github-backup 0.65.0__tar.gz → 0.66.0__tar.gz

{github_backup-0.65.0 → github_backup-0.66.0}/CHANGES.rst

@@ -1,9 +1,156 @@
 Changelog
 =========
 
-0.65.0 (2026-07-27)
+0.66.0 (2026-10-28)
 -------------------
 ------------------------
+- List a user's private repositories when authenticated as a GitHub App.
+  [AC Capehart, Claude Opus 5.5]
+
+  With --as-app there is no authenticated user, so a user-account backup
+  fell through to /users/{user}/repos, which only returns public
+  repositories. --private silently backed up nothing private.
+
+  An installation token can list everything the installation can access
+  via /installation/repositories, private repositories included. Org
+  backups keep using /orgs/{org}/repos, and -R still fetches the single
+  repository directly.
+- Chore(deps): bump setuptools. [dependabot[bot]]
+
+  Bumps the python-packages group with 1 update: [setuptools](https://github.com/pypa/setuptools).
+
+
+  Updates `setuptools` from 84.2.0 to 84.2.1
+  - [Release notes](https://github.com/pypa/setuptools/releases)
+  - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
+  - [Commits](https://github.com/pypa/setuptools/compare/v84.2.0...v84.2.1)
+
+  ---
+  updated-dependencies:
+  - dependency-name: setuptools
+    dependency-version: 84.2.1
+    dependency-type: direct:production
+    update-type: version-update:semver-patch
+    dependency-group: python-packages
+  ...
+- Chore(deps): bump setuptools. [dependabot[bot]]
+
+  Bumps the python-packages group with 1 update: [setuptools](https://github.com/pypa/setuptools).
+
+
+  Updates `setuptools` from 84.0.0 to 84.2.0
+  - [Release notes](https://github.com/pypa/setuptools/releases)
+  - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
+  - [Commits](https://github.com/pypa/setuptools/compare/v84.0.0...v84.2.0)
+
+  ---
+  updated-dependencies:
+  - dependency-name: setuptools
+    dependency-version: 84.2.0
+    dependency-type: direct:production
+    update-type: version-update:semver-minor
+    dependency-group: python-packages
+  ...
+- Chore(deps): bump black. [dependabot[bot]]
+
+  Bumps the python-packages group with 1 update: [black](https://github.com/psf/black).
+
+
+  Updates `black` from 26.10.0 to 26.10.1
+  - [Release notes](https://github.com/psf/black/releases)
+  - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
+  - [Commits](https://github.com/psf/black/compare/26.10.0...26.10.1)
+
+  ---
+  updated-dependencies:
+  - dependency-name: black
+    dependency-version: 26.10.1
+    dependency-type: direct:production
+    update-type: version-update:semver-patch
+    dependency-group: python-packages
+  ...
+- Chore(deps): bump black. [dependabot[bot]]
+
+  Bumps the python-packages group with 1 update: [black](https://github.com/psf/black).
+
+
+  Updates `black` from 26.5.1 to 26.10.0
+  - [Release notes](https://github.com/psf/black/releases)
+  - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
+  - [Commits](https://github.com/psf/black/compare/26.5.1...26.10.0)
+
+  ---
+  updated-dependencies:
+  - dependency-name: black
+    dependency-version: 26.10.0
+    dependency-type: direct:production
+    update-type: version-update:semver-minor
+    dependency-group: python-packages
+  ...
+- Chore(deps): bump flake8 in the python-packages group.
+  [dependabot[bot]]
+
+  Bumps the python-packages group with 1 update: [flake8](https://github.com/pycqa/flake8).
+
+
+  Updates `flake8` from 7.3.0 to 7.4.1
+  - [Commits](https://github.com/pycqa/flake8/compare/7.3.0...7.4.1)
+
+  ---
+  updated-dependencies:
+  - dependency-name: flake8
+    dependency-version: 7.4.1
+    dependency-type: direct:production
+    update-type: version-update:semver-minor
+    dependency-group: python-packages
+  ...
+- Chore(deps): bump setuptools in the python-packages group.
+  [dependabot[bot]]
+
+  Bumps the python-packages group with 1 update: [setuptools](https://github.com/pypa/setuptools).
+
+
+  Updates `setuptools` from 83.0.0 to 84.0.0
+  - [Release notes](https://github.com/pypa/setuptools/releases)
+  - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
+  - [Commits](https://github.com/pypa/setuptools/compare/v83.0.0...v84.0.0)
+
+  ---
+  updated-dependencies:
+  - dependency-name: setuptools
+    dependency-version: 84.0.0
+    dependency-type: direct:production
+    update-type: version-update:semver-major
+    dependency-group: python-packages
+  ...
+
+
+0.65.1 (2026-08-01)
+-------------------
+- Fix timeline not being properly incremental. [Duncan Ogilvie]
+- Chore(deps): bump twine from 6.2.0 to 7.0.0 in the python-packages
+  group. [dependabot[bot]]
+
+  Bumps the python-packages group with 1 update: [twine](https://github.com/pypa/twine).
+
+
+  Updates `twine` from 6.2.0 to 7.0.0
+  - [Release notes](https://github.com/pypa/twine/releases)
+  - [Changelog](https://github.com/pypa/twine/blob/main/docs/changelog.rst)
+  - [Commits](https://github.com/pypa/twine/compare/6.2.0...7.0.0)
+
+  ---
+  updated-dependencies:
+  - dependency-name: twine
+    dependency-version: 7.0.0
+    dependency-type: direct:production
+    update-type: version-update:semver-major
+    dependency-group: python-packages
+  ...
+
+
+0.65.0 (2026-07-27)
+-------------------
 - Refresh issue timelines when cross-references change (#168) [Rodos]
 
