dfetch 0.14.2__tar.gz → 0.14.3__tar.gz

{dfetch-0.14.2 → dfetch-0.14.3}/.github/workflows/build.yml

@@ -56,7 +56,7 @@ jobs:
           fetch-depth: 0  # Fetches all history and tags
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: '3.13'
           cache: 'pip'
@@ -67,7 +67,7 @@ jobs:
 
       - name: Set up Ruby
         if: ${{ matrix.platform != 'windows-latest' }}
-        uses: ruby/setup-ruby@89f90524b88a01fe6e0b732220432cc6142926af  #v1.313.0
+        uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74  #v1.314.0
         with:
           ruby-version: 3.3 # See also devcontainer
 
@@ -99,7 +99,7 @@ jobs:
       - name: Restore cache for clcache
         id: clcache-restore
         if: ${{ matrix.platform == 'windows-latest' }}
-        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache/restore@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
         with:
           path: ${{ github.workspace }}\.clcache
           key: ${{ github.job }}-${{ matrix.platform }}-${{ github.ref_name }}-${{ hashFiles('pyproject.toml') }}
@@ -140,7 +140,7 @@ jobs:
 
       - name: Save cache for clcache
         if: ${{ always() && matrix.platform == 'windows-latest' && steps.clcache-restore.outputs.cache-hit != 'true' }}
-        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache/save@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
         with:
           path: ${{ github.workspace }}\.clcache
           key: ${{ steps.clcache-restore.outputs.cache-primary-key }}
@@ -357,7 +357,7 @@ jobs:
         persist-credentials: false
         fetch-depth: 0  # Fetches all history and tags
     - name: Set up Python
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
       with:
         python-version: '3.13'
         cache: 'pip'

{dfetch-0.14.2 → dfetch-0.14.3}/.github/workflows/devcontainer.yml

@@ -53,7 +53,7 @@ jobs:
           persist-credentials: false
 
       - name: Cache Docker layers
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
         with:
           path: /tmp/.buildx-cache
           key: devcontainer-${{ runner.os }}-${{ github.sha }}

{dfetch-0.14.2 → dfetch-0.14.3}/.github/workflows/docs.yml

@@ -37,7 +37,7 @@ jobs:
         persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
       with:
         python-version: '3.13'
 
@@ -70,7 +70,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: "3.13"
 
@@ -125,7 +125,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: '3.13'
 

{dfetch-0.14.2 → dfetch-0.14.3}/.github/workflows/python-publish.yml

@@ -44,7 +44,7 @@ jobs:
         persist-credentials: false
         fetch-depth: 0  # Fetches all history and tags
     - name: Set up Python
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
       with:
         python-version: '3.x'
     - name: Install dependencies

{dfetch-0.14.2 → dfetch-0.14.3}/.github/workflows/release.yml

@@ -32,7 +32,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: true # Required for preparing & creating releases
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: '3.13'
 

{dfetch-0.14.2 → dfetch-0.14.3}/.github/workflows/run.yml

@@ -159,7 +159,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: ${{ matrix.python-version }}
 

{dfetch-0.14.2 → dfetch-0.14.3}/.github/workflows/test.yml

@@ -65,7 +65,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Python
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
         with:
           python-version: '3.13'
 

