219,7 +219,7 @@ wheels = [
 
 [[package]]
 name = "asher-cli"
-version = "1.3.0"
+version = "1.4.0"
 source = { editable = "." }
 dependencies = [
     { name = "keyring" },
@@ -269,8 +269,8 @@ requires-dist = [
     { name = "pillow", marker = "extra == 'tray'", specifier = ">=10.0" },
     { name = "plyer", specifier = ">=2.1.0" },
     { name = "pygobject", marker = "sys_platform == 'linux' and extra == 'tray'", specifier = ">=3.42" },
-    { name = "pylitterbot", specifier = "==2025.6.4" },
-    { name = "pylitterbot", extras = ["mcp"], marker = "extra == 'mcp'", specifier = "==2025.6.4" },
+    { name = "pylitterbot", specifier = "==2025.6.5" },
+    { name = "pylitterbot", extras = ["mcp"], marker = "extra == 'mcp'", specifier = "==2025.6.5" },
     { name = "pystray", marker = "extra == 'tray'", specifier = ">=0.19" },
     { name = "python-dotenv", specifier = ">=1.0.0" },
     { name = "rich", specifier = ">=13.0.0" },
@@ -2585,7 +2585,7 @@ crypto = [
 
 [[package]]
 name = "pylitterbot"
-version = "2025.6.4"
+version = "2025.6.5"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "aiohttp" },
@@ -2593,9 +2593,9 @@ dependencies = [
     { name = "pycognito" },
     { name = "pyjwt" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/74/19/84f7d5078ef3add6ee8e9b9972020a47d0489f1eb88d6a6a0876d7acdee4/pylitterbot-2025.6.4.tar.gz", hash = "sha256:9ab5cbf81151ff5d073990b443c1dcf73255064a896ba8b9aada62efba83f5b9", size = 68685, upload-time = "2026-08-03T16:17:27.841Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/83/33/7768130bdb281c4523e4af96b212d6364d911adb4dd9e07bded0e4abb133/pylitterbot-2025.6.5.tar.gz", hash = "sha256:6128c00385fbf843c51f379983221a2a8a71003aa9e6e1771d37bf6b337c7a5d", size = 68619, upload-time = "2026-09-04T22:32:40.031Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/0d/44/da42aa0bbb16b7e962cec8114327336be5e33fe54b055a6edb708598542b/pylitterbot-2025.6.4-py3-none-any.whl", hash = "sha256:c402a7de7c1e303b1b6fa9d31b2373fa85146108c1536ef3f614ef5023043283", size = 85767, upload-time = "2026-08-03T16:17:28.646Z" },
+    { url = "https://files.pythonhosted.org/packages/88/ba/b87cf7bad59f0ef1cb2484ca1e148f0393a08e17e62f2a4befed813dafc6/pylitterbot-2025.6.5-py3-none-any.whl", hash = "sha256:d9cf5f855b106b17d84dce6dc8c0d89c387a9254eb7418e0ea78ea5bbe89af13", size = 85682, upload-time = "2026-09-04T22:32:38.942Z" },
 ]
 
 [package.optional-dependencies]
@@ -3063,11 +3063,11 @@ version = "2026.6.3"
 source = { registry = "https://pypi.org/simple" }
 resolution-markers = [
     "python_full_version >= '3.15' and sys_platform == 'win32'",
-    "python_full_version == '3.14.*' and sys_platform == 'win32'",
     "python_full_version >= '3.15' and sys_platform != 'win32'",
+    "python_full_version == '3.14.*' and sys_platform == 'win32'",
     "python_full_version == '3.14.*' and sys_platform != 'win32'",
-    "python_full_version >= '3.11' and python_full_version < '3.14' and sys_platform == 'win32'",
     "python_full_version >= '3.12' and python_full_version < '3.14' and sys_platform == 'emscripten'",
+    "python_full_version >= '3.11' and python_full_version < '3.14' and sys_platform == 'win32'",
     "(python_full_version >= '3.11' and python_full_version < '3.14' and sys_platform != 'emscripten' and sys_platform != 'win32') or (python_full_version == '3.11.*' and sys_platform == 'emscripten')",
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/aa/2a/9618a122aeb2a169a28b03889a2995fe297588964333d4a7d67bdf46e147/rpds_py-2026.6.3.tar.gz", hash = "sha256:1cebd1337c242e4ec2293e541f712b2da849b29f48f0c293684b71c0632625d4", size = 64051, upload-time = "2026-06-30T07:17:53.009Z" }

asher_cli-1.3.0/renovate.json

@@ -1,22 +0,0 @@
-{
-  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:recommended"],
-  "packageRules": [
-    {
-      "matchManagers": ["pep621"],
-      "enabled": false
-    },
-    {
-      "matchManagers": ["pep621"],
-      "matchPackageNames": ["pylitterbot"],
-      "enabled": true,
-      "schedule": ["before 9am on Monday"]
-    },
-    {
-      "matchManagers": ["github-actions"],
-      "pinDigests": true,
-      "enabled": true,
-      "schedule": ["before 9am on Monday"]
-    }
-  ]
-}