   Cross-references do not change an issue's updated_at, so an incremental

{github_backup-0.65.0/github_backup.egg-info → github_backup-0.66.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-backup
-Version: 0.65.0
+Version: 0.66.0
 Summary: backup a github user or organization
 Home-page: http://github.com/josegonzalez/python-github-backup
 Author: Jose Diaz-Gonzalez
@@ -229,6 +229,8 @@ GitHub Apps
 
 GitHub Apps are ideal for organization backups in CI/CD. Tokens are scoped to specific repositories and expire after 1 hour.
 
+For a user account (no ``--organization``), ``--as-app`` lists the repositories the installation can access, so private repositories are included.
+
 **One-time setup:**
 
 1. Create a GitHub App at *Settings -> Developer Settings -> GitHub Apps -> New GitHub App*

{github_backup-0.65.0 → github_backup-0.66.0}/README

@@ -199,6 +199,8 @@ GitHub Apps
 
 GitHub Apps are ideal for organization backups in CI/CD. Tokens are scoped to specific repositories and expire after 1 hour.
 
+For a user account (no ``--organization``), ``--as-app`` lists the repositories the installation can access, so private repositories are included.
+
 **One-time setup:**
 
 1. Create a GitHub App at *Settings -> Developer Settings -> GitHub Apps -> New GitHub App*

{github_backup-0.65.0 → github_backup-0.66.0}/README.rst

@@ -199,6 +199,8 @@ GitHub Apps
 
 GitHub Apps are ideal for organization backups in CI/CD. Tokens are scoped to specific repositories and expire after 1 hour.
 
+For a user account (no ``--organization``), ``--as-app`` lists the repositories the installation can access, so private repositories are included.
+
 **One-time setup:**
 
 1. Create a GitHub App at *Settings -> Developer Settings -> GitHub Apps -> New GitHub App*

github_backup-0.66.0/github_backup/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.66.0"

{github_backup-0.65.0 → github_backup-0.66.0}/github_backup/github_backup.py

@@ -1838,6 +1838,11 @@ def retrieve_repositories(args, authenticated_user):
     if args.user == authenticated_user["login"]:
         # we must use the /user/repos API to be able to access private repos
         template = "https://{0}/user/repos".format(get_github_api_host(args))
+    elif args.as_app and not args.organization:
+        # /users/{user}/repos is public-only; the installation sees private repos too
+        template = "https://{0}/installation/repositories".format(
+            get_github_api_host(args)
+        )
     else:
         if args.private and not args.organization:
             logger.warning(
@@ -1868,6 +1873,10 @@ def retrieve_repositories(args, authenticated_user):
             logger.warning(f"Legal notice: {e.legal_url}")
         return []
 
+    if template.endswith("/installation/repositories"):
+        # Each page is {"total_count": ..., "repositories": [...]}
+        repos = [repo for page in repos for repo in page["repositories"]]
+
     return retrieve_additional_repositories(args, authenticated_user, repos)
 
 
@@ -2757,19 +2766,24 @@ def backup_issues(args, repo_cwd, repository, repos_template):
         stale_timelines = find_stale_timeline_issues(
             args, issue_cwd, repository, include_pulls=not should_include_pulls
         )
-        for number in sorted(stale_timelines - set(issues)):
-            try:
-                issues[number] = retrieve_data(
-                    args, "{0}/{1}".format(_issue_template, number), paginated=False
-                )[0]
-            except (HTTPError, RepositoryUnavailableError, IndexError) as e:
-                # Deleted or transferred between the sweep and this fetch. The
-                # refresh is opportunistic, so skip rather than fail the run.
-                logger.warning(
-                    "Unable to refresh cross-references for issue {0}: {1}".format(
-                        number, e
-                    )
-                )
+
+    # Issues selected only by the cross-reference sweep have not otherwise
+    # changed. Reuse their complete stored payload and refresh only timeline_data.
+    # Fetching the issue, comments, events and attachments again turns the first
+    # --issue-timeline run into a near-full backup and can discard optional data
+    # when the corresponding flags are absent.
+    timeline_only_issues = stale_timelines - set(issues)
+    for number in sorted(timeline_only_issues):
+        existing = read_json_file_if_exists(
+            "{0}/{1}.json".format(issue_cwd, number)
+        )
+        if existing is None:
+            logger.warning(
+                "Unable to refresh cross-references for issue {0}: "
+                "stored issue data is unreadable".format(number)
+            )
+            continue
+        issues[number] = existing
 