dfetch-0.14.3/.github/workflows/winget-publish.yml

@@ -0,0 +1,70 @@
+name: Publish to WinGet
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      release-tag:
+        description: 'Release tag to publish (e.g. 0.14.2)'
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    name: Publish to WinGet
+    # For releases: skip the rolling 'latest' tag on main.
+    # For manual dispatch: always run (the operator knows what they're doing).
+    if: >-
+      github.event_name != 'release' ||
+      github.event.release.tag_name != 'latest'
+    runs-on: ubuntu-latest
+    concurrency:
+      group: winget-publish-${{ github.event.release.tag_name || inputs.release-tag }}
+      cancel-in-progress: true
+
+    environment:
+      name: winget
+      url: https://github.com/microsoft/winget-pkgs
+
+    steps:
+      - name: "Harden the runner (Block egress traffic: Only allow calls to allowed endpoints)"
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: block
+          allowed-endpoints: >+
+            github.com:443
+            api.github.com:443
+            objects.githubusercontent.com:443
+            release-assets.githubusercontent.com:443
+            uploads.github.com:443
+            index.crates.io:443
+            static.crates.io:443
+
+      - name: Publish to WinGet
+        # Requires WINGET_TOKEN secret in the 'winget' environment.
+        #
+        # NOTE: fine-grained PATs are NOT supported by this action — use a
+        # classic PAT only. See https://github.com/vedantmgoyal9/winget-releaser/issues/172
+        #
+        # Setup — create a classic PAT:
+        #   1. GitHub → Settings → Developer settings → Personal access tokens
+        #      → Tokens (classic) → Generate new token
+        #   2. Select scope: public_repo
+        #   3. The PAT must belong to a GitHub account that has write access to
+        #      dfetch-org/winget-pkgs (i.e. an org member with Triage or higher,
+        #      or the org owner).
+        #   4. Store the token as secret WINGET_TOKEN in:
+        #      Repo → Settings → Environments → winget → Environment secrets
+        #
+        # Prerequisites: dfetch-org/winget-pkgs must exist as a fork of
+        # microsoft/winget-pkgs (create it once manually on GitHub).
+        uses: vedantmgoyal9/winget-releaser@4ffc7888bffd451b357355dc214d43bb9f23917e # v2
+        with:
+          identifier: DFetch-org.DFetch
+          release-tag: ${{ github.event.release.tag_name || inputs.release-tag }}
+          token: ${{ secrets.WINGET_TOKEN }}
+          fork-user: dfetch-org

{dfetch-0.14.2 → dfetch-0.14.3}/CHANGELOG.rst

@@ -1,3 +1,8 @@
+Release 0.14.3 (released 2026-06-25)
+====================================
+
+* Update ``dfetch environment`` to show newer version inline (#1310)
+
 Release 0.14.2 (released 2026-06-21)
 ====================================
 

{dfetch-0.14.2 → dfetch-0.14.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dfetch
-Version: 0.14.2
+Version: 0.14.3
 Summary: A vendoring tool for fetching and managing external dependencies.
 Author-email: Ben Spoor <dfetch@spoor.cc>
 License-Expression: MIT
@@ -50,13 +50,13 @@ Requires-Dist: vulture==2.16; extra == "development"
 Requires-Dist: pyroma==5.0.1; extra == "development"
 Requires-Dist: isort==8.0.1; extra == "development"
 Requires-Dist: pylint==4.0.6; extra == "development"
-Requires-Dist: pyright==1.1.410; extra == "development"
+Requires-Dist: pyright==1.1.411; extra == "development"
 Requires-Dist: pyupgrade==3.21.2; extra == "development"
 Requires-Dist: tomli; python_version < "3.11" and extra == "development"
 Requires-Dist: pre-commit==4.6.0; extra == "development"
-Requires-Dist: ruff==0.15.18; extra == "development"
-Requires-Dist: hypothesis==6.155.6; extra == "development"
-Requires-Dist: import-linter==2.11; extra == "development"
+Requires-Dist: ruff==0.15.20; extra == "development"
+Requires-Dist: hypothesis==6.155.7; extra == "development"
+Requires-Dist: import-linter==2.12; extra == "development"
 Provides-Extra: docs
 Requires-Dist: sphinx==8.2.3; extra == "docs"
 Requires-Dist: sphinx-argparse==0.5.2; extra == "docs"
@@ -76,9 +76,9 @@ Requires-Dist: cyclonedx-python-lib[json-validation]==11.11.0; extra == "test"
 Provides-Extra: casts
 Requires-Dist: asciinema==2.4.0; extra == "casts"
 Provides-Extra: build
-Requires-Dist: nuitka==4.1.2; extra == "build"
+Requires-Dist: nuitka==4.1.3; extra == "build"
 Requires-Dist: tomli; python_version < "3.11" and extra == "build"
-Requires-Dist: setuptools-scm==10.0.5; extra == "build"
+Requires-Dist: setuptools-scm==10.2.0; extra == "build"
 Provides-Extra: sbom
 Requires-Dist: cyclonedx-bom==7.3.0; extra == "sbom"
 Provides-Extra: wheel

{dfetch-0.14.2 → dfetch-0.14.3}/action.yml

@@ -22,7 +22,7 @@ runs:
     - name: Checkout repository
       uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
     - name: Setup Python
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
       with:
         python-version: '3.13'
 

{dfetch-0.14.2 → dfetch-0.14.3}/dfetch/__init__.py

@@ -1,5 +1,5 @@
 """Dfetch."""
 