     if issues_skipped:
         issues_skipped_message = " (skipped {0} pull requests)".format(issues_skipped)
@@ -2784,6 +2798,7 @@ def backup_issues(args, repo_cwd, repository, repos_template):
     timeline_template = _issue_template + "/{0}/timeline"
     for number, issue in list(issues.items()):
         issue_file = "{0}/{1}.json".format(issue_cwd, number)
+        timeline_only_refresh = number in timeline_only_issues
         if (
             args.incremental_by_files
             and os.path.isfile(issue_file)
@@ -2799,10 +2814,14 @@ def backup_issues(args, repo_cwd, repository, repos_template):
                 )
                 continue
 
-        if args.include_issue_comments or args.include_everything:
+        if not timeline_only_refresh and (
+            args.include_issue_comments or args.include_everything
+        ):
             template = comments_template.format(number)
             issues[number]["comment_data"] = retrieve_data(args, template)
-        if args.include_issue_events or args.include_everything:
+        if not timeline_only_refresh and (
+            args.include_issue_events or args.include_everything
+        ):
             template = events_template.format(number)
             issues[number]["event_data"] = retrieve_data(args, template)
         if include_timeline:
@@ -2815,7 +2834,7 @@ def backup_issues(args, repo_cwd, repository, repos_template):
                 for item in retrieve_data(args, template)
                 if item.get("event") != "commented"
             ]
-        if args.include_attachments:
+        if args.include_attachments and not timeline_only_refresh:
             download_attachments(
                 args, issue_cwd, issues[number], number, repository, item_type="issue"
             )

{github_backup-0.65.0 → github_backup-0.66.0/github_backup.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: github-backup
-Version: 0.65.0
+Version: 0.66.0
 Summary: backup a github user or organization
 Home-page: http://github.com/josegonzalez/python-github-backup
 Author: Jose Diaz-Gonzalez
@@ -229,6 +229,8 @@ GitHub Apps
 
 GitHub Apps are ideal for organization backups in CI/CD. Tokens are scoped to specific repositories and expire after 1 hour.
 
+For a user account (no ``--organization``), ``--as-app`` lists the repositories the installation can access, so private repositories are included.
+
 **One-time setup:**
 
 1. Create a GitHub App at *Settings -> Developer Settings -> GitHub Apps -> New GitHub App*

{github_backup-0.65.0 → github_backup-0.66.0}/github_backup.egg-info/SOURCES.txt

@@ -18,6 +18,7 @@ github_backup.egg-info/entry_points.txt
 github_backup.egg-info/top_level.txt
 github_backup.egg-info/zip-safe
 tests/test_all_starred.py
+tests/test_app_repositories.py
 tests/test_attachments.py
 tests/test_auth.py
 tests/test_case_sensitivity.py

{github_backup-0.65.0 → github_backup-0.66.0}/release-requirements.txt

@@ -1,15 +1,15 @@
 # Linting & Formatting
 autopep8==2.3.2
-black==26.5.1
-flake8==7.3.0
+black==26.10.1
+flake8==7.4.1
 
 # Testing
 pytest==9.1.1
 
 # Release & Publishing
-twine==6.2.0
+twine==7.0.0
 gitchangelog==3.0.4
-setuptools==83.0.0
+setuptools==84.2.1
 
 # Documentation
 restructuredtext-lint==2.0.2

github_backup-0.66.0/tests/test_app_repositories.py

@@ -0,0 +1,71 @@
+"""Tests for listing a user's repositories with a GitHub App installation token."""
+
+from unittest.mock import patch
+
+import pytest
+
+from github_backup import github_backup
+
+NO_USER = {"login": None}
+
+
+def page(*names):
+    return {
+        "total_count": 3,
+        "repositories": [{"name": name, "private": True} for name in names],
+    }
+
+
+@pytest.fixture
+def mock_retrieve_data():
+    with patch("github_backup.github_backup.retrieve_data") as mock:
+        yield mock
+
+
+def test_app_lists_user_repositories_from_installation(create_args, mock_retrieve_data):
+    args = create_args(as_app=True, include_repository=True)
+    mock_retrieve_data.return_value = [page("a", "b"), page("c")]
+
+    repos = github_backup.retrieve_repositories(args, NO_USER)
+
+    assert mock_retrieve_data.call_args.args[1] == (
+        "https://api.github.com/installation/repositories"
+    )
+    assert [r["name"] for r in repos] == ["a", "b", "c"]
+
+
+def test_app_installation_listing_uses_ghes_host(create_args, mock_retrieve_data):
+    args = create_args(
+        as_app=True, include_repository=True, github_host="ghe.example.com"
+    )
+    mock_retrieve_data.return_value = [page("a")]
+
+    github_backup.retrieve_repositories(args, NO_USER)
+
+    assert mock_retrieve_data.call_args.args[1] == (
+        "https://ghe.example.com/api/v3/installation/repositories"
+    )
+
+
+def test_app_organization_still_lists_org_repositories(create_args, mock_retrieve_data):
+    args = create_args(as_app=True, include_repository=True, organization=True)
+    mock_retrieve_data.return_value = [{"name": "a"}]
+
+    repos = github_backup.retrieve_repositories(args, NO_USER)
+
+    assert mock_retrieve_data.call_args.args[1] == (
+        "https://api.github.com/orgs/testuser/repos"
+    )
+    assert repos == [{"name": "a"}]
+
+
+def test_app_single_repository_is_fetched_directly(create_args, mock_retrieve_data):
+    args = create_args(as_app=True, repository="dotfiles")
+    mock_retrieve_data.return_value = [{"name": "dotfiles"}]
+
+    repos = github_backup.retrieve_repositories(args, NO_USER)
+
+    assert mock_retrieve_data.call_args.args[1] == (
+        "https://api.github.com/repos/testuser/dotfiles"
+    )
+    assert repos == [{"name": "dotfiles"}]

{github_backup-0.65.0 → github_backup-0.66.0}/tests/test_issue_timeline.py

@@ -274,12 +274,24 @@ def test_graphql_failure_warns_and_continues(
 def test_stale_issue_backed_up_though_since_excludes_it(
     create_args, tmp_path, monkeypatch
 ):
-    """The whole point: an issue since cannot see is still refreshed."""
-    _stored(tmp_path, 7, [])
+    """A sweep-only issue refreshes just its timeline and preserves its data."""
+    issue_cwd = tmp_path / "issues"
+    issue_cwd.mkdir()
+    stored = _issue(
+        7,
+        body="stored body",
+        comment_data=[{"id": 1, "body": "stored comment"}],
+        event_data=[{"id": 2, "event": "referenced"}],
+        timeline_data=[],
+    )
+    (issue_cwd / "7.json").write_text(json.dumps(stored))
     args = _sweep_args(
         create_args,
         include_issues=True,
+        include_issue_comments=True,
+        include_issue_events=True,
         include_issue_timeline=True,
+        include_attachments=True,
         since="2026-07-01T00:00:00Z",
     )
     timeline = [_xref("2026-07-20T00:00:00Z")]
@@ -287,22 +299,35 @@ def test_stale_issue_backed_up_though_since_excludes_it(
     monkeypatch.setattr(
         github_backup,
         "retrieve_data",
-        _fake_retrieve(
-            {"/issues": [], "/issues/7": [_issue(7)], "/7/timeline": timeline}, calls
-        ),
+        _fake_retrieve({"/issues": [], "/7/timeline": timeline}, calls),
     )
     monkeypatch.setattr(
         github_backup,
         "retrieve_graphql_data",
         _graphql_state({7: (1, "2026-07-20T00:00:00Z")}),
     )
+    attachment_calls = []
+    monkeypatch.setattr(
+        github_backup,
+        "download_attachments",
+        lambda *args, **kwargs: attachment_calls.append((args, kwargs)),
+    )
 
     github_backup.backup_issues(
         args, str(tmp_path), {"full_name": "owner/repo"}, "https://api.github.com/repos"
     )
 
-    saved = json.loads((tmp_path / "issues" / "7.json").read_text())
+    saved = json.loads((issue_cwd / "7.json").read_text())
     assert saved["timeline_data"] == timeline
+    assert saved["body"] == "stored body"
+    assert saved["comment_data"] == stored["comment_data"]
+    assert saved["event_data"] == stored["event_data"]
+    assert calls == [
+        "https://api.github.com/repos/owner/repo/issues",
+        "https://api.github.com/repos/owner/repo/issues",
+        "https://api.github.com/repos/owner/repo/issues/7/timeline",
+    ]
+    assert attachment_calls == []
 
 
 def test_sweep_follows_pagination_cursors(create_args, tmp_path, monkeypatch):

github_backup-0.65.0/github_backup/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.65.0"