-__version__ = "0.14.2"
+__version__ = "0.14.3"
 
 DEFAULT_MANIFEST_NAME: str = "dfetch.yaml"

{dfetch-0.14.2 → dfetch-0.14.3}/dfetch/commands/environment.py

@@ -36,11 +36,16 @@ class Environment(dfetch.commands.command.Command):
 
     def __call__(self, _: argparse.Namespace) -> None:
         """Perform listing the environment."""
-        logger.print_report_line("dfetch", __version__)
         logger.debug("Checking for a newer dfetch version")
         newer = newer_version_available()
         if newer:
-            logger.print_newer_version_notice(newer)
+            dfetch_info = (
+                f"{__version__} ({newer} available"
+                " see https://github.com/dfetch-org/dfetch/releases)"
+            )
+        else:
+            dfetch_info = __version__
+        logger.print_report_line("dfetch", dfetch_info)
         logger.print_report_line(
             "platform", f"{platform.system()} {platform.release()}"
         )

{dfetch-0.14.2 → dfetch-0.14.3}/dfetch.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dfetch
-Version: 0.14.2
+Version: 0.14.3
 Summary: A vendoring tool for fetching and managing external dependencies.
 Author-email: Ben Spoor <dfetch@spoor.cc>
 License-Expression: MIT
@@ -50,13 +50,13 @@ Requires-Dist: vulture==2.16; extra == "development"
 Requires-Dist: pyroma==5.0.1; extra == "development"
 Requires-Dist: isort==8.0.1; extra == "development"
 Requires-Dist: pylint==4.0.6; extra == "development"
-Requires-Dist: pyright==1.1.410; extra == "development"
+Requires-Dist: pyright==1.1.411; extra == "development"
 Requires-Dist: pyupgrade==3.21.2; extra == "development"
 Requires-Dist: tomli; python_version < "3.11" and extra == "development"
 Requires-Dist: pre-commit==4.6.0; extra == "development"
-Requires-Dist: ruff==0.15.18; extra == "development"
-Requires-Dist: hypothesis==6.155.6; extra == "development"
-Requires-Dist: import-linter==2.11; extra == "development"
+Requires-Dist: ruff==0.15.20; extra == "development"
+Requires-Dist: hypothesis==6.155.7; extra == "development"
+Requires-Dist: import-linter==2.12; extra == "development"
 Provides-Extra: docs
 Requires-Dist: sphinx==8.2.3; extra == "docs"
 Requires-Dist: sphinx-argparse==0.5.2; extra == "docs"
@@ -76,9 +76,9 @@ Requires-Dist: cyclonedx-python-lib[json-validation]==11.11.0; extra == "test"
 Provides-Extra: casts
 Requires-Dist: asciinema==2.4.0; extra == "casts"
 Provides-Extra: build
-Requires-Dist: nuitka==4.1.2; extra == "build"
+Requires-Dist: nuitka==4.1.3; extra == "build"
 Requires-Dist: tomli; python_version < "3.11" and extra == "build"
-Requires-Dist: setuptools-scm==10.0.5; extra == "build"
+Requires-Dist: setuptools-scm==10.2.0; extra == "build"
 Provides-Extra: sbom
 Requires-Dist: cyclonedx-bom==7.3.0; extra == "sbom"
 Provides-Extra: wheel

{dfetch-0.14.2 → dfetch-0.14.3}/dfetch.egg-info/SOURCES.txt

@@ -39,6 +39,8 @@ dfetch.egg-info/SOURCES.txt
 dfetch.egg-info/dependency_links.txt
 dfetch.egg-info/entry_points.txt
 dfetch.egg-info/requires.txt
+dfetch.egg-info/scm_file_list.json
+dfetch.egg-info/scm_version.json
 dfetch.egg-info/top_level.txt
 dfetch/commands/__init__.py
 dfetch/commands/add.py

{dfetch-0.14.2 → dfetch-0.14.3}/dfetch.egg-info/requires.txt

@@ -18,8 +18,8 @@ infer-license==0.2.0
 setuptools
 
 [build]
-nuitka==4.1.2
-setuptools-scm==10.0.5
+nuitka==4.1.3
+setuptools-scm==10.2.0
 
 [build:python_version < "3.11"]
 tomli
@@ -44,12 +44,12 @@ vulture==2.16
 pyroma==5.0.1
 isort==8.0.1
 pylint==4.0.6
-pyright==1.1.410
+pyright==1.1.411
 pyupgrade==3.21.2
 pre-commit==4.6.0
-ruff==0.15.18
-hypothesis==6.155.6
-import-linter==2.11
+ruff==0.15.20
+hypothesis==6.155.7
+import-linter==2.12
 
 [development:python_version < "3.11"]
 tomli